last executing test programs: 3.057752401s ago: executing program 2 (id=11975): r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0) 2.938769054s ago: executing program 2 (id=11979): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 2.867043167s ago: executing program 2 (id=11983): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000730000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.681857011s ago: executing program 2 (id=11986): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x0, 0x30, 0x5, "29dc1ee0ad"}, 0x0, 0x0, 0x0, 0x0}) 1.854276952s ago: executing program 0 (id=12009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x9657, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000380)='GPL\x00', 0x1, 0xff4, &(0x7f0000002000)=""/4084}, 0x80) 1.728562055s ago: executing program 0 (id=12013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x17}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 1.496608011s ago: executing program 0 (id=12016): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 1.232201828s ago: executing program 3 (id=12024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20000894}, 0x40000) 1.202031919s ago: executing program 1 (id=12025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xcc}}, 0x0) 1.129384891s ago: executing program 3 (id=12027): syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file0\x00', 0x400007, &(0x7f0000000ec0)={[{@volume={'volume', 0x3d, 0x3f}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@uid_forget}, {@undelete}, {}, {@longad}, {@uid_forget}, {@utf8}]}, 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 1.051557213s ago: executing program 0 (id=12028): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000000000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 1.050893413s ago: executing program 1 (id=12029): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x7ffffffc, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 985.871115ms ago: executing program 0 (id=12030): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42302, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x800001c) 946.966276ms ago: executing program 1 (id=12032): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0xfffffffffffffffd) 843.744538ms ago: executing program 1 (id=12034): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 639.038044ms ago: executing program 1 (id=12036): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfe, 0xc24, &(0x7f0000001480)="$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") open(&(0x7f0000000040)='.\x02\x00', 0x84242, 0x1df2a23c5997fb6e) 638.960524ms ago: executing program 3 (id=12037): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 619.908444ms ago: executing program 4 (id=12038): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) 522.710176ms ago: executing program 3 (id=12039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x3, 0xf9, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x4, 0x2, 0x0, 0x0, "13f90700"}, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) 480.536657ms ago: executing program 4 (id=12040): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0x34) 459.659748ms ago: executing program 2 (id=12041): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x29, 0x5, 0x0, 0x0) 449.387458ms ago: executing program 0 (id=12042): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 448.500588ms ago: executing program 4 (id=12052): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdfc00ffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 427.985969ms ago: executing program 3 (id=12043): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) 292.519262ms ago: executing program 4 (id=12044): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 292.398232ms ago: executing program 2 (id=12045): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x804008, &(0x7f0000000a40)=ANY=[], 0x1, 0x37e, &(0x7f0000000c40)="$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") rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') 65.259628ms ago: executing program 1 (id=12046): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) 65.196648ms ago: executing program 4 (id=12047): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 42.904648ms ago: executing program 3 (id=12048): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 0s ago: executing program 4 (id=12049): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffffff, r0, &(0x7f00000005c0)={[&(0x7f0000000040)='/\x00']}, 0x0, 0x1000) kernel console output (not intermixed with test programs): a mode: none. [ 835.616999][ T7] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 835.659896][ T9479] usb 3-1: Limiting number of CPorts to U8_MAX [ 835.669964][ T9479] usb 3-1: Not enough endpoints found in device, aborting! [ 835.889445][ T7605] usb 3-1: USB disconnect, device number 44 [ 836.022608][T24784] loop1: detected capacity change from 0 to 8 [ 836.044924][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.058936][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 836.090434][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 836.114163][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 836.134239][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 836.150740][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 836.172471][ T7] usb 4-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 836.182689][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.232698][T24792] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9232'. [ 836.248261][T24738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 836.261071][T24738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 836.293970][ T7] io_ti 4-1:1.0: required endpoints missing [ 836.517936][T24805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9239'. [ 836.542109][ T7] usb 4-1: USB disconnect, device number 39 [ 836.726035][T24817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9246'. [ 836.754976][T24817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9246'. [ 836.900032][T24828] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 837.394243][T24854] loop3: detected capacity change from 0 to 1024 [ 837.497907][T24864] syz.2.9270[24864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 837.498051][T24864] syz.2.9270[24864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 837.953658][T24892] xt_addrtype: ipv6 does not support BROADCAST matching [ 838.159338][T24897] loop2: detected capacity change from 0 to 1024 [ 838.176978][T24900] netlink: 'syz.1.9286': attribute type 1 has an invalid length. [ 838.226112][T24900] netlink: 'syz.1.9286': attribute type 2 has an invalid length. [ 838.313949][T24897] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.9285: lblock 2 mapped to illegal pblock 2 (length 1) [ 838.414854][T24897] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 838.470112][T24897] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.9285: lblock 0 mapped to illegal pblock 48 (length 1) [ 838.505591][T24897] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 838.534384][T24897] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.9285: Failed to acquire dquot type 0 [ 838.618708][T24897] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 838.644676][T24897] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.9285: mark_inode_dirty error [ 838.732584][T24897] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 838.786135][T24897] EXT4-fs (loop2): 1 orphan inode deleted [ 838.796786][T24897] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 838.819829][ T9911] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 838.894252][ T9911] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 838.944019][ T9911] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 839.018771][T24897] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.9285: Invalid inode table block 1 in block_group 0 [ 839.063951][T24897] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 839.112769][T24897] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz.2.9285: mark_inode_dirty error [ 839.124017][T24938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.254196][T24953] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 839.315879][T24953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.368554][T24960] netlink: 'syz.0.9314': attribute type 2 has an invalid length. [ 839.384638][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9311'. [ 839.774417][T24982] nvme_fabrics: missing parameter 'traddr=%s' [ 840.019168][T25001] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9332'. [ 840.271492][T25014] tmpfs: Bad value for 'mpol' [ 840.782702][T25053] comedi comedi1: dt2815: I/O port conflict (0x7f,2) [ 841.476428][T25098] loop3: detected capacity change from 0 to 256 [ 841.549412][T25098] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 841.571548][T25098] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 841.679822][T25098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 841.804270][T25110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9385'. [ 842.114344][T25103] loop4: detected capacity change from 0 to 32768 [ 842.123518][T25127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9392'. [ 842.411477][T25143] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 842.540525][T25149] syz.2.9406 (25149): drop_caches: 0 [ 842.557727][T25151] cgroup: No subsys list or none specified [ 842.692763][T25161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9410'. [ 842.702307][ T7] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 842.738962][T25161] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9410'. [ 842.993419][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 843.143257][ T7] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 843.367793][ T7] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 843.393941][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.429323][ T7] usb 4-1: Product: syz [ 843.456937][ T7] usb 4-1: Manufacturer: syz [ 843.475128][ T7] usb 4-1: SerialNumber: syz [ 843.496827][ T7] r8152-cfgselector 4-1: config 0 descriptor?? [ 843.845063][T25210] loop4: detected capacity change from 0 to 1024 [ 844.019972][ T7] r8152-cfgselector 4-1: Unknown version 0x0000 [ 844.038404][ T7] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 844.363614][T25232] loop4: detected capacity change from 0 to 2048 [ 844.442798][T25232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.518716][T25242] [U] .h0FwZ,iqgҏV2sO [ 844.583855][T25244] CacheFiles: Empty tag specified [ 844.597333][T25242] [U] ` w*BBOLhU [ 844.602138][T25242] [U] w$n|#%o.z\̧mРw [ 844.683841][T25242] [U] R{ꫢ S [ 844.716745][T25241] [U] [ 844.796563][T25259] loop2: detected capacity change from 0 to 256 [ 844.904075][T25259] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 844.937216][T25259] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 844.978335][T25259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 845.068918][ T7269] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 845.144119][T25273] xt_cluster: node mask cannot exceed total number of nodes [ 845.151991][T25275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9466'. [ 845.388142][ T4234] Bluetooth: hci4: command 0x0405 tx timeout [ 845.527494][ T7269] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 845.554061][ T7269] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.570303][T25294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9473'. [ 845.778239][ T7269] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 845.794372][ T7269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.826458][ T7269] usb 2-1: Product: syz [ 845.830748][ T7269] usb 2-1: Manufacturer: syz [ 845.857331][ T7269] usb 2-1: SerialNumber: syz [ 845.912453][ T7595] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 846.232846][ T7595] usb 3-1: Using ep0 maxpacket: 16 [ 846.238420][ T7269] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 846.268984][T25321] xt_cluster: node mask cannot exceed total number of nodes [ 846.329283][ T7269] usb 2-1: USB disconnect, device number 36 [ 846.606677][T25339] SET target dimension over the limit! [ 846.628444][ T7595] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 846.639657][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.673990][T25344] nfs: Deprecated parameter 'nointr' [ 846.677458][ T7595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.720210][ T7595] usb 3-1: Product: syz [ 846.735552][ T7595] usb 3-1: Manufacturer: syz [ 846.740263][ T7595] usb 3-1: SerialNumber: syz [ 846.812879][ T7595] usb 3-1: config 0 descriptor?? [ 846.876690][ T7595] gspca_main: spca508-2.14.0 probing 041e:4018 [ 846.953750][T25359] loop1: detected capacity change from 0 to 1024 [ 847.052057][T25359] EXT4-fs (loop1): barriers disabled [ 847.098093][T25359] JBD2: no valid journal superblock found [ 847.113214][T25359] EXT4-fs (loop1): error loading journal [ 847.295096][ T7270] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 847.355941][ T7595] gspca_spca508: reg_read err -71 [ 847.382338][T25381] netlink: 'syz.1.9505': attribute type 1 has an invalid length. [ 847.391767][T25381] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9505'. [ 847.398415][ T7595] gspca_spca508: reg_read err -71 [ 847.430264][ T7595] gspca_spca508: reg_read err -71 [ 847.455945][ T7595] gspca_spca508: reg_read err -71 [ 847.473508][ T7595] gspca_spca508: reg write: error -71 [ 847.494330][ T7595] spca508: probe of 3-1:0.0 failed with error -71 [ 847.532666][ T7595] usb 3-1: USB disconnect, device number 45 [ 847.731355][ T7270] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 847.864612][T25405] SET target dimension over the limit! [ 847.943471][ T7270] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 847.979996][ T7270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.010382][ T7270] usb 5-1: Product: syz [ 848.015612][ T7270] usb 5-1: Manufacturer: syz [ 848.051432][ T7270] usb 5-1: SerialNumber: syz [ 848.164995][T25424] netlink: 'syz.2.9522': attribute type 1 has an invalid length. [ 848.424336][ T7270] usb 5-1: Cannot retrieve CPort count: -71 [ 848.430453][ T7270] usb 5-1: Cannot retrieve CPort count: -71 [ 848.464830][ T7270] es2_ap_driver: probe of 5-1:246.0 failed with error -71 [ 848.499215][ T7270] usb 5-1: USB disconnect, device number 55 [ 848.618185][T25452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9532'. [ 848.666041][T25452] openvswitch: netlink: Flow key attribute not present in set flow. [ 848.851977][ T7269] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 849.036622][T25474] loop4: detected capacity change from 0 to 256 [ 849.053207][T25475] loop0: detected capacity change from 0 to 256 [ 849.461438][ T7269] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 849.491540][ T7269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.542824][ T7269] usb 4-1: Product: syz [ 849.569721][ T7269] usb 4-1: Manufacturer: syz [ 849.574520][ T7269] usb 4-1: SerialNumber: syz [ 849.602290][T25505] loop0: detected capacity change from 0 to 1024 [ 849.623647][ T7269] usb 4-1: config 0 descriptor?? [ 849.671645][T25505] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 849.714241][T25505] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 849.771912][T25505] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: inode #5: comm syz.0.9554: unexpected bad inode w/o EXT4_IGET_BAD [ 849.817210][T25505] EXT4-fs (loop0): no journal found [ 849.837896][T25505] EXT4-fs (loop0): can't get journal size [ 849.913092][T25505] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback. [ 849.964008][ T7269] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 850.209892][ T7269] usb write operation failed. (-71) [ 850.244023][ T7269] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 850.327241][ T7269] usb write operation failed. (-71) [ 850.343694][ T7269] usb 4-1: USB disconnect, device number 41 [ 850.436907][T25552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.444440][T25552] IPv6: NLM_F_CREATE should be set when creating new route [ 850.451792][T25552] IPv6: NLM_F_CREATE should be set when creating new route [ 850.459092][T25552] IPv6: NLM_F_CREATE should be set when creating new route [ 850.768268][T25570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9580'. [ 851.103226][T25590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9589'. [ 851.143754][T25590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9589'. [ 851.466741][T25611] netlink: 620 bytes leftover after parsing attributes in process `syz.4.9598'. [ 851.555758][T25611] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.719975][T25627] loop3: detected capacity change from 0 to 256 [ 851.861700][T25642] netlink: 300 bytes leftover after parsing attributes in process `syz.0.9610'. [ 852.493409][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9633'. [ 852.529489][T25691] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9633'. [ 852.721886][ T9479] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 852.745286][T25700] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9637'. [ 