last executing test programs: 3.539206522s ago: executing program 2 (id=8566): r0 = syz_open_procfs(0x0, &(0x7f0000000880)='schedstat\x00') lseek(r0, 0x10001, 0x0) 3.266525029s ago: executing program 4 (id=8569): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000111401"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) 3.21223254s ago: executing program 2 (id=8570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2044}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x58}}, 0x4014) 2.974112986s ago: executing program 2 (id=8575): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 2.973971626s ago: executing program 4 (id=8576): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 2.742261542s ago: executing program 4 (id=8579): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 2.589261626s ago: executing program 2 (id=8583): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 2.560091766s ago: executing program 4 (id=8584): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 2.360221251s ago: executing program 2 (id=8587): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000c00, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,iocharset=iso8859-13,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x21, 0x61e2, &(0x7f00000063c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 2.360111881s ago: executing program 4 (id=8588): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) 2.198453236s ago: executing program 4 (id=8592): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3010846, &(0x7f0000000340)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@usrquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@usrquota}, {@noquota}, {@gid}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x24, 0x6318, &(0x7f0000011180)="$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") open(&(0x7f0000000240)='./file1\x00', 0x8000, 0x50) 1.419244895s ago: executing program 0 (id=8603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) 1.312617658s ago: executing program 1 (id=8604): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) 1.169827571s ago: executing program 3 (id=8605): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) 1.149886582s ago: executing program 0 (id=8606): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000004c0), 0xf) 1.043270254s ago: executing program 1 (id=8607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x188, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "764fe19c7d9dbddf4adbf930ac60615e2e234242e49201bb18ca2a971f78c3123e053791e1d857db55bd3ab3796048b5d01fdcc0a0d3199b48e70c207cc0427c78b7ae5eb732323d68dcb7b190712f40b97e563799e47f24c9e59432e0e602c665d151360606ce8db7fab0c99b5b136f6d9d64462ce0bc52cb658c26b6e048bfbd5dbecdb95029d2a5"}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "f7188f67dfc7db558d42ab9626705a23df0ff5ed464327b06c5d12"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x85, 0x6, "c3379d47ad195a703a1be693fa99b583f0d6e3bf6973ccb0e48729f007e20d0f5c1a93f9ebef8f32547c1616a73fde3998c3d68ae894173c04a07eddf2288c25dc270554f0505c6cf02fac059f657399b62fb4e4c88a4e43c08481171632433b88b3464b9eec552a55f2a6a1944c98d26a7da742a1bf39189ce438ca5a78a987b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xfffffffffffffd02}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x70c919a46df1b24e, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x234}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) 958.779967ms ago: executing program 0 (id=8608): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) 894.467158ms ago: executing program 3 (id=8609): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x6000, 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0xc3d6}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nobarrier}, {@errors_continue}]}, 0xf9, 0x493, &(0x7f0000000f00)="$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") 803.30644ms ago: executing program 1 (id=8610): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x5, 0x2, 0x3, 0x1, "0000000000ce504c2500", "00f50700", "0300", "1f020800", ["d0c88863c5ae1cace40000b6", "808e88e2e9ffffffffff00", '\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', "5f22a7ff130000c0f0000300"]}) 683.969443ms ago: executing program 3 (id=8611): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000001580)) 604.369906ms ago: executing program 0 (id=8612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c000100000201010000001000000000000000000000000000000001"], 0x60}}, 0x0) 540.985247ms ago: executing program 1 (id=8613): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{}, {0x20, 0xfc}, 0x0, 0x4}) 469.940279ms ago: executing program 3 (id=8614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 403.674301ms ago: executing program 0 (id=8615): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) 369.931011ms ago: executing program 1 (id=8616): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x5, 0x35315258, 0x780, 0x438, 0x0, @discrete={0x8288, 0x573f}}) 266.603334ms ago: executing program 3 (id=8617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}, @NFT_MSG_NEWCHAIN={0x15c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73d1833f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6310425a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3422c013}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "4c5eba555ef75b4dd4b1beec999f6819842ddbe469ffdfb070ecd0db97f782f642a90293c5d233b8969d28b27cde8448ed1e8fb9ced7c87bb2c78a2ad9ec2a1db55dc596ec9e43b823118d"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14}}, 0x2ac}}, 0x0) 189.394836ms ago: executing program 2 (id=8618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 161.575526ms ago: executing program 1 (id=8619): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0xe0, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x6, 0x3, 0x4}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x270) 110.092438ms ago: executing program 0 (id=8620): syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x20, &(0x7f0000000140)={0x25, 0xe, 0x1ff}, 0x0) 0s ago: executing program 3 (id=8621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000003840)={0x13, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]}) kernel console output (not intermixed with test programs): .2.6002'. [ 490.586926][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6003'. [ 490.599898][ T5421] usb 5-1: Using ep0 maxpacket: 16 [ 490.778254][ T5421] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 490.807323][ T5421] usb 5-1: config 0 has no interface number 0 [ 490.844650][T17452] SET target dimension over the limit! [ 491.018186][ T5421] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 491.027601][ T5421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.055849][T17460] loop2: detected capacity change from 0 to 1024 [ 491.103522][ T5421] usb 5-1: Product: syz [ 491.107917][ T5421] usb 5-1: Manufacturer: syz [ 491.115619][ T5421] usb 5-1: SerialNumber: syz [ 491.129292][T17462] netlink: 'syz.1.6011': attribute type 29 has an invalid length. [ 491.137384][ T5421] usb 5-1: config 0 descriptor?? [ 491.207010][ T5421] hub 5-1:0.132: bad descriptor, ignoring hub [ 491.236448][ T5421] hub: probe of 5-1:0.132 failed with error -5 [ 491.281829][ T5421] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input25 [ 491.295450][T17460] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.6010: lblock 1 mapped to illegal pblock 1 (length 1) [ 491.318035][ T8486] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 491.443233][T17460] __quota_error: 5 callbacks suppressed [ 491.443253][T17460] Quota error (device loop2): write_blk: dquota write failed [ 491.473097][ T5421] input: failed to attach handler mousedev to device input25, error: -2 [ 491.529663][T17460] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 491.583369][T17460] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.6010: Failed to acquire dquot type 0 [ 491.596863][ T8486] usb 1-1: Using ep0 maxpacket: 32 [ 491.641343][T17460] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.6010: Freeing blocks not in datazone - block = 0, count = 4096 [ 491.720444][T17460] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.6010: Invalid inode bitmap blk 0 in block_group 0 [ 491.751011][ T9] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 491.758446][ T8486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 491.766768][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6016'. [ 491.789548][T17460] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 491.827901][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 491.836193][T17460] EXT4-fs (loop2): 1 orphan inode deleted [ 491.854873][ T8486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 491.857438][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 491.877067][T17460] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 492.108421][ T8486] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 492.119201][ T9] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 492.135747][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 492.183594][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 492.198230][ T8486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.209010][ T8486] usb 1-1: Product: syz [ 492.213535][ T8486] usb 1-1: Manufacturer: syz [ 492.224590][T17487] loop1: detected capacity change from 0 to 64 [ 492.248090][ T8486] usb 1-1: SerialNumber: syz [ 492.274329][ T8486] usb 1-1: config 0 descriptor?? [ 492.312465][T17456] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 492.341226][ T8486] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 492.425234][T17496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6027'. [ 492.478697][T17496] unsupported nlmsg_type 40 [ 492.522510][T17487] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 492.713417][ T5419] usb 1-1: USB disconnect, device number 58 [ 492.929390][T17516] tmpfs: Bad value for 'mpol' [ 493.525116][T17552] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6054'. [ 493.886661][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6062'. [ 493.937221][T17574] netlink: 'syz.2.6063': attribute type 49 has an invalid length. [ 494.113275][T17582] netlink: 'syz.0.6068': attribute type 11 has an invalid length. [ 494.181299][T17583] device wlan0 entered promiscuous mode [ 494.218448][ T26] audit: type=1400 audit(494.573:36): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=17588 comm="syz.1.6072" [ 494.568844][T17611] tmpfs: Bad value for 'mpol' [ 494.697074][T17617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6085'. [ 494.802771][T17622] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 495.192452][T17647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.579729][ T5412] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 496.008812][ T5412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.038869][ T5421] usb 5-1: USB disconnect, device number 62 [ 496.076351][ T5412] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 496.115163][ T5412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.203914][T17643] loop2: detected capacity change from 0 to 32768 [ 496.373442][T17643] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6097 (17643) [ 496.504700][ T5412] msi2500 2-1:1.0: Registered as swradio24 [ 496.521088][ T5412] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 496.588602][ T5412] usb 2-1: USB disconnect, device number 62 [ 496.678568][T17643] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 496.719247][T17643] BTRFS info (device loop2): using free space tree [ 496.726732][T17643] BTRFS info (device loop2): has skinny extents [ 496.738166][ T5421] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 497.018181][ T5421] usb 5-1: Using ep0 maxpacket: 8 [ 497.208437][ T5421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 497.275983][T17643] BTRFS info (device loop2): enabling ssd optimizations [ 497.318891][ T5421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 497.394274][ T5421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 497.507596][ T5421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 497.564247][ T5421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 497.648143][ T5421] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 497.700055][ T5421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 497.761938][ T5421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 497.800785][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6133'. [ 497.839928][ T5421] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 498.024461][T17741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.088400][ T5421] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 498.138568][ T5421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.177346][ T5421] usb 5-1: Product: syz [ 498.196374][ T5421] usb 5-1: Manufacturer: syz [ 498.227197][ T5421] usb 5-1: SerialNumber: syz [ 498.289197][ T5421] usb 5-1: config 0 descriptor?? [ 498.309141][T17692] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 498.327500][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4180) [ 498.469873][ T5421] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 498.706777][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.888170][T17760] loop1: detected capacity change from 0 to 256 [ 499.006441][T17760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 499.100160][T17760] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 499.308312][ T5414] usb 5-1: USB disconnect, device number 63 [ 499.910962][T17787] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 499.918456][T17787] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 499.990721][T17790] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 499.997408][T17790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.030712][T17797] loop4: detected capacity change from 0 to 256 [ 500.097350][T17790] vhci_hcd vhci_hcd.0: Device attached [ 500.108110][T17787] vhci_hcd vhci_hcd.0: Device attached [ 500.170689][T17802] netlink: 'syz.2.6160': attribute type 16 has an invalid length. [ 500.182150][T17791] vhci_hcd: connection closed [ 500.186143][T17788] vhci_hcd: connection closed [ 500.210158][ T154] vhci_hcd: stop threads [ 500.236264][T17802] netlink: 'syz.2.6160': attribute type 17 has an invalid length. [ 500.256532][ T154] vhci_hcd: release socket [ 500.276854][ T154] vhci_hcd: disconnect device [ 500.304994][ T8641] vhci_hcd: vhci_device speed not set [ 500.310905][ T154] vhci_hcd: stop threads [ 500.315241][ T154] vhci_hcd: release socket [ 500.342216][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.362645][ T154] vhci_hcd: disconnect device [ 500.400898][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.405122][ T8641] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 500.418108][ T8638] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 500.450099][ T8641] usb 35-1: enqueue for inactive port 0 [ 500.550593][ T8641] vhci_hcd: vhci_device speed not set [ 500.845072][ T8638] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 500.908959][ T8638] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 500.984951][ T8638] usb 5-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 501.040317][ T8638] usb 5-1: config 0 has no interfaces? [ 501.046048][ T8638] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 501.111515][ T8638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.179303][ T8638] usb 5-1: config 0 descriptor?? [ 501.231889][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.478329][ T8638] usb 5-1: USB disconnect, device number 64 [ 501.492189][T17831] xt_socket: unknown flags 0x50 [ 501.859118][T17843] netlink: 'syz.2.6181': attribute type 3 has an invalid length. [ 502.036049][ T8632] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 502.283647][T17851] loop4: detected capacity change from 0 to 2048 [ 502.308815][ T23] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 502.331261][ T8632] usb 1-1: Using ep0 maxpacket: 16 [ 502.369630][T17851] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 502.515609][T17855] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.537013][ T8632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 502.559709][ T8632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 502.728428][ T23] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 502.753339][ T23] usb 3-1: config 0 has no interface number 0 [ 502.779541][ T8632] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 502.792489][ T23] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.812597][T17859] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 502.838127][ T8632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.858282][ T23] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.879639][ T8632] usb 1-1: Product: syz [ 502.883954][ T8632] usb 1-1: Manufacturer: syz [ 502.928209][ T8632] usb 1-1: SerialNumber: syz [ 502.976324][ T8632] usb 1-1: config 0 descriptor?? [ 503.045342][ T8632] hub 1-1:0.0: bad descriptor, ignoring hub [ 503.058029][ T8632] hub: probe of 