last executing test programs: 1.537548981s ago: executing program 3 (id=4282): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0x0, @capture={0x1000, 0x1, {0x100, 0x101}, 0xd54, 0x25}}) 1.404292964s ago: executing program 2 (id=4286): r0 = syz_open_dev$video(&(0x7f0000000080), 0x1e5, 0x140000) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x8a, 0x5, 0x4, 0x400, 0x7f, {0x0, 0xea60}, {0x1, 0x0, 0x8, 0xbe, 0x0, 0xf1, "8f3f9322"}, 0xfff, 0x3, {0x0}, 0x200}) 1.342566456s ago: executing program 3 (id=4287): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f0000000200)={[{@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x401}}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@numtail}, {@fat=@debug}]}, 0x1, 0x37b, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) 1.304853506s ago: executing program 2 (id=4288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.1775621s ago: executing program 2 (id=4291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 973.554395ms ago: executing program 0 (id=4295): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000010c0)=0xfffffcb5, 0x4) 970.343355ms ago: executing program 4 (id=4296): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002700)={{0x0, 0x5, 0x9, 0x8000000, 'syz0\x00', 0x9}, 0x3, 0x200, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f00000026c0)=['\x00'], 0x1}) 845.983198ms ago: executing program 4 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffff9, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x808}, 0x0) 845.359178ms ago: executing program 0 (id=4307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5, 0x8ca}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, 0x48}}, 0x0) 779.06852ms ago: executing program 1 (id=4298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="6c01"], 0xa) 673.773943ms ago: executing program 0 (id=4299): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5035, 0x0) 659.083043ms ago: executing program 4 (id=4300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xc3680027}) 649.880213ms ago: executing program 1 (id=4301): r0 = syz_open_dev$sndpcmc(&(0x7f00000006c0), 0x0, 0x20000) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 572.008575ms ago: executing program 3 (id=4302): r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x1, 0x2200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x102, "bb5dff0f251ed600f60800000000000000ce1ced49e8981e103268fadc1433ae", 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, [0x0, 0x9, 0x0, 0x4]}) 540.034706ms ago: executing program 2 (id=4303): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, 0x0}, 0x0) 514.282637ms ago: executing program 0 (id=4304): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802997c0f0f26a793d1c000", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2}) 507.273377ms ago: executing program 1 (id=4305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x4}, 0x20) 503.170347ms ago: executing program 4 (id=4306): r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 377.33243ms ago: executing program 3 (id=4308): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002700)={{0x0, 0x5, 0x9, 0x8000000, 'syz0\x00', 0x9}, 0x3, 0x200, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f00000026c0)=['\x00'], 0x1}) 377.25685ms ago: executing program 4 (id=4309): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 336.621071ms ago: executing program 2 (id=4310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xd}, {0x4}}}, 0x24}}, 0x44004) 336.033391ms ago: executing program 1 (id=4311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4000880) 321.533842ms ago: executing program 0 (id=4312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 203.109925ms ago: executing program 3 (id=4313): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 198.280495ms ago: executing program 0 (id=4314): dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2b, 0x54, 0x88, 0x40, 0x582, 0x63dc, 0x5fb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb, 0x4, 0x10, 0xe, "", [{{0x9, 0x4, 0x6d, 0x77, 0x1, 0xff, 0xda, 0xac, 0xd, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x0, 0x80, 0xfe}}]}}]}}]}}, 0x0) 165.368515ms ago: executing program 1 (id=4315): r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 150.445066ms ago: executing program 2 (id=4316): r0 = socket(0x1000000000000010, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 43.418109ms ago: executing program 3 (id=4317): r0 = getpid() capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000100)={0x401, 0x7f, 0x80d, 0x2, 0x80, 0x1}) 563.05µs ago: executing program 1 (id=4318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xfcda, 0x0) 0s ago: executing program 4 (id=4319): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f025, 0xfb}) kernel console output (not intermixed with test programs): orks on TCP SYN packets [ 159.908435][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.917432][ T8484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.445497][ T8461] loop4: detected capacity change from 0 to 32768 [ 160.474925][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 160.645614][ T8461] XFS (loop4): Mounting V5 Filesystem [ 160.664882][ T8534] netlink: 'syz.3.1974': attribute type 3 has an invalid length. [ 160.673041][ T8534] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1974'. [ 160.802444][ T8461] XFS (loop4): Ending clean mount [ 160.825115][ T8461] XFS (loop4): Quotacheck needed: Please wait. [ 160.931175][ T8461] XFS (loop4): Quotacheck: Done. [ 160.944171][ T8461] XFS (loop4): Unmounting Filesystem [ 160.954083][ T8546] loop3: detected capacity change from 0 to 64 [ 161.315413][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 161.420606][ T8570] openvswitch: netlink: Unknown key attributes 20000000 [ 161.600599][ T8580] netlink: 'syz.1.1990': attribute type 6 has an invalid length. [ 161.690915][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 161.746937][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1995'. [ 161.829709][ T8596] loop0: detected capacity change from 0 to 64 [ 162.564708][ T8647] exfat: Deprecated parameter 'debug' [ 162.599907][ T8647] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.636906][ T8647] exFAT-fs (loop3): unable to read boot sector [ 162.644902][ T8647] exFAT-fs (loop3): failed to read boot sector [ 162.668684][ T8647] exFAT-fs (loop3): failed to recognize exfat type [ 162.932333][ T146] Bluetooth: hci2: link tx timeout [ 162.938191][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.193864][ T8687] binfmt_misc: register: failed to install interpreter file ./file1 [ 163.368258][ T8697] __nla_validate_parse: 3 callbacks suppressed [ 163.368276][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 163.505273][ T8703] Unsupported ieee802154 address type: 0 [ 163.732110][ T8712] loop0: detected capacity change from 0 to 512 [ 163.740304][ T8714] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 163.918478][ T8712] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 164.017158][ T8712] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.302743][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2068'. [ 164.341354][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2068'. [ 164.367974][ T8740] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2068'. [ 164.471712][ T8742] loop0: detected capacity change from 0 to 8192 [ 164.510143][ T146] Bluetooth: hci2: link tx timeout [ 164.515320][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.564583][ T8727] loop1: detected capacity change from 0 to 32768 [ 164.605932][ T8742] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 164.662103][ T8742] FAT-fs (loop0): Filesystem has been set read-only [ 164.940290][ T8764] loop1: detected capacity change from 0 to 64 [ 164.958008][ T4198] Bluetooth: hci2: command 0x0406 tx timeout [ 164.992799][ T21] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 165.026580][ T8764] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 165.151347][ T8772] binder: 8771:8772 unknown command 1074553619 [ 165.158699][ T8772] binder: 8771:8772 ioctl c0306201 200000000000 returned -22 [ 165.225840][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 165.344350][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 165.423965][ T21] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 165.458585][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2090'. [ 165.498411][ T8786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2090'. [ 165.507647][ T8786] device vlan0 entered promiscuous mode [ 165.522645][ T8788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2091'. [ 165.598221][ T21] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 165.608050][ T4198] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.617437][ T21] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 165.653125][ T21] usb 4-1: Manufacturer: syz [ 165.659452][ T21] usb 4-1: SerialNumber: syz [ 165.882490][ T8806] TCP: TCP_TX_DELAY enabled [ 165.968237][ T4198] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.987776][ T4198] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.035725][ T21] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 166.037669][ T8813] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 166.039032][ T4198] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.065309][ T21] usb 4-1: USB disconnect, device number 8 [ 166.115523][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.168380][ T8780] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 166.187052][ T8818] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 166.227242][ T8818] netlink: 'syz.1.2106': attribute type 2 has an invalid length. [ 166.336333][ T8821] xt_CT: No such helper "snmp_trap" [ 166.544326][ T8835] loop0: detected capacity change from 0 to 8 [ 166.696626][ T8835] SQUASHFS error: xz decompression failed, data probably corrupt [ 166.722443][ T8835] SQUASHFS error: Failed to read block 0x108: -5 [ 166.750894][ T8835] SQUASHFS error: Unable to read metadata cache entry [106] [ 166.767782][ T8835] SQUASHFS error: Unable to read inode 0x11f [ 167.227530][ T8883] loop4: detected capacity change from 0 to 764 [ 167.266335][ T8874] loop0: detected capacity change from 0 to 4096 [ 167.287291][ T8883] rock: directory entry would overflow storage [ 167.306939][ T8883] rock: sig=0x4654, size=5, remaining=4 [ 167.334699][ T8874] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 167.366292][ T8883] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 167.400566][ T8874] ntfs3: loop0: mft corrupted [ 167.410043][ T8883] overlayfs: missing 'lowerdir' [ 167.419676][ T8874] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 167.448649][ T8874] ntfs3: loop0: Failed to load $BadClus. [ 167.633074][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 167.656070][ T4260] usb 3-1: USB disconnect, device number 10 [ 167.945522][ T8908] device syz_tun entered promiscuous mode [ 168.157811][ T4198] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 168.447664][ T8941] comedi comedi1: pcl724: I/O port conflict (0x100,4) [ 168.548395][ T4198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.586863][ T4198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.698191][ T4198] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 168.707283][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.738764][ T4198] usb 4-1: SerialNumber: syz [ 168.756793][ T8953] __nla_validate_parse: 2 callbacks suppressed [ 168.756811][ T8953] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2170'. [ 168.798439][ T8953] openvswitch: netlink: ct_state flags 00030000 unsupported [ 168.807131][ T4198] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 168.828294][ T4198] usb-storage 4-1:1.0: USB Mass Storage device detected [ 168.866040][ T4198] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 168.895046][ T4198] scsi host1: usb-storage 4-1:1.0 [ 169.357080][ T8940] loop0: detected capacity change from 0 to 32768 [ 169.448003][ T8993] netlink: 'syz.1.2198': attribute type 5 has an invalid length. [ 169.466945][ T8997] overlayfs: empty lowerdir [ 169.486810][ T8940] (syz.0.2164,8940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.517543][ T8940] (syz.0.2164,8940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.575698][ T8940] (syz.0.2164,8940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 169.639528][ T8940] JBD2: Ignoring recovery information on journal [ 169.788623][ T8940] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.906414][ T8940] (syz.0.2164,8940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 169.935253][ T8940] (syz.0.2164,8940,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 169.957298][ T8940] (syz.0.2164,8940,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 169.969734][ T8940] (syz.0.2164,8940,1):ocfs2_quota_read:201 ERROR: status = -5 [ 169.978530][ T8940] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 169.993451][ T8940] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 170.003360][ T8940] (syz.0.2164,8940,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 170.015018][ T8940] (syz.0.2164,8940,1):ocfs2_mknod:314 ERROR: status = -5 [ 170.022880][ T8940] (syz.0.2164,8940,1):ocfs2_mknod:502 ERROR: status = -5 [ 170.035241][ T8940] (syz.0.2164,8940,1):ocfs2_create:676 ERROR: status = -5 [ 170.086619][ T8995] loop4: detected capacity change from 0 to 32768 [ 170.126781][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 170.177636][ T21] usb 4-1: USB disconnect, device number 9 [ 170.400769][ T9014] loop4: detected capacity change from 0 to 2048 [ 170.496982][ T9014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.565893][ T9014] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 170.647875][ T9014] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 170.906030][ T9030] loop3: detected capacity change from 0 to 4096 [ 171.012639][ T9030] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 171.124403][ T9030] ntfs3: loop3: mft corrupted [ 171.147920][ T9030] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 171.179489][ T9030] ntfs3: loop3: Failed to load $BadClus. [ 171.327826][ T4231] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.567940][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 171.687974][ T4231] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 171.713492][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.752164][ T4231] usb 2-1: config 0 has no interface number 0 [ 171.927786][ T4198] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 171.938150][ T4231] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 171.957464][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.998470][ T4231] usb 2-1: Product: syz [ 172.002731][ T4231] usb 2-1: Manufacturer: syz [ 172.037905][ T4231] usb 2-1: SerialNumber: syz [ 172.055780][ T4231] usb 2-1: config 0 descriptor?? [ 172.165275][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2229'. [ 172.204085][ T9102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2230'. [ 172.308465][ T4198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.343860][ T4198] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.353941][ T21] usb 2-1: USB disconnect, device number 14 [ 172.397328][ T4198] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 172.443149][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.647551][ T9124] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2248'. [ 172.695910][ T9125] xt_TCPMSS: Only works on TCP SYN packets [ 172.728391][ T4198] ttusb_dec_send_command: result bulk message failed: error -22 [ 172.742687][ T4198] ttusb-dec: probe of 4-1:1.0 failed with error -22 [ 172.764805][ T4198] usb 4-1: USB disconnect, device number 10 [ 173.616710][ T9195] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2268'. [ 173.665589][ T9195] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 173.974291][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2277'. [ 174.007214][ T9228] loop4: detected capacity change from 0 to 512 [ 174.133805][ T9239] overlayfs: failed to resolve './bus': -2 [ 174.173624][ T9228] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 174.188793][ T9228] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.2280: corrupted in-inode xattr [ 174.209560][ T9228] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2280: couldn't read orphan inode 15 (err -117) [ 174.226867][ T9228] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000c3d6,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,journal_path=./bus,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 174.777965][ T4231] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.032599][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 175.268388][ T9320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2316'. [ 175.308088][ T4231] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 175.344467][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.388321][ T4231] usb 