852.929165][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9640'. [ 852.989195][ T9479] usb 4-1: Using ep0 maxpacket: 32 [ 853.005335][T25710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9642'. [ 853.050575][T25710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.128373][ T9479] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 853.149495][ T9479] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 853.191406][ T9479] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 853.235455][ T9479] usb 4-1: config 1 has no interface number 0 [ 853.241752][ T9479] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.265438][ T9479] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.294232][T25718] mmap: syz.4.9645 (25718): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 853.308761][ T9479] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 853.340555][ T9479] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 853.358873][ T9479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.467436][ T9479] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 853.681112][ T9479] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 853.690361][ T9479] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 853.727620][ T9479] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 853.934300][ T7803] usb 4-1: USB disconnect, device number 42 [ 854.273997][T25778] netlink: 'syz.1.9675': attribute type 2 has an invalid length. [ 854.502605][T25797] AppArmor: change_hat: Invalid input 'hj2wF' [ 854.757496][T25808] program syz.0.9690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.806901][T25808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 855.779532][T25871] loop2: detected capacity change from 0 to 512 [ 855.816620][T25874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 855.972103][T25871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 855.998198][T25871] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.9720: corrupted inode contents [ 856.062627][T25871] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.9720: mark_inode_dirty error [ 856.088782][T25871] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.9720: corrupted inode contents [ 856.110480][T25871] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.9720: mark_inode_dirty error [ 856.143006][T25871] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.9720: corrupted inode contents [ 856.175361][T25871] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 856.204691][T25871] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.9720: corrupted inode contents [ 856.298930][T25871] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.9720: mark_inode_dirty error [ 856.344310][T25871] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 856.393191][T25906] __nla_validate_parse: 1 callbacks suppressed [ 856.393209][T25906] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9736'. [ 856.411572][T25871] EXT4-fs (loop2): 1 truncate cleaned up [ 856.417413][T25871] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 856.445359][T25871] ext4 filesystem being mounted at /1895/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.670099][T25868] loop1: detected capacity change from 0 to 32768 [ 856.725397][T25924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9745'. [ 856.876002][T25868] XFS (loop1): Mounting V5 Filesystem [ 857.115914][T25868] XFS (loop1): Ending clean mount [ 857.240546][ T4187] XFS (loop1): Unmounting Filesystem [ 857.376332][T25966] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9761'. [ 857.566301][T25978] netlink: 'syz.2.9767': attribute type 1 has an invalid length. [ 857.701869][T25985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9771'. [ 857.910346][T26000] loop3: detected capacity change from 0 to 64 [ 858.013896][T26003] netlink: 'syz.2.9780': attribute type 6 has an invalid length. [ 858.224662][T26011] loop2: detected capacity change from 0 to 1764 [ 858.972096][T26065] netlink: 'syz.3.9809': attribute type 5 has an invalid length. [ 859.045462][T26065] device ip6erspan0 entered promiscuous mode [ 859.375453][ T26] audit: type=1400 audit(2000525690.815:50): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=26087 comm="syz.3.9820" [ 859.708234][T26116] xt_TCPMSS: Only works on TCP SYN packets [ 860.227039][T26146] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9842'. [ 860.259588][T26146] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9842'. [ 860.611521][ T7803] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 860.648931][T26175] loop3: detected capacity change from 0 to 512 [ 860.713559][T26175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 860.746827][T26181] netlink: 'syz.1.9858': attribute type 1 has an invalid length. [ 860.770696][T26175] EXT4-fs (loop3): 1 truncate cleaned up [ 860.778580][T26175] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 860.801342][T26175] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.9855: bg 0: block 312: padding at end of block bitmap is not set [ 861.007257][ T7803] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 861.037933][ T7803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.065565][ T7803] usb 3-1: config 0 descriptor?? [ 861.102196][T26197] loop4: detected capacity change from 0 to 512 [ 861.112583][T26193] loop1: detected capacity change from 0 to 2048 [ 861.126145][T26198] netlink: 25 bytes leftover after parsing attributes in process `syz.0.9860'. [ 861.197806][T26202] overlayfs: upper fs is r/o, try multi-lower layers mount [ 861.217408][T26197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 861.227872][T26193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.249035][T26197] System zones: 1-2, 4-12, 8-8 [ 861.283579][T26197] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.9866: iget: bad i_size value: 38620345925642 [ 861.319858][T26197] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.9866: couldn't read orphan inode 15 (err -117) [ 861.343580][T26197] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 861.413419][ T7803] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 861.425031][ T7803] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 861.477573][ T7803] [drm:udl_init] *ERROR* Selecting channel failed [ 861.614872][ T7803] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 861.665961][ T7803] [drm] Initialized udl on minor 2 [ 861.702350][ T7803] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 861.757853][T26226] netlink: 'syz.1.9879': attribute type 10 has an invalid length. [ 861.772856][ T7803] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 861.774360][T26226] bond0: (slave wlan1): Opening slave failed [ 861.794421][T26229] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 861.839776][ T7803] usb 3-1: USB disconnect, device number 46 [ 861.853321][T26232] overlayfs: upper fs is r/o, try multi-lower layers mount [ 861.962239][T16925] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 861.992616][T16925] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 862.055866][T16925] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 862.108267][ T7269] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 862.170423][T26251] netlink: 'syz.2.9891': attribute type 5 has an invalid length. [ 862.210145][T26251] device ip6erspan0 entered promiscuous mode [ 862.410700][ T7269] usb 4-1: Using ep0 maxpacket: 16 [ 862.489281][T26261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9895'. [ 862.514092][T26263] smb3: Bad value for 'uid' [ 862.535987][T26261] rdma_rxe: ignoring netdev event = 26 for veth0_vlan [ 862.568007][ T7269] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.590329][T26261] rdma_rxe: ignoring netdev event = 21 for veth0_vlan [ 862.600414][ T7269] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 862.609514][ T7269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.667101][T26267] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 862.802651][T26274] netlink: 'syz.1.9900': attribute type 46 has an invalid length. [ 862.856741][T26274] netlink: 'syz.1.9900': attribute type 28 has an invalid length. [ 862.863258][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.875097][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9900'. [ 862.978517][ T7269] usb 4-1: USB disconnect, device number 43 [ 863.002576][T26247] loop0: detected capacity change from 0 to 32768 [ 863.099179][T26247] [ 863.099179][T26247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 863.099179][T26247] [ 863.186575][T26247] ERROR: (device loop0): diWrite: ixpxd invalid [ 863.186575][T26247] [ 863.234382][T26247] ERROR: (device loop0): txCommit: [ 863.234382][T26247] [ 863.237558][T26291] xt_TCPMSS: Only works on TCP SYN packets [ 863.322330][T26289] device bond4 entered promiscuous mode [ 863.330942][T26289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.391650][ T4186] [ 863.391650][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 863.391650][ T4186] [ 863.428850][ T4186] [ 863.428850][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 863.428850][ T4186] [ 863.630442][T26305] netlink: 'syz.1.9917': attribute type 8 has an invalid length. [ 863.658541][T26305] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9917'. [ 863.992554][T26332] loop2: detected capacity change from 0 to 16 [ 864.026971][T26332] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 864.069677][T26332] cramfs: empty filesystem [ 864.118340][T16925] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 864.503106][T16925] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 864.512124][T16925] usb 4-1: config 1 has no interface number 0 [ 864.542933][T16925] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 864.599170][T16925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 864.642476][T16925] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 864.855991][T16925] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 864.865092][T16925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.875284][T26380] ax25_connect(): syz.4.9953 uses autobind, please contact jreuter@yaina.de [ 864.917244][T16925] usb 4-1: Product: syz [ 864.935873][T16925] usb 4-1: Manufacturer: syz [ 864.940542][T16925] usb 4-1: SerialNumber: syz [ 865.304302][T16925] usb 4-1: interface 3 not found [ 865.338853][T26412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9967'. [ 865.352579][T16925] usb 4-1: USB disconnect, device number 44 [ 865.585121][ T26] audit: type=1326 audit(2000525696.624:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26422 comm="syz.0.9975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebe1cd0d9 code=0x0 [ 865.608733][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.320469][ T7269] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 866.330430][T26479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10001'. [ 866.609147][ T7269] usb 3-1: Using ep0 maxpacket: 32 [ 866.790934][ T7269] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 866.799128][ T7269] usb 3-1: config 0 has no interface number 0 [ 866.850869][ T7269] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.882610][ T7269] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.927548][ T7269] usb 3-1: config 0 interface 12 has no altsetting 0 [ 867.088697][T26520] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 867.154709][ T7269] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 867.163875][ T7269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.207736][ T7269] usb 3-1: Product: syz [ 867.212009][ T7269] usb 3-1: Manufacturer: syz [ 867.216664][ T7269] usb 3-1: SerialNumber: syz [ 867.285662][ T7269] usb 3-1: config 0 descriptor?? [ 867.309259][T26535] xt_hashlimit: max too large, truncated to 1048576 [ 867.337529][ T7269] f81534 3-1:0.12: unsupported endpoint max packet size [ 867.577242][T26551] loop3: detected capacity change from 0 to 256 [ 867.657454][T26551] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 867.719421][T26559] loop4: detected capacity change from 0 to 16 [ 867.793295][T26559] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 867.796004][ T4234] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 867.919167][T26565] loop3: detected capacity change from 0 to 164 [ 867.925969][ T7269] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 867.983543][T26565] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 868.008731][T26567] loop4: detected capacity change from 0 to 1024 [ 868.028893][T26565] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 868.075176][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 868.216278][ T4234] usb 1-1: config 0 has no interfaces? [ 868.240300][T26575] loop3: detected capacity change from 0 to 8 [ 868.295148][T26575] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 868.343086][T26575] cramfs: Error -3 while decompressing! [ 868.349331][ T7269] usb 2-1: not running at top speed; connect to a high speed hub [ 868.368736][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 868.375779][T26581] delete_channel: no stack [ 868.387483][T26575] cramfs: ffffffff9641e068(18)->ffff88805cf97000(4096) [ 868.395075][ T4234] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 868.404179][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.423398][T26575] cramfs: Error -3 while decompressing! [ 868.443543][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 868.450959][T26575] cramfs: ffffffff9641e068(18)->ffff88805cf97000(4096) [ 868.458044][ T26] audit: type=1800 audit(2000525699.309:52): pid=26575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10050" name="file1" dev="loop3" ino=324 res=0 errno=0 [ 868.480267][ T7269] usb 2-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 868.489382][ T4234] usb 1-1: Product: syz [ 868.489405][ T4234] usb 1-1: Manufacturer: syz [ 868.498597][ T4234] usb 1-1: SerialNumber: syz [ 868.512481][ T4234] r8152-cfgselector 1-1: config 0 descriptor?? [ 868.517966][ T7269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.571846][ T4415] udevd[4415]: incorrect cramfs checksum on /dev/loop3 [ 868.619967][ T7269] hub 2-1:1.0: USB hub found [ 868.792512][ T4234] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 868.896898][ T7269] hub 2-1:1.0: config failed, can't read hub descriptor (err -22) [ 868.930757][ T154] usb 1-1: config 0 descriptor?? [ 868.983004][ T7269] usb 2-1: USB disconnect, device number 37 [ 869.014208][ T7595] usb 1-1: USB disconnect, device number 37 [ 869.016000][ T154] usb 1-1: can't set config #0, error -71 [ 869.114150][T26609] xt_socket: unknown flags 0x48 [ 869.241677][ T7270] usb 3-1: USB disconnect, device number 47 [ 869.731513][T26648] delete_channel: no stack [ 870.247161][T26670] loop2: detected capacity change from 0 to 8192 [ 870.334701][T26670] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 870.335160][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10108'. [ 870.634353][T26707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10117'. [ 870.801907][T26717] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 871.102511][T26737] loop2: detected capacity change from 0 to 8 [ 871.167403][T26741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10132'. [ 871.373483][T26751] xt_NFQUEUE: number of total queues is 0 [ 871.388178][T26753] delete_channel: no stack [ 871.751181][ T4234] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 872.023795][T26791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.136436][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 872.152026][T26799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10160'. [ 872.161793][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 872.192159][T26802] openvswitch: netlink: Missing key (keys=40, expected=100) [ 872.199670][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 872.244132][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.288255][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.326467][ T4234] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 872.407628][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.505677][T26757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 872.532445][T26757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 872.539643][T26757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 872.586856][ T4234] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 872.825330][ T4234] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 872.832298][ T4234] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 873.047269][ T7269] usb 3-1: USB disconnect, device number 48 [ 873.055370][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 873.070229][T26836] netlink: 'syz.0.10178': attribute type 1 has an invalid length. [ 873.085687][ T7269] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 873.113388][T26836] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10178'. [ 873.128824][ T7269] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 873.155326][ T7269] mos7720 3-1:1.0: device disconnected [ 873.162648][ T7595] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 873.320682][T26849] netlink: 'syz.4.10184': attribute type 4 has an invalid length. [ 