1-1:0.0 failed with error -5 [ 503.115997][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 503.141776][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.188376][ T23] usb 3-1: Product: syz [ 503.192884][ T23] usb 3-1: Manufacturer: syz [ 503.209262][ T8632] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 503.218387][ T23] usb 3-1: SerialNumber: syz [ 503.260377][ T23] usb 3-1: config 0 descriptor?? [ 503.291362][ T8632] usb 1-1: USB disconnect, device number 59 [ 503.296184][ T8493] udevd[8493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.317702][ T23] yurex 3-1:0.50: Could not submitting URB [ 503.335992][ T23] yurex: probe of 3-1:0.50 failed with error -5 [ 503.599491][ T23] usb 3-1: USB disconnect, device number 59 [ 503.660601][T17875] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6196'. [ 503.974326][T17885] loop1: detected capacity change from 0 to 64 [ 504.926121][T17911] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 504.988095][T17911] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 505.032145][T17921] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6213'. [ 505.168359][T17927] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6215'. [ 506.063006][T17976] loop4: detected capacity change from 0 to 128 [ 506.291048][T17986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6240'. [ 506.552277][T17997] loop1: detected capacity change from 0 to 1764 [ 506.909531][ T5412] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 507.168221][ T5412] usb 4-1: Using ep0 maxpacket: 8 [ 507.278144][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 507.299799][ T5412] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 507.335425][ T5412] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 507.346725][T18038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6261'. [ 507.360429][ T5412] usb 4-1: config 0 has no interface number 1 [ 507.395710][ T5412] usb 4-1: config 0 has no interface number 2 [ 507.414890][ T5412] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 507.438028][T18038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6261'. [ 507.460826][ T5412] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 507.468963][ T8638] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 507.488195][T18038] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6261'. [ 507.543611][ T5412] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.570798][ T5412] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 507.606515][ T5412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.630036][ T5412] usb 4-1: config 0 descriptor?? [ 507.758863][ T8638] usb 2-1: Using ep0 maxpacket: 8 [ 507.764418][ T8632] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 507.908306][ T5412] usb 4-1: Could not set interface, error -71 [ 507.958972][ T5412] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 507.960968][ T8638] usb 2-1: config 243 has an invalid interface number: 78 but max is 0 [ 508.018021][ T8638] usb 2-1: config 243 has no interface number 0 [ 508.024355][ T8638] usb 2-1: config 243 interface 78 has no altsetting 0 [ 508.038403][ T5412] usb 4-1: USB disconnect, device number 66 [ 508.045042][ T8632] usb 5-1: Using ep0 maxpacket: 16 [ 508.223673][ T8632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 508.286533][ T8632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 508.368030][ T8632] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.388516][ T8638] usb 2-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 508.422312][ T8638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.458015][ T8638] usb 2-1: Product: syz [ 508.462624][ T8632] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 508.498022][ T8638] usb 2-1: Manufacturer: syz [ 508.538480][ T8638] usb 2-1: SerialNumber: syz [ 508.544139][ T8632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.594459][ T8632] usb 5-1: config 0 descriptor?? [ 508.671584][ T8632] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 508.900516][ T8638] usb 2-1: USB disconnect, device number 63 [ 509.095749][ T5414] usb 5-1: USB disconnect, device number 65 [ 509.109606][ T3544] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 509.315688][T18094] netlink: 'syz.0.6277': attribute type 1 has an invalid length. [ 509.702179][T18108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6285'. [ 509.918285][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6291'. [ 509.998387][T18124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6291'. [ 510.676692][T18155] loop4: detected capacity change from 0 to 64 [ 511.008792][T18169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6309'. [ 511.182262][T18176] bond0: (slave ip6tnl0): refused to change device type [ 511.221279][T18181] x_tables: unsorted underflow at hook 4 [ 511.607274][T18199] loop4: detected capacity change from 0 to 512 [ 511.827910][T18209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6325'. [ 511.926965][T18199] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 511.992687][T18199] System zones: 0-2, 18-18, 34-35 [ 512.079755][T18199] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,debug,sysvgroups,grpjquota=,. Quota mode: writeback. [ 512.703437][T18234] loop2: detected capacity change from 0 to 512 [ 512.828337][T18244] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 512.846338][T18234] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 512.909275][T18244] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 512.951803][T18234] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.6332: bad orphan inode 15 [ 513.054681][T18234] ext4_test_bit(bit=14, block=18) = 1 [ 513.098113][ T8638] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 513.128018][T18234] is_bad_inode(inode)=0 [ 513.135988][T18234] NEXT_ORPHAN(inode)=1023 [ 513.183657][T18234] max_ino=32 [ 513.229264][T18234] i_nlink=0 [ 513.240513][ T5414] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 513.249515][T18234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 513.335837][T18234] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.6332: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 513.434880][T18262] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 513.535140][ T8638] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.568109][ T8638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.599153][T18266] netlink: 'syz.3.6346': attribute type 1 has an invalid length. [ 513.613142][ T8638] usb 1-1: config 0 descriptor?? [ 513.638159][T18266] netlink: 'syz.3.6346': attribute type 2 has an invalid length. [ 513.647927][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6346'. [ 513.669360][ T8638] cp210x 1-1:0.0: cp210x converter detected [ 513.731019][T18268] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6345'. [ 513.858519][ T5414] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 513.878267][ T5414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.896925][ T5414] usb 5-1: Product: syz [ 513.902604][ T5414] usb 5-1: Manufacturer: syz [ 513.913494][ T5414] usb 5-1: SerialNumber: syz [ 513.945628][ T5414] r8152-cfgselector 5-1: config 0 descriptor?? [ 514.088193][ T8638] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 514.108195][ T8638] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 514.115952][ T8638] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 514.158333][ T8638] usb 1-1: cp210x converter now attached to ttyUSB0 [ 514.168860][ T8638] usb 1-1: USB disconnect, device number 60 [ 514.188548][ T8638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 514.197064][ T8638] cp210x 1-1:0.0: device disconnected [ 514.428402][ T5414] r8152-cfgselector 5-1: Unknown version 0x0000 [ 514.438231][ T5414] r8152-cfgselector 5-1: bad CDC descriptors [ 514.458124][ T5414] r8152-cfgselector 5-1: Unknown version 0x0000 [ 514.493122][ T5414] r8152-cfgselector 5-1: USB disconnect, device number 66 [ 514.680678][T18274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6349'. [ 515.357628][T18302] loop4: detected capacity change from 0 to 1024 [ 515.446034][T18302] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 515.523500][T18306] ip6t_srh: unknown srh invflags 4000 [ 515.579839][T18310] netlink: 'syz.0.6366': attribute type 1 has an invalid length. [ 515.588021][T18310] netlink: 'syz.0.6366': attribute type 3 has an invalid length. [ 515.596354][T18310] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6366'. [ 515.708550][T18316] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 515.764090][T18319] netlink: 'syz.1.6371': attribute type 4 has an invalid length. [ 515.814182][ T5414] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 515.851809][T18324] netlink: 'syz.2.6374': attribute type 12 has an invalid length. [ 515.878032][T18319] netlink: 'syz.1.6371': attribute type 3 has an invalid length. [ 515.886321][T18319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6371'. [ 516.238448][ T5414] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 516.278160][ T5414] usb 5-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 516.343776][ T5414] usb 5-1: config 0 has no interface number 0 [ 516.538358][ T23] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 516.546418][ T5414] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 516.575413][ T5414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.599841][ T5414] usb 5-1: Product: syz [ 516.614704][ T5414] usb 5-1: Manufacturer: syz [ 516.655246][ T5414] usb 5-1: SerialNumber: syz [ 516.681095][ T5414] usb 5-1: config 0 descriptor?? [ 516.808324][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 516.949268][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 516.968495][ T5414] qmi_wwan: probe of 5-1:0.207 failed with error -22 [ 516.975670][ T23] usb 2-1: config 179 has no interface number 0 [ 517.008263][ T4235] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 517.017445][ T5414] usb 5-1: USB disconnect, device number 67 [ 517.036800][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 517.090614][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 517.130075][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.178124][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 517.210685][ T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 517.234772][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 517.244882][T18370] device geneve1 entered promiscuous mode [ 517.254757][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.318615][T18335] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 517.442344][ T4235] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 517.458560][ T4235] usb 3-1: config 0 has no interface number 0 [ 517.471627][ T4235] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.708720][ T4235] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 517.736050][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.773282][ T4235] usb 3-1: Product: syz [ 517.787286][ T4235] usb 3-1: Manufacturer: syz [ 517.796714][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6404'. [ 517.809626][ T4235] usb 3-1: SerialNumber: syz [ 517.817789][ T4235] usb 3-1: config 0 descriptor?? [ 517.827132][T18386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.850741][T18390] netlink: 'syz.4.6406': attribute type 1 has an invalid length. [ 517.881087][ T4235] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 517.950219][ T4235] usb 2-1: USB disconnect, device number 64 [ 517.958138][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 517.966709][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 518.158112][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 518.348477][ T5412] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 518.364626][ T8638] usb 3-1: USB disconnect, device number 60 [ 518.391815][ T8638] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 518.458684][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6414'. [ 518.628287][ T5412] usb 4-1: Using ep0 maxpacket: 8 [ 518.748766][ T5412] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 518.769874][ T5412] usb 4-1: config 179 has no interface number 0 [ 518.798963][ T5412] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 518.843146][ T5412] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 518.888062][ T5412] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 518.946811][T18421] loop1: detected capacity change from 0 to 1024 [ 518.953801][ T5412] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 518.996298][ T5412] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 519.017367][T18421] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 519.052889][T18421] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 519.087509][ T5412] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 519.113887][T18421] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 519.144206][ T5412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.189245][T18392] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 519.202039][T18421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 519.250083][T18421] System zones: 0-1, 3-36 [ 519.309922][T18421] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback. [ 519.695468][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6434'. [ 519.718309][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6434'. [ 519.743714][T18449] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 519.764925][ T4235] usb 4-1: USB disconnect, device number 67 [ 519.788072][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 519.796887][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 520.130826][T18470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6444'. [ 520.168549][T18470] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6444'. [ 520.191033][T18470] netlink: 'syz.2.6444': attribute type 4 has an invalid length. [ 521.449757][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'. [ 521.461856][T18475] loop4: detected capacity change from 0 to 32768 [ 521.518783][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6477'. [ 521.554194][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6477'. [ 521.913070][T18554] loop1: detected capacity change from 0 to 512 [ 521.960914][T18557] kAFS: unparsable volume name [ 522.106783][T18566] loop2: detected capacity change from 0 to 512 [ 522.150355][T18554] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 522.246450][T18554] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 522.255986][T18566] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.6490: iget: bad i_size value: 38620345925642 [ 522.288856][T18554] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,abort,noblock_validity,. Quota mode: none. [ 522.353190][T18566] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.6490: couldn't read orphan inode 15 (err -117) [ 522.356206][T18554] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.6486: Unimplemented hash flags: 0x0001 [ 522.378714][T18554] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.6486: Corrupt directory, running e2fsck is recommended [ 522.409626][T18577] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.6505'. [ 522.422911][T18566] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 522.494461][T18577] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 522.525967][ T4235] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 522.692007][T18585] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 522.818320][ T4235] usb 5-1: Using ep0 maxpacket: 8 [ 522.907467][T18597] sctp: [Deprecated]: syz.1.6503 (pid 18597) Use of int in max_burst socket option deprecated. [ 522.907467][T18597] Use struct sctp_assoc_value instead [ 522.958521][ T4235] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 522.966903][ T4235] usb 5-1: config 179 has no interface number 0 [ 522.994842][ T4235] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 523.046700][ T4235] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 523.104310][ T4235] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.154228][ T4235] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 523.187808][ T4235] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.245082][ T4235] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.276648][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.358869][T18574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 523.754608][T18641] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 523.831574][ T4459] usb 5-1: USB disconnect, device number 68 [ 523.858140][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 524.538174][T18675] netlink: 'syz.3.6543': attribute type 25 has an invalid length. [ 524.589149][T18675] netlink: 'syz.3.6543': attribute type 3 has an invalid length. [ 524.634241][T18675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6543'. [ 524.854015][T18692] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 524.882602][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6555'. [ 524.892936][T18696] netlink: 'syz.4.6554': attribute type 1 has an invalid length. [ 