2-1: Product: syz [ 175.392548][ T4231] usb 2-1: Manufacturer: syz [ 175.397177][ T4231] usb 2-1: SerialNumber: syz [ 175.474970][ T4231] usb 2-1: config 0 descriptor?? [ 175.507994][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.542434][ T146] Bluetooth: hci5: urb ffff88802133eb00 submission failed (2) [ 175.607801][ T4260] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.760875][ T4231] usb 2-1: USB disconnect, device number 15 [ 175.939656][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.963471][ T21] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 175.978034][ T4260] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 175.980644][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.010941][ T4260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.048400][ T4260] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.104227][ T4260] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 176.134547][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.156588][ T4260] usb 1-1: config 0 descriptor?? [ 176.219150][ T4260] usb-storage 1-1:0.0: USB Mass Storage device detected [ 176.261456][ T4260] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 176.270657][ T21] msi2500 4-1:1.0: Registered as swradio24 [ 176.276533][ T21] msi2500 4-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 176.310434][ T21] usb 4-1: USB disconnect, device number 11 [ 176.447030][ T4198] usb 1-1: USB disconnect, device number 7 [ 177.059417][ T9399] loop1: detected capacity change from 0 to 8 [ 177.145911][ T9399] SQUASHFS error: Unable to read inode 0xe3 [ 177.417409][ T9421] loop0: detected capacity change from 0 to 2048 [ 177.457866][ T6368] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.514646][ T9421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.669580][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2363'. [ 177.737802][ T6368] usb 4-1: Using ep0 maxpacket: 8 [ 177.796442][ T9439] loop4: detected capacity change from 0 to 2048 [ 177.873990][ T9439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.888089][ T6368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.913643][ T6368] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.097995][ T6368] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 178.147765][ T6368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.155996][ T6368] usb 4-1: Product: syz [ 178.166123][ T6368] usb 4-1: Manufacturer: syz [ 178.184732][ T6368] usb 4-1: SerialNumber: syz [ 178.316115][ T9467] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2379'. [ 178.352246][ T9467] unsupported nla_type 65024 [ 178.464235][ T9474] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 178.523509][ T9474] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2383'. [ 178.600491][ T9483] netlink: 'syz.1.2387': attribute type 1 has an invalid length. [ 178.627872][ T9483] netlink: 'syz.1.2387': attribute type 1 has an invalid length. [ 178.655546][ T9483] netlink: 'syz.1.2387': attribute type 2 has an invalid length. [ 178.677947][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'. [ 178.807532][ T6368] usb 4-1: USB disconnect, device number 12 [ 178.822749][ T9494] loop4: detected capacity change from 0 to 256 [ 178.834971][ T9495] loop2: detected capacity change from 0 to 64 [ 178.878975][ T9494] exfat: Deprecated parameter 'utf8' [ 178.884977][ T9494] exfat: Deprecated parameter 'utf8' [ 178.911026][ T9495] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 178.917062][ T9494] exfat: Deprecated parameter 'utf8' [ 178.953113][ T9494] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 179.211334][ T9516] trusted_key: encrypted_key: insufficient parameters specified [ 179.357607][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.457282][ T9527] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 179.487497][ T9534] loop0: detected capacity change from 0 to 128 [ 179.570724][ T9544] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2416'. [ 179.823027][ T9562] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2427'. [ 179.897438][ T9568] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2428'. [ 179.954802][ T9568] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 180.082513][ T9578] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 180.384314][ T9586] xt_CT: No such helper "syz0" [ 180.432983][ T9596] loop4: detected capacity change from 0 to 256 [ 180.714885][ T9612] netlink: 'syz.2.2449': attribute type 1 has an invalid length. [ 180.756115][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 180.766455][ T9612] netlink: 'syz.2.2449': attribute type 3 has an invalid length. [ 180.792970][ T9612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2449'. [ 181.111154][ T9636] loop1: detected capacity change from 0 to 764 [ 181.179736][ T9636] rock: directory entry would overflow storage [ 181.201982][ T9636] rock: sig=0x4654, size=5, remaining=4 [ 181.245599][ T9636] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 181.275360][ T9636] overlayfs: missing 'lowerdir' [ 181.648762][ T9675] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 181.743672][ T9678] loop2: detected capacity change from 0 to 24 [ 181.808742][ T9678] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 181.833542][ T9678] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 181.883267][ T9678] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 182.009059][ T9689] misc userio: No port type given on /dev/userio [ 182.230089][ T4260] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.351790][ T9699] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 182.497962][ T4260] usb 5-1: Using ep0 maxpacket: 32 [ 182.605158][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'. [ 182.621512][ T4260] usb 5-1: config 1 has an invalid interface number: 216 but max is 0 [ 182.635594][ T4260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.657789][ T4260] usb 5-1: config 1 has no interface number 0 [ 182.666690][ T4260] usb 5-1: config 1 interface 216 has no altsetting 0 [ 182.674096][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'. [ 182.853725][ T4260] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 182.879588][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.919039][ T4260] usb 5-1: Product: syz [ 182.923268][ T4260] usb 5-1: Manufacturer: syz [ 182.970889][ T4260] usb 5-1: SerialNumber: syz [ 183.002735][ T9724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.146742][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2509'. [ 183.335167][ T4260] usb 5-1: USB disconnect, device number 9 [ 183.341300][ T4198] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.482599][ T9750] misc userio: No port type given on /dev/userio [ 183.653640][ T9759] xt_CT: No such helper "syz0" [ 183.718093][ T4198] usb 4-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.733450][ T4198] usb 4-1: config 1 interface 0 has no altsetting 0 [ 183.952482][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2531'. [ 183.978454][ T4198] usb 4-1: string descriptor 0 read error: -22 [ 183.984911][ T4198] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 184.027913][ T4198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.111516][ T4198] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 184.219358][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2540'. [ 184.318353][ T3545] bcm5974 4-1:1.0: could not read from device [ 184.332390][ T4198] usb 4-1: USB disconnect, device number 13 [ 184.598908][ T9816] loop1: detected capacity change from 0 to 64 [ 184.809615][ T9827] loop0: detected capacity change from 0 to 2048 [ 184.874990][ T9827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.929289][ T9827] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 184.958017][ T9827] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 185.207826][ T6404] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.357927][ T9861] __nla_validate_parse: 1 callbacks suppressed [ 185.357944][ T9861] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2572'. [ 185.477966][ T6404] usb 5-1: Using ep0 maxpacket: 16 [ 185.487876][ T4231] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 185.610611][ T6404] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.642473][ T6404] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.705268][ T9870] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 185.752534][ T9870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2576'. [ 185.764853][ T9870] nbd: couldn't find a device at index 1024 [ 185.868071][ T6404] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.878348][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.904474][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.922213][ T6404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.957789][ T6404] usb 5-1: Product: syz [ 185.962766][ T6404] usb 5-1: Manufacturer: syz [ 185.967403][ T6404] usb 5-1: SerialNumber: syz [ 185.998009][ T4198] Bluetooth: hci1: command 0x0406 tx timeout [ 186.012481][ T6368] Bluetooth: hci3: command 0x0406 tx timeout [ 186.019710][ T4231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 186.022756][ T6368] Bluetooth: hci4: command 0x0406 tx timeout [ 186.044155][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.052584][ T4231] usb 2-1: SerialNumber: syz [ 186.099069][ T4231] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 186.106110][ T4231] usb-storage 2-1:1.0: USB Mass Storage device detected [ 186.128669][ T4231] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 186.146780][ T4231] scsi host1: usb-storage 2-1:1.0 [ 186.349443][ T6368] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 186.520452][ T6404] usb 5-1: 0:2 : does not exist [ 186.595771][ T6404] usb 5-1: USB disconnect, device number 10 [ 186.663510][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 186.768438][ T6368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.790925][ T6368] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 186.806943][ T6368] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.947312][ T9915] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[9915] [ 186.991929][ T4198] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 187.016037][ T6368] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 187.030248][ T6368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.054457][ T6368] usb 4-1: Product: syz [ 187.063350][ T6368] usb 4-1: Manufacturer: syz [ 187.073648][ T6368] usb 4-1: SerialNumber: syz [ 187.093745][ T6368] usb 4-1: config 0 descriptor?? [ 187.165458][ T6368] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 187.172158][ T6368] usb 4-1: No valid video chain found. [ 187.199653][ T9923] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 187.257842][ T4198] usb 3-1: Using ep0 maxpacket: 8 [ 187.371684][ T6368] usb 4-1: USB disconnect, device number 14 [ 187.385427][ T9929] ipt_CLUSTERIP: bad num_local_nodes 18 [ 187.428784][ T4198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.482019][ T6405] usb 2-1: USB disconnect, device number 16 [ 187.536464][ T4198] usb 3-1: config index 0 descriptor too short (expected 10940, got 52) [ 187.552059][ T4198] usb 3-1: config 52 has too many interfaces: 38, using maximum allowed: 32 [ 187.570355][ T4198] usb 3-1: config 52 has an invalid interface descriptor of length 6, skipping [ 187.580160][ T4198] usb 3-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 187.597607][ T4198] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 38 [ 187.640306][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 187.679630][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 187.733693][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2609'. [ 187.783467][ T4198] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 187.799569][ T4198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.841995][ T4198] usb 3-1: Product: syz [ 187.846446][ T4198] usb 3-1: Manufacturer: syz [ 187.851122][ T4198] usb 3-1: SerialNumber: syz [ 187.942900][ T9947] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 188.217923][ T6404] usb 3-1: USB disconnect, device number 11 [ 188.318038][ T9966] kernel profiling enabled (shift: 9) [ 188.339975][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2623'. [ 188.348982][ T9967] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 188.380293][ T9967] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2623'. [ 188.649132][ T9979] netlink: 'syz.1.2628': attribute type 2 has an invalid length. [ 188.706220][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 188.763628][ T9985] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2632'. [ 189.236663][T10015] SET target dimension over the limit! [ 189.282887][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.753166][ T4231] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 190.987076][T10140] nft_compat: unsupported protocol 0 [ 191.132622][ T4231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.163172][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.248036][T10153] netlink: 'syz.3.2715': attribute type 3 has an invalid length. [ 191.347982][T10153] __nla_validate_parse: 5 callbacks suppressed [ 191.347998][T10153] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2715'. [ 191.378372][ T4231] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.398663][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.409274][ T4231] usb 2-1: Product: syz [ 191.413524][ T4231] usb 2-1: Manufacturer: syz [ 191.418150][ T4231] usb 2-1: SerialNumber: syz [ 191.480727][ T6405] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.767147][ T6405] usb 5-1: Using ep0 maxpacket: 8 [ 191.811617][ T4231] usb 2-1: 0:2 : does not exist [ 191.816615][ T4231] usb 2-1: unit 9 not found! [ 191.872870][ T4231] usb 2-1: USB disconnect, device number 17 [ 191.947634][ T6405] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.965390][ T6405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.014084][T10182] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.118143][T10184] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2731'. [ 192.127550][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.166523][ T6405] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 192.182382][ T6405] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 192.196839][ T6405] usb 5-1: Product: syz [ 192.201477][ T6405] usb 5-1: Manufacturer: syz [ 192.206173][ T6405] usb 5-1: SerialNumber: syz [ 192.232594][ T6405] usb 5-1: config 0 descriptor?? [ 192.311666][ T6405] imon_raw 5-1:0.0: IR endpoint missing [ 192.505596][T10177] loop0: detected capacity change from 0 to 32768 [ 192.514128][ T6404] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 192.546945][ T6405] usb 5-1: USB disconnect, device number 11 [ 192.586370][T10177] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 192.619457][T10177] BTRFS info (device loop0): setting nodatasum [ 192.625725][T10177] BTRFS info (device loop0): using free space tree [ 192.659539][T10177] BTRFS info (device loop0): has skinny extents [ 192.820620][ T6404] usb 3-1: Using ep0 maxpacket: 8 [ 192.954559][ T6404] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 192.963200][ T6404] usb 3-1: config 2 has no interface number 0 [ 192.969296][T10177] BTRFS info (device loop0): enabling ssd optimizations [ 192.977046][ T6404] usb 3-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 192.988578][ T6404] usb 3-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 193.002578][ T6404] usb 3-1: config 2 interface 111 has no altsetting 0 [ 193.009955][ T6404] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 193.019453][ T6404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.046932][T10233] loop1: detected capacity change from 0 to 256 [ 193.184976][ T26] audit: type=1326 audit(1786622480.709:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10237 comm="syz.4.2750" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561eb5d0d9 code=0x7ffc0000 [ 193.256252][ T26] audit: type=1326 audit(1786622480.709:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10237 comm="syz.4.2750" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561eb5d0d9 code=0x7ffc0000 [ 193.280399][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.331274][ T6404] usb 3-1: string descriptor 0 read error: -71 [ 193.377755][ T4349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4349) [ 193.403372][ T6404] usb 3-1: USB disconnect, device number 12 [ 193.416151][ T26] audit: type=1326 audit(1786622480.749:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10237 comm="syz.4.2750" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f561eb5d0d9 code=0x7ffc0000 [ 193.600016][ T26] audit: type=1326 audit(1786622480.749:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10237 comm="syz.4.2750" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561eb5d0d9 code=0x7ffc0000 [ 193.624134][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.716903][ T26] audit: type=1326 