873.455948][T26856] @0: renamed from virt_wifi0 [ 873.551405][T26861] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10190'. [ 873.579224][ T4234] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 873.611664][ T7595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 873.621387][ T7595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 873.645760][T26861] team0: Port device team_slave_0 removed [ 873.652030][T26861] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 873.857559][ T7595] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 873.870645][ T7595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.896042][ T7595] usb 2-1: Product: syz [ 873.919487][ T7595] usb 2-1: Manufacturer: syz [ 873.930290][ T7595] usb 2-1: SerialNumber: syz [ 873.946651][ T7595] usb 2-1: config 0 descriptor?? [ 873.974906][ T4234] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.990975][ T4234] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 874.009983][ T7595] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 874.162056][T26893] netlink: 'syz.2.10201': attribute type 1 has an invalid length. [ 874.188865][ T4234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.218765][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.235251][ T4234] usb 1-1: Product: syz [ 874.241617][ T4234] usb 1-1: Manufacturer: syz [ 874.251807][ T4234] usb 1-1: SerialNumber: syz [ 874.307313][ T4234] usb 1-1: bad CDC descriptors [ 874.507617][ T7595] usb 2-1: USB disconnect, device number 38 [ 874.540831][ T4234] usb 1-1: USB disconnect, device number 38 [ 874.797619][T26921] netlink: 160 bytes leftover after parsing attributes in process `syz.3.10215'. [ 874.851560][T26921] netlink: 160 bytes leftover after parsing attributes in process `syz.3.10215'. [ 874.861427][T26921] netlink: 160 bytes leftover after parsing attributes in process `syz.3.10215'. [ 875.088482][T26931] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 875.327857][T26947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.551684][T26956] loop2: detected capacity change from 0 to 512 [ 875.583950][T26958] xt_TCPMSS: Only works on TCP SYN packets [ 875.612636][T16925] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 875.682210][T26956] EXT4-fs (loop2): Ignoring removed bh option [ 875.731652][T26956] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 875.797940][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10237'. [ 875.857022][T26956] EXT4-fs (loop2): 1 truncate cleaned up [ 875.888446][T26956] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 875.992862][T26956] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 876.010677][T16925] usb 2-1: config 2 has an invalid interface number: 3 but max is 0 [ 876.030908][T16925] usb 2-1: config 2 has no interface number 0 [ 876.048020][T16925] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 876.095632][T16925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.172193][T26986] netlink: 'syz.0.10245': attribute type 8 has an invalid length. [ 876.188999][T16925] ums-realtek 2-1:2.3: USB Mass Storage device detected [ 876.217956][T26986] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10245'. [ 876.462591][ T4234] usb 2-1: USB disconnect, device number 39 [ 876.745476][T27012] xt_hashlimit: size too large, truncated to 1048576 [ 876.752242][T27012] xt_hashlimit: max too large, truncated to 1048576 [ 876.933018][ T7605] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 877.169039][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10268'. [ 877.353394][ T7605] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.396210][ T7605] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 877.423880][ T7605] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 877.641776][ T7605] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 877.650896][ T7605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.670009][ T7605] usb 5-1: Product: syz [ 877.689105][ T7605] usb 5-1: Manufacturer: syz [ 877.704682][ T7605] usb 5-1: SerialNumber: syz [ 877.823446][ T4234] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 878.033954][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10286'. [ 878.058816][ T7605] usb 5-1: 0:2 : does not exist [ 878.112317][ T7270] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 878.130531][ T7605] usb 5-1: USB disconnect, device number 56 [ 878.219417][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.236978][ T4234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.326127][ T4234] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 878.335292][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 878.343903][ T4234] usb 3-1: SerialNumber: syz [ 878.380691][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.397090][ T4234] usb 3-1: 0:2 : does not exist [ 878.475660][ T7803] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 878.539768][ T7270] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 878.548006][ T7270] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.587977][ T7270] usb 4-1: config 0 has no interface number 0 [ 878.603446][ T7270] usb 4-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.817936][ T7270] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 878.838220][ T7270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.894487][ T7270] usb 4-1: Product: syz [ 878.903398][ T7270] usb 4-1: Manufacturer: syz [ 878.908060][ T7270] usb 4-1: SerialNumber: syz [ 878.927649][ T7605] usb 3-1: USB disconnect, device number 49 [ 878.935708][ T7270] usb 4-1: config 0 descriptor?? [ 878.946219][ T7803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.979356][ T7270] asix: probe of 4-1:0.251 failed with error -22 [ 879.000248][ T7803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 879.206558][ T7270] usb 4-1: USB disconnect, device number 45 [ 879.256489][ T7803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.265641][ T7803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.292446][ T7803] usb 2-1: Product: syz [ 879.299609][ T7803] usb 2-1: Manufacturer: syz [ 879.304255][ T7803] usb 2-1: SerialNumber: syz [ 879.374463][ T7803] usb 2-1: bad CDC descriptors [ 879.622637][ T4234] usb 2-1: USB disconnect, device number 40 [ 879.660271][T27130] netlink: 'syz.4.10315': attribute type 1 has an invalid length. [ 880.110512][ T26] audit: type=1326 audit(2000525710.206:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27156 comm="syz.4.10328" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f514c4610d9 code=0x0 [ 880.164889][T27160] netlink: 'syz.0.10331': attribute type 1 has an invalid length. [ 880.449920][T27167] loop2: detected capacity change from 0 to 4096 [ 880.530518][T27167] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 881.049668][T27220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10360'. [ 881.091757][T27223] netlink: 'syz.1.10361': attribute type 8 has an invalid length. [ 881.530507][ T7803] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 881.666145][ T26] audit: type=1326 audit(2000525711.666:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27269 comm="syz.4.10385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c4610d9 code=0x7ffc0000 [ 881.779553][ T26] audit: type=1326 audit(2000525711.666:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27269 comm="syz.4.10385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c4610d9 code=0x7ffc0000 [ 881.783331][T27275] netlink: 'syz.1.10388': attribute type 1 has an invalid length. [ 881.803771][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.858122][ T26] audit: type=1326 audit(2000525711.684:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27269 comm="syz.4.10385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f514c4610d9 code=0x7ffc0000 [ 881.976818][ T26] audit: type=1326 audit(2000525711.684:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27269 comm="syz.4.10385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c4610d9 code=0x7ffc0000 [ 882.025023][ T7803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.035208][ T7803] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 882.063731][T27282] loop4: detected capacity change from 0 to 4096 [ 882.075892][T27287] loop1: detected capacity change from 0 to 256 [ 882.079856][ T7803] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 882.082728][ T26] audit: type=1326 audit(2000525711.684:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27269 comm="syz.4.10385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514c4610d9 code=0x7ffc0000 [ 882.188887][T27282] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 882.232436][T27287] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 882.324623][ T7803] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.344616][ T7803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.352792][ T7803] usb 4-1: Product: syz [ 882.394185][ T7803] usb 4-1: Manufacturer: syz [ 882.419649][ T7803] usb 4-1: SerialNumber: syz [ 882.601183][T27316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10408'. [ 882.661361][T27316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10408'. [ 882.721085][T27316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10408'. [ 882.794803][T16925] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 882.802729][ T7803] usb 4-1: 0:2 : does not exist [ 882.892776][ T7803] usb 4-1: USB disconnect, device number 46 [ 882.900892][T27322] loop2: detected capacity change from 0 to 1024 [ 883.017858][T27326] netlink: 'syz.4.10413': attribute type 2 has an invalid length. [ 883.158311][T16925] usb 1-1: not running at top speed; connect to a high speed hub [ 883.182147][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.276120][T16925] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 883.328653][T16925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.393635][T27342] netlink: 'syz.1.10422': attribute type 4 has an invalid length. [ 883.421904][T16925] hub 1-1:1.0: USB hub found [ 883.692567][T16925] hub 1-1:1.0: config failed, can't read hub descriptor (err -22) [ 883.734350][ T26] audit: type=1326 audit(2000525713.592:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.3.10431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e028660d9 code=0x7ffc0000 [ 883.770328][T16925] usb 1-1: USB disconnect, device number 39 [ 883.820909][ T26] audit: type=1326 audit(2000525713.592:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.3.10431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e028660d9 code=0x7ffc0000 [ 883.913885][T27362] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 883.928011][ T26] audit: type=1326 audit(2000525713.630:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.3.10431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e028660d9 code=0x7ffc0000 [ 884.088127][ T26] audit: type=1326 audit(2000525713.630:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.3.10431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e028660d9 code=0x7ffc0000 [ 884.094840][T27375] netlink: 'syz.3.10436': attribute type 4 has an invalid length. [ 884.240834][T27383] loop1: detected capacity change from 0 to 8 [ 884.302977][T27383] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 884.321077][ T4415] udevd[4415]: incorrect cramfs checksum on /dev/loop1 [ 884.340949][T27383] cramfs: Error -3 while decompressing! [ 884.377027][T27383] cramfs: ffffffff96422068(18)->ffff88805af31000(4096) [ 884.384290][T27383] cramfs: Error -3 while decompressing! [ 884.451658][T27383] cramfs: ffffffff96422068(18)->ffff88805af31000(4096) [ 884.693085][T27400] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 884.943570][ T7] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 884.951328][ T7270] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 884.962227][T27425] netlink: 'syz.4.10463': attribute type 1 has an invalid length. [ 884.982562][T27425] netlink: 'syz.4.10463': attribute type 3 has an invalid length. [ 884.992757][T27425] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10463'. [ 885.013880][T27425] NCSI netlink: No device for ifindex 55159 [ 885.214134][T27441] netlink: 'syz.1.10470': attribute type 2 has an invalid length. [ 885.349773][ T7] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 885.359155][ T7270] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.369466][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.377711][ T7270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 885.387964][ T7270] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 885.403704][ T7270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.415175][ T7269] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 885.423826][ T7270] usb 1-1: config 0 descriptor?? [ 885.449214][ T7] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 885.459060][ T7605] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 885.595777][T16925] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 885.713321][ T7605] usb 5-1: Using ep0 maxpacket: 16 [ 885.755978][ T7269] usb 4-1: not running at top speed; connect to a high speed hub [ 885.841533][ T7605] usb 5-1: config 0 has no interfaces? [ 885.937862][ T7270] Bluetooth: Can't get version to change to load ram patch err [ 885.945480][ T7270] Bluetooth: Loading patch file failed [ 885.957066][ T7270] ath3k: probe of 1-1:0.0 failed with error -71 [ 885.969489][ T7270] usb 1-1: USB disconnect, device number 40 [ 886.023503][ T7605] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 886.032750][ T7269] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 886.044670][T16925] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 886.053347][T16925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.054411][ T7605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.066027][T16925] usb 2-1: config 0 has no interface number 0 [ 886.072198][ T7269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.079426][T16925] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 886.096808][ T7269] usb 4-1: Product: syz [ 886.103007][ T7269] usb 4-1: Manufacturer: syz [ 886.107720][ T7605] usb 5-1: Product: syz [ 886.118484][ T7605] usb 5-1: Manufacturer: syz [ 886.123230][ T7605] usb 5-1: SerialNumber: syz [ 886.128989][ T7269] usb 4-1: SerialNumber: syz [ 886.139827][ T7605] r8152-cfgselector 5-1: config 0 descriptor?? [ 886.174557][ T7269] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 886.192482][ T7269] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 886.203580][ T7269] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 886.218758][ T7269] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 886.231170][ T7269] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 886.301305][T16925] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 886.326890][T16925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.335668][T16925] usb 2-1: Product: syz [ 886.339910][T16925] usb 2-1: Manufacturer: syz [ 886.344888][T16925] usb 2-1: SerialNumber: syz [ 886.351461][T16925] usb 2-1: config 0 descriptor?? [ 886.399573][T16925] asix: probe of 2-1:0.251 failed with error -22 [ 886.419121][ T7605] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 886.434747][ T608] usb 5-1: config 0 descriptor?? [ 886.606974][T16925] usb 4-1: USB disconnect, device number 47 [ 886.633439][T16925] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 886.665587][ T7605] usb 5-1: USB disconnect, device number 57 [ 886.677068][ T608] usb 5-1: can't set config #0, error -71 [ 886.689490][T16925] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 886.734611][T16925] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 886.747620][T27454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10475'. [ 886.765736][T27454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10475'. [ 886.777862][T27454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10475'. [ 886.791855][T16925] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 886.806432][T16925] keyspan 4-1:1.0: device disconnected [ 886.827843][ T9479] usb 2-1: USB disconnect, device number 41 [ 886.834356][ T4234] usb 3-1: USB disconnect, device number 50 [ 886.858533][ T4234] idmouse 3-1:1.0: disconnected [ 886.930624][T27458] loop0: detected capacity change from 0 to 1024 [ 887.007347][T27458] EXT4-fs (loop0): inline encryption not supported [ 887.035955][T27458] EXT4-fs (loop0): orphan cleanup on readonly fs [ 887.048719][T27458] EXT4-fs (loop0): 1 truncate cleaned up [ 887.055079][T27458] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 887.179457][T27461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10479'. [ 887.340190][T27468] xt_NFQUEUE: number of total queues is 0 [ 887.399701][T27473] netlink: 'syz.0.10483': attribute type 1 has an invalid length. [ 887.581120][T27475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.657453][T27488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10489'. [ 887.707622][T27493] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 887.771128][T27488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10489'. [ 888.216420][T27530] tmpfs: Bad value for 'mpol' [ 888.357519][T27538] loop1: detected capacity change from 0 to 512 [ 