524.918098][T18696] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6554'. [ 524.930344][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6555'. [ 524.951868][T18696] netlink: 'syz.4.6554': attribute type 1 has an invalid length. [ 525.624168][T18738] loop1: detected capacity change from 0 to 512 [ 525.708315][ T8644] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 525.835776][T18747] netlink: 'syz.4.6579': attribute type 30 has an invalid length. [ 525.846830][T18747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6579'. [ 525.858546][T18747] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 525.876737][T18747] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 526.008261][ T8644] usb 1-1: Using ep0 maxpacket: 8 [ 526.087815][T18753] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6582'. [ 526.098411][T18753] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 526.198069][ T8644] usb 1-1: unable to get BOS descriptor or descriptor too short [ 526.308355][ T8644] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 526.316738][ T8644] usb 1-1: config 1 has no interface number 0 [ 526.338052][ T8644] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 526.378015][ T8644] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 526.476399][T18738] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 526.578209][ T8644] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 526.584909][T18738] EXT4-fs (loop1): Remounting filesystem read-only [ 526.587612][ T8644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.638011][ T8644] usb 1-1: Product: syz [ 526.646363][ T8644] usb 1-1: Manufacturer: syz [ 526.646916][T18738] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6575: invalid indirect mapped block 4278190080 (level 0) [ 526.659178][ T8644] usb 1-1: SerialNumber: syz [ 526.734622][T18738] EXT4-fs (loop1): Remounting filesystem read-only [ 526.748646][T18725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.758543][T18738] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6575: invalid indirect mapped block 1 (level 1) [ 526.854169][T18738] EXT4-fs (loop1): Remounting filesystem read-only [ 526.876251][T18738] EXT4-fs (loop1): 1 truncate cleaned up [ 526.905094][T18738] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000009,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal. Quota mode: none. [ 527.036725][T18738] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.6575: bad inode number: 1 [ 527.107272][ T8644] usb 1-1: USB disconnect, device number 61 [ 527.116843][T18738] EXT4-fs (loop1): Remounting filesystem read-only [ 527.405651][T18804] ipt_CLUSTERIP: Please specify destination IP [ 527.509898][T18810] __nla_validate_parse: 1 callbacks suppressed [ 527.509917][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6609'. [ 528.038136][ T8644] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 528.268229][ T8632] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 528.450511][ T8644] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 528.488010][ T8644] usb 1-1: config 0 has no interface number 0 [ 528.498928][ T8644] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 528.548235][ T8632] usb 3-1: Using ep0 maxpacket: 8 [ 528.558269][ T8644] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 528.618046][ T8644] usb 1-1: config 0 interface 11 has no altsetting 0 [ 528.645128][ T8644] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 528.676217][ T8644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.685441][ T8632] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.718015][ T8632] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.743867][T18878] loop4: detected capacity change from 0 to 512 [ 528.748712][ T8644] usb 1-1: config 0 descriptor?? [ 528.781150][T18824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 528.807584][T18824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 528.815993][T18880] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 528.839811][T18880] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 528.844772][ T8644] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 528.891364][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 528.922672][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 528.937695][T18878] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 528.938606][ T8632] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 528.979391][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 529.036264][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 529.046086][ T8632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.088053][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 529.096149][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 529.106882][ T8632] usb 3-1: Product: syz [ 529.117819][ T8632] usb 3-1: Manufacturer: syz [ 529.128494][ T4459] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 529.140851][ T8632] usb 3-1: SerialNumber: syz [ 529.146695][T18892] tmpfs: Bad value for 'mpol' [ 529.162250][ T8644] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 529.189499][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 529.239718][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 529.247726][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 529.298082][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 529.306177][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 529.398069][ T8644] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 529.408214][ T4459] usb 4-1: Using ep0 maxpacket: 8 [ 529.468309][ T8644] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 529.528051][ T8644] usb 1-1: USB disconnect, device number 62 [ 529.529516][ T4459] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 529.558658][T18896] device wlan0 entered promiscuous mode [ 529.585191][ T4459] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 529.606627][ T8644] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 529.617759][ T8632] usb 3-1: unit 5 not found! [ 529.623940][ T8632] usb 3-1: unit 0 not found! [ 529.647030][ T4459] usb 4-1: config 3 has no interface number 0 [ 529.713721][ T4459] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.727881][ T8632] usb 3-1: USB disconnect, device number 61 [ 529.757408][ T8644] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 529.798251][ T4459] usb 4-1: config 3 interface 45 has no altsetting 0 [ 529.810620][ T8644] keyspan 1-1:0.11: device disconnected [ 530.078288][ T4459] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 530.135159][ T4459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.186617][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.193974][ T4459] usb 4-1: Product: syz [ 530.306914][ T4459] usb 4-1: Manufacturer: syz [ 530.328567][ T4459] usb 4-1: SerialNumber: syz [ 530.375574][T18914] cgroup: none used incorrectly [ 530.380295][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.506743][T18919] cgroup: subsys name conflicts with all [ 530.866781][T18931] netlink: 'syz.1.6668': attribute type 8 has an invalid length. [ 530.887029][ T4459] usb 4-1: USB disconnect, device number 68 [ 530.998148][T18931] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6668'. [ 531.041412][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.585744][T18956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6678'. [ 531.616504][T18952] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 531.970242][T18970] MTD: Couldn't look up 'mtd0/file0': -2 [ 533.158329][ T4459] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 533.160679][T19014] netlink: 'syz.1.6707': attribute type 4 has an invalid length. [ 533.438390][ T4459] usb 4-1: Using ep0 maxpacket: 16 [ 533.578450][ T4459] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 533.621400][ T4459] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 533.698094][ T4459] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 533.806948][T19035] loop4: detected capacity change from 0 to 128 [ 533.820175][T19036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6716'. [ 533.850603][T19036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6716'. [ 533.928528][ T4459] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 533.982685][T19035] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.018151][ T4459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.026901][ T4459] usb 4-1: Product: syz [ 534.148239][ T4459] usb 4-1: Manufacturer: syz [ 534.153123][ T4459] usb 4-1: SerialNumber: syz [ 534.249052][ T4459] usb 4-1: config 0 descriptor?? [ 534.291933][T19047] netlink: 'syz.4.6721': attribute type 21 has an invalid length. [ 534.310436][ T4459] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 534.350373][T19047] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6721'. [ 534.388128][T19047] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6721'. [ 534.615785][ T8644] usb 4-1: USB disconnect, device number 69 [ 534.827343][T19062] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 535.003352][T19066] netlink: 'syz.4.6731': attribute type 3 has an invalid length. [ 535.078957][T19066] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6731'. [ 535.344747][T19082] loop2: detected capacity change from 0 to 64 [ 535.858341][ T8644] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 536.163268][T19118] device bond1 entered promiscuous mode [ 536.268226][ T8644] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 536.302454][ T8644] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 536.314808][T19118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.488328][ T8644] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 536.508206][T19128] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.6759'. [ 536.521495][ T8644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.572258][ T8644] usb 4-1: Product: syz [ 536.594041][ T8644] usb 4-1: Manufacturer: syz [ 536.627116][ T8644] usb 4-1: SerialNumber: syz [ 536.976357][ T8644] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 536.992117][ T8644] dvb_usb_af9015: probe of 4-1:2.0 failed with error -22 [ 537.025382][ T5414] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 537.069671][ T8644] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 537.084019][ T8644] dvb_usb_af9035: probe of 4-1:2.0 failed with error -22 [ 537.158483][ T8644] usb 4-1: USB disconnect, device number 70 [ 537.318531][ T5414] usb 5-1: Using ep0 maxpacket: 8 [ 537.478219][ T5414] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.518068][ T5414] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 537.527297][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.558693][T19149] netlink: 'syz.0.6770': attribute type 4 has an invalid length. [ 537.617216][ T5414] usb 5-1: config 0 descriptor?? [ 537.730733][ T5414] usb 5-1: selecting invalid altsetting 1 [ 537.736919][ T5414] usb 5-1: Can not set alternate setting to 1, error: -22 [ 537.796852][ T5414] synaptics_usb: probe of 5-1:0.0 failed with error -22 [ 537.970139][ T4235] usb 5-1: USB disconnect, device number 69 [ 538.168150][ T5414] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 538.251072][T19179] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6784'. [ 538.330948][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6786'. [ 538.400924][T19182] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 538.470250][T19182] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 538.543800][T19182] device bridge4 entered promiscuous mode [ 538.614585][T19185] loop1: detected capacity change from 0 to 4096 [ 538.658492][ T5414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 538.689684][ T5414] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 538.778133][ T5414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 538.835887][ T5414] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 539.068318][ T5414] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 539.077554][ T5414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.135943][ T5414] usb 3-1: Product: syz [ 539.154728][ T5414] usb 3-1: Manufacturer: syz [ 539.185140][ T5414] usb 3-1: SerialNumber: syz [ 539.255596][ T5414] usb 3-1: config 0 descriptor?? [ 539.319511][ T5414] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 539.600383][ T5414] ums-isd200: probe of 3-1:0.0 failed with error -22 [ 539.782815][T19228] [U]  [ 539.813067][ T5414] usb 3-1: USB disconnect, device number 62 [ 540.308892][ T4459] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.disc‘verxzð‰zl]! [ 540.373687][T19246] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.disc‘verxzð‰zl]" [ 541.433245][T19301] delete_channel: no stack [ 542.532173][T19287] loop4: detected capacity change from 0 to 32768 [ 543.098536][T19348] netlink: 'syz.2.6866': attribute type 3 has an invalid length. [ 543.438255][ T8638] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 543.606469][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 543.716076][T19368] netlink: 'syz.1.6875': attribute type 1 has an invalid length. [ 543.874269][ T8638] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 544.136052][ T8638] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 544.188078][ T8638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.196229][ T8638] usb 5-1: Product: syz [ 544.257151][ T8638] usb 5-1: Manufacturer: syz [ 544.308013][ T8638] usb 5-1: SerialNumber: syz [ 544.648309][ T8638] usb 5-1: Cannot retrieve CPort count: -71 [ 544.674212][ T8638] usb 5-1: Cannot retrieve CPort count: -71 [ 544.701239][ T8638] es2_ap_driver: probe of 5-1:246.0 failed with error -71 [ 544.762087][ T8638] usb 5-1: USB disconnect, device number 70 [ 544.840193][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6894'. [ 544.878088][T19408] syz.3.6895 (19408): /proc/19407/oom_adj is deprecated, please use /proc/19407/oom_score_adj instead. [ 545.327175][T19425] loop1: detected capacity change from 0 to 512 [ 545.350249][T19375] loop2: detected capacity change from 0 to 32768 [ 545.489087][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6905'. [ 545.521320][T19375] XFS (loop2): Mounting V5 Filesystem [ 545.566993][T19425] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.646709][T19425] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.6902: corrupted xattr block 33 [ 545.798624][T19446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6909'. [ 545.891400][T19453] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6912'. [ 545.989402][T19375] XFS (loop2): Ending clean mount [ 546.186629][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6917'. [ 546.242281][ T4197] XFS (loop2): Unmounting Filesystem [ 546.483958][T19471] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 546.745579][T19483] netlink: 'syz.3.6928': attribute type 2 has an invalid length. [ 547.302954][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6936'. [ 547.608133][T19512] bond0: (slave bond_slave_1): Releasing backup interface [ 547.768505][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6945'. [ 548.241496][ T4715] udevd[4715]: inotify_add_watch(7, /dev/nbd1p4, 10) failed: No such file or directory [ 548.348543][T19548] bond0: (slave bond_slave_1): Releasing backup interface [ 548.391632][T19548] device bond_slave_1 left promiscuous mode [ 548.430434][T19551] netlink: 'syz.4.6960': attribute type 21 has an invalid length. [ 548.458125][T19551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6960'. [ 548.548271][T19559] netlink: 'syz.2.6965': attribute type 1 has an invalid length. [ 548.577592][T19559] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6965'. [ 549.005262][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6978'. [ 549.028334][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6978'. [ 549.038655][T19584] openvswitch: netlink: Actions may not be safe on all matching packets [ 549.254406][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 549.356207][T19598] XFS (nullb0): Invalid superblock magic number [ 549.419408][T19610] delete_channel: no stack [ 550.148400][ T8638] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 550.464887][ T8638] usb 3-1: Using ep0 maxpacket: 16 [ 550.560475][T19657] device gre3 entered promiscuous mode [ 550.607121][T19660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7012'. [ 550.858552][ T8638] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 550.892250][ T8638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.895600][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7017'. [ 550.938016][ T8638] usb 3-1: Product: syz [ 550.942435][ T8638] usb 3-1: Manufacturer: syz [ 550.947151][ T8638] usb 3-1: SerialNumber: syz [ 551.000590][T19675] netlink: zone id is out of range [ 551.022056][ T8638] usb 3-1: config 0 descriptor?? [ 551.303138][ T8638] usb-storage 3-1:0.0: USB Mass Storage device detected [ 551.358771][T19686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7025'. [ 551.363594][ T8638] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 551.408520][T19691] program syz.4.7027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.428675][ T8638] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 89) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 551.428675][ T8638] Please send a copy of this message to and [ 551.578235][ T8638] usb 3-1: USB disconnect, device number 63 [ 552.074726][T19718] netlink: 'syz.3.7039': attribute type 8 has an invalid length. [ 552.118038][T19718] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7039'. [ 552.568018][ T8638] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 552.624191][T19736] netlink: 'syz.0.7048': attribute type 10 has an invalid length. [ 552.693079][T19736] netlink: 'syz.0.7048': attribute type 10 has an invalid length. [ 552.868058][T19749] Invalid ELF header magic: != ELF [ 553.248197][ T8638] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 553.280900][ T8638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.318035][ T8638] usb 2-1: Product: syz [ 553.328297][ T8638] usb 2-1: Manufacturer: syz [ 553.362963][ T8638] usb 2-1: SerialNumber: syz [ 553.414153][ T8638] usb 2-1: config 0 descriptor?? [ 553.493310][ T8638] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 553.625888][T19780] loop4: detected capacity change from 0 to 128 [ 553.708424][ T8638] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 553.734528][ T8638] sq905c 2-1:0.0: Get version command failed [ 553.751015][ T8638] sq905c: probe of 2-1:0.0 failed with error -71 [ 553.789349][T19780] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 553.808652][ T8638] usb 2-1: USB disconnect, device number 65 [ 553.860034][T19780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.318240][ T5414] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 554.439826][T19810] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 554.598238][ T5414] usb 1-1: Using ep0 maxpacket: 32 [ 554.634628][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7088'. [ 554.671796][T19825] sctp: [Deprecated]: syz.3.7090 (pid 19825) Use of int in max_burst socket option. [ 554.671796][T19825] Use struct sctp_assoc_value instead [ 554.696846][T19827] x_tables: unsorted entry at hook 4 [ 554.738006][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7088'. [ 554.908738][ T5414] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 554.939357][ T5414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.981465][ T5414] usb 1-1: Product: syz [ 555.004343][ T5414] usb 1-1: Manufacturer: syz [ 555.045283][ T5414] usb 1-1: SerialNumber: syz [ 555.052072][T19840] binfmt_misc: register: failed to install interpreter file ./file2 [ 555.198833][T19843] device bond3 entered promiscuous mode [ 555.209566][T19843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.468573][ T5414] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 555.508458][ T5414] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 555.516122][T19850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7102'. [ 555.588471][ T5414] usb 1-1: USB disconnect, device number 63 [ 555.929417][ T8493] udevd[8493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.008156][T19867] netlink: 'syz.2.7109': attribute type 32 has an invalid length. [ 556.059204][T19868] libceph: resolve '0..' (ret=-3): failed [ 556.216152][T19874] netlink: 'syz.3.7113': attribute type 1 has an invalid length. [ 556.258743][T19874] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7113'. [ 557.140282][T19920] netlink: 'syz.3.7136': attribute type 3 has an invalid length. [ 557.188202][T19920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7136'. [ 557.589412][ T8632] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 557.839043][ T8638] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 557.976627][ T8632] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.007997][ T8632] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 558.037606][ T8632] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 558.128456][ T8638] usb 2-1: Using ep0 maxpacket: 32 [ 558.256599][ T8632] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.276780][ T8638] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 558.276815][ T8638] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 558.276840][ T8638] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 558.276865][ T8638] usb 2-1: config 1 has no interface number 0 [ 558.276904][ T8638] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 558.276930][ T8638] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 558.276973][ T8638] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 558.277000][ T8638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.295893][ T8632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.295923][ T8632] usb 1-1: Product: syz [ 558.295939][ T8632] usb 1-1: Manufacturer: syz [ 558.295956][ T8632] usb 1-1: SerialNumber: syz [ 558.327629][ T8638] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 558.539224][ T8638] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 558.539428][ T8638] snd_usb_pod 2-1:1.1: invalid control EP [ 558.539444][ T8638] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 558.539954][ T8638] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 558.540375][ T8638] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 558.618331][ T8632] usb 1-1: 0:2 : does not exist [ 558.673797][T19948] loop2: detected capacity change from 0 to 32768 [ 558.676355][ T8632] usb 1-1: USB disconnect, device number 64 [ 558.723542][T19948] (syz.2.7150,19948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 558.724016][T19948] (syz.2.7150,19948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 558.725867][T19948] (syz.2.7150,19948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 558.751244][ T4235] usb 2-1: USB disconnect, device number 66 [ 558.769262][T19948] JBD2: Ignoring recovery information on journal [ 558.919250][ T4715] udevd[4715]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 558.933844][T19948] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 559.318369][T19948] (syz.2.7150,19948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 559.417391][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7163'. [ 559.449007][T19948] (syz.2.7150,19948,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 559.556483][T19948] (syz.2.7150,19948,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 559.624158][T19948] (syz.2.7150,19948,1):ocfs2_quota_read:201 ERROR: status = -5 [ 559.654072][T19948] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 559.691038][T19948] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 559.755835][T19948] (syz.2.7150,19948,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 559.866834][T19948] (syz.2.7150,19948,1):ocfs2_mknod:314 ERROR: status = -5 [ 559.867492][T20007] netlink: 'syz.3.7172': attribute type 1 has an invalid length. [ 559.884713][T19948] (syz.2.7150,19948,1):ocfs2_mknod:502 ERROR: status = -5 [ 559.906030][T19948] (syz.2.7150,19948,1):ocfs2_create:676 ERROR: status = -5 [ 559.988129][T20007] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.7172'. [ 560.065919][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 560.067931][T20007] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7172'. [ 560.298136][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7181'. [ 560.551316][T20035] xt_socket: unknown flags 0xc [ 561.117638][T20067] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 561.133193][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7203'. [ 561.219922][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7203'. [ 562.147784][T20132] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by ""[20132] [ 562.185601][T20135] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 562.389687][T20144] netlink: 300 bytes leftover after parsing attributes in process `syz.4.7240'. [ 562.416724][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7241'. [ 562.432752][ T8638] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 562.670847][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.691889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.752079][ T8638] usb 1-1: Using ep0 maxpacket: 32 [ 562.882539][T20166] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.890126][ T8638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.138643][ T8638] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 563.202057][ T8638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.261489][ T8638] usb 1-1: Product: syz [ 563.265921][ T8638] usb 1-1: Manufacturer: syz [ 563.302086][ T8638] usb 1-1: SerialNumber: syz [ 563.340158][ T8638] usb 1-1: config 0 descriptor?? [ 563.439886][ T8638] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 563.638820][ T8638] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 563.646873][ T8638] quatech2: probe of 1-1:0.0 failed with error -8 [ 563.759959][T20201] netlink: 'syz.4.7266': attribute type 1 has an invalid length. [ 563.883377][ T4459] usb 1-1: USB disconnect, device number 65 [ 564.029162][ T8642] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 564.426207][ T8642] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 564.464472][ T8642] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.485305][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7277'. [ 564.505390][ T8642] usb 4-1: config 1 interface 0 has no altsetting 0 [ 564.548119][T20224] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7277'. [ 564.598764][T20224] netlink: 'syz.4.7277': attribute type 1 has an invalid length. [ 564.648076][T20224] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7277'. [ 564.779867][ T8642] usb 4-1: New USB device found, idVendor=10cf, idProduct=1713, bcdDevice= 0.40 [ 564.779906][ T8642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.779929][ T8642] usb 4-1: Product: syz [ 564.779947][ T8642] usb 4-1: Manufacturer: syz [ 564.779965][ T8642] usb 4-1: SerialNumber: syz [ 565.018596][T20246] __nla_validate_parse: 4 callbacks suppressed [ 565.018618][T20246] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7288'. [ 565.039620][T20245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.039999][T20245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 565.176257][T20249] netlink: 'syz.1.7290': attribute type 1 has an invalid length. [ 565.298140][ T8642] usbhid 4-1:1.0: can't add hid device: -71 [ 565.298239][ T8642] usbhid: probe of 4-1:1.0 failed with error -71 [ 565.301360][ T8642] usb 4-1: USB disconnect, device number 71 [ 565.338053][T20254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7292'. [ 565.517790][T20259] tmpfs: Bad value for 'mpol' [ 565.828267][T20276] netlink: 'syz.3.7303': attribute type 13 has an invalid length. [ 565.968404][ T4459] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 566.075239][T20289] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.205516][T20288] loop4: detected capacity change from 0 to 2048 [ 566.268369][ T4459] usb 1-1: Using ep0 maxpacket: 16 [ 566.388588][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.410050][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.425051][T20288] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 566.465517][ T4459] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.517531][ T4459] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 566.555188][T20305] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.576321][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.605113][ T4459] usb 1-1: config 0 descriptor?? [ 566.683046][ T4459] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 566.742210][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 566.769730][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 566.841505][T20315] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 566.842648][T20314] kAFS: unable to lookup cell ' [ 566.842648][T20314] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 566.842648][T20314] ' [ 566.886754][T20267] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 566.946158][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 566.972757][ T4459] usb 1-1: USB disconnect, device number 66 [ 566.984606][ T3544] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 567.824640][T20355] xt_CT: No such helper "pptp" [ 567.845081][T20364] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.970137][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7349'. [ 568.017061][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7349'. [ 568.354474][T20391] netlink: 'syz.0.7358': attribute type 12 has an invalid length. [ 568.408211][ T8642] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 568.707921][ T8642] usb 5-1: Using ep0 maxpacket: 32 [ 568.898463][ T8642] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.957289][ T8642] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 569.028019][ T8642] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 11 [ 569.084496][ T8642] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 569.305018][ T8642] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.318433][T20424] device wlan0 entered promiscuous mode [ 569.348071][ T8642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 569.376891][ T8642] usb 5-1: SerialNumber: syz [ 569.445574][T20376] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 569.474307][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7377'. [ 569.495250][T20376] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 569.558877][ T8642] hub 5-1:1.0: bad descriptor, ignoring hub [ 569.566507][ T8642] hub: probe of 5-1:1.0 failed with error -5 [ 569.598018][T20429] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 569.607256][ T8642] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 569.775206][ T8642] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 569.849415][ T8642] usb 5-1: USB disconnect, device number 71 [ 569.981590][T20440] device gtp0 entered promiscuous mode [ 570.271270][ T26] audit: type=1400 audit(570.623:37): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=20452 comm="syz.1.7389" [ 570.450025][T20462] netlink: 'syz.1.7393': attribute type 25 has an invalid length. [ 570.501705][T20462] netlink: 'syz.1.7393': attribute type 6 has an invalid length. [ 570.508185][T20466] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7395'. [ 570.703990][T20475] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7400'. [ 570.757400][T20477] loop2: detected capacity change from 0 to 128 [ 570.766465][T20475] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7400'. [ 570.830866][T20475] tc_dump_action: action bad kind [ 570.876430][T20477] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 570.893054][T20481] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.013312][T20477] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue. Quota mode: none. [ 571.042794][T20477] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 571.730132][T20517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 571.777247][T20519] netlink: 'syz.0.7418': attribute type 1 has an invalid length. [ 571.807985][T20519] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7418'. [ 571.997478][T20529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7423'. [ 572.251657][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7430'. [ 572.273618][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7430'. [ 572.304121][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7430'. [ 572.373055][ T4235] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 572.786759][T20558] netlink: 'syz.2.7439': attribute type 21 has an invalid length. [ 572.798278][ T4235] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 572.831178][ T4235] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.873556][T20558] netlink: 'syz.2.7439': attribute type 7 has an invalid length. [ 572.915863][ T4235] usb 5-1: config 2 interface 0 has no altsetting 0 [ 573.158039][ T4235] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 573.218190][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.226494][ T4235] usb 5-1: Product: syz [ 573.278155][ T4235] usb 5-1: Manufacturer: syz [ 573.283012][ T4235] usb 5-1: SerialNumber: syz [ 573.326344][T20568] loop2: detected capacity change from 0 to 4096 [ 573.430032][T20568] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 573.547709][T20578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 573.681290][ T4235] ims_pcu: probe of 5-1:2.0 failed with error -22 [ 573.689458][T20574] loop1: detected capacity change from 0 to 2048 [ 573.709463][ T4235] usb 5-1: USB disconnect, device number 72 [ 573.752721][T20582] netlink: 'syz.3.7453': attribute type 21 has an invalid length. [ 573.836847][T20574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.868183][T20582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7453'. [ 574.028150][T20592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7456'. [ 574.049978][T20590] device virt_wifi0 entered promiscuous mode [ 574.368689][T20611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.583818][T20610] loop1: detected capacity change from 0 to 4096 [ 