audit(1786622480.749:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10237 comm="syz.4.2750" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561eb5d0d9 code=0x7ffc0000 [ 194.213086][T10288] netlink: 'syz.0.2768': attribute type 32 has an invalid length. [ 194.325731][T10293] loop4: detected capacity change from 0 to 764 [ 194.390406][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.396820][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.421813][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2772'. [ 194.473040][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2772'. [ 194.512887][T10298] loop2: detected capacity change from 0 to 128 [ 194.964104][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 194.981763][T10268] loop1: detected capacity change from 0 to 32768 [ 195.176279][T10268] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 195.379505][ T4187] XFS (loop1): Unmounting Filesystem [ 195.447825][T10354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.501045][T10358] comedi comedi4: commands at RT priority not supported in this driver [ 195.522258][T10360] netlink: 'syz.4.2801': attribute type 21 has an invalid length. [ 195.551998][T10360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2801'. [ 195.762258][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2806'. [ 195.991527][T10376] loop2: detected capacity change from 0 to 4096 [ 196.144636][T10376] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.271290][T10398] netlink: 'syz.4.2818': attribute type 1 has an invalid length. [ 196.356762][T10376] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.2809: corrupted inode contents [ 196.460258][T10376] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.2809: mark_inode_dirty error [ 196.518513][T10376] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.2809: corrupted inode contents [ 196.563163][T10376] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.2809: mark_inode_dirty error [ 196.599585][T10376] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.2809: corrupted inode contents [ 196.623977][T10376] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.2809: mark_inode_dirty error [ 196.652068][T10376] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.2809: corrupted inode contents [ 196.723931][T10376] EXT4-fs error (device loop2): ext4_truncate:4286: inode #15: comm syz.2.2809: mark_inode_dirty error [ 196.737553][T10406] loop0: detected capacity change from 0 to 4096 [ 196.758252][T10376] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 196.833672][T10406] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 196.876633][T10406] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 196.917878][T10406] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 196.989140][T10406] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 197.071708][T10406] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 197.094138][T10422] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 197.130143][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2829'. [ 197.143597][T10422] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 197.154091][T10406] ntfs: volume version 3.1. [ 197.166763][T10422] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 197.259669][T10428] loop3: detected capacity change from 0 to 512 [ 197.421272][T10428] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 197.708296][T10459] xt_ecn: cannot match TCP bits for non-tcp packets [ 198.026603][T10482] loop4: detected capacity change from 0 to 256 [ 198.084572][T10489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.287590][T10491] loop0: detected capacity change from 0 to 4096 [ 198.350632][ T6405] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.402021][T10491] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 198.532892][T10513] loop4: detected capacity change from 0 to 64 [ 198.748145][T10521] device bridge2 entered promiscuous mode [ 198.768074][T10525] netlink: 'syz.4.2878': attribute type 8 has an invalid length. [ 198.949349][ T6405] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 198.958548][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.016431][ T6405] usb 2-1: Product: syz [ 199.041026][ T6405] usb 2-1: Manufacturer: syz [ 199.045680][ T6405] usb 2-1: SerialNumber: syz [ 199.089134][ T6405] usb 2-1: config 0 descriptor?? [ 199.363441][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.395896][ T6405] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v23 fw v38.6.0 (1 channels) [ 199.424251][T10545] loop2: detected capacity change from 0 to 4096 [ 199.465411][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.496272][T10545] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 199.538373][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.597588][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.610743][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.621495][ T6405] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 199.630025][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.639999][ T6405] peak_usb 2-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 199.771591][ T6405] peak_usb: probe of 2-1:0.0 failed with error -71 [ 199.813499][ T6405] usb 2-1: USB disconnect, device number 18 [ 200.168240][T10558] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2895'. [ 200.199817][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 200.435836][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2905'. [ 200.500544][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2907'. [ 200.539019][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2907'. [ 200.963085][T10605] netlink: 'syz.1.2918': attribute type 22 has an invalid length. [ 201.017160][T10605] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 201.337965][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 201.355728][T10626] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 201.366715][T10626] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2928'. [ 201.404683][T10576] loop2: detected capacity change from 0 to 32768 [ 201.491153][T10576] [ 201.491153][T10576] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.491153][T10576] [ 201.527678][T10576] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 201.527678][T10576] [ 201.555451][ T6404] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 201.570009][T10576] xtLookup: xtSearch returned -5 [ 201.652298][ T4194] [ 201.652298][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.652298][ T4194] [ 201.715005][ T4194] [ 201.715005][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.715005][ T4194] [ 201.756593][ T4260] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 201.980175][ T6404] usb 5-1: config 202 has an invalid interface number: 137 but max is 0 [ 201.997170][ T6404] usb 5-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 202.019829][ T6404] usb 5-1: config 202 has no interface number 0 [ 202.036711][ T6404] usb 5-1: config 202 interface 137 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.051617][T10653] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2941'. [ 202.061744][ T6404] usb 5-1: config 202 interface 137 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 202.080650][ T6404] usb 5-1: config 202 interface 137 has no altsetting 0 [ 202.180857][T10655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2942'. [ 202.252449][ T6368] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.253394][ T4260] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 202.271830][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 202.274782][ T6404] usb 5-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=5b.ac [ 202.283503][ T4260] usb 2-1: Product: syz [ 202.291057][ T6405] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 202.294678][ T4260] usb 2-1: SerialNumber: syz [ 202.308593][ T4260] usb 2-1: config 0 descriptor?? [ 202.313927][ T6404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.322073][ T6404] usb 5-1: Product: syz [ 202.326732][ T6404] usb 5-1: Manufacturer: syz [ 202.331381][ T6404] usb 5-1: SerialNumber: syz [ 202.566353][ T6405] usb 4-1: Using ep0 maxpacket: 8 [ 202.576570][ T4260] hso 2-1:0.0: Can't find BULK IN endpoint [ 202.659132][ T6404] io_ti 5-1:202.137: required endpoints missing [ 202.666012][ T6368] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.677591][ T6368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.687328][ T6404] usb 5-1: USB disconnect, device number 12 [ 202.710654][ T6368] usb 3-1: config 0 descriptor?? [ 202.768763][ T6405] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.779019][ T6368] cp210x 3-1:0.0: cp210x converter detected [ 202.794297][ T4229] usb 2-1: USB disconnect, device number 19 [ 202.889973][ T6405] usb 4-1: config index 0 descriptor too short (expected 10940, got 52) [ 202.898685][ T6405] usb 4-1: config 52 has too many interfaces: 38, using maximum allowed: 32 [ 202.907631][ T6405] usb 4-1: config 52 has an invalid interface descriptor of length 6, skipping [ 202.916707][ T6405] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 202.926992][ T6405] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 38 [ 202.997526][ T6368] usb 3-1: cp210x converter now attached to ttyUSB0 [ 203.102334][ T6405] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 203.111528][ T6405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.130593][ T6405] usb 4-1: Product: syz [ 203.134900][ T6405] usb 4-1: Manufacturer: syz [ 203.139539][ T6405] usb 4-1: SerialNumber: syz [ 203.202465][ T4231] usb 3-1: USB disconnect, device number 13 [ 203.231087][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.260356][ T4231] cp210x 3-1:0.0: device disconnected [ 203.423503][T10669] ipt_CLUSTERIP: unknown mode 3918972798 [ 203.436917][ T4260] usb 4-1: USB disconnect, device number 15 [ 204.209552][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2971'. [ 204.464016][T10737] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 204.543169][T10737] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 204.648854][ T4260] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.735424][T10756] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2990'. [ 204.830502][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 204.901165][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 205.022662][ T4260] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.046259][ T4260] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.080351][T10778] netlink: 'syz.1.3002': attribute type 3 has an invalid length. [ 205.083792][T10776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.209519][ T13] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 205.224919][ T4260] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 205.251628][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.268741][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.294997][ T4260] usb 3-1: Product: syz [ 205.313987][ T13] usb 4-1: config 0 descriptor?? [ 205.323519][ T4260] usb 3-1: Manufacturer: syz [ 205.346035][ T4260] usb 3-1: SerialNumber: syz [ 205.459140][T10795] netlink: 800 bytes leftover after parsing attributes in process `syz.4.3010'. [ 205.469790][T10795] netlink: 1301 bytes leftover after parsing attributes in process `syz.4.3010'. [ 205.536159][T10791] loop1: detected capacity change from 0 to 4096 [ 205.601515][T10791] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 205.749646][ T4260] usb 3-1: unit 5 not found! [ 205.754368][ T4260] usb 3-1: unit 0 not found! [ 205.812740][ T13] ath6kl: Failed to submit usb control message: -71 [ 205.819422][ T13] ath6kl: unable to send the bmi data to the device: -71 [ 205.845414][ T4260] usb 3-1: USB disconnect, device number 14 [ 205.860406][ T13] ath6kl: Unable to send get target info: -71 [ 205.907646][ T13] ath6kl: Failed to init ath6kl core: -71 [ 205.968355][ T13] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 205.983059][ T13] usb 4-1: USB disconnect, device number 16 [ 206.139534][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.517737][ T4229] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 206.608291][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 206.936771][T10866] netlink: 'syz.2.3041': attribute type 21 has an invalid length. [ 206.952236][T10866] netlink: 'syz.2.3041': attribute type 6 has an invalid length. [ 206.966202][ T4229] usb 1-1: config 202 has an invalid interface number: 137 but max is 0 [ 206.980078][T10866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3041'. [ 206.993099][ T4229] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 207.044020][ T4229] usb 1-1: config 202 has no interface number 0 [ 207.077084][ T4229] usb 1-1: config 202 interface 137 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.108293][T10870] netlink: 'syz.2.3047': attribute type 21 has an invalid length. [ 207.117932][ T4229] usb 1-1: config 202 interface 137 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 207.147391][ T4229] usb 1-1: config 202 interface 137 has no altsetting 0 [ 207.163601][T10870] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3047'. [ 207.323830][ T4229] usb 1-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=5b.ac [ 207.348800][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.364516][T10881] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3053'. [ 207.377495][ T4229] usb 1-1: Product: syz [ 207.381812][ T4229] usb 1-1: Manufacturer: syz [ 207.406301][ T4229] usb 1-1: SerialNumber: syz [ 207.577743][T10894] loop4: detected capacity change from 0 to 512 [ 207.619888][T10894] EXT4-fs (loop4): Ignoring removed orlov option [ 207.635157][T10894] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 207.687258][T10894] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 207.718395][T10894] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3058: attempt to clear invalid blocks 2 len 1 [ 207.772256][T10894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 207.780051][ T4229] io_ti 1-1:202.137: required endpoints missing [ 207.798745][T10894] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3058: invalid indirect mapped block 1819239214 (level 0) [ 207.828525][T10894] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3058: invalid indirect mapped block 1819239214 (level 1) [ 207.862717][ T4229] usb 1-1: USB disconnect, device number 8 [ 207.884423][T10894] EXT4-fs (loop4): 1 truncate cleaned up [ 207.890665][ T4260] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 207.907214][T10894] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 208.172160][T10919] loop1: detected capacity change from 0 to 128 [ 208.261597][ T4260] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 208.332172][ T4260] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 208.372389][ T4260] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 208.386351][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.396483][T10929] loop2: detected capacity change from 0 to 512 [ 208.439069][T10933] loop0: detected capacity change from 0 to 256 [ 208.513296][T10929] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.3075: invalid block [ 208.552565][T10929] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3075: invalid indirect mapped block 10 (level 1) [ 208.625951][T10929] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3075: invalid indirect mapped block 8 (level 1) [ 208.640872][T10929] EXT4-fs (loop2): 1 truncate cleaned up [ 208.647328][T10929] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 208.684989][ T4260] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 208.693914][ T4260] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19 [ 208.747010][ T4260] input: failed to attach handler kbd to device input19, error: -5 [ 208.837907][ T4260] usb 4-1: USB disconnect, device number 17 [ 209.124576][T10964] device wlan0 entered promiscuous mode [ 209.153699][T10964] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 209.300467][T10974] netlink: 'syz.4.3097': attribute type 5 has an invalid length. [ 209.519963][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 209.662019][ T6405] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.105483][ T6405] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 210.114585][ T6405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.134412][ T6405] usb 3-1: config 0 descriptor?? [ 210.274477][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3115'. [ 210.474235][T11021] netlink: 'syz.0.3120': attribute type 1 has an invalid length. [ 210.529426][T10994] loop4: detected capacity change from 0 to 32768 [ 210.541438][T10997] loop3: detected capacity change from 0 to 32768 [ 210.620048][ T6405] ath6kl: Failed to submit usb control message: -71 [ 210.632263][ T6405] ath6kl: unable to send the bmi data to the device: -71 [ 210.637179][T10994] jfs_strtoUCS: char2uni returned -22. [ 210.661725][ T6405] ath6kl: Unable to send get target info: -71 [ 