888.685650][T27561] tmpfs: Bad value for 'mpol' [ 888.860426][T27579] loop2: detected capacity change from 0 to 512 [ 889.126487][T27596] sock: sock_timestamping_bind_phc: sock not bind to device [ 889.170655][T27602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10546'. [ 889.204754][T27602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10546'. [ 889.384046][T27615] loop1: detected capacity change from 0 to 1764 [ 889.538709][T27615] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 889.807193][T27638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.882066][T27653] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 889.932033][T27657] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10574'. [ 889.953293][T27657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10574'. [ 889.989865][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10574'. [ 890.023078][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10574'. [ 890.064292][ T7270] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 890.125298][T27667] netlink: 'syz.0.10579': attribute type 3 has an invalid length. [ 890.158157][T27667] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10579'. [ 890.230969][T27673] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 27673 comm: syz.2.10582) [ 890.312818][T27679] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 890.497140][T27689] 8021q: adding VLAN 0 to HW filter on device bond5 [ 890.641609][ T7270] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 890.650728][ T7270] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 890.676063][ T7270] usb 4-1: Product: syz [ 890.680300][ T7270] usb 4-1: Manufacturer: syz [ 890.692035][T27703] loop4: detected capacity change from 0 to 128 [ 890.699016][ T7270] usb 4-1: SerialNumber: syz [ 890.712657][T27704] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10592'. [ 890.738790][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10592'. [ 890.751133][ T7270] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 890.763477][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10592'. [ 890.772690][T27703] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 890.793654][T27703] vxfs: unsupported VxFS version (-1232326277) [ 890.880761][T27708] loop0: detected capacity change from 0 to 2048 [ 891.073864][T27717] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.115480][T27708] NILFS (loop0): the device already has a read/write mount. [ 891.221147][ T7270] vp7045: USB control message 'in' went wrong. [ 891.236814][ T7270] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 891.280207][ T7270] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 891.336464][ T7605] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 891.346408][ T7270] usb 4-1: USB disconnect, device number 48 [ 891.580007][T27691] loop1: detected capacity change from 0 to 40427 [ 891.721420][ T7605] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 891.739317][ T7605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.772488][T27691] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 891.832905][ T7605] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 892.357908][ T7605] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 892.443192][ T7269] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 892.572877][T27768] loop3: detected capacity change from 0 to 512 [ 892.587337][ T9479] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 892.626069][T27768] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 892.706015][T27768] __quota_error: 2 callbacks suppressed [ 892.706029][T27768] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 892.716586][ T7605] usb 3-1: not running at top speed; connect to a high speed hub [ 892.733064][T27768] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 892.750629][T27768] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.10628: Failed to acquire dquot type 1 [ 892.766871][T27768] EXT4-fs (loop3): 1 truncate cleaned up [ 892.774404][T27768] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 892.804593][T27768] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 892.813787][ T7605] usb 3-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 892.831081][T27768] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 892.845633][T27768] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.10628: Failed to acquire dquot type 1 [ 892.847604][ T7605] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 892.881806][ T7605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.897641][ T9479] usb 2-1: Using ep0 maxpacket: 16 [ 892.943619][ T7605] usb 3-1: Found UVC 1.00 device (046d:0825) [ 892.951630][ T7605] usb 3-1: No streaming interface found for terminal 2. [ 893.015289][ T7269] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 893.027659][ T7269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.039685][ T7269] usb 1-1: Product: syz [ 893.047944][ T7269] usb 1-1: Manufacturer: syz [ 893.053363][ T7269] usb 1-1: SerialNumber: syz [ 893.101853][ T7269] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 893.112339][ T7269] scsi host1: usb-storage 1-1:1.0 [ 893.144532][ T7595] usb 5-1: USB disconnect, device number 58 [ 893.152087][ T7595] idmouse 5-1:1.0: disconnected [ 893.179769][ T7605] usb 3-1: USB disconnect, device number 51 [ 893.282223][ T9479] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 893.291680][ T9479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.301467][ T9479] usb 2-1: Product: syz [ 893.306422][ T9479] usb 2-1: Manufacturer: syz [ 893.312369][ T9479] usb 2-1: SerialNumber: syz [ 893.331792][ T9479] usb 2-1: config 0 descriptor?? [ 893.391378][ T9479] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 893.626486][ T9479] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 893.637221][ T9479] visor: probe of 2-1:0.0 failed with error -5 [ 893.660283][ T7269] ums_eneub6250: probe of 1-1:1.0 failed with error 3 [ 893.688538][ T7269] usb 1-1: USB disconnect, device number 41 [ 893.862451][ T7605] usb 2-1: USB disconnect, device number 42 [ 894.623547][T27831] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.912266][T27851] __nla_validate_parse: 2 callbacks suppressed [ 894.912286][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10665'. [ 895.086406][T27866] xt_TPROXY: Can be used only with -p tcp or -p udp [ 895.131742][ T7605] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 895.246505][T27864] loop2: detected capacity change from 0 to 4096 [ 895.271057][ T7269] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 895.346607][T27864] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 895.463341][T27864] ntfs: volume version 3.1. [ 895.471514][ T7605] usb 4-1: Using ep0 maxpacket: 16 [ 895.545612][T27880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.554686][T27880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.589236][T27880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.610924][T27880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.629702][ T7269] usb 1-1: not running at top speed; connect to a high speed hub [ 895.724725][T27884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10682'. [ 895.780336][ T7605] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 895.799256][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.829617][ T7605] usb 4-1: Product: syz [ 895.854381][ T7605] usb 4-1: Manufacturer: syz [ 895.868655][ T7605] usb 4-1: SerialNumber: syz [ 895.898956][ T7605] usb 4-1: config 0 descriptor?? [ 895.912206][ T7269] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 895.921555][ T7269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.967158][ T7605] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 895.975414][ T7269] usb 1-1: Product: syz [ 895.990742][ T7269] usb 1-1: Manufacturer: syz [ 896.001555][ T7269] usb 1-1: SerialNumber: syz [ 896.074979][ T7269] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 896.101178][ T7269] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 896.122541][ T7269] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 896.150308][ T7269] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 896.193102][ T7269] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 896.201572][ T7605] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 896.209683][ T7605] visor: probe of 4-1:0.0 failed with error -5 [ 896.345727][T27915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10696'. [ 896.430086][ T7605] usb 4-1: USB disconnect, device number 49 [ 896.548702][ T7269] usb 1-1: USB disconnect, device number 42 [ 896.566959][ T7269] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 896.616301][ T7269] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 896.667026][ T7269] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 896.719061][ T7269] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 896.768712][ T7269] keyspan 1-1:1.0: device disconnected [ 896.867388][T27938] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 897.071938][T27944] loop1: detected capacity change from 0 to 4096 [ 897.082389][T27942] loop2: detected capacity change from 0 to 4096 [ 897.109331][ T7605] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 897.156426][T27944] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 897.161843][T27948] program syz.3.10713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.201668][T27942] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 897.273719][T27944] ntfs: volume version 3.1. [ 897.494302][ T7605] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.513020][ T7605] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.564448][ T7605] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.619849][ T7605] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 897.661820][ T7605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.749135][ T7605] ims_pcu 5-1:1.0: Missing CDC union descriptor [ 897.765777][ T7605] ims_pcu: probe of 5-1:1.0 failed with error -22 [ 898.048033][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10729'. [ 898.174592][T27981] loop2: detected capacity change from 0 to 4096 [ 898.247695][T27981] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 898.374259][T28001] ip6t_REJECT: ECHOREPLY is not supported [ 898.465384][ T4185] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 898.488104][ T4185] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 898.514744][ T4185] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 898.579838][T28008] netlink: 'syz.3.10744': attribute type 12 has an invalid length. [ 898.811726][T28025] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.884712][T28030] ipt_CLUSTERIP: Please specify destination IP [ 899.095439][T28043] loop1: detected capacity change from 0 to 256 [ 899.153437][T28043] exfat: Deprecated parameter 'utf8' [ 899.171846][T28043] exfat: Deprecated parameter 'utf8' [ 899.216761][T28043] exfat: Deprecated parameter 'namecase' [ 899.243942][T28043] exfat: Deprecated parameter 'namecase' [ 899.313030][T28043] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 899.874035][T28076] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 900.027558][ T7595] usb 5-1: USB disconnect, device number 59 [ 900.120729][T28088] ip6t_REJECT: ECHOREPLY is not supported [ 900.181569][T28054] loop3: detected capacity change from 0 to 32768 [ 900.199035][T28091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10784'. [ 900.242210][T28054] XFS: attr2 mount option is deprecated. [ 900.252847][T28054] XFS (loop3): invalid log iosize: 0 [not 12-30] [ 900.661608][T28115] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 900.787838][T28124] loop2: detected capacity change from 0 to 512 [ 900.812725][ T4415] udevd[4415]: inotify_add_watch(7, /dev/nbd0p4, 10) failed: No such file or directory [ 900.891395][T28131] x_tables: unsorted entry at hook 4 [ 900.926578][T28124] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 900.947389][T28124] ext4 filesystem being mounted at /2071/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.066241][T28124] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #12: comm syz.2.10799: directory missing '..' [ 901.232283][T28156] netlink: 'syz.4.10812': attribute type 5 has an invalid length. [ 901.338371][T28161] IPVS: length: 77 != 8 [ 901.464769][T28174] netlink: 209772 bytes leftover after parsing attributes in process `syz.0.10823'. [ 901.509067][T28174] openvswitch: netlink: Message has 80 unknown bytes. [ 901.575479][T28180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.629278][T28183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10827'. [ 901.696207][T28189] loop4: detected capacity change from 0 to 256 [ 901.786950][T28195] IPVS: length: 77 != 8 [ 902.015309][T28209] loop1: detected capacity change from 0 to 1024 [ 902.119369][T28220] loop3: detected capacity change from 0 to 1024 [ 902.280217][T28220] hfsplus: request for non-existent node 16777217 in B*Tree [ 902.333525][T28220] hfsplus: request for non-existent node 16777217 in B*Tree [ 902.540943][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10859'. [ 902.596693][T28252] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 902.647150][T28252] FAT-fs (loop3): unable to read boot sector [ 902.694152][T28260] loop0: detected capacity change from 0 to 512 [ 902.746382][T28265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10865'. [ 902.761731][T28266] netlink: 'syz.4.10866': attribute type 1 has an invalid length. [ 902.771183][T28265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10865'. [ 902.862627][T28272] netlink: 'syz.4.10869': attribute type 1 has an invalid length. [ 902.885752][T28260] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 902.917650][T28260] ext4 filesystem being mounted at /2309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.977964][T28280] netlink: 'syz.3.10871': attribute type 5 has an invalid length. [ 903.008505][T28260] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.10873: directory missing '..' [ 903.072575][T28284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.234992][ T7595] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 903.335889][T28299] netlink: 209772 bytes leftover after parsing attributes in process `syz.1.10882'. [ 903.376941][T28299] openvswitch: netlink: Message has 80 unknown bytes. [ 903.454749][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10884'. [ 903.598872][ T7595] usb 3-1: not running at top speed; connect to a high speed hub [ 903.615463][T28317] loop4: detected capacity change from 0 to 512 [ 903.747288][T28317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 903.770688][T28317] ext4 filesystem being mounted at /2163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.832332][T28317] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.10889: directory missing '..' [ 903.865929][ T7605] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 903.879229][T28334] netlink: 209772 bytes leftover after parsing attributes in process `syz.3.10897'. [ 903.889227][ T7595] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 903.898562][T28334] openvswitch: netlink: Message has 80 unknown bytes. [ 903.905679][ T7595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.926242][ T7595] usb 3-1: Product: syz [ 903.930597][ T7595] usb 3-1: Manufacturer: syz [ 903.935235][ T7595] usb 3-1: SerialNumber: syz [ 904.012919][ T7595] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 904.039733][ T7595] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 904.107048][ T7595] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 904.122447][ T7605] usb 1-1: Using ep0 maxpacket: 32 [ 904.154633][ T7595] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 904.197448][ T7595] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 904.250822][ T7605] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 904.294606][ T7605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.382686][ T7605] usb 1-1: config 0 descriptor?? [ 904.423951][ T7605] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 904.563385][T16925] usb 3-1: USB disconnect, device number 52 [ 904.585136][T16925] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 904.614221][T16925] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 904.657128][ T7605] gspca_nw80x: reg_w err -71 [ 904.661875][ T7605] nw80x: probe of 1-1:0.0 failed with error -71 [ 904.690769][T16925] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 904.718930][T16925] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 904.720418][ T7605] usb 1-1: USB disconnect, device number 43 [ 904.731779][T16925] keyspan 3-1:1.0: device disconnected [ 904.891274][T28359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10911'. [ 904.957943][ T4234] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 905.055861][T28362] netlink: 'syz.3.10912': attribute type 1 has an invalid length. [ 905.199877][T28367] xt_bpf: check failed: parse error [ 905.394846][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.419650][ T4234] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.452527][T28380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10922'. [ 905.466730][ T4234] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.495145][ T4234] usb 2-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 905.548529][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 905.672755][ T4234] usb 2-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 905.696089][ T4234] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 905.707085][T28396] netlink: 'syz.4.10930': attribute type 10 has an invalid length. [ 905.727075][T28396] device bridge_slave_1 left promiscuous mode [ 905.733431][ T4234] usb 2-1: Manufacturer: syz [ 905.743196][T28396] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.755105][ T4234] usb 2-1: config 0 descriptor?? [ 905.803246][T28396] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 906.077649][ T7605] usb 2-1: USB disconnect, device number 43 [ 906.216942][T28421] loop0: detected capacity change from 0 to 512 [ 906.261793][T28421] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 906.328986][T28421] FAT-fs (loop0): Directory bread(block 1056) failed [ 906.329034][T28421] FAT-fs (loop0): Directory bread(block 1057) failed [ 906.329071][T28421] FAT-fs (loop0): Directory bread(block 1058) failed [ 906.329107][T28421] FAT-fs (loop0): Directory bread(block 1059) failed [ 906.329142][T28421] FAT-fs (loop0): Directory bread(block 1060) failed [ 906.329176][T28421] FAT-fs (loop0): Directory bread(block 1061) failed [ 906.452844][T28421] FAT-fs (loop0): Directory bread(block 1062) failed [ 906.459626][T28421] FAT-fs (loop0): Directory bread(block 1063) failed [ 906.481748][T28421] FAT-fs (loop0): Directory bread(block 1064) failed [ 906.505786][T28421] FAT-fs (loop0): Directory bread(block 1065) failed [ 906.759615][T28448] netlink: 'syz.1.10955': attribute type 2 has an invalid length. [ 906.911519][T28452] loop3: detected capacity change from 0 to 2048 [ 907.051712][T28468] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.101301][T28472] loop4: detected capacity change from 0 to 64 [ 907.128804][T28470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.139341][T28474] __nla_validate_parse: 3 callbacks suppressed [ 907.139363][T28474] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10966'. [ 907.189168][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10966'. [ 907.262589][T28476] loop0: detected capacity change from 0 to 2048 [ 907.344292][T28478] netlink: 'syz.3.10969': attribute type 2 has an invalid length. [ 907.399881][T28476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 907.423130][T28478] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10969'. [ 908.127457][T28535] loop1: detected capacity change from 0 to 64 [ 908.188711][T28543] netlink: 'syz.4.11000': attribute type 1 has an invalid length. [ 908.205555][T28543] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11000'. [ 908.736243][T28583] loop1: detected capacity change from 0 to 64 [ 909.357090][ T4234] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 909.383046][T28620] netlink: 'syz.1.11049': attribute type 1 has an invalid length. [ 909.419498][T28623] loop4: detected capacity change from 0 to 64 [ 909.551900][T28585] loop0: detected capacity change from 0 to 32768 [ 909.765378][T28630] netlink: 'syz.1.11043': attribute type 1 has an invalid length. [ 909.777806][ T9479] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 909.820666][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 909.831451][T28630] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.11043'. [ 909.858853][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 909.890432][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 909.944574][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.949294][ T7605] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 909.987535][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.028258][ T4234] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 910.037703][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.053948][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.065451][T28634] netlink: 'syz.1.11045': attribute type 20 has an invalid length. [ 910.074519][T28602] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 910.099237][T28634] IPv6: Can't replace route, no match found [ 910.105524][T28602] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 910.113183][ T9479] usb 4-1: Using ep0 maxpacket: 32 [ 910.141334][T28602] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 910.154235][ T4234] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 910.341363][ T9479] usb 4-1: unable to get BOS descriptor or descriptor too short [ 910.398053][ T7605] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 910.414086][ T7605] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 910.423516][ T7605] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 910.462485][ T9479] usb 4-1: config 6 has an invalid interface number: 49 but max is 0 [ 910.470659][ T9479] usb 4-1: config 6 has no interface number 0 [ 910.505052][ T9479] usb 4-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 910.531688][T28646] netlink: 'syz.0.11052': attribute type 1 has an invalid length. [ 910.536925][ T9479] usb 4-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 910.583326][T28645] loop1: detected capacity change from 0 to 2048 [ 910.590405][ T9479] usb 4-1: config 6 interface 49 has no altsetting 0 [ 910.601178][ T7605] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 910.633198][ T7605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.643110][T28645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.665030][ T7605] usb 5-1: Product: syz [ 910.669050][ T4234] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 910.669365][ T7605] usb 5-1: Manufacturer: syz [ 910.697095][ T7605] usb 5-1: SerialNumber: syz [ 910.703342][T28648] netlink: 'syz.0.11053': attribute type 1 has an invalid length. [ 910.710200][ T4234] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 910.734118][ T7605] usb 5-1: config 0 descriptor?? [ 910.742331][T28648] netlink: 200 bytes leftover after parsing attributes in process `syz.0.11053'. [ 910.760536][ T4234] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 910.783024][ T9479] usb 4-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 910.826372][ T9479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.834430][ T9479] usb 4-1: Product: syz [ 910.844666][ T4234] usb 3-1: USB disconnect, device number 53 [ 910.868045][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 910.882850][ T4234] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 910.895895][ T9479] usb 4-1: Manufacturer: syz [ 910.904040][ T4234] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 910.913810][ T9479] usb 4-1: SerialNumber: syz [ 910.922977][ T4234] mos7720 3-1:1.0: device disconnected [ 911.038768][T28654] netlink: 'syz.1.11056': attribute type 4 has an invalid length. [ 911.054870][T28654] netlink: 'syz.1.11056': attribute type 30 has an invalid length. [ 911.073979][ T7605] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 911.091224][ T7605] usb 5-1: No valid video chain found. [ 911.111398][ T7605] usb 5-1: USB disconnect, device number 60 [ 911.244685][ T9479] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 911.274882][ T9479] sonixb 4-1:6.49: Error reading register 00: -71 [ 911.300240][T28668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11063'. [ 911.318325][ T9479] usb 4-1: USB disconnect, device number 50 [ 911.348872][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11063'. [ 911.720823][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11074'. [ 912.167251][T28723] program syz.3.11090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.623186][T28753] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11105'. [ 913.127765][T28782] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11120'. [ 913.380805][T28742] loop2: detected capacity change from 0 to 32768 [ 913.943334][T28827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 913.965985][ T7269] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 914.167533][T28839] xt_l2tp: invalid flags combination: c [ 914.228972][ T7269] usb 2-1: Using ep0 maxpacket: 16 [ 914.353522][ T7269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 914.362551][ T7269] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 914.409876][ T7269] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 914.450673][ T7269] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 914.493296][ T7269] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 914.535410][ T7269] usb 2-1: config 1 interface 0 has no altsetting 0 [ 914.556512][ T7269] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 914.586709][ T7269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.696688][ T7269] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 914.792663][T28879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11166'. [ 914.944303][ T7269] scsi host1: usb-storage 2-1:1.0 [ 915.008136][T28894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11174'. [ 915.155520][T28901] CIFS mount error: No usable UNC path provided in device string! [ 915.155520][T28901] [ 915.165585][T28901] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 915.202051][ T4234] usb 2-1: USB disconnect, device number 44 [ 915.257251][T28903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11179'. [ 915.326773][T28906] loop4: detected capacity change from 0 to 512 [ 915.373984][T28906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 915.465912][T28906] EXT4-fs (loop4): 1 truncate cleaned up [ 915.471662][T28906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 915.496629][T28854] loop3: detected capacity change from 0 to 32768 [ 915.616054][T28906] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.11180: 'file0' linked to parent dir [ 915.910447][T28937] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11194'. [ 915.936403][T28939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11195'. [ 915.974140][T28937] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 916.231811][T28955] loop0: detected capacity change from 0 to 512 [ 916.322912][T28955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 916.372831][T28955] EXT4-fs (loop0): 1 truncate cleaned up [ 916.399232][T28955] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 916.572126][T28955] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.11202: 'file0' linked to parent dir [ 916.608989][ T7605] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 916.704842][T28987] ALSA: mixer_oss: invalid OSS volume 'u' [ 917.022491][T29008] netlink: 'syz.0.11227': attribute type 2 has an invalid length. [ 917.058158][ T7605] usb 3-1: unable to get BOS descriptor or descriptor too short [ 917.154467][ T7605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.164670][ T7605] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 917.251779][ T7605] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 191 [ 917.405282][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11236'. [ 917.464481][ T7605] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 917.473717][ T7605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.522068][ T7605] usb 3-1: Product: syz [ 917.546083][ T7605] usb 3-1: Manufacturer: syz [ 917.555871][ T7605] usb 3-1: SerialNumber: syz [ 917.596052][ T7605] usb 3-1: config 0 descriptor?? [ 917.614411][T28962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 917.621548][T28962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 917.699359][ C0] usb 3-1: NFC: Urb failure (status -71) [ 917.720733][ C0] usb 3-1: NFC: Urb failure (status -71) [ 917.733446][ T7605] usb 3-1: NFC: Unable to get FW version [ 917.764354][ T7605] pn533_usb: probe of 3-1:0.0 failed with error -71 [ 917.948152][ T9479] usb 3-1: USB disconnect, device number 54 [ 918.251085][T29076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'. [ 918.471706][T29090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11269'. [ 918.518048][T29093] netlink: 'syz.4.11270': attribute type 1 has an invalid length. [ 918.563294][T29093] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11270'. [ 919.252143][T29147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11297'. [ 919.383414][ T7595] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 919.407591][T29159] loop1: detected capacity change from 0 to 256 [ 919.476730][T29159] exfat: Deprecated parameter 'utf8' [ 919.482114][T29159] exfat: Deprecated parameter 'utf8' [ 919.517023][T29159] exfat: Deprecated parameter 'namecase' [ 919.595794][T29159] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 919.666469][ T7595] usb 3-1: Using ep0 maxpacket: 8 [ 919.795010][ T7595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 919.826477][ T7595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 920.019664][ T7595] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 920.033627][ T7595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.074018][ T7595] usb 3-1: Product: syz [ 920.095361][ T7595] usb 3-1: Manufacturer: syz [ 920.114386][ T7595] usb 3-1: SerialNumber: syz [ 920.157713][ T7595] usb 3-1: config 0 descriptor?? [ 920.415655][T29196] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11321'. [ 920.487033][T29199] bond0: Error: Cannot enslave bond to itself. [ 920.600248][T29203] loop4: detected capacity change from 0 to 128 [ 920.696465][ T7595] usb 3-1: USB disconnect, device number 55 [ 920.989501][T29218] netlink: 'syz.4.11334': attribute type 1 has an invalid length. [ 921.009105][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11334'. [ 921.187312][T29229] Cannot find del_set index 4 as target [ 921.240083][T29232] loop3: detected capacity change from 0 to 128 [ 921.788687][T29267] Cannot find del_set index 4 as target [ 921.873918][T29261] loop2: detected capacity change from 0 to 4096 [ 921.912924][T29271] loop1: detected capacity change from 0 to 128 [ 921.968229][T29261] ntfs: volume version 3.1. [ 922.018543][ T7605] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 922.063874][T29261] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 922.175451][T29261] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 922.198795][T29261] ntfs: (device loop2): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 922.210419][T29261] ntfs: (device loop2): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 922.264002][T29261] ntfs: (device loop2): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 922.307301][ T7605] usb 5-1: Using ep0 maxpacket: 8 [ 922.421147][ T4185] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 922.435556][ T7605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 922.462685][ T7605] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 922.661180][ T7605] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 922.699770][ T7605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.709769][ T7605] usb 5-1: Product: syz [ 922.722470][ T7605] usb 5-1: Manufacturer: syz [ 922.728729][ T7605] usb 5-1: SerialNumber: syz [ 922.756746][ T7605] usb 5-1: config 0 descriptor?? [ 922.766951][ T9479] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 922.858508][T29288] loop3: detected capacity change from 0 to 32768 [ 922.895010][T16925] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 922.951677][T29288] XFS (loop3): Mounting V5 Filesystem [ 923.080534][T29288] XFS (loop3): Ending clean mount [ 923.095729][T29288] XFS (loop3): Quotacheck needed: Please wait. [ 923.144004][T29288] XFS (loop3): Quotacheck: Done. [ 923.168628][T16925] usb 3-1: Using ep0 maxpacket: 32 [ 923.205169][ T9479] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.215333][ T9479] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.256294][ T7605] usb 5-1: USB disconnect, device number 61 [ 923.285570][ T4194] XFS (loop3): Unmounting Filesystem [ 923.369252][T16925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 923.430086][ T9479] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 923.439200][ T9479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.472813][T16925] usb 3-1: config 6 has an invalid interface number: 49 but max is 0 [ 923.481139][T16925] usb 3-1: config 6 has no interface number 0 [ 923.515057][ T9479] usb 2-1: Product: syz [ 923.519292][ T9479] usb 2-1: Manufacturer: syz [ 923.523959][ T9479] usb 2-1: SerialNumber: syz [ 923.529617][T16925] usb 3-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 923.541841][T16925] usb 3-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 923.557362][T16925] usb 3-1: config 6 interface 49 has no altsetting 0 [ 923.761248][T16925] usb 3-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 923.770633][T16925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.801572][T16925] usb 3-1: Product: syz [ 923.814460][T16925] usb 3-1: Manufacturer: syz [ 923.831934][T16925] usb 3-1: SerialNumber: syz [ 923.864291][T29333] netlink: 'syz.3.11382': attribute type 1 has an invalid length. [ 923.894131][T29333] netlink: 'syz.3.11382': attribute type 2 has an invalid length. [ 923.910886][ T9479] usb 2-1: 0:2 : does not exist [ 923.915866][ T9479] usb 2-1: unit 9 not found! [ 