574.715735][T20610] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 574.890884][T20628] No source specified [ 575.102174][T20635] loop4: detected capacity change from 0 to 256 [ 575.836503][T20666] loop1: detected capacity change from 0 to 64 [ 575.934436][T20670] device virt_wifi0 entered promiscuous mode [ 575.967698][T20673] usb usb9: usbfs: process 20673 (syz.3.7495) did not claim interface 0 before use [ 576.001080][T20670] batman_adv: batadv0: Interface activated: virt_wifi0 [ 576.015070][T20664] nvme_rdma: malformed address passed: 172.20.20.24:0Æý [ 576.102810][T20670] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 576.187364][T20670] batman_adv: batadv0: Removing interface: virt_wifi0 [ 576.889144][T20698] nvme_fabrics: missing parameter 'transport=%s' [ 576.896261][T20698] nvme_fabrics: missing parameter 'nqn=%s' [ 577.135592][T20713] device virt_wifi0 entered promiscuous mode [ 577.188368][ T8638] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 577.610531][T20729] netlink: 'syz.1.7522': attribute type 1 has an invalid length. [ 577.625792][ T8638] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.646960][ T8638] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.647139][T20729] __nla_validate_parse: 1 callbacks suppressed [ 577.647152][T20729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7522'. [ 577.676826][ T8638] usb 4-1: config 1 has no interface number 0 [ 577.700218][T20683] loop4: detected capacity change from 0 to 32768 [ 577.746285][ T4459] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 577.774897][T20683] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 577.832760][T20683] JBD2: Ignoring recovery information on journal [ 577.893839][ T8638] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 577.919568][ T8638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.950551][T20740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7527'. [ 577.970508][T20683] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 577.986953][ T8638] usb 4-1: Product: syz [ 578.020622][ T8638] usb 4-1: Manufacturer: syz [ 578.045787][ T8638] usb 4-1: SerialNumber: syz [ 578.114159][T20683] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 578.178366][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 578.194293][T20683] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 578.223399][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 578.245496][T20683] OCFS2: File system is now read-only. [ 578.268083][T20683] (syz.4.7499,20683,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 578.317546][T20683] (syz.4.7499,20683,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 578.368017][T20683] (syz.4.7499,20683,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 578.396495][T20752] loop2: detected capacity change from 0 to 256 [ 578.401993][T20683] (syz.4.7499,20683,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 578.433727][T20683] (syz.4.7499,20683,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 578.448483][ T4459] usb 1-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 578.457737][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.458155][T20683] (syz.4.7499,20683,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 578.478241][ T8638] usb 4-1: 1:0 : does not exist [ 578.483439][ T4459] usb 1-1: Product: syz [ 578.488584][ T4459] usb 1-1: Manufacturer: syz [ 578.492301][ T8638] usb 4-1: 1:2 : does not exist [ 578.493728][ T4459] usb 1-1: SerialNumber: syz [ 578.515557][ T4459] usb 1-1: config 0 descriptor?? [ 578.523554][ T8638] usb 4-1: 1:3 : does not exist [ 578.538956][ T8638] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 578.545693][T20752] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 578.580893][T20683] (syz.4.7499,20683,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 578.592129][ T8638] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 578.609470][T20752] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 578.640566][ T8638] usb 4-1: USB disconnect, device number 72 [ 578.667992][T20683] (syz.4.7499,20683,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 578.677917][T20683] (syz.4.7499,20683,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 578.704813][ T4715] udevd[4715]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.750024][T20683] (syz.4.7499,20683,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 578.778128][T20683] (syz.4.7499,20683,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 578.806792][T20683] (syz.4.7499,20683,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 578.849767][T20683] (syz.4.7499,20683,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 578.878337][T20683] (syz.4.7499,20683,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 578.905127][T20683] (syz.4.7499,20683,0):ocfs2_mknod:357 ERROR: status = -30 [ 578.920713][ T4459] usb 1-1: USB disconnect, device number 67 [ 578.925371][T20683] (syz.4.7499,20683,0):ocfs2_mknod:502 ERROR: status = -30 [ 578.970085][T20683] (syz.4.7499,20683,0):ocfs2_mkdir:659 ERROR: status = -30 [ 579.153498][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 579.869659][T20785] loop4: detected capacity change from 0 to 4096 [ 580.082213][T20785] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 580.265913][T20785] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 580.739404][T20817] device bond4 entered promiscuous mode [ 580.795815][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7567'. [ 580.808038][T20817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.885591][T20828] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.045913][T20833] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.7570'. [ 581.212266][T20842] netlink: 'syz.2.7575': attribute type 3 has an invalid length. [ 581.605127][T20863] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7585'. [ 581.655846][T20861] loop1: detected capacity change from 0 to 2048 [ 581.812050][T20875] netlink: 'syz.0.7591': attribute type 1 has an invalid length. [ 581.898126][ T8638] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 581.906872][T20861] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 581.959412][T20861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.338450][ T8638] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.388029][ T8638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 582.455000][T20890] set match dimension is over the limit! [ 582.462168][ T8638] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.535736][ T8638] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 582.588002][ T8638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.631070][ T8638] usb 5-1: config 0 descriptor?? [ 582.821695][T20904] loop1: detected capacity change from 0 to 256 [ 582.913381][ T8638] ath6kl: Failed to submit usb control message: -71 [ 582.950013][ T8638] ath6kl: unable to send the bmi data to the device: -71 [ 583.007988][ T8638] ath6kl: Unable to send get target info: -71 [ 583.065911][ T8638] ath6kl: Failed to init ath6kl core: -71 [ 583.079887][T20904] FAT-fs (loop1): Directory bread(block 64) failed [ 583.126454][T20904] FAT-fs (loop1): Directory bread(block 65) failed [ 583.145973][T20918] binder: 20917:20918 unknown command 1074553619 [ 583.172142][T20904] FAT-fs (loop1): Directory bread(block 66) failed [ 583.185021][ T8638] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 583.215139][T20918] binder: 20917:20918 ioctl c0306201 200000000000 returned -22 [ 583.241811][T20904] FAT-fs (loop1): Directory bread(block 67) failed [ 583.252887][ T8638] usb 5-1: USB disconnect, device number 73 [ 583.320656][T20904] FAT-fs (loop1): Directory bread(block 68) failed [ 583.363460][T20904] FAT-fs (loop1): Directory bread(block 69) failed [ 583.415049][T20904] FAT-fs (loop1): Directory bread(block 70) failed [ 583.445819][T20904] FAT-fs (loop1): Directory bread(block 71) failed [ 583.490583][T20904] FAT-fs (loop1): Directory bread(block 72) failed [ 583.588028][T20904] FAT-fs (loop1): Directory bread(block 73) failed [ 583.659479][T20934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 584.115677][T20954] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 584.188509][T20954] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 584.248536][T20957] netlink: 'syz.2.7629': attribute type 4 has an invalid length. [ 584.259992][T20961] overlayfs: conflicting options: nfs_export=on,index=off [ 584.274518][T20962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7631'. [ 584.298860][T20957] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7629'. [ 584.340903][T20957] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 584.497357][T20966] netlink: 'syz.0.7635': attribute type 20 has an invalid length. [ 584.784553][T20974] loop2: detected capacity change from 0 to 4096 [ 584.896487][T20974] EXT4-fs (loop2): Test dummy encryption mode enabled [ 584.909459][T20985] netlink: 'syz.0.7644': attribute type 46 has an invalid length. [ 584.967319][T20985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7644'. [ 585.051275][T20974] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 585.608700][T20974] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 585.671675][T21016] device gtp1 entered promiscuous mode [ 586.489541][T21049] netlink: 'syz.2.7672': attribute type 1 has an invalid length. [ 587.103537][T21074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7684'. [ 587.197724][T21074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7684'. [ 587.509745][T21093] netlink: 'syz.2.7692': attribute type 3 has an invalid length. [ 587.578196][T21093] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7692'. [ 587.759328][T21105] loop4: detected capacity change from 0 to 256 [ 588.038045][ T4459] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 588.049775][T21105] FAT-fs (loop4): Directory bread(block 64) failed [ 588.080022][T21105] FAT-fs (loop4): Directory bread(block 65) failed [ 588.112177][T21105] FAT-fs (loop4): Directory bread(block 66) failed [ 588.149707][T21105] FAT-fs (loop4): Directory bread(block 67) failed [ 588.187101][T21105] FAT-fs (loop4): Directory bread(block 68) failed [ 588.218076][T21105] FAT-fs (loop4): Directory bread(block 69) failed [ 588.245386][T21105] FAT-fs (loop4): Directory bread(block 70) failed [ 588.277067][T21105] FAT-fs (loop4): Directory bread(block 71) failed [ 588.317283][T21105] FAT-fs (loop4): Directory bread(block 72) failed [ 588.344612][T21105] FAT-fs (loop4): Directory bread(block 73) failed [ 588.356543][ T4459] usb 4-1: Using ep0 maxpacket: 16 [ 588.498518][ T4459] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.539998][ T4459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 588.600813][ T4459] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 588.810033][ T4459] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 588.857979][ T4459] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 588.907990][ T4459] usb 4-1: Manufacturer: syz [ 589.002792][T21149] program syz.1.7721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.023614][ T4459] usb 4-1: config 0 descriptor?? [ 589.109623][T21149] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 589.298277][T21157] loop4: detected capacity change from 0 to 256 [ 589.344211][ T23] usb 4-1: USB disconnect, device number 73 [ 590.413373][ T4459] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 590.575742][T21217] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7755'. [ 590.660656][ T26] audit: type=1400 audit(591.013:38): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=21221 comm="syz.3.7757" [ 590.950484][T21233] xt_hashlimit: size too large, truncated to 1048576 [ 590.966785][ T4459] usb 1-1: unable to get BOS descriptor or descriptor too short [ 590.991043][T21236] netlink: 'syz.4.7763': attribute type 25 has an invalid length. [ 591.028242][T21236] netlink: 'syz.4.7763': attribute type 3 has an invalid length. [ 591.127816][ T4459] usb 1-1: config 3 has an invalid interface number: 73 but max is 1 [ 591.166510][ T4459] usb 1-1: config 3 has no interface number 1 [ 591.198003][ T4459] usb 1-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 591.254095][ T4459] usb 1-1: config 3 interface 0 has no altsetting 0 [ 591.303547][ T4459] usb 1-1: config 3 interface 73 has no altsetting 0 [ 591.639676][ T4459] usb 1-1: string descriptor 0 read error: -22 [ 591.653110][ T4459] usb 1-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 591.738004][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.861686][ T4459] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 591.879158][ T4459] dvb_usb_af9035: probe of 1-1:3.0 failed with error -22 [ 592.067309][ T4459] usb 1-1: USB disconnect, device number 68 [ 592.267437][T21276] cgroup: Invalid name [ 592.288309][ T23] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 592.740732][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.771869][ T23] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 593.080262][ T23] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 593.126725][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.182204][ T23] usb 4-1: Product: syz [ 593.198901][ T23] usb 4-1: Manufacturer: syz [ 593.206847][ T23] usb 4-1: SerialNumber: syz [ 593.354873][T21268] loop2: detected capacity change from 0 to 32768 [ 593.390300][T21303] loop1: detected capacity change from 0 to 16 [ 593.738916][ C1] usb 4-1: received EP1 urb->status = -71 [ 593.745739][ T23] usb 4-1: unable to init card! (ret=-71) [ 593.752145][ T23] snd-usb-caiaq: probe of 4-1:1.0 failed with error -71 [ 593.778288][ T23] usb 4-1: USB disconnect, device number 74 [ 593.838580][T21303] erofs: (device loop1): mounted with root inode @ nid 36. [ 594.369229][T21320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7804'. [ 594.448203][T21321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7805'. [ 595.589006][T21362] loop2: detected capacity change from 0 to 4096 [ 595.833828][T21362] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 595.894684][T21362] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 595.979194][T21362] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 596.040553][T21362] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 596.126346][T21362] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 596.238167][T21362] ntfs: volume version 3.1. [ 596.285979][T21362] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 596.351976][T21362] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 596.442686][T21362] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 596.615374][T21362] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 596.680464][T21362] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 596.810653][T21423] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 597.613148][ T8632] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 597.858390][T21470] ipt_ECN: cannot use operation on non-tcp rule [ 597.919384][ T8632] usb 2-1: Using ep0 maxpacket: 32 [ 598.123353][ T8632] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 598.159940][ T8632] usb 2-1: config 0 has no interface number 0 [ 598.207578][ T8632] usb 2-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.298286][ T8632] usb 2-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 598.371714][ T8632] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.524457][ T23] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 598.598319][ T8632] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 598.637981][ T8632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.647644][T21494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7881'. [ 598.677015][ T8632] usb 2-1: Product: syz [ 598.707247][ T8632] usb 2-1: Manufacturer: syz [ 598.737631][ T8632] usb 2-1: SerialNumber: syz [ 598.793352][ T8632] usb 2-1: config 0 descriptor?? [ 598.829395][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 598.886629][ T8632] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input34 [ 599.007106][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.130054][ T4459] usb 2-1: USB disconnect, device number 67 [ 599.149652][ T5414] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 599.279293][ T23] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 599.315540][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.362103][ T23] usb 5-1: Product: syz [ 599.370334][ T23] usb 5-1: Manufacturer: syz [ 599.375259][ T23] usb 5-1: SerialNumber: syz [ 599.421835][ T23] usb 5-1: config 0 descriptor?? [ 599.481646][ T23] usb 5-1: bad CDC descriptors [ 599.487111][ T23] usb 5-1: unsupported MDLM descriptors [ 599.530558][ T23] cdc_acm 5-1:0.0: Zero length descriptor references [ 599.581204][ T23] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 599.598724][ T5414] usb 1-1: config 0 has an invalid interface number: 178 but max is 2 [ 599.607638][ T5414] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 599.707323][ T5414] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 599.747440][ T5414] usb 1-1: config 0 has no interface number 0 [ 599.778015][ T5414] usb 1-1: too many endpoints for config 0 interface 178 altsetting 200: 174, using maximum allowed: 30 [ 599.840515][ T5414] usb 1-1: config 0 interface 178 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 174 [ 599.947994][ T5414] usb 1-1: config 0 interface 178 has no altsetting 0 [ 599.988013][ T5414] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 600.037976][ T5414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.094907][ T5414] usb 1-1: config 0 descriptor?? [ 600.101218][ T23] usb 5-1: USB disconnect, device number 74 [ 600.310787][T21552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.318800][T21552] IPv6: NLM_F_CREATE should be set when creating new route [ 600.326158][T21552] IPv6: NLM_F_CREATE should be set when creating new route [ 600.428839][ T5414] usb 1-1: string descriptor 0 read error: -71 [ 600.471040][ T5414] usb 1-1: USB disconnect, device number 69 [ 600.929671][T21574] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 601.323908][T21592] netlink: 'syz.0.7922': attribute type 12 has an invalid length. [ 601.339377][ T8632] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 601.498187][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7924'. [ 601.688729][T21604] netlink: 'syz.0.7928': attribute type 1 has an invalid length. [ 601.717975][T21604] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.7928'. [ 601.787181][T21604] netlink: 'syz.0.7928': attribute type 1 has an invalid length. [ 601.828323][ T8632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.869876][ T8632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 601.918019][ T8632] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 601.959764][ T8632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.999035][ T8632] usb 3-1: config 0 descriptor?? [ 602.078939][T21618] netlink: 'syz.0.7935': attribute type 1 has an invalid length. [ 602.140033][T21618] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7935'. [ 602.187830][T21618] block nbd0: not configured, cannot reconfigure [ 602.292375][ T8632] Bluetooth: Can't get state to change to load ram patch err [ 602.317990][ T8632] Bluetooth: Loading patch file failed [ 602.339772][ T8632] ath3k: probe of 3-1:0.0 failed with error -121 [ 602.500440][ T8632] usb 3-1: USB disconnect, device number 64 [ 603.580874][T21679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7957'. [ 604.041620][T21694] loop2: detected capacity change from 0 to 4096 [ 604.118178][ T8638] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 604.283380][T21694] EXT4-fs (loop2): Test dummy encryption mode enabled [ 604.301373][T21694] EXT4-fs (loop2): inline encryption not supported [ 604.338084][T21694] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 604.398058][ T8638] usb 4-1: Using ep0 maxpacket: 8 [ 604.472135][T21694] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 604.505943][ T263] block nbd1: Attempted send on invalid socket [ 604.512226][ T263] print_req_error: 2 callbacks suppressed [ 604.512241][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 604.518249][ T8638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 604.548055][T21694] System zones: 0-5 [ 604.586601][T21694] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 604.667070][ T8638] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 604.928393][ T8638] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 604.964182][ T8638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.017976][ T8638] usb 4-1: Product: syz [ 605.022233][ T8638] usb 4-1: Manufacturer: syz [ 605.062282][ T8638] usb 4-1: SerialNumber: syz [ 605.117270][ T8638] usb 4-1: config 0 descriptor?? [ 605.783409][ T8638] usb 4-1: USB disconnect, device number 75 [ 605.949579][T21749] loop1: detected capacity change from 0 to 4096 [ 606.110584][T21762] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 606.728094][T21779] netlink: 'syz.1.8002': attribute type 1 has an invalid length. [ 607.257652][T21799] gfs2: Unexpected value for 'barrier' [ 608.034188][ T5414] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 608.837659][ T5414] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 608.868141][ T5414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.876196][ T5414] usb 5-1: Product: syz [ 608.945816][ T5414] usb 5-1: Manufacturer: syz [ 608.955935][ T5414] usb 5-1: SerialNumber: syz [ 609.016282][ T5414] usb 5-1: config 0 descriptor?? [ 609.112152][ T5414] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 609.201345][T21869] loop2: detected capacity change from 0 to 8192 [ 609.313670][T21869] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 609.328304][ T5414] gspca_sunplus: reg_r err -71 [ 609.349648][ T5414] usb 5-1: USB disconnect, device number 75 [ 609.364595][T21869] REISERFS (device loop2): using ordered data mode [ 609.467046][T21869] reiserfs: using flush barriers [ 609.533649][T21869] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 609.632082][T21845] loop1: detected capacity change from 0 to 32768 [ 609.648314][T21869] REISERFS (device loop2): checking transaction log (loop2) [ 609.777160][T21869] REISERFS (device loop2): Using r5 hash to sort names [ 609.791193][T21869] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 610.654007][T21926] netlink: 'syz.0.8072': attribute type 9 has an invalid length. [ 610.711110][T21926] netlink: 'syz.0.8072': attribute type 7 has an invalid length. [ 610.791354][T21926] netlink: 'syz.0.8072': attribute type 8 has an invalid length. [ 610.839342][T21926] netlink: 'syz.0.8072': attribute type 13 has an invalid length. [ 612.392709][ T23] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 612.427545][T21923] loop4: detected capacity change from 0 to 32768 [ 612.568352][ T5414] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 612.619237][T21923] (syz.4.8070,21923,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xde0877ff. Applying ECC. [ 612.668224][T21923] (syz.4.8070,21923,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0xce7aacd7 [ 612.689581][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 612.746309][T21923] (syz.4.8070,21923,1):ocfs2_verify_volume:2390 ERROR: status = -5 [ 612.804127][T21923] (syz.4.8070,21923,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 612.812018][T22016] libceph: resolve '0' (ret=-3): failed [ 612.838543][ T23] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 612.868011][T21923] (syz.4.8070,21923,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 612.880398][ T23] usb 4-1: config 0 has no interface number 0 [ 612.886992][ T23] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 612.989551][ T23] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 613.118465][ T5414] usb 1-1: unable to get BOS descriptor or descriptor too short [ 613.208488][ T5414] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 613.227436][ T23] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 613.287999][ T5414] usb 1-1: config 0 has no interface number 0 [ 613.294647][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.308005][ T5414] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 613.341525][ T23] usb 4-1: Product: syz [ 613.346842][ T23] usb 4-1: Manufacturer: syz [ 613.377131][ T5414] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 613.407989][ T23] usb 4-1: SerialNumber: syz [ 613.424516][ T5414] usb 1-1: config 0 interface 86 has no altsetting 0 [ 613.432674][ T23] usb 4-1: config 0 descriptor?? [ 613.495094][T22036] netlink: set zone limit has 4 unknown bytes [ 613.505445][T21986] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 613.524023][T21986] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 613.562357][T22041] netlink: 'syz.4.8117': attribute type 9 has an invalid length. [ 613.669582][ T5414] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 613.698449][ T5414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.745448][ T5414] usb 1-1: Product: syz [ 613.764192][T21986] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 613.774836][ T5414] usb 1-1: Manufacturer: syz [ 613.790545][T21986] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 613.798901][ T5414] usb 1-1: SerialNumber: syz [ 613.851309][ T5414] usb 1-1: config 0 descriptor?? [ 613.898533][T21996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 613.918872][T21996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.016926][T22057] loop4: detected capacity change from 0 to 8 [ 614.086809][T22057] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 614.122344][ T23] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 614.158073][ T23] asix: probe of 4-1:0.34 failed with error -71 [ 614.226847][ T5414] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected [ 614.238293][ T23] usb 4-1: USB disconnect, device number 76 [ 614.275664][ T5414] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 614.318942][ T5414] usb 1-1: USB disconnect, device number 70 [ 614.387380][ T5414] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 614.428077][T22070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8127'. [ 614.457708][ T5414] omninet 1-1:0.86: device disconnected [ 614.642143][T22076] loop2: detected capacity change from 0 to 256 [ 614.879325][T22076] exfat: Deprecated parameter 'utf8' [ 615.108220][T22076] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 615.894764][T22136] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8154'. [ 615.905282][ T5414] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 616.482316][ T5414] usb 3-1: unable to get BOS descriptor or descriptor too short [ 616.624861][ T5414] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 616.647985][ T5414] usb 3-1: config 0 has no interface number 0 [ 616.687993][ T5414] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 616.757995][ T5414] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 616.837996][ T5414] usb 3-1: config 0 interface 86 has no altsetting 0 [ 616.937082][T22175] openvswitch: netlink: Actions may not be safe on all matching packets [ 617.115235][ T5414] usb 3-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 617.184264][T22186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8172'. [ 617.197977][ T5414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.240186][ T5414] usb 3-1: Product: syz [ 617.244644][ T5414] usb 3-1: Manufacturer: syz [ 617.322052][ T5414] usb 3-1: SerialNumber: syz [ 617.364552][ T5414] usb 3-1: config 0 descriptor?? [ 617.419804][T22122] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 617.437376][T22122] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 617.822554][ T5414] omninet 3-1:0.86: ZyXEL - omni.net usb converter detected [ 617.882839][ T5414] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 617.962654][ T5414] usb 3-1: USB disconnect, device number 65 [ 618.060881][ T5414] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 618.101368][ T5414] omninet 3-1:0.86: device disconnected [ 618.245340][T22223] netlink: 'syz.3.8185': attribute type 9 has an invalid length. [ 618.588399][T22231] xt_nat: multiple ranges no longer supported [ 618.642463][T22236] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8193'. [ 619.289935][ T5414] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 619.458381][T22262] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 619.538156][T22267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8208'. [ 619.583039][T22267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8208'. [ 619.777218][ T5414] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 619.814722][ T5414] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 619.865898][ T5414] usb 5-1: config 0 has no interface number 0 [ 619.916535][ T5414] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 619.999852][ T5414] usb 5-1: config 0 interface 200 has no altsetting 0 [ 620.223128][ T5414] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 620.257974][ T5414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.302335][ T5414] usb 5-1: Product: syz [ 620.357979][ T5414] usb 5-1: Manufacturer: syz [ 620.373212][ T5414] usb 5-1: SerialNumber: syz [ 620.414856][ T5414] usb 5-1: config 0 descriptor?? [ 620.881150][ T5414] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input35 [ 620.968082][ T5414] usb 5-1: USB disconnect, device number 76 [ 621.956550][T22363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8256'. [ 622.351156][ T5414] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 622.410543][T22377] netlink: 'syz.0.8263': attribute type 4 has an invalid length. [ 622.436206][T22377] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8263'. [ 622.678447][ T5414] usb 3-1: Using ep0 maxpacket: 8 [ 622.843443][T22391] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 622.913825][ T5414] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.984974][ T5414] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.158865][ T5414] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.198831][ T5414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 623.206927][ T5414] usb 3-1: SerialNumber: syz [ 623.351400][ T5414] cdc_acm 3-1:1.0: skipping garbage [ 623.367509][ T5414] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 623.437985][ T5414] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 623.487120][ T5414] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 623.577998][ T5414] usb 3-1: USB disconnect, device number 66 [ 623.810539][T22424] xt_hashlimit: max too large, truncated to 1048576 [ 623.838542][T22424] No such timeout policy "syz1" [ 623.983144][T22430] xt_connbytes: Forcing CT accounting to be enabled [ 624.133470][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.204507][T22437] netlink: 'syz.1.8286': attribute type 1 has an invalid length. [ 624.525874][T22453] IPv6: Can't replace route, no match found [ 624.616858][ T5414] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 625.063441][T22477] xt_l2tp: v2 doesn't support IP mode [ 625.108287][ T5414] usb 3-1: unable to get BOS descriptor or descriptor too short [ 625.267327][ T5414] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.321382][ T5414] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 625.383327][ T5414] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 625.648173][ T23] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 625.708009][ T5414] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 625.735439][ T5414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.740886][ T8638] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 625.759665][ T5414] usb 3-1: Product: syz [ 625.783488][ T5414] usb 3-1: Manufacturer: syz [ 625.802097][ T5414] usb 3-1: SerialNumber: syz [ 625.948312][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 626.018110][ T8638] usb 4-1: Using ep0 maxpacket: 16 [ 626.088358][ T23] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 626.115825][ T23] usb 2-1: config 0 has no interface number 0 [ 626.139640][ T23] usb 2-1: config 0 interface 132 has no altsetting 0 [ 626.188390][ T8638] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.258947][ T5414] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 626.298383][ T5414] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 626.311014][ T8638] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.339275][ T5414] usb 3-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 626.361881][ T8638] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 626.374464][ T5414] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 626.398909][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 626.417995][ T8638] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 626.427356][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.480185][ T23] usb 2-1: Product: syz [ 626.491570][ T23] usb 2-1: Manufacturer: syz [ 626.537426][ T23] usb 2-1: SerialNumber: syz [ 626.547507][ T5414] usb 3-1: unit 2 not found! [ 626.552386][ T5414] usb 3-1: unit 0 not found! [ 626.573300][ T23] usb 2-1: config 0 descriptor?? [ 626.669160][ T5414] usb 3-1: USB disconnect, device number 67 [ 626.748540][ T8638] usb 4-1: string descriptor 0 read error: -22 [ 626.769401][ T8642] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 626.792228][T22528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8320'. [ 626.798443][ T8638] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 626.839728][ T23] cdc_subset: probe of 2-1:0.132 failed with error -71 [ 626.866543][ T8638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.888339][ T23] usb 2-1: USB disconnect, device number 68 [ 627.026016][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8321'. [ 627.040982][ T8642] usb 1-1: Using ep0 maxpacket: 32 [ 627.158289][ T8642] usb 1-1: config 9 has an invalid interface number: 79 but max is 1 [ 627.207445][ T8642] usb 1-1: config 9 has no interface number 1 [ 627.239163][ T8642] usb 1-1: config 9 interface 0 has no altsetting 0 [ 627.420961][ T8642] usb 1-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice=bb.c9 [ 627.447981][ T8642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.467132][ T23] usb 4-1: USB disconnect, device number 77 [ 627.504962][ T8642] usb 1-1: Product: syz [ 627.533933][ T8642] usb 1-1: Manufacturer: syz [ 627.556841][T22548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.567990][ T8642] usb 1-1: SerialNumber: syz [ 627.901657][ T8642] hub 1-1:9.0: Invalid hub with more than one config or interface [ 627.921380][ T8642] hub: probe of 1-1:9.0 failed with error -22 [ 628.018610][ T8642] hub 1-1:9.79: Invalid hub with more than one config or interface [ 628.057333][ T8642] hub: probe of 1-1:9.79 failed with error -22 [ 628.086522][ T8642] usb 1-1: unknown number of interfaces: 2 [ 628.158067][ T8642] usb 1-1: USB disconnect, device number 71 [ 629.166203][ T3852] device veth0_vlan left promiscuous mode [ 629.219005][ T3852] device veth0_vlan entered promiscuous mode [ 629.266898][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.325392][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.336317][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8356'. [ 629.408994][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.547576][T22621] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 629.638133][ T23] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 629.751924][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 629.838180][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 629.861153][ T4459] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 629.919732][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 629.968265][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 629.989014][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 630.132059][ T23] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 630.139508][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 630.161510][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 630.161865][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.195944][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8357'. [ 630.298635][ T4459] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 630.328142][ T4459] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 630.341421][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 630.397654][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.921262][ T23] gspca_nw80x: reg_r err -71 [ 630.926171][ T23] nw80x: probe of 4-1:3.0 failed with error -71 [ 630.978329][ T4459] usb 1-1: string descriptor 0 read error: -71 [ 630.984933][ T4459] hub 1-1:32.0: bad descriptor, ignoring hub [ 631.003031][ T23] usb 4-1: USB disconnect, device number 78 [ 631.026069][ T4459] hub: probe of 1-1:32.0 failed with error -5 [ 631.119160][ T4459] usb 1-1: USB disconnect, device number 72 [ 631.406381][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.648723][ T23] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 631.809933][T22687] netlink: 'syz.3.8382': attribute type 21 has an invalid length. [ 631.848077][T22687] IPv6: NLM_F_CREATE should be specified when creating new route [ 631.896664][T22687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.904626][T22687] IPv6: NLM_F_CREATE should be set when creating new route [ 631.912081][T22687] IPv6: NLM_F_CREATE should be set when creating new route [ 631.919471][T22687] IPv6: NLM_F_CREATE should be set when creating new route [ 632.027972][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 632.182017][T22700] xt_TCPMSS: Only works on TCP SYN packets [ 632.210210][ T23] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 632.227968][ T23] usb 5-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 632.278082][ T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 632.347978][ T23] usb 5-1: config 1 has no interface number 1 [ 632.384777][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 632.431966][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 632.563665][ T8642] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 632.720361][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.749771][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.770047][T22721] __nla_validate_parse: 34 callbacks suppressed [ 632.770071][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8397'. [ 632.805989][ T23] usb 5-1: Product: syz [ 632.826252][ T23] usb 5-1: Manufacturer: syz [ 632.861511][ T23] usb 5-1: SerialNumber: syz [ 633.239836][ T23] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 633.240579][ T8642] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 633.263383][ T23] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 633.288098][ T8642] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 633.297963][ T23] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 633.392439][ T23] usb 5-1: USB disconnect, device number 77 [ 633.536406][ T8642] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 633.558625][ T8642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.567038][ T8642] usb 1-1: Product: syz [ 633.597985][ T8642] usb 1-1: Manufacturer: syz [ 633.617989][ T8642] usb 1-1: SerialNumber: syz [ 633.658030][ T8642] usb 1-1: config 0 descriptor?? [ 633.678600][T22706] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 633.685758][T22706] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 633.958106][ T8642] dm9601: probe of 1-1:0.0 failed with error -71 [ 634.025605][ T8642] usb 1-1: USB disconnect, device number 73 [ 634.123591][T22755] loop4: detected capacity change from 0 to 1024 [ 634.248348][T22755] hfsplus: wrong filesystem version [ 634.709720][T22777] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8423'. [ 636.177849][T22839] netlink: 'syz.3.8452': attribute type 1 has an invalid length. [ 636.299352][T22844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8456'. [ 636.493228][T22852] netlink: 'syz.4.8459': attribute type 3 has an invalid length. [ 637.008131][T22872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8468'. [ 637.038170][ T23] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 637.338051][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 637.349094][T22881] loop2: detected capacity change from 0 to 256 [ 637.503746][ T23] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 637.548401][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.621607][ T23] usb 1-1: config 0 descriptor?? [ 637.688021][ T23] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 637.727485][ T23] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 637.940351][ T4235] usb 1-1: USB disconnect, device number 74 [ 638.221519][T22867] loop1: detected capacity change from 0 to 32768 [ 639.281225][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8504'. [ 639.528325][ T4235] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 639.572881][T22954] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 639.905575][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 640.076980][ T4235] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 640.105726][ T4235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.163101][ T4235] usb 4-1: config 0 has no interface number 0 [ 640.188051][ T4235] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 640.267955][ T4235] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 640.315718][ T4235] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 640.361638][T22986] netlink: 'syz.2.8522': attribute type 32 has an invalid length. [ 640.378221][ T8642] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 640.382446][ T4235] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 640.421243][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8524'. [ 640.457979][ T4235] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 640.488167][T22989] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 640.717528][T22997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8527'. [ 640.728347][ T4235] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 640.756668][T22997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8527'. [ 640.765592][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.796735][ T4235] usb 4-1: Product: syz [ 640.810411][ T4235] usb 4-1: Manufacturer: syz [ 640.812290][T22997] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8527'. [ 640.835378][ T4235] usb 4-1: SerialNumber: syz [ 640.878916][ T4235] usb 4-1: config 0 descriptor?? [ 640.899518][T22944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 641.003660][ T8642] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 641.027173][ T8642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.078062][ T8642] usb 2-1: Product: syz [ 641.082394][ T8642] usb 2-1: Manufacturer: syz [ 641.127691][ T8642] usb 2-1: SerialNumber: syz [ 641.143774][T22944] udc-core: couldn't find an available UDC or it's busy [ 641.168254][T22944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.177578][ T8642] usb 2-1: config 0 descriptor?? [ 641.269029][ T4235] usb 4-1: NFC: intf ffff88802a944000 id ffffffff8cb63280 [ 641.379260][ T4235] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 641.500666][ T4235] usb 4-1: USB disconnect, device number 79 [ 641.501057][ T8642] usb 2-1: USB disconnect, device number 69 [ 641.509665][ T4235] usb 4-1: NFC: intf ffff88802a944000 [ 641.549407][T23027] usb usb8: usbfs: process 23027 (syz.2.8540) did not claim interface 0 before use [ 642.403475][T23059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 642.707149][T23075] loop1: detected capacity change from 0 to 1024 [ 642.810112][T23075] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 642.872767][T23075] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 642.957608][T23075] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.191616][T23075] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsdgroups,dioread_nolock,jqfmt=vfsv0,sysvgroups,errors=continue,,errors=continue. Quota mode: writeback. [ 643.268025][T23102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8569'. [ 644.038722][T23138] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.8582'. [ 644.904033][T23179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8599'. [ 645.530953][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8607'. [ 645.918765][T23148] loop2: detected capacity change from 0 to 32768 [ 646.294925][T23160] loop4: detected capacity change from 0 to 32768 [ 646.435705][T23227] x_tables: duplicate entry at hook 3 [ 646.521924][ T154] BUG: MAX_LOCK_DEPTH too low! [ 646.527197][ T154] turning off the locking correctness validator. [ 646.533978][ T154] depth: 48 max: 48! [ 646.538070][ T154] 48 locks held by kworker/u4:2/154: [ 646.543409][ T154] #0: ffff8880629a1138 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 646.554536][ T154] #1: ffffc90001f07d00 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 646.567721][ T154] #2: ffff8880608db9b8 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 646.579369][ T154] #3: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 646.589259][ T154] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.598812][ T154] #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.608255][ T154] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.617967][ T154] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.627824][ T154] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.637617][ T154] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.647762][ T154] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.657398][ T154] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.666844][ T154] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.678353][ T154] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.688372][ T154] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.698629][ T154] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.708808][ T154] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.718735][ T154] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.729420][ T154] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.739212][ T154] #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.749863][ T154] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.759900][ T154] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.771562][ T154] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.781195][ T154] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.791208][ T154] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.801193][ T154] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.810795][ T154] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.820679][ T154] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.830123][ T154] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.839829][ T154] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.849857][ T154] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.860230][ T154] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.870234][ T154] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.880392][ T154] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.889946][ T154] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.899478][ T154] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.908928][ T154] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.918395][ T154] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.927931][ T154] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.937665][ T154] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.947538][ T154] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.957195][ T154] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.966736][ T154] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.976376][ T154] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.987683][ T154] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 646.998344][ T154] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 647.007895][ T154] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 647.017609][ T154] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 647.027128][ T154] INFO: lockdep is turned off. [ 647.031950][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 647.039836][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.050682][ T154] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 647.057754][ T154] Call Trace: [ 647.061425][ T154] [ 647.064547][ T154] dump_stack_lvl+0x188/0x250 [ 647.070029][ T154] ? show_regs_print_info+0x20/0x20 [ 647.075746][ T154] ? load_image+0x410/0x410 [ 647.081888][ T154] __lock_acquire+0x1247/0x7b50 [ 647.087738][ T154] ? rpl_output+0x31f/0x730 [ 647.092708][ T154] ? lwtunnel_output+0x27e/0x440 [ 647.092741][ T154] ? kfree+0xef/0x2a0 [ 647.092840][ T154] ? verify_lock_unused+0x140/0x140 [ 647.092862][ T154] ? stack_trace_save+0xa6/0xf0 [ 647.092881][ T154] ? stack_trace_snprint+0xe0/0xe0 [ 647.092900][ T154] ? stack_trace_save+0xf0/0xf0 [ 647.092918][ T154] ? mark_lock+0x94/0x320 [ 647.092936][ T154] ? __lock_acquire+0x1305/0x7b50 [ 647.092956][ T154] ? rpl_output+0x178/0x730 [ 647.092974][ T154] lock_acquire+0x19e/0x400 [ 647.092993][ T154] ? rcu_lock_acquire+0x9/0x30 [ 647.093014][ T154] ? rpl_output+0x31f/0x730 [ 647.093032][ T154] ? lwtunnel_output+0x27e/0x440 [ 647.093051][ T154] ? rpl_output+0x31f/0x730 [ 647.093068][ T154] ? lwtunnel_output+0x27e/0x440 [ 647.093088][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.093110][ T154] ? verify_lock_unused+0x140/0x140 [ 647.093131][ T154] ? mark_lock+0x94/0x320 [ 647.093148][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 647.093169][ T154] ? rpl_output+0x31f/0x730 [ 647.093186][ T154] ? lwtunnel_output+0x27e/0x440 [ 647.093206][ T154] ? rpl_output+0x31f/0x730 [ 647.093225][ T154] rcu_lock_acquire+0x2a/0x30 [ 647.093246][ T154] ? rcu_lock_acquire+0x9/0x30 [ 647.093265][ T154] ip6_dst_check+0xe2/0x7a0 [ 647.093294][ T154] ? skb_header_pointer+0x120/0x120 [ 647.093317][ T154] dst_cache_per_cpu_get+0x1a3/0x310 [ 647.093342][ T154] rpl_output+0x165/0x730 [ 647.093361][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093379][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093396][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.093432][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093453][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093472][ T154] lwtunnel_output+0x27e/0x440 [ 647.093495][ T154] rpl_output+0x31f/0x730 [ 647.093515][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093533][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093551][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.093580][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093600][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093618][ T154] lwtunnel_output+0x27e/0x440 [ 647.093640][ T154] rpl_output+0x31f/0x730 [ 647.093659][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093677][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093695][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.093718][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093738][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093756][ T154] lwtunnel_output+0x27e/0x440 [ 647.093778][ T154] rpl_output+0x31f/0x730 [ 