210.672625][T10994] charset = cp864, char = 0x9f [ 210.680200][ T6405] ath6kl: Failed to init ath6kl core: -71 [ 210.750370][ T6405] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 210.786129][ T6405] usb 3-1: USB disconnect, device number 15 [ 211.222211][T11035] loop0: detected capacity change from 0 to 4096 [ 211.372612][T11035] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 211.434198][ T6405] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 211.496990][T11053] netlink: 'syz.3.3136': attribute type 10 has an invalid length. [ 211.623800][T11057] xt_ecn: cannot match TCP bits for non-tcp packets [ 211.657130][ T4229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 211.665550][T11053] team0: Device hsr_slave_0 failed to register rx_handler [ 211.759201][T11061] usb usb8: usbfs: process 11061 (syz.0.3140) did not claim interface 32 before use [ 211.786335][T11059] netlink: 'syz.2.3139': attribute type 3 has an invalid length. [ 211.877243][ T6405] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.947678][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 211.988081][ T6405] usb 2-1: config 35 has an invalid interface number: 223 but max is 0 [ 211.996393][ T6405] usb 2-1: config 35 has no interface number 0 [ 212.043583][ T6405] usb 2-1: config 35 interface 223 has no altsetting 0 [ 212.269973][ T4229] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 212.279252][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.319811][ T4229] usb 5-1: Product: syz [ 212.324127][ T4229] usb 5-1: Manufacturer: syz [ 212.328750][ T4229] usb 5-1: SerialNumber: syz [ 212.333823][ T6405] usb 2-1: string descriptor 0 read error: -22 [ 212.340351][ T6405] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 212.349430][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.392206][ T4229] usb 5-1: config 0 descriptor?? [ 212.442909][ T4229] gspca_main: spca508-2.14.0 probing 041e:4018 [ 212.453634][ T6405] usb_ehset_test: probe of 2-1:35.223 failed with error -32 [ 212.668696][ T6405] usb 2-1: USB disconnect, device number 20 [ 212.678203][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3165'. [ 212.893465][ T4229] gspca_spca508: reg_read err -71 [ 212.931061][ T4229] gspca_spca508: reg_read err -71 [ 212.943076][T11126] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 212.964195][ T4229] gspca_spca508: reg_read err -71 [ 212.994496][ T4229] gspca_spca508: reg_read err -71 [ 213.024183][ T4229] gspca_spca508: reg write: error -71 [ 213.029939][ T4229] spca508: probe of 5-1:0.0 failed with error -71 [ 213.067963][ T4229] usb 5-1: USB disconnect, device number 13 [ 213.132879][T11134] loop3: detected capacity change from 0 to 512 [ 213.143491][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3177'. [ 213.201831][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3178'. [ 213.233123][T11134] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3176: invalid indirect mapped block 10 (level 1) [ 213.246808][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3178'. [ 213.286914][T11134] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3176: invalid indirect mapped block 8 (level 1) [ 213.305395][T11134] EXT4-fs (loop3): 1 truncate cleaned up [ 213.313271][T11134] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 213.747998][T11171] loop1: detected capacity change from 0 to 256 [ 213.823740][T11171] exfat: Deprecated parameter 'utf8' [ 213.834008][T11171] exfat: Deprecated parameter 'namecase' [ 213.890147][T11171] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 214.210804][ T4260] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 214.325788][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 214.325804][ T26] audit: type=1400 audit(1786622501.606:17): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=11211 comm="syz.1.3213" [ 214.462270][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 214.583110][ T4260] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.605898][ T4260] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.697965][T11235] loop1: detected capacity change from 0 to 512 [ 214.830174][ T4260] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 214.854301][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.869653][T11235] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.3220: invalid block [ 214.890963][ T4260] usb 4-1: Product: syz [ 214.896690][T11235] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3220: invalid indirect mapped block 10 (level 1) [ 214.920331][ T4260] usb 4-1: Manufacturer: syz [ 214.945562][ T4260] usb 4-1: SerialNumber: syz [ 214.953872][T11235] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3220: invalid indirect mapped block 8 (level 1) [ 214.978807][ T4260] usb 4-1: config 0 descriptor?? [ 215.005539][T11235] EXT4-fs (loop1): 1 truncate cleaned up [ 215.021579][T11235] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 215.034345][ T4260] qmi_wwan 4-1:0.0: bogus CDC Union: master=1, slave=0 [ 215.071542][ T4260] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 215.252885][ T6405] usb 4-1: USB disconnect, device number 18 [ 215.309960][T11268] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3236'. [ 215.349719][T11268] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3236'. [ 215.417771][T11268] bond0: (slave bond_slave_0): Releasing backup interface [ 215.490587][T11268] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 215.926387][T11294] loop2: detected capacity change from 0 to 256 [ 216.140244][T11294] FAT-fs (loop2): Directory bread(block 64) failed [ 216.161098][T11294] FAT-fs (loop2): Directory bread(block 65) failed [ 216.167846][T11294] FAT-fs (loop2): Directory bread(block 66) failed [ 216.190221][T11294] FAT-fs (loop2): Directory bread(block 67) failed [ 216.210962][T11294] FAT-fs (loop2): Directory bread(block 68) failed [ 216.218150][T11294] FAT-fs (loop2): Directory bread(block 69) failed [ 216.246978][T11294] FAT-fs (loop2): Directory bread(block 70) failed [ 216.265870][T11294] FAT-fs (loop2): Directory bread(block 71) failed [ 216.288691][T11294] FAT-fs (loop2): Directory bread(block 72) failed [ 216.305360][T11294] FAT-fs (loop2): Directory bread(block 73) failed [ 216.319963][T11318] loop1: detected capacity change from 0 to 64 [ 216.469661][T11326] SET target dimension over the limit! [ 216.475575][ T4229] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 216.578119][T11331] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3268'. [ 216.619763][T11333] IPVS: length: 77 != 8 [ 216.726009][T11336] loop0: detected capacity change from 0 to 256 [ 216.837495][T11336] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 216.884734][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 216.924925][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.145899][ T4229] usb 4-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 217.155005][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.223434][ T4229] usb 4-1: Product: syz [ 217.233563][ T4229] usb 4-1: Manufacturer: syz [ 217.247911][ T4229] usb 4-1: SerialNumber: syz [ 217.280710][ T4229] usb 4-1: config 0 descriptor?? [ 217.553741][ T4229] usb 4-1: USB disconnect, device number 19 [ 217.797053][T11397] netlink: 'syz.1.3299': attribute type 3 has an invalid length. [ 217.828646][T11397] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3299'. [ 218.012712][T11408] blk_update_request: I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.065082][T11414] loop4: detected capacity change from 0 to 512 [ 218.226478][T11414] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.3306: invalid block [ 218.270706][T11414] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3306: invalid indirect mapped block 10 (level 1) [ 218.336666][T11414] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3306: invalid indirect mapped block 8 (level 1) [ 218.388499][T11414] EXT4-fs (loop4): 1 truncate cleaned up [ 218.402956][T11414] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 218.830725][T11452] dlm: no locking on control device [ 218.897002][T11445] loop2: detected capacity change from 0 to 4096 [ 218.939611][T11459] x_tables: duplicate underflow at hook 2 [ 219.027948][T11445] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 219.942872][T11528] netlink: 'syz.0.3354': attribute type 21 has an invalid length. [ 219.973011][T11531] loop3: detected capacity change from 0 to 256 [ 220.002490][T11528] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3354'. [ 220.026453][T11534] loop1: detected capacity change from 0 to 256 [ 220.044698][T11528] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 220.066110][T11528] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3354'. [ 220.076715][T11538] dlm: non-version read from control device 169 [ 220.118531][T11534] exfat: Deprecated parameter 'utf8' [ 220.123950][T11534] exfat: Deprecated parameter 'namecase' [ 220.195395][T11534] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 220.528900][T11565] loop4: detected capacity change from 0 to 1024 [ 220.796881][T11586] loop1: detected capacity change from 0 to 256 [ 220.871107][T11586] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 220.924336][T11586] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 221.038813][T11600] binder: 11598:11600 ioctl c018620c 200000000380 returned -22 [ 221.512573][T11627] loop1: detected capacity change from 0 to 512 [ 221.638061][T11627] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 221.671321][T11594] loop2: detected capacity change from 0 to 32768 [ 221.734750][T11627] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.3397: bad orphan inode 15 [ 221.741499][T11594] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.3382 (11594) [ 221.764908][T11627] ext4_test_bit(bit=14, block=18) = 1 [ 221.771557][T11627] is_bad_inode(inode)=0 [ 221.776225][T11627] NEXT_ORPHAN(inode)=1023 [ 221.780589][T11627] max_ino=32 [ 221.784753][T11627] i_nlink=0 [ 221.788784][T11627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.801477][T11627] ext2 filesystem being mounted at /624/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 221.863613][T11627] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.3397: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 221.892549][T11594] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 221.902234][T11594] BTRFS info (device loop2): enabling ssd optimizations [ 221.924167][T11594] BTRFS info (device loop2): not using ssd optimizations [ 221.931359][T11594] BTRFS info (device loop2): turning off barriers [ 221.951719][T11594] BTRFS info (device loop2): use no compression [ 221.958321][T11594] BTRFS info (device loop2): using free space tree [ 221.976326][T11594] BTRFS info (device loop2): has skinny extents [ 222.121447][T11669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.246463][T11687] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 222.275452][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 222.284758][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 222.364659][T11686] netlink: 'syz.0.3419': attribute type 6 has an invalid length. [ 222.512831][T11704] ip6t_srh: unknown srh invflags 4000 [ 222.555608][T11709] device wlan0 entered promiscuous mode [ 222.571916][T11709] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 222.615475][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 222.629036][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3431'. [ 222.722137][T11717] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 222.787072][T11717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3433'. [ 222.826723][T11717] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3433'. [ 223.228430][T11746] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 223.338939][ T4229] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 223.465473][T11754] loop4: detected capacity change from 0 to 4096 [ 223.565252][T11754] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 223.615146][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 223.759964][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.800016][ T4229] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 223.810282][ T6405] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 224.000800][ T6368] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 224.008703][ T4229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 224.042584][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.061464][ T6405] usb 1-1: Using ep0 maxpacket: 8 [ 224.096844][ T4229] usb 4-1: Product: syz [ 224.122825][ T4229] usb 4-1: Manufacturer: syz [ 224.127489][ T4229] usb 4-1: SerialNumber: syz [ 224.167464][ T4229] usb 4-1: config 0 descriptor?? [ 224.233043][ T6405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 224.290026][ T6405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.339328][ T6405] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.396413][ T6405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 224.412352][ T6405] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 224.442177][ T6405] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 224.472150][ T4229] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 224.498707][ T4229] f0 e4 3d a7 d3 60 4f fe [ 224.507867][ T6405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.526467][ T4229] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 224.565335][ T6405] usb 1-1: config 0 descriptor?? [ 224.603535][ T6368] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 224.613489][T11770] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 224.631599][ T6368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.712601][ T6368] usb 2-1: Product: syz [ 224.730376][ T6368] usb 2-1: Manufacturer: syz [ 224.752880][ T6368] usb 2-1: SerialNumber: syz [ 224.772410][ T6405] usb 4-1: USB disconnect, device number 20 [ 224.785421][ T6368] usb 2-1: config 0 descriptor?? [ 224.843956][ T6368] hub 2-1:0.0: bad descriptor, ignoring hub [ 224.866766][ T6368] hub: probe of 2-1:0.0 failed with error -5 [ 224.886324][ T6368] f81232 2-1:0.0: f81534a converter detected [ 225.056825][ T6368] usb 2-1: f81534a converter now attached to ttyUSB0 [ 225.116916][T11730] usb 1-1: USB disconnect, device number 9 [ 225.385375][ T6368] usb 2-1: USB disconnect, device number 21 [ 225.395300][ T6368] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 225.404335][ T6368] f81232 2-1:0.0: device disconnected [ 225.690502][T11812] loop0: detected capacity change from 0 to 512 [ 225.743145][T11812] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.3472: invalid block [ 225.803333][T11812] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3472: invalid indirect mapped block 10 (level 1) [ 225.885314][T11821] loop3: detected capacity change from 0 to 256 [ 225.921755][T11812] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3472: invalid indirect mapped block 8 (level 1) [ 225.970331][T11815] loop4: detected capacity change from 0 to 4096 [ 225.989198][T11812] EXT4-fs (loop0): 1 truncate cleaned up [ 225.994982][T11812] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 226.053080][T11815] ntfs3: loop4: ino=3, Correct links count -> 2. [ 226.290618][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'. [ 226.417304][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.456865][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.473656][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.149423][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 227.165119][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 227.180876][T11890] ipt_CLUSTERIP: unknown mode 3918972798 [ 227.965291][T11930] syz.1.3534 uses obsolete (PF_INET,SOCK_PACKET) [ 227.998112][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'. [ 228.296346][T11943] netlink: 'syz.0.3540': attribute type 2 has an invalid length. [ 228.317768][T11898] loop2: detected capacity change from 0 to 32768 [ 228.482864][T11898] jfs_strtoUCS: char2uni returned -22. [ 228.488391][T11898] charset = cp864, char = 0x9f [ 229.117625][T11984] loop1: detected capacity change from 0 to 4096 [ 229.281612][T11984] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 229.494137][T12010] SET target dimension over the limit! [ 230.254283][T12062] netlink: 'syz.0.3596': attribute type 5 has an invalid length. [ 230.497104][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 230.652999][T12093] loop4: detected capacity change from 0 to 2048 [ 230.749962][T12098] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.859713][ T4227] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 230.918693][ T6405] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 231.137437][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 231.257789][ T4227] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 231.268252][T12120] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 231.418025][ T4227] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 231.427231][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.464742][ T4227] usb 4-1: Product: syz [ 231.470396][ T4227] usb 4-1: Manufacturer: syz [ 231.475041][ T4227] usb 4-1: SerialNumber: syz [ 231.490755][ T4227] r8152-cfgselector 4-1: config 0 descriptor?? [ 231.528442][ T6405] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 231.547901][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.556065][ T6405] usb 2-1: Product: syz [ 231.588214][ T6405] usb 2-1: Manufacturer: syz [ 231.600988][ T6405] usb 2-1: SerialNumber: syz [ 231.616739][ T6405] usb 2-1: config 0 descriptor?? [ 231.654315][T12141] loop4: detected capacity change from 0 to 512 [ 231.737436][T12141] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.3634: missing EA_INODE flag [ 231.772830][T12141] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3634: error while reading EA inode 2 err=-117 [ 231.814601][T12141] EXT4-fs (loop4): 1 orphan inode deleted [ 231.823326][T12141] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 231.898301][ T4229] usb 2-1: USB disconnect, device number 22 [ 231.968995][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 231.988871][ T4227] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 232.173925][T12160] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.3641' sets config #0 [ 232.705671][ T4285] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 232.851230][T12181] loop1: detected capacity change from 0 to 32768 [ 232.871448][T12181] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.3648 (12181) [ 232.917727][T12181] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 232.952798][T12181] BTRFS info (device loop1): enabling ssd optimizations [ 232.970088][T12181] BTRFS info (device loop1): not using ssd optimizations [ 232.996558][T12181] BTRFS info (device loop1): turning off barriers [ 233.007675][T12181] BTRFS info (device loop1): use no compression [ 233.035373][T12181] BTRFS info (device loop1): using free space tree [ 233.044806][T12181] BTRFS info (device loop1): has skinny extents [ 233.081505][T12185] loop3: detected capacity change from 0 to 32768 [ 233.116442][ T4285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.161286][ T4285] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.193142][T12185] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 233.240111][T12185] JBD2: Ignoring recovery information on journal [ 233.324631][T12185] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 233.409314][ T4285] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 233.430983][ T4285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.444513][ T4285] usb 5-1: Product: syz [ 233.446712][ T4179] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (4179) [ 233.456913][ T4285] usb 5-1: Manufacturer: syz [ 233.468549][ T4285] usb 5-1: SerialNumber: syz [ 233.533422][T12185] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 233.611508][ T4227] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 233.636433][T12185] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 233.696356][T12185] OCFS2: File system is now read-only. [ 233.724603][T12185] (syz.3.3649,12185,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 233.734283][T12185] (syz.3.3649,12185,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 233.742567][T12185] (syz.3.3649,12185,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 233.751283][T12185] (syz.3.3649,12185,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 233.760436][T12185] (syz.3.3649,12185,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 233.769161][T12185] (syz.3.3649,12185,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 233.794305][T12185] (syz.3.3649,12185,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 233.815740][T12185] (syz.3.3649,12185,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 233.830675][T12185] (syz.3.3649,12185,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 233.870381][T12185] (syz.3.3649,12185,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 233.912279][T12185] (syz.3.3649,12185,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 233.928900][T12185] (syz.3.3649,12185,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 233.943591][T12185] (syz.3.3649,12185,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 233.958993][ T4285] usb 5-1: 0:2 : does not exist [ 233.964892][ T4285] usb 5-1: unit 4 not found! [ 233.982357][ T4227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.996196][T12185] (syz.3.3649,12185,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 234.015249][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.057849][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 234.063696][T12185] (syz.3.3649,12185,1):ocfs2_mknod:357 ERROR: status = -30 [ 234.081386][ T4285] usb 5-1: USB disconnect, device number 14 [ 234.126374][ T4227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.140282][T12185] (syz.3.3649,12185,1):ocfs2_mknod:502 ERROR: status = -30 [ 234.171217][T12185] (syz.3.3649,12185,1):ocfs2_mkdir:659 ERROR: status = -30 [ 234.192427][ T4227] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 234.201534][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.256853][ T4227] usb 3-1: config 0 descriptor?? [ 234.295749][ T4227] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 234.361274][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 234.431577][T12247] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 234.544871][T10253] usb 3-1: USB disconnect, device number 16 [ 234.616163][T10253] appletouch 3-1:0.0: input: appletouch disconnected [ 235.176429][ T26] audit: type=1400 audit(1786622522.403:18): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12288 comm="syz.2.3679" [ 235.467502][T12311] netlink: 'syz.4.3692': attribute type 2 has an invalid length. [ 235.512588][T12311] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3692'. [ 235.534963][T12318] bridge0: port 3(bond0) entered blocking state [ 235.541461][T12318] bridge0: port 3(bond0) entered disabled state [ 235.555319][T12318] device bond0 entered promiscuous mode [ 235.584490][T12318] device bond_slave_0 entered promiscuous mode [ 235.609425][T12318] device bond_slave_1 entered promiscuous mode [ 235.619829][T12323] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 235.633251][T12318] bridge0: port 3(bond0) entered blocking state [ 235.640317][T12318] bridge0: port 3(bond0) entered forwarding state [ 235.738644][T12329] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.3700'. [ 235.783694][T12334] loop0: detected capacity change from 0 to 512 [ 235.868165][T12334] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 236.001952][T12334] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3702: bad orphan inode 15 [ 236.045351][T12334] ext4_test_bit(bit=14, block=18) = 1 [ 236.050825][T12334] is_bad_inode(inode)=0 [ 236.091211][T12334] NEXT_ORPHAN(inode)=1023 [ 236.102105][T12357] device vlan0 entered promiscuous mode [ 236.114827][T12334] max_ino=32 [ 236.133666][T12334] i_nlink=0 [ 236.142691][T12334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.205122][T12357] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 236.241444][T12334] ext2 filesystem being mounted at /818/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 236.285821][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 236.323693][T12334] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.3702: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 236.326203][T12351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 236.426641][T12368] netlink: 'syz.4.3717': attribute type 2 has an invalid length. [ 236.553720][T12372] overlayfs: unrecognized mount option "\" or missing value [ 236.622067][T12376] netlink: 'syz.4.3722': attribute type 3 has an invalid length. [ 236.916350][T12394] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3730'. [ 236.925558][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3730'. [ 237.415776][T12422] netlink: 'syz.2.3743': attribute type 2 has an invalid length. [ 237.514387][T12422] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 237.583461][T12422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.799765][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3755'. [ 238.088602][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 238.142234][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 238.183718][T12471] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 238.225227][T12471] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 238.247409][T12471] device bridge3 entered promiscuous mode [ 238.304470][T12481] loop2: detected capacity change from 0 to 1024 [ 238.347978][ T4227] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 238.437244][T12481] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.3770: lblock 2 mapped to illegal pblock 2 (length 1) [ 238.478078][T11730] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 238.507055][T12481] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 238.522705][T12481] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.3770: lblock 0 mapped to illegal pblock 48 (length 1) [ 238.537271][T12481] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 238.565066][T12481] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.3770: Failed to acquire dquot type 0 [ 238.623334][T12481] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 238.659223][T12481] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.3770: mark_inode_dirty error [ 238.706714][T12481] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 238.718717][ T4227] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 238.726762][ T4227] usb 2-1: config 0 has no interface number 0 [ 238.733263][T11730] usb 4-1: Using ep0 maxpacket: 16 [ 238.733386][T12481] EXT4-fs (loop2): 1 orphan inode deleted [ 238.758528][ T309] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.763955][ T4227] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 238.787786][T12481] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 238.809694][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.828877][ T4227] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 238.846532][ T309] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 238.858735][T11730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 238.873416][ T4227] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 238.878643][ T309] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 238.898833][T11730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 238.929268][ T4227] usb 2-1: config 0 interface 2 has no altsetting 0 [ 238.987150][ T4236] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 239.026951][ T4236] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 239.036819][ T4236] EXT4-fs error (device loop2): ext4_write_dquot:6216: comm kworker/u4:5: Failed to commit dquot type 0 [ 239.075656][ T4236] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 239.094612][ T4194] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 239.109063][ T4227] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 239.114342][ T4194] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 239.118153][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.135928][T11730] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 239.149751][T11730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.164785][ T4194] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 239.174747][T11730] usb 4-1: Product: syz [ 239.180466][T11730] usb 4-1: Manufacturer: syz [ 239.185094][T11730] usb 4-1: SerialNumber: syz [ 239.189914][ T4227] usb 2-1: Product: syz [ 239.194178][ T4227] usb 2-1: Manufacturer: syz [ 239.213427][T11730] usb 4-1: config 0 descriptor?? [ 239.220087][ T4227] usb 2-1: SerialNumber: syz [ 239.235007][ T4227] usb 2-1: config 0 descriptor?? [ 239.259386][T12468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.267262][T11730] hub 4-1:0.0: bad descriptor, ignoring hub [ 239.283191][T11730] hub: probe of 4-1:0.0 failed with error -5 [ 239.291722][T12468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.731492][T11730] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 239.775787][ T4227] usb 2-1: USB disconnect, device number 23 [ 239.800628][T11730] usb 4-1: USB disconnect, device number 22 [ 239.804590][ T5389] udevd[5389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 240.243332][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 240.312600][T12552] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 240.526485][T12524] loop4: detected capacity change from 0 to 32768 [ 240.640171][T12524] JBD2: Ignoring recovery information on journal [ 240.844347][T12524] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 240.862335][T12584] netlink: 'syz.3.3819': attribute type 2 has an invalid length. [ 240.890623][T12584] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 240.912460][T12584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.017689][T12589] netlink: 'syz.0.3820': attribute type 1 has an invalid length. [ 241.176984][T12598] xt_bpf: check failed: parse error [ 241.194170][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 241.225161][T12601] xt_l2tp: v2 sid > 0xffff: 262144 [ 241.353536][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3830'. [ 241.363018][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3829'. [ 241.558076][ T26] audit: type=1326 audit(1786622528.766:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.1.3835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e06070d9 code=0x7ffc0000 [ 241.582216][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.688513][ T26] audit: type=1326 audit(1786622528.856:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.1.3835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb0e06070d9 code=0x7ffc0000 [ 241.712677][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.793363][ T26] audit: type=1326 audit(1786622528.856:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.1.3835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e06070d9 code=0x7ffc0000 [ 241.817529][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.854530][T12630] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 241.880972][T12632] ip_tables: iptables: counters copy to user failed while replacing table [ 241.926090][T12634] netlink: 'syz.0.3843': attribute type 10 has an invalid length. [ 241.982085][T12634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3843'. [ 242.016501][T12634] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 242.168140][T12650] netlink: 'syz.3.3850': attribute type 2 has an invalid length. [ 242.215867][T12654] kernel read not supported for file / 7âW)s!QfsrX%)rO2:"T+͟v|ղDvc֠6xc: (pid: 12654 comm: syz.1.3852) [ 242.260760][ T26] audit: type=1800 audit(1786622529.465:22): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3852" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=59500 res=0 errno=0 [ 242.293084][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.387817][T12660] netlink: 'syz.4.3855': attribute type 15 has an invalid length. [ 242.487530][T12668] netlink: set zone limit has 8 unknown bytes [ 242.648209][ T4285] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 242.665976][T12664] device veth1_vlan left promiscuous mode [ 242.931665][T12682] loop4: detected capacity change from 0 to 512 [ 243.080553][T12682] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 243.120675][T12682] ext4 filesystem being mounted at /819/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.229119][ T4285] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 243.248522][ T4285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.267447][ T4285] usb 4-1: Product: syz [ 243.271670][ T4285] usb 4-1: Manufacturer: syz [ 243.285729][T12655] loop2: detected capacity change from 0 to 32768 [ 243.292576][ T4285] usb 4-1: SerialNumber: syz [ 243.313924][ T4285] usb 4-1: config 0 descriptor?? [ 243.334945][T12682] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.3865: Directory hole found for htree leaf block 0 [ 243.365446][ T4285] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 243.404951][T12682] EXT4-fs (loop4): Remounting filesystem read-only [ 243.443585][T12655] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 243.476820][T12655] JBD2: Ignoring recovery information on journal [ 243.736691][T12655] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 243.818159][ T4285] gspca_stk1135: reg_w 0x0 err -71 [ 243.824471][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 243.845814][ T4285] gspca_stk1135: Sensor write failed [ 243.851239][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 243.879674][T12655] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 243.893342][ T4285] gspca_stk1135: Sensor write failed [ 243.903412][T11730] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 243.913554][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 243.920009][ T4285] gspca_stk1135: Sensor read failed [ 243.955378][T12655] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 243.966341][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 243.972720][ T4285] gspca_stk1135: Sensor read failed [ 244.001781][ T4285] gspca_stk1135: Detected sensor type unknown (0x0) [ 244.008867][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 244.022424][T12655] OCFS2: File system is now read-only. [ 244.031971][ T4285] gspca_stk1135: Sensor read failed [ 244.043862][T12655] (syz.2.3851,12655,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 244.049341][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 244.068910][T12655] (syz.2.3851,12655,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 244.085720][ T4285] gspca_stk1135: Sensor read failed [ 244.088008][T12655] (syz.2.3851,12655,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 244.091034][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 244.123549][T12655] (syz.2.3851,12655,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 244.143552][T11730] usb 2-1: Using ep0 maxpacket: 32 [ 244.162847][T12655] (syz.2.3851,12655,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 244.163781][ T4285] gspca_stk1135: Sensor write failed [ 244.193558][ T4285] gspca_stk1135: serial bus timeout: status=0x00 [ 244.198575][T12655] (syz.2.3851,12655,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 244.224146][T12655] (syz.2.3851,12655,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 244.225500][ T4285] gspca_stk1135: Sensor write failed [ 244.263838][T11730] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.265442][ T4285] stk1135: probe of 4-1:0.0 failed with error -71 [ 244.294070][T11730] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 244.303157][T12655] (syz.2.3851,12655,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 244.336233][T12655] (syz.2.3851,12655,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 244.365679][T12655] (syz.2.3851,12655,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 244.385072][ T4285] usb 4-1: USB disconnect, device number 23 [ 244.428870][T12655] (syz.2.3851,12655,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 244.490026][T12655] (syz.2.3851,12655,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 244.499381][T11730] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 244.518924][T11730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.544720][T12655] (syz.2.3851,12655,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 244.554655][T11730] usb 2-1: Product: syz [ 244.558870][T11730] usb 2-1: Manufacturer: syz [ 244.563486][T11730] usb 2-1: SerialNumber: syz [ 244.576293][T12655] (syz.2.3851,12655,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 244.605609][T11730] usb 2-1: config 0 descriptor?? [ 244.612195][T12655] (syz.2.3851,12655,0):ocfs2_mknod:357 ERROR: status = -30 [ 244.620116][T12655] (syz.2.3851,12655,0):ocfs2_mknod:502 ERROR: status = -30 [ 244.628124][T12655] (syz.2.3851,12655,0):ocfs2_mkdir:659 ERROR: status = -30 [ 244.701348][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 244.798448][T12754] loop3: detected capacity change from 0 to 1024 [ 244.867424][T11730] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 244.890106][T11730] f0 e4 3d a7 d3 60 4f fe [ 244.902493][T11730] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 244.936084][T12756] loop4: detected capacity change from 0 to 128 [ 244.955822][T12754] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.3892: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.026891][T12741] loop0: detected capacity change from 0 to 32768 [ 245.033707][T12754] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 245.042289][T12754] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.3892: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.055656][T12756] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 245.067510][T12754] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 245.090451][T10246] usb 2-1: USB disconnect, device number 24 [ 245.150737][T12754] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3892: Failed to acquire dquot type 0 [ 245.163035][T12754] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 245.177307][T12741] JBD2: Ignoring recovery information on journal [ 245.235665][T12754] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.3892: mark_inode_dirty error [ 245.264768][T12754] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 245.301131][T12754] EXT4-fs (loop3): 1 orphan inode deleted [ 245.307182][T12754] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 245.363558][ T9] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.387275][T12741] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 245.413516][ T9] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 245.438514][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 245.487938][ T4236] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.547172][ T4236] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 245.605567][ T4236] EXT4-fs error (device loop3): ext4_write_dquot:6216: comm kworker/u4:5: Failed to commit dquot type 0 [ 245.641730][ T4236] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 245.667719][T12775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3900'. [ 245.696657][ T4192] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 245.724304][ T4192] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 245.776842][ T4192] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 245.794323][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 246.013057][T12787] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 246.140230][T12791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3908'. [ 246.695784][T12820] loop3: detected capacity change from 0 to 256 [ 246.746389][T12779] loop4: detected capacity change from 0 to 32768 [ 246.852604][T12827] loop0: detected capacity change from 0 to 8192 [ 247.315988][T12827] loop0: p1 p2 < > p3 [ 247.320457][T12827] loop0: partition table partially beyond EOD, truncated [ 247.320567][T12779] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 247.335940][ T4285] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.369988][T12779] JBD2: Ignoring recovery information on journal [ 247.392932][T12827] loop0: p1 size 1342439424 extends beyond EOD, truncated [ 247.402010][T12827] loop0: p2 start 4059840512 is beyond EOD, truncated [ 247.415405][T12827] loop0: p3 start 67108864 is beyond EOD, truncated [ 247.455132][T12837] netlink: 'syz.1.3929': attribute type 21 has an invalid length. [ 247.464065][T12837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3929'. [ 247.474487][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3929'. [ 247.490834][T12779] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 247.616661][T11730] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 247.673511][T12779] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 247.699014][T12840] nvme_fabrics: no handler found for transport hoop. [ 247.714883][T12779] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 247.745240][T12779] OCFS2: File system is now read-only. [ 247.756156][T12779] (syz.4.3902,12779,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 247.772370][ T4285] usb 1-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 247.809679][ T4285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 247.822767][T12779] (syz.4.3902,12779,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 247.835155][T12779] (syz.4.3902,12779,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 247.863646][ T4285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 247.883986][T12846] netlink: 'syz.2.3932': attribute type 8 has an invalid length. [ 247.906481][T12779] (syz.4.3902,12779,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 247.925291][T12779] (syz.4.3902,12779,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 247.944076][T12779] (syz.4.3902,12779,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 247.956694][T12779] (syz.4.3902,12779,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 247.965650][T12779] (syz.4.3902,12779,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 247.975257][T12779] (syz.4.3902,12779,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 247.984984][T12779] (syz.4.3902,12779,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 247.987141][T11730] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 247.996636][T12779] (syz.4.3902,12779,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 248.018432][T11730] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 248.025987][T12779] (syz.4.3902,12779,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 248.041084][T11730] usb 4-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 248.054604][T12779] (syz.4.3902,12779,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 248.068679][T12779] (syz.4.3902,12779,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 248.078633][T12779] (syz.4.3902,12779,1):ocfs2_mknod:357 ERROR: status = -30 [ 248.086684][T12779] (syz.4.3902,12779,1):ocfs2_mknod:502 ERROR: status = -30 [ 248.094076][T12779] (syz.4.3902,12779,1):ocfs2_mkdir:659 ERROR: status = -30 [ 248.108448][ T4285] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 248.109733][T11730] usb 4-1: config 0 has no interfaces? [ 248.138737][T11730] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 248.150717][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.161013][T11730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.176575][ T4285] usb 1-1: Product: syz [ 248.186591][ T4285] usb 1-1: Manufacturer: syz [ 248.193592][ T4285] usb 1-1: SerialNumber: syz [ 248.200837][T11730] usb 4-1: config 0 descriptor?? [ 248.246904][T12828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.284639][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 248.466990][T11730] usb 4-1: USB disconnect, device number 24 [ 248.586969][ T4285] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 248.628260][ T4285] usb 1-1: USB disconnect, device number 10 [ 249.079688][T12888] No source specified [ 249.436812][T12908] loop3: detected capacity change from 0 to 64 [ 249.573375][T12914] loop4: detected capacity change from 0 to 1024 [ 249.689657][T12914] hfsplus: extend alloc file! (8192,512,16777719) [ 249.979245][T12884] loop2: detected capacity change from 0 to 32768 [ 250.045237][T12941] netlink: 'syz.3.3978': attribute type 10 has an invalid length. [ 250.065536][T12941] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 250.096045][ T26] audit: type=1800 audit(1786622537.300:23): pid=12884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3953" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 250.139637][T12941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.286880][T12943] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 250.324654][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3984'. [ 250.471981][T12959] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 250.602918][ T4230] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.657208][T12969] netlink: 'syz.1.3991': attribute type 49 has an invalid length. [ 250.824504][T12969] device ip6gretap0 entered promiscuous mode [ 251.001670][T12987] device wlan0 entered promiscuous mode [ 251.018184][ T4230] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 251.048005][ T4230] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 251.081339][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.100447][T12992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 251.195464][T12995] openvswitch: netlink: Actions may not be safe on all matching packets [ 251.338316][ T4230] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 251.370005][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.400732][ T4230] usb 4-1: Product: syz [ 251.404989][ T4230] usb 4-1: Manufacturer: syz [ 251.446606][ T4230] usb 4-1: SerialNumber: syz [ 251.460654][ T4230] usb 4-1: config 0 descriptor?? [ 251.513178][T13016] loop0: detected capacity change from 0 to 8 [ 251.572833][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4013'. [ 251.698582][ T26] audit: type=1800 audit(1786622538.909:24): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4011" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 251.738612][T13030] netlink: 'syz.1.4016': attribute type 13 has an invalid length. [ 251.778692][ T4230] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 251.786744][ T4230] usb 4-1: No valid video chain found. [ 251.804894][ T4230] usb 4-1: USB disconnect, device number 25 [ 252.428750][ T4230] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 252.555694][T13088] loop2: detected capacity change from 0 to 8 [ 252.678320][T13096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4045'. [ 252.679465][T13088] SQUASHFS error: zlib decompression failed, data probably corrupt [ 252.743336][T13088] SQUASHFS error: Failed to read block 0x4de: -5 [ 252.778801][T13088] SQUASHFS error: zlib decompression failed, data probably corrupt [ 252.812520][T13088] SQUASHFS error: Failed to read block 0x4df: -5 [ 252.839468][T13088] SQUASHFS error: zlib decompression failed, data probably corrupt [ 252.839507][T13088] SQUASHFS error: Failed to read block 0x4e0: -5 [ 252.839868][T13088] SQUASHFS error: Failed to read block 0x4e4: -5 [ 252.839979][T13088] SQUASHFS error: Failed to read block 0x9cc: -5 [ 252.840054][T13088] SQUASHFS error: Failed to read block 0x2cf4: -5 [ 252.840157][T13088] SQUASHFS error: Failed to read block 0x52cf4: -5 [ 252.840234][T13088] SQUASHFS error: Failed to read block 0x535f4: -5 [ 252.840519][T13088] SQUASHFS error: zlib decompression failed, data probably corrupt [ 252.840564][T13088] SQUASHFS error: Failed to read block 0x4de: -5 [ 252.840749][ T26] audit: type=1800 audit(1786622540.048:25): pid=13088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4041" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 252.992859][T13108] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.994848][T13108] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.999420][ T4230] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 252.999454][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 252.999479][ T4230] usb 1-1: Product: syz [ 252.999496][ T4230] usb 1-1: SerialNumber: syz [ 253.001434][ T4230] usb 1-1: config 0 descriptor?? [ 253.256483][T13108] device syz_tun left promiscuous mode [ 253.258405][T13108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.258699][T13108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.262067][ T4230] usb 1-1: USB disconnect, device number 11 [ 253.320326][T13108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.638064][T13130] netlink: 'syz.2.4062': attribute type 3 has an invalid length. [ 254.041313][T13153] SET target dimension over the limit! [ 254.262259][T13165] loop0: detected capacity change from 0 to 2048 [ 254.288177][T13170] Cannot find add_set index 3 as target [ 254.418479][T13165] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 254.452043][T13181] netlink: 'syz.2.4083': attribute type 1 has an invalid length. [ 254.842300][T13210] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 254.872070][T13212] dlm: non-version read from control device 8192 [ 255.301417][ T4229] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 255.589991][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 255.675717][T13270] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4121'. [ 255.717642][T13270] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4121'. [ 255.727903][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 255.740307][ T4229] usb 2-1: config 5 has an invalid interface number: 130 but max is 0 [ 255.748697][T13273] netlink: 'syz.0.4120': attribute type 6 has an invalid length. [ 255.755416][ T4229] usb 2-1: config 5 has no interface number 0 [ 255.766578][T13273] netlink: 'syz.0.4120': attribute type 7 has an invalid length. [ 255.786551][ T4229] usb 2-1: config 5 interface 130 has no altsetting 0 [ 255.809168][T13273] netlink: 'syz.0.4120': attribute type 8 has an invalid length. [ 255.980257][ T4227] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 255.986788][ T4229] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 256.021770][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.072131][ T4229] usb 2-1: Product: syz [ 256.086694][ T4229] usb 2-1: Manufacturer: syz [ 256.100101][ T4229] usb 2-1: SerialNumber: syz [ 256.105159][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.112088][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.166075][T13293] loop0: detected capacity change from 0 to 512 [ 256.288979][T13295] loop3: detected capacity change from 0 to 4096 [ 256.350525][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 256.368984][ T4227] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 256.389540][T13295] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 