923.926823][T29333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11382'. [ 923.953017][ T9479] usb 2-1: USB disconnect, device number 45 [ 924.000505][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.180190][T16925] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 924.212271][T29347] ipt_REJECT: TCP_RESET invalid for non-tcp [ 924.246487][T29351] loop4: detected capacity change from 0 to 1024 [ 924.253007][T16925] sonixb 3-1:6.49: Error reading register 00: -71 [ 924.277724][T16925] usb 3-1: USB disconnect, device number 56 [ 924.402511][T29351] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 924.452151][T29351] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 924.543952][ T1235] hfsplus: b-tree write err: -5, ino 25 [ 924.549906][ T1235] hfsplus: b-tree write err: -5, ino 4 [ 924.580042][ T1235] hfsplus: b-tree write err: -5, ino 2 [ 924.611871][T29365] loop0: detected capacity change from 0 to 512 [ 924.702072][T29365] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 924.762225][T29365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 924.804307][T29365] EXT4-fs (loop0): orphan cleanup on readonly fs [ 924.894761][T29365] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.11399: attempt to clear invalid blocks 1024 len 1 [ 924.973170][T29365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.11399: bg 0: block 361: padding at end of block bitmap is not set [ 925.015496][T29388] xt_TCPMSS: Only works on TCP SYN packets [ 925.027757][T29365] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 925.070642][T29365] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.11399: invalid indirect mapped block 1811939328 (level 0) [ 925.138498][T29365] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.11399: invalid indirect mapped block 2185560079 (level 1) [ 925.193021][T29365] EXT4-fs (loop0): 1 truncate cleaned up [ 925.226618][T29365] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x00000000000004ef,noblock_validity,nodioread_nolock,i_version,errors=continue. Quota mode: none. [ 925.633098][T29409] loop3: detected capacity change from 0 to 4096 [ 925.719662][T29409] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 926.246771][T29469] device batadv2 entered promiscuous mode [ 926.497411][T29485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11460'. [ 926.541023][T29487] loop3: detected capacity change from 0 to 512 [ 926.633413][T29487] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 926.694268][T29487] FAT-fs (loop3): Filesystem has been set read-only [ 926.768704][T29503] netlink: 'syz.0.11468': attribute type 10 has an invalid length. [ 926.801665][T29503] openvswitch: netlink: Flow key attr not present in new flow. [ 927.006086][T29517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11476'. [ 927.086422][T29521] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11478'. [ 927.179866][T29527] xt_connbytes: Forcing CT accounting to be enabled [ 927.231423][T29529] xt_socket: unknown flags 0xc [ 927.536934][T29540] binder: 29539:29540 ioctl c018620c 200000000040 returned -1 [ 927.746275][T29547] delete_channel: no stack [ 927.885919][T29553] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 927.942967][T29544] loop4: detected capacity change from 0 to 8192 [ 927.978647][T29560] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11496'. [ 928.000255][T29544] loop4: p1 p2 < > p3 [ 928.004409][T29544] loop4: partition table partially beyond EOD, truncated [ 928.025469][T29544] loop4: p1 size 1342439424 extends beyond EOD, truncated [ 928.038537][T29560] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11496'. [ 928.070376][T29560] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11496'. [ 928.088415][T29544] loop4: p2 start 4059840512 is beyond EOD, truncated [ 928.102851][T29544] loop4: p3 start 67108864 is beyond EOD, truncated [ 928.251001][ T7605] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 928.374331][T29577] loop3: detected capacity change from 0 to 2048 [ 928.427882][T29580] loop2: detected capacity change from 0 to 512 [ 928.456644][T29577] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 928.493813][T29577] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 928.546117][T29580] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 928.572199][T29580] ext4 filesystem being mounted at /2164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.593788][T29577] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 928.636360][T29577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.657493][ T7605] usb 5-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 928.662106][T29594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11511'. [ 928.732095][ T7605] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 928.743356][ T26] audit: type=1800 audit(2000525755.695:65): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11504" name=2E02 dev="loop3" ino=1367 res=0 errno=0 [ 928.802968][ T7605] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 928.923485][T29600] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 929.047145][ T7605] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 929.084940][ T7605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.116961][ T7605] usb 5-1: Product: syz [ 929.136323][ T7605] usb 5-1: Manufacturer: syz [ 929.150044][ T7605] usb 5-1: SerialNumber: syz [ 929.202812][T29556] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 929.262804][T29614] xt_ecn: cannot match TCP bits for non-tcp packets [ 929.372772][T29623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11526'. [ 929.402394][T29628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11528'. [ 929.416442][T29623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11526'. [ 929.449880][T29623] device vlan0 entered promiscuous mode [ 929.566048][ T7605] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 929.593552][ T7605] usb 5-1: USB disconnect, device number 62 [ 929.911673][T29655] loop3: detected capacity change from 0 to 512 [ 930.072877][T29655] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 930.152551][T29667] loop1: detected capacity change from 0 to 1024 [ 930.205153][T29655] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 930.359345][T29655] ext4 filesystem being mounted at /2260/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.463298][T29667] hfsplus: invalid file type 0174377 for inode 21 [ 930.933351][T29710] netlink: 'syz.1.11566': attribute type 10 has an invalid length. [ 930.988021][T29710] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11566'. [ 931.515456][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11579'. [ 931.546484][ T7595] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 931.800335][ T7595] usb 5-1: Using ep0 maxpacket: 16 [ 931.829591][T29761] SET target dimension over the limit! [ 931.971748][ T7595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 932.067882][ T7595] usb 5-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.078898][ T4290] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 932.104466][ T7595] usb 5-1: config 1 interface 0 has no altsetting 0 [ 932.292453][ T7595] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 932.302754][ T7595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.312484][ T7595] usb 5-1: Product: syz [ 932.320664][ T7595] usb 5-1: Manufacturer: syz [ 932.328147][ T7595] usb 5-1: SerialNumber: syz [ 932.495439][ T4290] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 932.519605][ T4290] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 932.540516][ T4290] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 932.560402][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.614473][T29723] udc-core: couldn't find an available UDC or it's busy [ 932.621473][T29723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 932.679707][T29803] loop1: detected capacity change from 0 to 512 [ 932.739168][T29803] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 932.750015][T29807] netlink: 'syz.3.11613': attribute type 3 has an invalid length. [ 932.767252][T29803] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 932.780038][ T7595] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input63 [ 932.799379][T29803] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 932.826635][T29803] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 932.832133][ T3543] bcm5974 5-1:1.0: could not read from device [ 932.860628][T29803] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 932.885081][ T7595] usb 5-1: USB disconnect, device number 63 [ 932.891871][ T4290] ims_pcu 3-1:1.0: Failed to set line coding, error: -71 [ 932.899182][ T3543] bcm5974 5-1:1.0: could not read from device [ 932.907146][T29803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 932.935672][T29803] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11611: bg 0: block 34: padding at end of block bitmap is not set [ 932.951958][ T4290] ims_pcu: probe of 3-1:1.0 failed with error -71 [ 932.969028][T29803] Quota error (device loop1): write_blk: dquota write failed [ 932.983445][T29803] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 932.995688][T29803] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.11611: Failed to acquire dquot type 1 [ 933.015074][T29803] EXT4-fs (loop1): 1 truncate cleaned up [ 933.023743][ T4290] usb 3-1: USB disconnect, device number 57 [ 933.083579][T29803] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000001,noquota,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 933.118836][T29817] netlink: 'syz.0.11618': attribute type 1 has an invalid length. [ 933.157147][T29803] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 933.596525][T29844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11629'. [ 933.673928][T29846] netlink: 'syz.3.11632': attribute type 21 has an invalid length. [ 933.878405][T29865] netlink: 'syz.1.11641': attribute type 3 has an invalid length. [ 934.145846][T29885] netlink: 'syz.2.11650': attribute type 1 has an invalid length. [ 934.180173][T29885] netlink: 'syz.2.11650': attribute type 2 has an invalid length. [ 934.340904][T29901] openvswitch: netlink: Key type 2481 is out of range max 29 [ 934.528300][T29918] xt_bpf: check failed: parse error [ 935.030413][ T4290] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 935.057363][T29943] loop1: detected capacity change from 0 to 8192 [ 935.130770][T29943] loop1: p1 < > p2 p4 < p5 > [ 935.136943][T29943] loop1: partition table partially beyond EOD, truncated [ 935.169645][T29943] loop1: p1 start 134217728 is beyond EOD, truncated [ 935.176528][T29943] loop1: p2 size 591360 extends beyond EOD, truncated [ 935.250695][T29943] loop1: p5 size 591360 extends beyond EOD, truncated [ 935.499559][ T4290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 935.552415][T29927] loop2: detected capacity change from 0 to 32768 [ 935.601166][ T4290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.623455][ T4290] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 935.636782][T29927] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.11669 (29927) [ 935.659751][ T4290] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 191 [ 935.692393][T29957] nvme_fabrics: missing parameter 'nqn=%s' [ 935.714282][T29927] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 935.723044][T29927] BTRFS info (device loop2): enabling ssd optimizations [ 935.742381][T29927] BTRFS info (device loop2): not using ssd optimizations [ 935.809894][T29927] BTRFS info (device loop2): turning off barriers [ 935.841528][T29927] BTRFS info (device loop2): use no compression [ 935.852453][ T4290] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 935.883230][ T4290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.892469][T29927] BTRFS info (device loop2): using free space tree [ 935.906781][ T4290] usb 4-1: Product: syz [ 935.911158][T29927] BTRFS info (device loop2): has skinny extents [ 935.926814][ T4290] usb 4-1: Manufacturer: syz [ 935.931466][ T4290] usb 4-1: SerialNumber: syz [ 935.971572][ T4290] usb 4-1: config 0 descriptor?? [ 935.991450][T29935] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 935.998574][T29935] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 936.017316][T29962] loop1: detected capacity change from 0 to 4096 [ 936.087269][ C1] usb 4-1: NFC: Urb failure (status -71) [ 936.108569][ C1] usb 4-1: NFC: Urb failure (status -71) [ 936.120778][ T4290] usb 4-1: NFC: Unable to get FW version [ 936.122691][T29949] loop4: detected capacity change from 0 to 32768 [ 936.127233][ T4290] pn533_usb: probe of 4-1:0.0 failed with error -71 [ 936.216832][T29962] ntfs: volume version 3.1. [ 936.363177][T29962] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 936.393519][ T7270] usb 4-1: USB disconnect, device number 51 [ 936.428361][T29962] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 936.525612][T29962] ntfs: (device loop1): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 936.596962][T29962] ntfs: (device loop1): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 936.681716][T29962] ntfs: (device loop1): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 936.716610][T29987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11692'. [ 936.762465][T29987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11692'. [ 936.807425][ T4177] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (4177) [ 936.844082][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 936.864256][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 936.890087][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 937.304050][T30002] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 937.559910][ T4187] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 937.834366][T30018] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 937.859346][ T4229] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 937.927663][T30027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11708'. [ 937.986257][T30027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11708'. [ 938.183005][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 938.385945][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 938.512663][ T4229] usb 1-1: config 12 has an invalid interface number: 183 but max is 1 [ 938.529883][ T4229] usb 1-1: config 12 has an invalid interface number: 229 but max is 1 [ 938.567307][ T4229] usb 1-1: config 12 has no interface number 0 [ 938.584835][ T4229] usb 1-1: config 12 has no interface number 1 [ 938.606518][ T4229] usb 1-1: config 12 interface 183 has no altsetting 0 [ 938.730851][T30069] netlink: 'syz.3.11729': attribute type 1 has an invalid length. [ 938.835134][ T4229] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 938.844674][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.875425][ T4229] usb 1-1: Product: syz [ 938.890864][ T4229] usb 1-1: Manufacturer: syz [ 938.895535][ T4229] usb 1-1: SerialNumber: syz [ 939.072276][T30083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11735'. [ 939.250477][T30089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11738'. [ 939.293975][ T4229] usb 1-1: USB disconnect, device number 44 [ 939.386240][T30093] binder: 30092:30093 ioctl c018620c 200000000040 returned -1 [ 939.423992][T30096] xt_l2tp: v2 doesn't support IP mode [ 939.718827][T30111] loop4: detected capacity change from 0 to 8 [ 939.746950][T30111] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 939.765254][T30111] cramfs: unsupported filesystem features [ 939.942509][T30122] tmpfs: Bad value for 'mpol' [ 940.096428][ T4271] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 940.322945][T30147] loop4: detected capacity change from 0 to 512 [ 940.469268][T30147] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 940.494955][T30147] ext4 filesystem being mounted at /2362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.545549][ T4271] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 940.564216][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.606818][ T4271] usb 3-1: config 0 descriptor?? [ 940.676480][ T4271] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 940.708014][T30174] netlink: 'syz.1.11780': attribute type 32 has an invalid length. [ 940.883137][T30181] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 941.100240][T30200] loop4: detected capacity change from 0 to 512 [ 941.133630][ T4271] gspca_cpia1: usb_control_msg 03, error -71 [ 941.151658][T30204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11793'. [ 941.161121][ T4271] gspca_cpia1: usb_control_msg 01, error -71 [ 941.178910][T30200] EXT4-fs (loop4): Test dummy encryption mode enabled [ 941.181507][ T4271] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 941.185730][T30200] EXT4-fs (loop4): Ignoring removed oldalloc option [ 941.185854][T30200] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 941.208367][T30204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11793'. [ 941.237108][ T4271] usb 3-1: USB disconnect, device number 58 [ 941.319803][T30200] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,,errors=continue. Quota mode: writeback. [ 941.342512][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11796'. [ 941.369011][T30200] EXT4-fs (loop4): Test dummy encryption mode enabled [ 941.375961][T30200] EXT4-fs (loop4): Ignoring removed oldalloc option [ 941.385025][T30200] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 941.399384][T30200] EXT4-fs (loop4): re-mounted. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,. Quota mode: writeback. [ 941.517022][T30222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11801'. [ 941.995029][T30244] loop3: detected capacity change from 0 to 4096 [ 942.078680][T30244] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 942.599047][T30290] netlink: 'syz.0.11832': attribute type 21 has an invalid length. [ 942.809913][T30298] device batadv2 entered promiscuous mode [ 942.828372][T30301] loop4: detected capacity change from 0 to 256 [ 942.843842][ T7269] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 943.139110][T30305] binder: 30304:30305 ioctl c018620c 200000000380 returned -22 [ 943.192893][T30309] loop0: detected capacity change from 0 to 512 [ 943.229010][ T7269] usb 4-1: config index 0 descriptor too short (expected 45, got 25) [ 943.237203][ T7269] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 943.264416][T30311] netlink: 'syz.2.11845': attribute type 10 has an invalid length. [ 943.293054][ T7269] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.329715][T30311] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11845'. [ 943.509118][T30319] netlink: 'syz.0.11848': attribute type 21 has an invalid length. [ 943.526672][T30319] IPv6: NLM_F_CREATE should be specified when creating new route [ 943.538869][ T7269] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 943.570869][ T7269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.599682][ T7269] usb 4-1: Product: syz [ 943.615708][ T7269] usb 4-1: Manufacturer: syz [ 943.620616][ T7269] usb 4-1: SerialNumber: syz [ 943.742222][ T7269] rtl8150 4-1:1.0: couldn't find required endpoints [ 943.749009][ T7269] rtl8150: probe of 4-1:1.0 failed with error -5 [ 943.766083][T30329] autofs4:pid:30329:autofs_fill_super: called with bogus options [ 943.991330][ T7269] usb 4-1: USB disconnect, device number 52 [ 944.136352][T30353] loop0: detected capacity change from 0 to 8 [ 944.225803][T30353] SQUASHFS error: zlib decompression failed, data probably corrupt [ 944.248002][T30353] SQUASHFS error: Failed to read block 0x9b: -5 [ 944.254367][T30353] SQUASHFS error: Unable to read metadata cache entry [99] [ 944.294639][T30353] SQUASHFS error: Unable to read inode 0x104 [ 944.778879][T30380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11879'. [ 944.788068][T30380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11879'. [ 944.866280][T30380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11879'. [ 944.899360][T30385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11882'. [ 945.075153][T30394] loop2: detected capacity change from 0 to 1024 [ 945.139979][T30357] loop1: detected capacity change from 0 to 32768 [ 945.226711][T30403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11890'. [ 945.321138][ T7269] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 945.495137][ T4229] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 945.506684][T30411] Cannot find del_set index 4 as target [ 945.566245][T30413] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 945.718101][T30417] device wlan0 entered promiscuous mode [ 945.724524][ T7269] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 945.735108][ T7269] usb 5-1: config 0 has no interface number 0 [ 945.745928][ T7269] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 945.768103][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 945.955095][ T7269] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 945.964233][ T7269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.975195][ T9911] hfsplus: b-tree write err: -5, ino 25 [ 946.004289][ T9911] hfsplus: b-tree write err: -5, ino 4 [ 946.017106][ T7269] usb 5-1: Product: syz [ 946.021520][ T7269] usb 5-1: Manufacturer: syz [ 946.027279][ T7269] usb 5-1: SerialNumber: syz [ 946.032987][ T9911] hfsplus: b-tree write err: -5, ino 2 [ 946.047336][ T7269] usb 5-1: config 0 descriptor?? [ 946.056323][T30432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.083394][ T4229] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 946.096142][ T7269] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 946.104415][ T7269] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 946.129808][ T4229] usb 3-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 946.181969][ T4229] usb 3-1: Product: syz [ 946.186366][ T4229] usb 3-1: Manufacturer: syz [ 946.205864][ T4229] usb 3-1: SerialNumber: syz [ 946.244315][ T4229] usb 3-1: config 0 descriptor?? [ 946.318316][ T7269] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 946.328308][T30442] device batadv2 entered promiscuous mode [ 946.328417][ T4229] pwc: Logitech ViewPort AV 100 webcam detected. [ 946.344248][T30444] 0xfffffffffffffffd-0x000000020000 : "" [ 946.365409][T30444] mtd: partition "" is out of reach -- disabled [ 946.410764][T30444] ftl_cs: FTL header not found. [ 946.542832][ T7269] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 946.566185][ T7269] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 946.595826][ T7269] usb 5-1: USB disconnect, device number 64 [ 946.598575][ T4229] pwc: Failed to set LED on/off time (-71) [ 946.618268][ T7269] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 946.660533][ T4229] pwc: send_video_command error -71 [ 946.666506][ T4229] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 946.690014][T30455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11916'. [ 946.712121][ T4229] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 946.735613][ T4229] usb 3-1: USB disconnect, device number 59 [ 946.949322][T16925] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 946.985709][T30468] tc_dump_action: action bad kind [ 946.996562][T30470] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 947.126257][T30476] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 947.451871][T16925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 947.549149][T16925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.579502][T16925] usb 4-1: config 1 interface 0 has no altsetting 0 [ 947.922039][T16925] usb 4-1: string descriptor 0 read error: -22 [ 947.933258][T16925] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 947.966950][T16925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.332134][T16925] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 948.433345][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.578507][T16925] usb 4-1: USB disconnect, device number 53 [ 948.693808][T30563] bond0: option use_carrier: invalid value (9) [ 949.007423][T30587] loop0: detected capacity change from 0 to 512 [ 949.087212][T30587] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 949.094614][T30587] EXT4-fs (loop0): Mount option "dax=always" incompatible with ext3 [ 949.143658][T30583] loop1: detected capacity change from 0 to 4096 [ 949.212775][T30587] gfs2: Unexpected value for 'barrier' [ 949.275511][T30583] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 949.332005][T30583] ntfs3: loop1: Failed to load $Extend. [ 949.539590][T30612] netlink: 'syz.4.11993': attribute type 10 has an invalid length. [ 949.674997][ T7605] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 949.740195][T30624] netlink: 'syz.3.12000': attribute type 3 has an invalid length. [ 949.773955][T30624] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.12000'. [ 949.870899][T30634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 949.905730][T30635] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 949.931590][ T7605] usb 3-1: Using ep0 maxpacket: 16 [ 950.070955][ T7605] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 950.241834][ T7605] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 950.266647][ T7605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.308410][T30658] futex_wake_op: syz.3.12014 tries to shift op by 144; fix this program [ 950.314656][ T7605] usb 3-1: Product: syz [ 950.327922][T30658] futex_wake_op: syz.3.12014 tries to shift op by 144; fix this program [ 950.342463][ T7605] usb 3-1: Manufacturer: syz [ 950.347146][ T7605] usb 3-1: SerialNumber: syz [ 950.384338][ T7605] r8152-cfgselector 3-1: config 0 descriptor?? [ 950.518646][T30662] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.571258][T30662] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.667962][T30662] device wlan0 left promiscuous mode [ 950.894028][ T7605] r8152-cfgselector 3-1: Unknown version 0x0000 [ 950.932139][ T7605] r8152-cfgselector 3-1: USB disconnect, device number 60 [ 950.952307][T30684] loop3: detected capacity change from 0 to 2048 [ 950.960512][T30690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12031'. [ 951.038345][T30684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.402002][T30704] loop1: detected capacity change from 0 to 2048 [ 951.501421][T30704] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 951.585920][T30704] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 951.623945][T30704] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 951.678168][T30704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.726511][T30722] loop2: detected capacity change from 0 to 512 [ 951.749599][ T26] audit: type=1800 audit(2000525777.228:66): pid=30704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12036" name=2E02 dev="loop1" ino=1367 res=0 errno=0 [ 951.770068][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.975169][ T9] BUG: MAX_LOCK_DEPTH too low! [ 951.979993][ T9] turning off the locking correctness validator. [ 951.986330][ T9] depth: 48 max: 48! [ 951.990421][ T9] 48 locks held by kworker/u4:0/9: [ 951.995544][ T9] #0: ffff888022b39138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 952.006374][ T9] #1: ffffc90000ce7d00 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 952.011255][T30722] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 952.019133][ T9] #2: ffff88807405df38 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 952.019195][ T9] #3: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 952.019243][ T9] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.019296][ T9] #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066325][ T9] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066393][ T9] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066446][ T9] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066495][ T9] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066545][ T9] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066595][ T9] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066645][ T9] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066703][ T9] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066753][ T9] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066803][ T9] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066853][ T9] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066904][ T9] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.066954][ T9] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.067004][ T9] #19: ffffffff8c31ef60 (rcu_read_lock [ 952.090373][T30722] FAT-fs (loop2): Filesystem has been set read-only [ 952.095070][ T9] ){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.095110][ T9] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.095161][ T9] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.095208][ T9] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.235629][ T9] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.245107][ T9] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.254556][ T9] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.264021][ T9] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.273466][ T9] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.282914][ T9] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.292365][ T9] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.301810][ T9] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.311255][ T9] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.320701][ T9] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.330153][ T9] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.339599][ T9] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.349058][ T9] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.358504][ T9] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.368040][ T9] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.377493][ T9] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.386937][ T9] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.396381][ T9] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.405828][ T9] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.415271][ T9] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.424754][ T9] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.434206][ T9] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.443748][ T9] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.453193][ T9] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 952.462635][ T9] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 952.472175][ T9] INFO: lockdep is turned off. [ 952.477046][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 952.484358][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.494478][ T9] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 952.501576][ T9] Call Trace: [ 952.504891][ T9] [ 952.507850][ T9] dump_stack_lvl+0x188/0x250 [ 952.512602][ T9] ? show_regs_print_info+0x20/0x20 [ 952.517844][ T9] ? load_image+0x410/0x410 [ 952.522402][ T9] __lock_acquire+0x1247/0x7b50 [ 952.527288][ T9] ? rpl_output+0x321/0x730 [ 952.531836][ T9] ? lwtunnel_output+0x27e/0x440 [ 952.536820][ T9] ? kfree+0xef/0x2a0 [ 952.540878][ T9] ? verify_lock_unused+0x140/0x140 [ 952.546107][ T9] ? stack_trace_save+0xa6/0xf0 [ 952.550992][ T9] ? stack_trace_snprint+0xe0/0xe0 [ 952.556129][ T9] ? stack_trace_save+0xf0/0xf0 [ 952.561005][ T9] ? mark_lock+0x94/0x320 [ 952.565365][ T9] ? __lock_acquire+0x1305/0x7b50 [ 952.570432][ T9] ? rpl_output+0x178/0x730 [ 952.574975][ T9] lock_acquire+0x19e/0x400 [ 952.579511][ T9] ? rcu_lock_acquire+0x9/0x30 [ 952.584312][ T9] ? rpl_output+0x321/0x730 [ 952.588849][ T9] ? lwtunnel_output+0x27e/0x440 [ 952.593852][ T9] ? rpl_output+0x321/0x730 [ 952.598385][ T9] ? lwtunnel_output+0x27e/0x440 [ 952.603351][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.608761][ T9] ? verify_lock_unused+0x140/0x140 [ 952.613988][ T9] ? mark_lock+0x94/0x320 [ 952.618347][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 952.624352][ T9] ? rpl_output+0x321/0x730 [ 952.628981][ T9] ? lwtunnel_output+0x27e/0x440 [ 952.633963][ T9] ? rpl_output+0x321/0x730 [ 952.638504][ T9] rcu_lock_acquire+0x2a/0x30 [ 952.643220][ T9] ? rcu_lock_acquire+0x9/0x30 [ 952.648016][ T9] ip6_dst_check+0xe2/0x7a0 [ 952.652552][ T9] ? skb_header_pointer+0x120/0x120 [ 952.657781][ T9] dst_cache_per_cpu_get+0x1a3/0x310 [ 952.663094][ T9] rpl_output+0x165/0x730 [ 952.667456][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.671988][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.677069][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.682475][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.687019][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.691987][ T9] lwtunnel_output+0x27e/0x440 [ 952.696796][ T9] rpl_output+0x321/0x730 [ 952.701160][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.705698][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.710673][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.716080][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.720624][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.725600][ T9] lwtunnel_output+0x27e/0x440 [ 952.730400][ T9] rpl_output+0x321/0x730 [ 952.734762][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.739298][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.744267][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.749674][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.754231][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.759289][ T9] lwtunnel_output+0x27e/0x440 [ 952.764092][ T9] rpl_output+0x321/0x730 [ 952.768458][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.772997][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.777965][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.783371][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.787911][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.792886][ T9] lwtunnel_output+0x27e/0x440 [ 952.797701][ T9] rpl_output+0x321/0x730 [ 952.802071][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.806600][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.811565][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.816967][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.821507][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.826485][ T9] lwtunnel_output+0x27e/0x440 [ 952.831285][ T9] rpl_output+0x321/0x730 [ 