647.093797][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093815][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093833][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.093855][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093875][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093893][ T154] lwtunnel_output+0x27e/0x440 [ 647.093914][ T154] rpl_output+0x31f/0x730 [ 647.093935][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.093952][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.093970][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.093992][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094012][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094029][ T154] lwtunnel_output+0x27e/0x440 [ 647.094051][ T154] rpl_output+0x31f/0x730 [ 647.094071][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094088][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094106][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094128][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094148][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094166][ T154] lwtunnel_output+0x27e/0x440 [ 647.094187][ T154] rpl_output+0x31f/0x730 [ 647.094206][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094224][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094242][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094264][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094294][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094312][ T154] lwtunnel_output+0x27e/0x440 [ 647.094334][ T154] rpl_output+0x31f/0x730 [ 647.094354][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094370][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094386][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094408][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094428][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094446][ T154] lwtunnel_output+0x27e/0x440 [ 647.094468][ T154] rpl_output+0x31f/0x730 [ 647.094489][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094507][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094524][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094546][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094567][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094585][ T154] lwtunnel_output+0x27e/0x440 [ 647.094606][ T154] rpl_output+0x31f/0x730 [ 647.094627][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094645][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094663][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094685][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094706][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094724][ T154] lwtunnel_output+0x27e/0x440 [ 647.094746][ T154] rpl_output+0x31f/0x730 [ 647.094765][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094783][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094801][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094824][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094844][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094861][ T154] lwtunnel_output+0x27e/0x440 [ 647.094883][ T154] rpl_output+0x31f/0x730 [ 647.094903][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094921][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094938][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.094961][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.094982][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.094998][ T154] lwtunnel_output+0x27e/0x440 [ 647.095019][ T154] rpl_output+0x31f/0x730 [ 647.095041][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095058][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095078][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095099][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095120][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095138][ T154] lwtunnel_output+0x27e/0x440 [ 647.095161][ T154] rpl_output+0x31f/0x730 [ 647.095182][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095201][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095219][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095242][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095263][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095290][ T154] lwtunnel_output+0x27e/0x440 [ 647.095312][ T154] rpl_output+0x31f/0x730 [ 647.095332][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095350][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095368][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095391][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095413][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095430][ T154] lwtunnel_output+0x27e/0x440 [ 647.095452][ T154] rpl_output+0x31f/0x730 [ 647.095473][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095491][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095509][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095531][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095550][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095567][ T154] lwtunnel_output+0x27e/0x440 [ 647.095588][ T154] rpl_output+0x31f/0x730 [ 647.095609][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095627][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095646][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095668][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095688][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095705][ T154] lwtunnel_output+0x27e/0x440 [ 647.095726][ T154] rpl_output+0x31f/0x730 [ 647.095745][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095762][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095780][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095803][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095822][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095839][ T154] lwtunnel_output+0x27e/0x440 [ 647.095861][ T154] rpl_output+0x31f/0x730 [ 647.095882][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095900][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095917][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.095940][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.095962][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.095980][ T154] lwtunnel_output+0x27e/0x440 [ 647.096010][ T154] rpl_output+0x31f/0x730 [ 647.096031][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096049][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096068][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.096092][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096113][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096131][ T154] lwtunnel_output+0x27e/0x440 [ 647.096154][ T154] rpl_output+0x31f/0x730 [ 647.096175][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096194][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096213][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.096236][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096257][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096295][ T154] lwtunnel_output+0x27e/0x440 [ 647.096318][ T154] rpl_output+0x31f/0x730 [ 647.096339][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096357][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096376][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.096400][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096421][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096439][ T154] lwtunnel_output+0x27e/0x440 [ 647.096471][ T154] rpl_output+0x31f/0x730 [ 647.096491][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096510][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096529][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.096552][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096574][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096592][ T154] lwtunnel_output+0x27e/0x440 [ 647.096613][ T154] rpl_output+0x31f/0x730 [ 647.096633][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096649][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096667][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.096687][ T154] ? rpl_do_srh+0x9c1/0xe50 Stopping sshd: [ 647.096708][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.096725][ T154] lwtunnel_output+0x27e/0x440 [ 647.096747][ T154] rpl_output+0x31f/0x730 [ 647.096768][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.096885][ T154] ? rpl_destroy_state+0x20/0x20 stopped /usr/sbin/sshd (pid 3943[ 647.096918][ T154] ? read_lock_is_recursive+0x10/0x10 ) OK [ 647.097084][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097108][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097138][ T154] lwtunnel_output+0x27e/0x440 [ 647.097163][ T154] rpl_output+0x31f/0x730 [ 647.097184][ T154] ? rpl_do_srh+0x9c1/0xe50 Stopping crond: [ 647.097207][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097225][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.097248][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097269][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097287][ T154] lwtunnel_output+0x27e/0x440 stopped /usr/sbin/crond (pid 3926) OK [ 647.097309][ T154] rpl_output+0x31f/0x730 [ 647.097330][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097347][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097366][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.097388][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097407][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097425][ T154] lwtunnel_output+0x27e/0x440 [ 647.097448][ T154] rpl_output+0x31f/0x730 [ 647.097468][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097485][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097621][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.097652][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097676][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097694][ T154] lwtunnel_output+0x27e/0x440 [ 647.097721][ T154] rpl_output+0x31f/0x730 [ 647.097743][ T154] ? rpl_do_srh+0x9c1/0xe50 Stopping dhcpcd... [ 647.097759][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097775][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.097797][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097815][ T154] ? rpl_destroy_state+0x20/0x20 stopped /sbin/dhcpcd (pid 3851) [ 647.097831][ T154] lwtunnel_output+0x27e/0x440 [ 647.097851][ T154] rpl_output+0x31f/0x730 [ 647.097871][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097889][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.097906][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.097926][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.097945][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098001][ T154] lwtunnel_output+0x27e/0x440 [ 647.098023][ T154] rpl_output+0x31f/0x730 [ 647.098044][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098062][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098080][ T154] ? read_lock_is_recursive+0x10/0x10 Stopping network: [ 647.098102][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098122][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098140][ T154] lwtunnel_output+0x27e/0x440 [ 647.098162][ T154] rpl_output+0x31f/0x730 [ 647.098182][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098200][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098218][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.098240][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098260][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098277][ T154] lwtunnel_output+0x27e/0x440 [ 647.098299][ T154] rpl_output+0x31f/0x730 [ 647.098319][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098337][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098355][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.098377][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098399][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098416][ T154] lwtunnel_output+0x27e/0x440 [ 647.098442][ T154] rpl_output+0x31f/0x730 [ 647.098520][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098559][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098579][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.098604][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098624][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098642][ T154] lwtunnel_output+0x27e/0x440 [ 647.098666][ T154] rpl_output+0x31f/0x730 [ 647.098692][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098709][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098728][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.098814][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098834][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098851][ T154] lwtunnel_output+0x27e/0x440 [ 647.098872][ T154] rpl_output+0x31f/0x730 [ 647.098891][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098907][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.098926][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.098946][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.098966][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099057][ T154] lwtunnel_output+0x27e/0x440 [ 647.099089][ T154] rpl_output+0x31f/0x730 [ 647.099110][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099137][ T154] ? rpl_destroy_state+0x20/0x20 OK [ 647.099161][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.099182][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099201][ T154] ? rpl_destroy_state+0x20/0x20 Stopping iptables: [ 647.099218][ T154] lwtunnel_output+0x27e/0x440 [ 647.099239][ T154] rpl_output+0x31f/0x730 [ 647.099260][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099277][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099312][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.099336][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099356][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099374][ T154] lwtunnel_output+0x27e/0x440 [ 647.099396][ T154] rpl_output+0x31f/0x730 OK [ 647.099417][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099434][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099452][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.099472][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099494][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099510][ T154] lwtunnel_output+0x27e/0x440 Stopping system message bus: [ 647.099532][ T154] rpl_output+0x31f/0x730 [ 647.099553][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099571][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099589][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.099612][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099633][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099651][ T154] lwtunnel_output+0x27e/0x440 [ 647.099675][ T154] rpl_output+0x31f/0x730 [ 647.099743][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099761][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099779][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.099802][ T154] ? rpl_do_srh+0x9c1/0xe50 [ 647.099824][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099840][ T154] lwtunnel_output+0x27e/0x440 [ 647.099861][ T154] rpl_output+0x31f/0x730 [ 647.099881][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.099897][ T154] ? pskb_expand_head+0x363/0x1100 [ 647.100016][ T154] ? read_lock_is_recursive+0x10/0x10 [ 647.100042][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.100060][ T154] lwtunnel_output+0x27e/0x440 [ 647.100082][ T154] rpl_output+0x31f/0x730 [ 647.100102][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.100118][ T154] ? __ip6_local_out+0x80b/0x850 [ 647.100163][ T154] ? __ip6_local_out+0x850/0x850 [ 647.100183][ T154] ? rpl_destroy_state+0x20/0x20 [ 647.100202][ T154] lwtunnel_output+0x27e/0x440 [ 647.100222][ T154] udp_tunnel6_xmit_skb+0x4b7/0x8b0 [ 647.100244][ T154] send6+0x5a0/0x8d0 [ 647.100271][ T154] ? send4+0xd70/0xd70 [ 647.100287][ T154] ? __local_bh_disable_ip+0x111/0x1a0 [ 647.100370][ T154] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 647.100392][ T154] wg_packet_handshake_send_worker+0x203/0x360 [ 647.100413][ T154] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 647.100437][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 647.100486][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 647.100508][ T154] process_one_work+0x867/0xff0 done [ 647.100533][ T154] ? worker_detach_from_pool+0x240/0x240 [ 647.100554][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 647.100586][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 647.100605][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 647.100626][ T154] ? wq_worker_running+0x97/0x170 [ 647.100645][ T154] worker_thread+0xad7/0x12a0 [ 647.100676][ T154] kthread+0x42e/0x520 [ 647.100705][ T154] ? rcu_lock_release+0x20/0x20 [ 647.100724][ T154] ? kthread_blkcg+0xd0/0xd0 [ 647.100743][ T154] ret_from_fork+0x1f/0x30 [ 647.100793][ T154] Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3541) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.53 closed by remote host.