256.420778][T13301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4136'. [ 256.435960][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 256.451434][ T4229] mct_u232 2-1:5.130: MCT U232 converter detected [ 256.458672][ T4229] mct_u232 ttyUSB0: expected endpoint missing [ 256.465122][ T4227] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 256.490919][ T4229] usb 2-1: USB disconnect, device number 25 [ 256.505805][ T4229] mct_u232 2-1:5.130: device disconnected [ 256.557754][ T4227] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 256.593863][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.652572][ T4227] usb 3-1: config 0 descriptor?? [ 256.717233][T13295] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.751794][T13295] ntfs3: loop3: Failed to load $Extend. [ 256.794717][ T26] audit: type=1800 audit(1786622543.997:26): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4133" name="file2" dev="loop3" ino=31 res=0 errno=0 [ 256.910715][ T4227] hdpvr 3-1:0.0: firmware version 0x0 dated [ 256.924748][ T4227] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 257.120808][ T4227] hdpvr 3-1:0.0: device init failed [ 257.126134][ T4227] hdpvr: probe of 3-1:0.0 failed with error -12 [ 257.151448][ T4227] usb 3-1: USB disconnect, device number 17 [ 257.169050][T13333] loop3: detected capacity change from 0 to 512 [ 257.269388][T13333] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.340727][T10246] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 257.366532][T13333] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 257.383243][T13333] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 257.404535][T13333] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4142: Failed to acquire dquot type 1 [ 257.442627][T13333] EXT4-fs (loop3): 1 truncate cleaned up [ 257.469663][T13333] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 257.501937][T13333] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 257.555855][T13333] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 257.566830][T13333] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4142: Failed to acquire dquot type 1 [ 257.712224][T10246] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 257.728691][T10246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.805250][T10246] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 257.926023][T13369] loop3: detected capacity change from 0 to 2048 [ 257.996030][T13369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.078711][T13375] PKCS8: Unsupported PKCS#8 version [ 258.180955][T10246] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 258.541946][T10246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 258.632540][T13402] loop4: detected capacity change from 0 to 4096 [ 258.714531][T13402] NILFS (loop4): invalid segment: Checksum error in segment payload [ 258.724050][T10246] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 258.738002][T10246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.746989][T13402] NILFS (loop4): trying rollback from an earlier position [ 258.763326][T10246] usb 3-1: Product: syz [ 258.777804][T10246] usb 3-1: Manufacturer: syz [ 258.799789][T10246] usb 3-1: SerialNumber: syz [ 258.808187][T13402] NILFS (loop4): recovery complete [ 258.827038][T10246] usb 3-1: config 0 descriptor?? [ 258.836394][T13417] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.853271][T13416] loop3: detected capacity change from 0 to 736 [ 258.861434][T13371] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 258.882476][T10246] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 259.027442][T10246] usb 1-1: USB disconnect, device number 12 [ 259.051828][T10246] idmouse 1-1:1.0: disconnected [ 259.134027][ T4230] usb 3-1: USB disconnect, device number 18 [ 259.477979][T13438] loop1: detected capacity change from 0 to 1024 [ 259.503880][T13429] loop3: detected capacity change from 0 to 8192 [ 259.553539][T13429] loop3: p1 p2 < > p3 [ 259.557780][T13429] loop3: partition table partially beyond EOD, truncated [ 259.608530][T13429] loop3: p1 size 1342439424 extends beyond EOD, truncated [ 259.644037][T13429] loop3: p2 start 4059840512 is beyond EOD, truncated [ 259.661780][T13429] loop3: p3 start 67108864 is beyond EOD, truncated [ 259.757208][T13450] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4199'. [ 259.773319][T13455] netlink: 'syz.2.4198': attribute type 1 has an invalid length. [ 259.794829][T13455] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4198'. [ 259.820103][ T4230] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 260.060889][T13467] capability: warning: `syz.4.4206' uses 32-bit capabilities (legacy support in use) [ 260.221578][T10246] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 260.230014][ T4230] usb 4-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 260.257830][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 260.302389][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 260.461663][T10246] usb 2-1: Using ep0 maxpacket: 16 [ 260.551867][ T4230] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 260.602216][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.610272][ T4230] usb 4-1: Product: syz [ 260.630255][ T4230] usb 4-1: Manufacturer: syz [ 260.661338][ T4230] usb 4-1: SerialNumber: syz [ 260.677074][T13493] nvme_fabrics: no handler found for transport hoop. [ 260.711864][T13443] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 260.742370][T10246] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 260.761615][T10246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.782118][T10246] usb 2-1: Product: syz [ 260.786334][T10246] usb 2-1: Manufacturer: syz [ 260.816900][T10246] usb 2-1: SerialNumber: syz [ 260.828441][T10246] usb 2-1: config 0 descriptor?? [ 260.884166][T10246] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 261.033100][ T4230] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 261.058955][ T4230] usb 4-1: USB disconnect, device number 26 [ 261.101819][T10246] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 261.120234][T10246] visor: probe of 2-1:0.0 failed with error -5 [ 261.327340][T10246] usb 2-1: USB disconnect, device number 26 [ 261.337936][T13526] loop4: detected capacity change from 0 to 512 [ 261.455215][T13526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.488580][T13526] ext4 filesystem being mounted at /909/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.587209][T13526] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 261.652049][T13526] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 261.672182][T13526] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4235: Failed to acquire dquot type 0 [ 261.817716][T13545] loop0: detected capacity change from 0 to 4096 [ 261.844992][T13545] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 261.875643][T13545] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 261.920260][T13545] ntfs3: loop0: Failed to load $Extend. [ 261.955442][ T26] audit: type=1800 audit(1786622549.155:27): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4243" name="file2" dev="loop0" ino=31 res=0 errno=0 [ 262.078232][T13557] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4249'. [ 262.279149][T13566] device xfrm0 entered promiscuous mode [ 262.613650][T13587] netlink: 'syz.0.4264': attribute type 1 has an invalid length. [ 262.621467][T13587] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4264'. [ 262.638822][T13582] loop3: detected capacity change from 0 to 4096 [ 262.710143][T13582] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 262.753922][T13582] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 262.829386][T13582] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 262.888959][T13582] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 262.963839][T13582] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 263.032950][T13582] ntfs: volume version 3.1. [ 263.043338][T13582] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 263.118539][T13582] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 263.227457][T13582] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 263.262359][T13582] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 263.645166][T13633] loop1: detected capacity change from 0 to 4096 [ 263.730086][T13649] loop3: detected capacity change from 0 to 256 [ 263.866536][T13649] FAT-fs (loop3): Directory bread(block 64) failed [ 263.898085][T13649] FAT-fs (loop3): Directory bread(block 65) failed [ 263.900965][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.923469][T13649] FAT-fs (loop3): Directory bread(block 66) failed [ 263.930048][T13649] FAT-fs (loop3): Directory bread(block 67) failed [ 263.972312][T13649] FAT-fs (loop3): Directory bread(block 68) failed [ 263.972774][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.989396][T13649] FAT-fs (loop3): Directory bread(block 69) failed [ 264.024016][T13649] FAT-fs (loop3): Directory bread(block 70) failed [ 264.034161][T13649] FAT-fs (loop3): Directory bread(block 71) failed [ 264.054649][T13649] FAT-fs (loop3): Directory bread(block 72) failed [ 264.079774][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.082252][T13649] FAT-fs (loop3): Directory bread(block 73) failed [ 264.143085][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.177747][T13657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.260076][T13673] device wlan0 entered promiscuous mode [ 264.723317][T13699] loop4: detected capacity change from 0 to 128 [ 264.775080][T13707] netlink: 'syz.2.4310': attribute type 13 has an invalid length. [ 264.790159][T13699] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.907288][T13699] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.957109][T13717] netlink: 'syz.2.4316': attribute type 20 has an invalid length. [ 265.075499][ T9] BUG: MAX_LOCK_DEPTH too low! [ 265.080363][ T9] turning off the locking correctness validator. [ 265.086702][ T9] depth: 48 max: 48! [ 265.090709][ T9] 48 locks held by kworker/u4:0/9: [ 265.095922][ T9] #0: ffff8880620fa938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 265.106774][ T9] #1: ffffc90000ce7d00 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 265.119528][ T9] #2: ffff888060aa4318 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 265.130584][ T9] #3: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 265.140284][ T9] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.149637][ T9] #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.158993][ T9] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.168351][ T9] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.177706][ T9] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.187053][ T9] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.196409][ T9] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.205865][ T9] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.215350][ T9] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.224887][ T9] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.234334][ T9] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.238144][ T4229] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 265.243775][ T9] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.260782][ T9] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.270263][ T9] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.279724][ T9] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.289267][ T9] #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.298705][ T9] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.308162][ T9] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.317595][ T9] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.327162][ T9] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.336593][ T9] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.346017][ T9] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.355441][ T9] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.364862][ T9] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.374272][ T9] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.383702][ T9] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.393135][ T9] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.402550][ T9] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.411976][ T9] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.421389][ T9] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.430798][ T9] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.440207][ T9] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.449619][ T9] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.459031][ T9] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.468437][ T9] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.477838][ T9] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.487239][ T9] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.496647][ T9] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.506059][ T9] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.515465][ T9] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.524904][ T9] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.534313][ T9] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.543740][ T9] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 265.553151][ T9] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 265.562558][ T9] INFO: lockdep is turned off. [ 265.567323][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 265.574620][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.584680][ T9] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 265.591668][ T9] Call Trace: [ 265.594960][ T9] [ 265.597909][ T9] dump_stack_lvl+0x188/0x250 [ 265.602599][ T9] ? show_regs_print_info+0x20/0x20 [ 265.607810][ T9] ? load_image+0x410/0x410 [ 265.612326][ T9] __lock_acquire+0x1247/0x7b50 [ 265.617202][ T9] ? rpl_output+0x31f/0x730 [ 265.621723][ T9] ? lwtunnel_output+0x27e/0x440 [ 265.626683][ T9] ? kfree+0xef/0x2a0 [ 265.630673][ T9] ? verify_lock_unused+0x140/0x140 [ 265.635879][ T9] ? stack_trace_save+0xa6/0xf0 [ 265.640741][ T9] ? stack_trace_snprint+0xe0/0xe0 [ 265.645863][ T9] ? stack_trace_save+0xf0/0xf0 [ 265.650721][ T9] ? mark_lock+0x94/0x320 [ 265.655055][ T9] ? __lock_acquire+0x1305/0x7b50 [ 265.660098][ T9] ? rpl_output+0x178/0x730 [ 265.664619][ T9] lock_acquire+0x19e/0x400 [ 265.669177][ T9] ? rcu_lock_acquire+0x9/0x30 [ 265.673957][ T9] ? rpl_output+0x31f/0x730 [ 265.678479][ T9] ? lwtunnel_output+0x27e/0x440 [ 265.683426][ T9] ? rpl_output+0x31f/0x730 [ 265.687939][ T9] ? lwtunnel_output+0x27e/0x440 [ 265.692894][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.698278][ T9] ? verify_lock_unused+0x140/0x140 [ 265.703488][ T9] ? mark_lock+0x94/0x320 [ 265.707828][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 265.713824][ T9] ? rpl_output+0x31f/0x730 [ 265.718337][ T9] ? lwtunnel_output+0x27e/0x440 [ 265.723386][ T9] ? rpl_output+0x31f/0x730 [ 265.727903][ T9] rcu_lock_acquire+0x2a/0x30 [ 265.732597][ T9] ? rcu_lock_acquire+0x9/0x30 [ 265.737395][ T9] ip6_dst_check+0xe2/0x7a0 [ 265.741919][ T9] ? skb_header_pointer+0x120/0x120 [ 265.747136][ T9] dst_cache_per_cpu_get+0x1a3/0x310 [ 265.752441][ T9] rpl_output+0x165/0x730 [ 265.756783][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.761302][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.766254][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.771643][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.776296][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.781249][ T9] lwtunnel_output+0x27e/0x440 [ 265.786049][ T9] rpl_output+0x31f/0x730 [ 265.790412][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.794929][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.799968][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.805361][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.809878][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.814830][ T9] lwtunnel_output+0x27e/0x440 [ 265.819610][ T9] rpl_output+0x31f/0x730 [ 265.823953][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.828470][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.833425][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.838854][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.843375][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.848322][ T9] lwtunnel_output+0x27e/0x440 [ 265.853102][ T9] rpl_output+0x31f/0x730 [ 265.857447][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.861965][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.866912][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.872324][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.876839][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.881791][ T9] lwtunnel_output+0x27e/0x440 [ 265.886573][ T9] rpl_output+0x31f/0x730 [ 265.890917][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.895432][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.900410][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.905796][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.910322][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.915268][ T9] lwtunnel_output+0x27e/0x440 [ 265.920041][ T9] rpl_output+0x31f/0x730 [ 265.924379][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.928882][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.933827][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.939242][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.943765][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.948710][ T9] lwtunnel_output+0x27e/0x440 [ 265.953484][ T9] rpl_output+0x31f/0x730 [ 265.957921][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.962437][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.967382][ T9] ? read_lock_is_recursive+0x10/0x10 [ 265.972777][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.977296][ T9] ? rpl_destroy_state+0x20/0x20 [ 265.982267][ T9] lwtunnel_output+0x27e/0x440 [ 265.987044][ T9] rpl_output+0x31f/0x730 [ 265.991389][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 265.995900][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.000858][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.006241][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.010756][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.015703][ T9] lwtunnel_output+0x27e/0x440 [ 266.020488][ T9] rpl_output+0x31f/0x730 [ 266.024838][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.029350][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.034294][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.039680][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.044198][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.049288][ T9] lwtunnel_output+0x27e/0x440 [ 266.054086][ T9] rpl_output+0x31f/0x730 [ 266.058426][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.062940][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.067891][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.073374][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.077890][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.082836][ T9] lwtunnel_output+0x27e/0x440 [ 266.087622][ T9] rpl_output+0x31f/0x730 [ 266.091993][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.096510][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.101458][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.106848][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.111364][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.116313][ T9] lwtunnel_output+0x27e/0x440 [ 266.121093][ T9] rpl_output+0x31f/0x730 [ 266.125435][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.129947][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.134894][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.140282][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.144796][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.149742][ T9] lwtunnel_output+0x27e/0x440 [ 266.154520][ T9] rpl_output+0x31f/0x730 [ 266.158863][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.163373][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.168320][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.173739][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.178256][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.183200][ T9] lwtunnel_output+0x27e/0x440 [ 266.187983][ T9] rpl_output+0x31f/0x730 [ 266.192321][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.196832][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.201781][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.207167][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.211685][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.216633][ T9] lwtunnel_output+0x27e/0x440 [ 266.221409][ T9] rpl_output+0x31f/0x730 [ 266.225744][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.230255][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.235202][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.240589][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.245113][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.250057][ T9] lwtunnel_output+0x27e/0x440 [ 266.254836][ T9] rpl_output+0x31f/0x730 [ 266.259171][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.263677][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.268628][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.274011][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.278558][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.283506][ T9] lwtunnel_output+0x27e/0x440 [ 266.288299][ T9] rpl_output+0x31f/0x730 [ 266.292640][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.297166][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.302111][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.307503][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.312050][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.317012][ T9] lwtunnel_output+0x27e/0x440 [ 266.321791][ T9] rpl_output+0x31f/0x730 [ 266.326135][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.330655][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.335614][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.341009][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.345525][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.350475][ T9] lwtunnel_output+0x27e/0x440 [ 266.355254][ T9] rpl_output+0x31f/0x730 [ 266.359589][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.364120][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.369067][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.374482][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.378995][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.383943][ T9] lwtunnel_output+0x27e/0x440 [ 266.388726][ T9] rpl_output+0x31f/0x730 [ 266.393073][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.397620][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.402561][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.407947][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.412464][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.417409][ T9] lwtunnel_output+0x27e/0x440 [ 266.422184][ T9] rpl_output+0x31f/0x730 [ 266.426541][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.431062][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.436024][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.441408][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.445922][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.450869][ T9] lwtunnel_output+0x27e/0x440 [ 266.455656][ T9] rpl_output+0x31f/0x730 [ 266.460003][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.464517][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.469469][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.474860][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.479384][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.484327][ T9] lwtunnel_output+0x27e/0x440 [ 266.489103][ T9] rpl_output+0x31f/0x730 [ 266.493442][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.497954][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.502908][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.508291][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.512803][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.517746][ T9] lwtunnel_output+0x27e/0x440 [ 266.522536][ T9] rpl_output+0x31f/0x730 [ 266.526881][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.531392][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.536334][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.541720][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.546236][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.551182][ T9] lwtunnel_output+0x27e/0x440 [ 266.555955][ T9] rpl_output+0x31f/0x730 [ 266.560300][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.564819][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.569765][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.575145][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.579658][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.584606][ T9] lwtunnel_output+0x27e/0x440 [ 266.589392][ T9] rpl_output+0x31f/0x730 [ 266.593728][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.598247][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.603196][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.608579][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.613092][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.618034][ T9] lwtunnel_output+0x27e/0x440 [ 266.622806][ T9] rpl_output+0x31f/0x730 [ 266.627148][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.631667][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.636612][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.641998][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.646510][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.651474][ T9] lwtunnel_output+0x27e/0x440 [ 266.656251][ T9] rpl_output+0x31f/0x730 [ 266.660594][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.665115][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.670059][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.675477][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.679995][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.684933][ T9] lwtunnel_output+0x27e/0x440 [ 266.689724][ T9] rpl_output+0x31f/0x730 [ 266.694062][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.698566][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.703508][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.708892][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.713410][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.718349][ T9] lwtunnel_output+0x27e/0x440 [ 266.723119][ T9] rpl_output+0x31f/0x730 [ 266.727457][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.731966][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.736914][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.742309][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.746828][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.751779][ T9] lwtunnel_output+0x27e/0x440 [ 266.756559][ T9] rpl_output+0x31f/0x730 [ 266.760899][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.765412][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.770353][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.775737][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.780254][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.785204][ T9] lwtunnel_output+0x27e/0x440 [ 266.789980][ T9] rpl_output+0x31f/0x730 [ 266.794319][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.798834][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.803806][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.809195][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.813710][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.818657][ T9] lwtunnel_output+0x27e/0x440 [ 266.823435][ T9] rpl_output+0x31f/0x730 [ 266.827775][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.832286][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.837234][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.842619][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.847137][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.852079][ T9] lwtunnel_output+0x27e/0x440 [ 266.856860][ T9] rpl_output+0x31f/0x730 [ 266.861203][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.865715][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.870666][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.876053][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.880571][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.885520][ T9] lwtunnel_output+0x27e/0x440 [ 266.890302][ T9] rpl_output+0x31f/0x730 [ 266.894645][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.899159][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.904108][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.909493][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.914007][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.918960][ T9] lwtunnel_output+0x27e/0x440 [ 266.923741][ T9] rpl_output+0x31f/0x730 [ 266.928085][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.932602][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.937558][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.942950][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.947509][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.952487][ T9] lwtunnel_output+0x27e/0x440 [ 266.957291][ T9] rpl_output+0x31f/0x730 [ 266.961663][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.966176][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.971128][ T9] ? read_lock_is_recursive+0x10/0x10 [ 266.976510][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.981027][ T9] ? rpl_destroy_state+0x20/0x20 [ 266.985988][ T9] lwtunnel_output+0x27e/0x440 [ 266.990766][ T9] rpl_output+0x31f/0x730 [ 266.995111][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 266.999626][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.004571][ T9] ? read_lock_is_recursive+0x10/0x10 [ 267.009958][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.014470][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.019416][ T9] lwtunnel_output+0x27e/0x440 [ 267.024195][ T9] rpl_output+0x31f/0x730 [ 267.028542][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.033054][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.038000][ T9] ? read_lock_is_recursive+0x10/0x10 [ 267.043392][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.047906][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.052854][ T9] lwtunnel_output+0x27e/0x440 [ 267.057637][ T9] rpl_output+0x31f/0x730 [ 267.061979][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.066490][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.071435][ T9] ? read_lock_is_recursive+0x10/0x10 [ 267.076823][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.081335][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.086283][ T9] lwtunnel_output+0x27e/0x440 [ 267.091059][ T9] rpl_output+0x31f/0x730 [ 267.095397][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.099932][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.104887][ T9] ? read_lock_is_recursive+0x10/0x10 [ 267.110275][ T9] ? rpl_do_srh+0x9c1/0xe50 [ 267.114789][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.119742][ T9] lwtunnel_output+0x27e/0x440 [ 267.124525][ T9] rpl_output+0x31f/0x730 [ 267.128869][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.133827][ T9] ? pskb_expand_head+0x363/0x1100 [ 267.138955][ T9] ? read_lock_is_recursive+0x10/0x10 [ 267.144348][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.149297][ T9] lwtunnel_output+0x27e/0x440 [ 267.154072][ T9] rpl_output+0x31f/0x730 [ 267.158418][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.163366][ T9] ? __ip6_local_out+0x80b/0x850 [ 267.168312][ T9] ? __ip6_local_out+0x850/0x850 [ 267.173257][ T9] ? rpl_destroy_state+0x20/0x20 [ 267.178202][ T9] lwtunnel_output+0x27e/0x440 [ 267.182982][ T9] udp_tunnel6_xmit_skb+0x4b7/0x8b0 [ 267.188202][ T9] send6+0x5a0/0x8d0 [ 267.192123][ T9] ? send4+0xd70/0xd70 [ 267.196201][ T9] ? __local_bh_disable_ip+0x111/0x1a0 [ 267.201678][ T9] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 267.207411][ T9] wg_packet_handshake_send_worker+0x203/0x360 [ 267.213580][ T9] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 267.219051][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 267.224958][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 267.230165][ T9] process_one_work+0x867/0xff0 [ 267.235030][ T9] ? worker_detach_from_pool+0x240/0x240 [ 267.240669][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 267.245964][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 267.250996][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 267.256550][ T9] ? wq_worker_running+0x97/0x170 [ 267.261586][ T9] worker_thread+0xad7/0x12a0 [ 267.266404][ T9] kthread+0x42e/0x520 [ 267.270496][ T9] ? rcu_lock_release+0x20/0x20 [ 267.275368][ T9] ? kthread_blkcg+0xd0/0xd0 [ 267.279990][ T9] ret_from_fork+0x1f/0x30 [ 267.284430][ T9] [ 267.335336][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4321'. [ 267.349992][T13732] netlink: 'syz.3.4322': attribute type 1 has an invalid length. [ 267.633254][ T4229] usb 1-1: config 11 has an invalid interface number: 109 but max is 0 [ 267.641583][ T4229] usb 1-1: config 11 has no interface number 0 [ 267.647880][ T4229] usb 1-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 267.659146][ T4229] usb 1-1: config 11 interface 109 has no altsetting 0 [ 267.874987][ T4229] usb 1-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4 [ 267.884293][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.892290][ T4229] usb 1-1: Product: syz [ 267.898126][ T4229] usb 1-1: Manufacturer: syz [ 267.933268][ T4229] usb 1-1: can't set config #11, error -71 [ 267.940487][ T4229] usb 1-1: USB disconnect, device number 13