952.835682][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.840218][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.845197][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.850606][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.855149][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.860120][ T9] lwtunnel_output+0x27e/0x440 [ 952.864925][ T9] rpl_output+0x321/0x730 [ 952.869295][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.873829][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.878791][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.884198][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.888822][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.893783][ T9] lwtunnel_output+0x27e/0x440 [ 952.898582][ T9] rpl_output+0x321/0x730 [ 952.902948][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.907481][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.912449][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.917861][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.922399][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.927371][ T9] lwtunnel_output+0x27e/0x440 [ 952.932174][ T9] rpl_output+0x321/0x730 [ 952.936540][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.941073][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.946039][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.951549][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.956090][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.961055][ T9] lwtunnel_output+0x27e/0x440 [ 952.965850][ T9] rpl_output+0x321/0x730 [ 952.970220][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.974752][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.979724][ T9] ? read_lock_is_recursive+0x10/0x10 [ 952.985133][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 952.989672][ T9] ? rpl_destroy_state+0x20/0x20 [ 952.994643][ T9] lwtunnel_output+0x27e/0x440 [ 952.999439][ T9] rpl_output+0x321/0x730 [ 953.003796][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.008335][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.013307][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.018727][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.023268][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.028238][ T9] lwtunnel_output+0x27e/0x440 [ 953.033043][ T9] rpl_output+0x321/0x730 [ 953.037410][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.041939][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.046905][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.052318][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.056855][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.061824][ T9] lwtunnel_output+0x27e/0x440 [ 953.066629][ T9] rpl_output+0x321/0x730 [ 953.070994][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.075524][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.080500][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.085909][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.090444][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.095409][ T9] lwtunnel_output+0x27e/0x440 [ 953.100211][ T9] rpl_output+0x321/0x730 [ 953.104574][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.109107][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.114079][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.119486][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.124075][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.129051][ T9] lwtunnel_output+0x27e/0x440 [ 953.133858][ T9] rpl_output+0x321/0x730 [ 953.138232][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.142764][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.147733][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.153141][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.157684][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.162656][ T9] lwtunnel_output+0x27e/0x440 [ 953.167459][ T9] rpl_output+0x321/0x730 [ 953.171822][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.176358][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.181320][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.186730][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.191269][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.196243][ T9] lwtunnel_output+0x27e/0x440 [ 953.201047][ T9] rpl_output+0x321/0x730 [ 953.205414][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.209950][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.214919][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.220411][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.224949][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.229914][ T9] lwtunnel_output+0x27e/0x440 [ 953.234692][ T9] rpl_output+0x321/0x730 [ 953.239141][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.243695][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.248652][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.254047][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.258582][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.263548][ T9] lwtunnel_output+0x27e/0x440 [ 953.268345][ T9] rpl_output+0x321/0x730 [ 953.272722][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.277225][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.282175][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.287573][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.292082][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.297140][ T9] lwtunnel_output+0x27e/0x440 [ 953.301924][ T9] rpl_output+0x321/0x730 [ 953.306278][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.310799][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.315759][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.321151][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.325690][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.330654][ T9] lwtunnel_output+0x27e/0x440 [ 953.335448][ T9] rpl_output+0x321/0x730 [ 953.339783][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.344287][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.349247][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.354627][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.359177][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.364133][ T9] lwtunnel_output+0x27e/0x440 [ 953.368933][ T9] rpl_output+0x321/0x730 [ 953.373295][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.377796][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.382733][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.388114][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.392647][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.397598][ T9] lwtunnel_output+0x27e/0x440 [ 953.402395][ T9] rpl_output+0x321/0x730 [ 953.406732][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.411273][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.416241][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.421647][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.426179][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.431122][ T9] lwtunnel_output+0x27e/0x440 [ 953.435902][ T9] rpl_output+0x321/0x730 [ 953.440246][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.444782][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.449743][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.455145][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.459750][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.464716][ T9] lwtunnel_output+0x27e/0x440 [ 953.469511][ T9] rpl_output+0x321/0x730 [ 953.473843][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.478346][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.483291][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.488691][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.493206][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.498173][ T9] lwtunnel_output+0x27e/0x440 [ 953.502978][ T9] rpl_output+0x321/0x730 [ 953.507340][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.511860][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.516796][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.522174][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.526717][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.531680][ T9] lwtunnel_output+0x27e/0x440 [ 953.536566][ T9] rpl_output+0x321/0x730 [ 953.540925][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.545451][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.550416][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.555820][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.560359][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.565338][ T9] lwtunnel_output+0x27e/0x440 [ 953.570238][ T9] rpl_output+0x321/0x730 [ 953.574593][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.579156][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.584125][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.589762][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.594298][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.599280][ T9] lwtunnel_output+0x27e/0x440 [ 953.604073][ T9] rpl_output+0x321/0x730 [ 953.608408][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.612918][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.617879][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.623257][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.627763][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.632724][ T9] lwtunnel_output+0x27e/0x440 [ 953.637609][ T9] rpl_output+0x321/0x730 [ 953.641966][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.646575][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.651537][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.657061][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.661603][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.666559][ T9] lwtunnel_output+0x27e/0x440 [ 953.671377][ T9] rpl_output+0x321/0x730 [ 953.675747][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.680293][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.685264][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.690671][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.695200][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.700170][ T9] lwtunnel_output+0x27e/0x440 [ 953.704988][ T9] rpl_output+0x321/0x730 [ 953.709328][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.713839][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.718807][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.724248][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.728776][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.733741][ T9] lwtunnel_output+0x27e/0x440 [ 953.738526][ T9] rpl_output+0x321/0x730 [ 953.742898][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.747429][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.752378][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.757857][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.762403][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.767371][ T9] lwtunnel_output+0x27e/0x440 [ 953.772155][ T9] rpl_output+0x321/0x730 [ 953.776514][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.781036][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.786012][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.791429][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.795976][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.800942][ T9] lwtunnel_output+0x27e/0x440 [ 953.805729][ T9] rpl_output+0x321/0x730 [ 953.810231][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.814767][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.819742][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.825253][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.829812][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.834788][ T9] lwtunnel_output+0x27e/0x440 [ 953.839613][ T9] rpl_output+0x321/0x730 [ 953.843952][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.848472][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.853483][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.858928][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.863444][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.868395][ T9] lwtunnel_output+0x27e/0x440 [ 953.873207][ T9] rpl_output+0x321/0x730 [ 953.877577][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.882115][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.887070][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.892481][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.897030][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.902074][ T9] lwtunnel_output+0x27e/0x440 [ 953.906878][ T9] rpl_output+0x321/0x730 [ 953.911221][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.915764][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.920734][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.926141][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.930667][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.935646][ T9] lwtunnel_output+0x27e/0x440 [ 953.940459][ T9] rpl_output+0x321/0x730 [ 953.944813][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.949319][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.954268][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.959700][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.964220][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.969183][ T9] lwtunnel_output+0x27e/0x440 [ 953.973959][ T9] rpl_output+0x321/0x730 [ 953.978307][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.982814][ T9] ? rpl_destroy_state+0x20/0x20 [ 953.987768][ T9] ? read_lock_is_recursive+0x10/0x10 [ 953.993143][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 953.997658][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.002629][ T9] lwtunnel_output+0x27e/0x440 [ 954.007438][ T9] rpl_output+0x321/0x730 [ 954.011796][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 954.016309][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.021274][ T9] ? read_lock_is_recursive+0x10/0x10 [ 954.026683][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 954.031211][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.036166][ T9] lwtunnel_output+0x27e/0x440 [ 954.040947][ T9] rpl_output+0x321/0x730 [ 954.045300][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.050242][ T9] ? pskb_expand_head+0x363/0x1100 [ 954.055380][ T9] ? read_lock_is_recursive+0x10/0x10 [ 954.060768][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.065743][ T9] lwtunnel_output+0x27e/0x440 [ 954.070522][ T9] rpl_output+0x321/0x730 [ 954.074880][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.079825][ T9] ? __ip6_local_out+0x80b/0x850 [ 954.084797][ T9] ? __ip6_local_out+0x850/0x850 [ 954.089755][ T9] ? rpl_destroy_state+0x20/0x20 [ 954.094699][ T9] lwtunnel_output+0x27e/0x440 [ 954.099503][ T9] udp_tunnel6_xmit_skb+0x4b7/0x8b0 [ 954.104715][ T9] send6+0x5a0/0x8d0 [ 954.108664][ T9] ? send4+0xd70/0xd70 [ 954.112747][ T9] ? __local_bh_disable_ip+0x111/0x1a0 [ 954.118244][ T9] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 954.124064][ T9] wg_packet_handshake_send_worker+0x203/0x360 [ 954.130246][ T9] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 954.135729][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 954.141741][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 954.146975][ T9] process_one_work+0x867/0xff0 [ 954.151867][ T9] ? worker_detach_from_pool+0x240/0x240 [ 954.157534][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 954.162878][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 954.167910][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 954.173490][ T9] ? wq_worker_running+0x97/0x170 [ 954.178519][ T9] worker_thread+0xad7/0x12a0 [ 954.183232][ T9] kthread+0x42e/0x520 [ 954.187307][ T9] ? rcu_lock_release+0x20/0x20 [ 954.192178][ T9] ? kthread_blkcg+0xd0/0xd0 [ 954.196788][ T9] ret_from_fork+0x1f/0x30 [ 954.201216][ T9] [ 954.517849][ T7595] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 954.806596][ T7595] usb 5-1: Using ep0 maxpacket: 16 [ 954.966983][ T7595] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 954.975698][ T7595] usb 5-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 954.986179][ T7595] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 954.995275][ T7595] usb 5-1: config 1 has no interface number 1 [ 955.001471][ T7595] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 955.014478][ T7595] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 955.223589][ T7595] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.232758][ T7595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.240821][ T7595] usb 5-1: Product: syz [ 955.245101][ T7595] usb 5-1: Manufacturer: syz [ 955.249717][ T7595] usb 5-1: SerialNumber: syz [ 955.619221][ T7595] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 955.627160][ T7595] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 955.635777][ T7595] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 955.670892][ T7595] usb 5-1: USB disconnect, device number 65 [ 955.909008][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory