last executing test programs: 5m35.660854521s ago: executing program 1 (id=8333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x14, 0x4, @local}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x0) 5m35.49203693s ago: executing program 1 (id=8336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) 5m35.404141265s ago: executing program 1 (id=8338): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2626a, 0x1010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}]]}}}]}, 0x38}}, 0x0) 5m35.234869504s ago: executing program 1 (id=8343): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m34.709676081s ago: executing program 1 (id=8355): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000140)={0x0, 0x2, 0x7, 0x8, 0x1, [], [0x9ff, 0x4, 0x8, 0x6], [0x7d, 0xfffffffb, 0x4, 0x80], [0x0, 0x135, 0x3, 0x8]}) 5m34.069157655s ago: executing program 1 (id=8368): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @private=0xa010102}], 0x1) 5m33.941240282s ago: executing program 32 (id=8368): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @private=0xa010102}], 0x1) 1.806863595s ago: executing program 2 (id=16105): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) 1.672408913s ago: executing program 5 (id=16108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x220, 0x310, 0xffffffff, 0x0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'ip6gretap0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x100000100], [0x0, 0x0, 0x0, 0xff000000], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 1.647767693s ago: executing program 2 (id=16109): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e23, 0x718, @mcast2, 0x2607}}, @sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x4e21, @loopback}}]}, 0x50}}, 0x4) 1.52702577s ago: executing program 5 (id=16112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 1.485007352s ago: executing program 2 (id=16114): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x62cf, &(0x7f000000acc0)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.388481447s ago: executing program 0 (id=16116): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2) 1.354235349s ago: executing program 0 (id=16117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.268556443s ago: executing program 0 (id=16119): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x4000, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) 1.176652988s ago: executing program 0 (id=16121): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x1d0, 0x1d0, 0xffffffff, 0x1d0, 0x270, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x198, 0x1d0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'veth1_to_team\x00', 0x4, 0x2, 0xb, 0xe1, 0x101, 0x9f, {0x3}, {0x2}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'netpci0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 1.097251143s ago: executing program 0 (id=16123): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 1.045942066s ago: executing program 0 (id=16125): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffff"], 0x6f4}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da83900090503"], 0x0) 960.08175ms ago: executing program 3 (id=16126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0xb71, 0x9}, 0x20) 852.031006ms ago: executing program 3 (id=16129): r0 = syz_open_dev$loop(&(0x7f0000003b00), 0x200, 0x40) ioctl$BLKPG(r0, 0x1269, &(0x7f0000003c00)={0x3, 0x0, 0x98, &(0x7f0000003b40)={0x7, 0x100, 0xc}}) 804.474798ms ago: executing program 3 (id=16131): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x6b) 668.504305ms ago: executing program 3 (id=16133): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x10, 0x2, 'client0\x00', 0x5, "e1ecc31c66ab98b9", "0af4b7a48facbc69e2606cef3984d524b83675886f962c1b59034a21a24a37a9", 0x7, 0x9}) 633.810787ms ago: executing program 5 (id=16134): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd2d, 0x200000, {0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 602.183469ms ago: executing program 4 (id=16135): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 491.796034ms ago: executing program 4 (id=16136): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000002800)={0x1a, 0x1, 0x0, "833461025a78ffa177be169916ea42232f59496b79b29963084f401a544b75d0", 0x64737664}) 491.084954ms ago: executing program 3 (id=16137): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x5de, &(0x7f0000000a00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) 476.030775ms ago: executing program 5 (id=16138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f00000048c0)) 424.591349ms ago: executing program 4 (id=16139): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 347.992282ms ago: executing program 2 (id=16140): r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 345.427833ms ago: executing program 4 (id=16141): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000802000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000040000000c302a000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) 326.229243ms ago: executing program 5 (id=16142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xfe, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x6, 0x1000000000, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}}, 0xf0}}, 0x8802) 251.220047ms ago: executing program 4 (id=16143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)={0x34, 0x13, 0x1, 0x70bd2b, 0x25dddbfb, "", [@nested={0x4, 0xc0}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x16, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}, @generic='$r\n_oU']}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 208.01627ms ago: executing program 2 (id=16144): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002a40)={'vlan0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6, 0x2, '\\-'}}) 189.064231ms ago: executing program 5 (id=16145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x0) 86.259336ms ago: executing program 3 (id=16146): r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1}, 0x10100) 48.947838ms ago: executing program 2 (id=16147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffec3, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) 0s ago: executing program 4 (id=16148): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.416568][T24866] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.429782][T24866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.455792][T24866] usb 5-1: config 0 descriptor?? [ 665.480588][ T4615] udevd[4615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.579647][ T4227] usb 3-1: USB disconnect, device number 55 [ 665.647454][ T934] netlink: 'syz.0.13601': attribute type 1 has an invalid length. [ 665.662563][ T934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13601'. [ 665.663121][T24866] rc_core: IR keymap rc-hauppauge not found [ 665.692533][T24866] Registered IR keymap rc-empty [ 665.715892][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 665.782951][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 665.830957][T24866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 665.895305][T24866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 665.902927][ T946] Unsupported ieee802154 address type: 0 [ 665.990094][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.063151][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.081572][ T960] netlink: 'syz.3.13614': attribute type 1 has an invalid length. [ 666.092825][ T961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13613'. [ 666.123035][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.202973][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.300428][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.400762][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.482446][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.552883][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.608492][ T991] netlink: 236 bytes leftover after parsing attributes in process `syz.4.13628'. [ 666.622862][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.702865][T24866] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 666.720249][ T997] netlink: 'syz.3.13632': attribute type 1 has an invalid length. [ 666.739528][ T997] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.13632'. [ 666.754275][T24866] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 666.762434][T24866] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.798352][ T997] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13632'. [ 666.913184][T24866] usb 5-1: USB disconnect, device number 57 [ 667.126106][ T1031] netlink: 'syz.3.13649': attribute type 32 has an invalid length. [ 667.157324][ T1033] loop0: detected capacity change from 0 to 256 [ 667.208519][ T1038] netlink: 'syz.4.13652': attribute type 12 has an invalid length. [ 667.222678][ T1033] FAT-fs (loop0): Directory bread(block 1285) failed [ 667.235087][ T1041] QAT: Stopping all acceleration devices. [ 667.251597][ T1033] FAT-fs (loop0): Directory bread(block 1286) failed [ 667.271005][ T1033] FAT-fs (loop0): Directory bread(block 1287) failed [ 667.292865][ T1044] netlink: 'syz.2.13654': attribute type 21 has an invalid length. [ 667.299324][ T1033] FAT-fs (loop0): Directory bread(block 1288) failed [ 667.342593][ T1033] FAT-fs (loop0): Directory bread(block 1285) failed [ 667.380888][ T1033] FAT-fs (loop0): Directory bread(block 1286) failed [ 667.400464][ T1033] FAT-fs (loop0): Directory bread(block 1287) failed [ 667.418973][ T1033] FAT-fs (loop0): Directory bread(block 1288) failed [ 667.466091][ T1033] FAT-fs (loop0): Directory bread(block 1285) failed [ 667.500218][ T1033] FAT-fs (loop0): Directory bread(block 1286) failed [ 667.505106][ T1066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13661'. [ 667.924649][ T1110] netlink: 264 bytes leftover after parsing attributes in process `syz.4.13680'. [ 667.970891][ T1110] netlink: 264 bytes leftover after parsing attributes in process `syz.4.13680'. [ 667.997046][ T1110] netlink: 175 bytes leftover after parsing attributes in process `syz.4.13680'. [ 668.453147][ T1146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13697'. [ 668.829599][ T1172] device ip6gre4 entered promiscuous mode [ 669.027859][ T1195] netlink: 'syz.2.13714': attribute type 21 has an invalid length. [ 669.083211][ T1195] netlink: 'syz.2.13714': attribute type 1 has an invalid length. [ 669.228922][ T1205] loop0: detected capacity change from 0 to 1024 [ 669.301738][ T1205] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 669.341059][ T1205] JBD2: no valid journal superblock found [ 669.370862][ T1205] EXT4-fs (loop0): error loading journal [ 669.392911][ T4227] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 669.589931][ T1216] netlink: 'syz.2.13724': attribute type 1 has an invalid length. [ 669.632910][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 669.913456][ T4227] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 669.953465][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.961524][ T4227] usb 4-1: Product: syz [ 669.989250][ T4227] usb 4-1: Manufacturer: syz [ 670.006791][ T4227] usb 4-1: SerialNumber: syz [ 670.028073][ T4227] usb 4-1: config 0 descriptor?? [ 670.303060][ T4227] usb 4-1: ignoring: not an USB2CAN converter [ 670.511517][T24874] usb 4-1: USB disconnect, device number 60 [ 670.619941][ T1212] loop5: detected capacity change from 0 to 40427 [ 670.649834][ T1245] dlm: non-version read from control device 4096 [ 670.680856][ T1212] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 670.701435][ T1212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 670.753042][ T1212] F2FS-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 670.998336][ T1261] __nla_validate_parse: 4 callbacks suppressed [ 670.998359][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.064003][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.134825][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.175406][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.231956][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.288983][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.343768][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.356223][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.443365][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.479763][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 671.534693][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 671.573873][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.621353][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.688226][ T1261] infiniband syz2: set active [ 671.851644][ T1306] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 672.033235][ T1319] netlink: 'syz.3.13775': attribute type 13 has an invalid length. [ 672.212530][ T1327] loop0: detected capacity change from 0 to 1024 [ 672.910653][ T1371] netlink: 'syz.4.13799': attribute type 3 has an invalid length. [ 672.966094][ T1371] netlink: 'syz.4.13799': attribute type 1 has an invalid length. [ 672.982935][ T4598] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 673.395454][ T4598] usb 1-1: unable to get BOS descriptor or descriptor too short [ 673.484160][ T4598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.492329][ T1403] Scaler: ================= START STATUS ================= [ 673.513015][ T4598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.560120][ T1403] Scaler: ================== END STATUS ================== [ 673.703000][ T4598] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 673.728015][ T4598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.763110][ T4598] usb 1-1: Product: syz [ 673.770718][ T1425] tmpfs: Bad value for 'mpol' [ 673.775869][ T4598] usb 1-1: Manufacturer: syz [ 673.785932][ T4598] usb 1-1: SerialNumber: syz [ 674.132881][ T4598] usb 1-1: failed waiting for Axe-Fx III to boot: -71 [ 674.139733][ T4598] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 674.196588][ T4598] usb 1-1: USB disconnect, device number 41 [ 674.787063][ T1479] device bridge8 entered promiscuous mode [ 674.896716][ T1486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.159426][ T1444] loop3: detected capacity change from 0 to 32768 [ 675.286685][ T1493] loop0: detected capacity change from 0 to 8192 [ 675.357255][ T1444] XFS (loop3): Mounting V5 Filesystem [ 675.533315][ T4227] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 675.533590][ T1493] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 675.566445][ T1444] XFS (loop3): Ending clean mount [ 675.614881][ T1493] FAT-fs (loop0): Filesystem has been set read-only [ 675.743672][ T4189] XFS (loop3): Unmounting Filesystem [ 675.933102][ T4227] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.963801][ T4227] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.083005][ T4227] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 676.102624][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 676.117667][ T4227] usb 6-1: SerialNumber: syz [ 676.320372][ T1108] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 676.379211][ T1543] exfat: Deprecated parameter 'debug' [ 676.388454][ T1543] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 676.403295][ T1543] exFAT-fs (loop3): unable to read boot sector [ 676.409889][ T1543] exFAT-fs (loop3): failed to read boot sector [ 676.415319][ T4227] usb 6-1: 0:2 : does not exist [ 676.427471][ T1543] exFAT-fs (loop3): failed to recognize exfat type [ 676.449735][ T4227] usb 6-1: USB disconnect, device number 21 [ 676.543068][ T4598] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 676.713719][T16873] udevd[16873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.742510][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 676.840781][ T1557] tmpfs: Bad value for 'mpol' [ 676.880425][ T1559] netlink: 'syz.3.13884': attribute type 2 has an invalid length. [ 676.888704][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 676.897819][ T1559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.913991][ T4598] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 676.942918][ T4598] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 676.970842][ T4598] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 676.993004][ T1108] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 677.015762][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.031176][ T4598] usb 3-1: config 0 has no interface number 0 [ 677.042927][ T4598] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 677.061649][ T1108] usb 1-1: Product: syz [ 677.066096][ T1108] usb 1-1: Manufacturer: syz [ 677.070852][ T1108] usb 1-1: SerialNumber: syz [ 677.090415][ T4598] usb 3-1: config 0 interface 104 has no altsetting 1 [ 677.141523][ T1572] netlink: 'syz.5.13890': attribute type 2 has an invalid length. [ 677.150670][ T1572] __nla_validate_parse: 84 callbacks suppressed [ 677.150687][ T1572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13890'. [ 677.272926][ T4598] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 677.289024][ T1576] loop5: detected capacity change from 0 to 2048 [ 677.292307][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.317385][ T4598] usb 3-1: Product: syz [ 677.329547][ T4598] usb 3-1: Manufacturer: syz [ 677.341382][ T4598] usb 3-1: SerialNumber: syz [ 677.378141][ T4598] usb 3-1: config 0 descriptor?? [ 677.394449][ T1576] loop5: p1 p2 p3 [ 677.394449][ T1576] p1: [ 677.398792][ T1108] usb 1-1: selecting invalid altsetting 1 [ 677.422406][ T1576] loop5: p2 size 458752 extends beyond EOD, truncated [ 677.423911][ T4598] asix: probe of 3-1:0.104 failed with error -22 [ 677.441867][ T1108] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 677.460918][ T1576] loop5: p3 start 65280 is beyond EOD, truncated [ 677.498653][ T1108] usb 1-1: USB disconnect, device number 42 [ 677.572873][T24866] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 677.720800][T24590] usb 3-1: USB disconnect, device number 56 [ 677.739186][T16873] udevd[16873]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.797509][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 677.812531][ T4615] udevd[4615]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 677.899794][T16873] udevd[16873]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 677.919153][ T4615] udevd[4615]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 677.986659][ T1601] [U] ^C [ 678.143160][T24866] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 678.159325][T24866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.162205][ T1610] loop0: detected capacity change from 0 to 4096 [ 678.167750][T24874] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 678.183552][T24866] usb 4-1: Product: syz [ 678.187774][T24866] usb 4-1: Manufacturer: syz [ 678.192498][T24866] usb 4-1: SerialNumber: syz [ 678.244054][T24866] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 678.314453][ T1610] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 678.342500][ T1610] ntfs3: loop0: Failed to load $Extend. [ 678.373002][ T1616] loop5: detected capacity change from 0 to 4096 [ 678.414044][ T1616] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 678.489333][ T1616] ntfs3: loop5: mft corrupted [ 678.508595][ T1616] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 678.545205][ T1616] ntfs3: loop5: Failed to load $BadClus. [ 678.613068][T24874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.763370][T24874] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 678.778198][T24874] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 678.814721][T24874] usb 5-1: Manufacturer: syz [ 678.844682][T24874] usb 5-1: config 0 descriptor?? [ 678.889584][ T1635] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 678.926246][T24874] usb 5-1: Found UVC 0.00 device (18ec:3288) [ 678.945151][T24874] usb 5-1: No valid video chain found. [ 678.983181][T24866] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 679.152285][ T4686] usb 5-1: USB disconnect, device number 58 [ 679.385293][ T1653] loop5: detected capacity change from 0 to 2048 [ 679.408181][ T5142] usb 4-1: USB disconnect, device number 61 [ 679.447148][ T1653] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 679.485290][ T1653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.922806][ T4686] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 680.052991][T24866] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 680.063071][T24866] ath9k_htc: Failed to initialize the device [ 680.088864][ T5142] usb 4-1: ath9k_htc: USB layer deinitialized [ 680.353061][ T4686] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.378034][ T4686] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.503261][ T4686] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 680.512513][ T4686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 680.542542][ T4686] usb 6-1: SerialNumber: syz [ 680.856033][ T4686] usb 6-1: 0:2 : does not exist [ 680.902054][ T4686] usb 6-1: USB disconnect, device number 22 [ 681.235828][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.682805][T24866] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 681.906919][ T1806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14004'. [ 681.962881][T24866] usb 1-1: Using ep0 maxpacket: 16 [ 682.102967][T24866] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 682.118921][T24866] usb 1-1: config 0 has no interface number 0 [ 682.132578][ T1819] loop5: detected capacity change from 0 to 512 [ 682.148432][T24866] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 682.288546][ T1819] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 682.313098][T24866] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 682.318143][ T1819] ext4 filesystem being mounted at /1059/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.369752][T24866] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 682.419179][T24866] usb 1-1: Product: syz [ 682.443864][T24866] usb 1-1: SerialNumber: syz [ 682.464331][T24866] usb 1-1: config 0 descriptor?? [ 682.489151][ T1840] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14018'. [ 682.493067][ T1772] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 682.546138][T24866] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 682.641184][ T1848] ipt_CLUSTERIP: Please specify destination IP [ 682.861761][ T1854] IPv6: sit4: Disabled Multicast RS [ 682.951579][ T1863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14029'. [ 682.961612][ T1863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14029'. [ 683.132795][T24866] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 683.292223][ T1883] loop5: detected capacity change from 0 to 8 [ 683.353541][ T1883] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 683.380515][T16873] udevd[16873]: incorrect cramfs checksum on /dev/loop5 [ 683.413123][T24866] usb 5-1: Using ep0 maxpacket: 16 [ 683.430726][ T1883] cramfs: bad data blocksize 4294934200 [ 683.461142][T16873] udevd[16873]: incorrect cramfs checksum on /dev/loop5 [ 683.473034][ T1883] cramfs: bad data blocksize 4294934200 [ 683.493715][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 683.493742][ T26] audit: type=1800 audit(1777325209.115:49): pid=1883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14040" name="file1" dev="loop5" ino=33092 res=0 errno=0 [ 683.518130][T16873] udevd[16873]: incorrect cramfs checksum on /dev/loop5 [ 683.572287][T24866] usb 5-1: config 0 has no interfaces? [ 683.691894][ T1901] loop3: detected capacity change from 0 to 2048 [ 683.773092][T24866] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 683.787527][ T1901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.798004][T24866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.825969][T24866] usb 5-1: Product: syz [ 683.843807][T24866] usb 5-1: Manufacturer: syz [ 683.870001][T24866] usb 5-1: SerialNumber: syz [ 683.876342][ T1911] netlink: 124 bytes leftover after parsing attributes in process `syz.2.14052'. [ 683.893442][T24866] r8152-cfgselector 5-1: config 0 descriptor?? [ 684.173576][T24866] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 684.259051][ T1929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14062'. [ 684.389717][ T4598] usb 5-1: USB disconnect, device number 59 [ 684.405552][ T1933] QAT: failed to copy from user cfg_data. [ 684.426166][T24866] usb 1-1: USB disconnect, device number 43 [ 684.455246][ T1937] xt_TCPMSS: Only works on TCP SYN packets [ 684.932888][ T4598] Bluetooth: hci4: command 0x0405 tx timeout [ 685.750540][ T1945] loop5: detected capacity change from 0 to 32768 [ 685.934469][ T1945] XFS (loop5): Mounting V5 Filesystem [ 685.967751][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.315138][ T1945] XFS (loop5): Ending clean mount [ 686.455817][T22138] XFS (loop5): Unmounting Filesystem [ 686.479671][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14124'. [ 686.532880][ T2065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14124'. [ 686.986696][ T2088] loop3: detected capacity change from 0 to 256 [ 687.159317][ T2092] loop0: detected capacity change from 0 to 4096 [ 687.184286][ T2088] loop3: Can't mount, would change RO state [ 687.333283][ T2098] netlink: 'syz.3.14142': attribute type 10 has an invalid length. [ 687.344695][ T2098] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14142'. [ 687.393894][ T2098] device bond0 entered promiscuous mode [ 687.410561][ T2092] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 687.410621][ T2098] device bond_slave_0 entered promiscuous mode [ 687.502301][ T2098] device bond_slave_1 entered promiscuous mode [ 687.505018][ T2092] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 687.534148][ T2098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.541216][ T2098] bridge0: port 1(bond0) entered blocking state [ 687.570425][ T2092] ntfs3: loop0: Failed to load $Extend. [ 687.584020][ T2106] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 687.596045][ T2098] bridge0: port 1(bond0) entered disabled state [ 688.571901][ T2154] netlink: 'syz.0.14166': attribute type 1 has an invalid length. [ 688.572911][ T26] audit: type=1400 audit(1777325214.185:50): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=2151 comm="syz.4.14168" [ 688.588848][ T2154] netlink: 'syz.0.14166': attribute type 2 has an invalid length. [ 688.692924][ T2154] netlink: 'syz.0.14166': attribute type 2 has an invalid length. [ 688.713043][ T2154] netlink: 'syz.0.14166': attribute type 2 has an invalid length. [ 688.742797][ T2154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14166'. [ 688.773923][ T2163] netlink: 'syz.5.14172': attribute type 2 has an invalid length. [ 688.792291][ T2163] netlink: 'syz.5.14172': attribute type 1 has an invalid length. [ 688.806802][ T2163] netlink: 'syz.5.14172': attribute type 2 has an invalid length. [ 688.854231][ T2163] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14172'. [ 688.982656][ T2173] netlink: 'syz.2.14177': attribute type 2 has an invalid length. [ 689.059336][ T2178] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 689.319836][ T2197] netlink: 'syz.5.14189': attribute type 10 has an invalid length. [ 689.358917][ T2197] device macvlan0 entered promiscuous mode [ 689.483023][ T2208] tmpfs: Bad value for 'mpol' [ 689.995480][ T2232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14207'. [ 690.004349][ T2230] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 690.100432][ T2238] xt_hashlimit: max too large, truncated to 1048576 [ 690.115553][ T2238] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 690.199692][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14213'. [ 690.264789][ T2244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14213'. [ 690.295362][ T2244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14213'. [ 690.737817][ T2282] program syz.5.14231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.905441][ T2294] netlink: 100 bytes leftover after parsing attributes in process `syz.5.14238'. [ 690.962795][ T2294] netlink: 100 bytes leftover after parsing attributes in process `syz.5.14238'. [ 691.341794][ T2316] loop5: detected capacity change from 0 to 128 [ 691.472065][ T2322] loop0: detected capacity change from 0 to 1024 [ 691.557228][ T2316] loop5: detected capacity change from 0 to 512 [ 691.595129][ T2325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14253'. [ 691.597568][ T2316] EXT4-fs (loop5): Ignoring removed nobh option [ 691.622327][ T2322] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 691.707399][ T2316] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 691.758220][ T2316] EXT4-fs (loop5): mount failed [ 692.032803][ T4227] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 692.340295][ T2350] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14265'. [ 692.419266][ T4227] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 692.432318][ T4227] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 692.482547][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.545960][ T4227] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 692.581496][ T2356] xt_ecn: cannot match TCP bits for non-tcp packets [ 692.600650][ T2357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 692.934238][ T2371] validate_nla: 2 callbacks suppressed [ 692.934258][ T2371] netlink: 'syz.3.14273': attribute type 10 has an invalid length. [ 692.973053][ T2371] device team0 entered promiscuous mode [ 692.989191][ T2371] device team_slave_0 entered promiscuous mode [ 693.009626][ T2371] device team_slave_1 entered promiscuous mode [ 693.028089][ T2371] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.043759][ T2371] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 693.142902][T24866] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 693.573084][T24866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 693.603264][ T4227] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 693.612869][T24866] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.713097][ T2415] netlink: 'syz.2.14296': attribute type 10 has an invalid length. [ 693.774090][ T2419] __nla_validate_parse: 5 callbacks suppressed [ 693.774110][ T2419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14298'. [ 693.817556][ T2422] x_tables: unsorted entry at hook 3 [ 693.823211][ T4227] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 693.832541][ T4227] stv0680 5-1:4.0: last error: 249, command = 0xaf [ 693.860755][T24866] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 693.863965][ T4227] usb 5-1: USB disconnect, device number 60 [ 693.891631][T24866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.916819][T24866] usb 6-1: Product: syz [ 693.921052][T24866] usb 6-1: Manufacturer: syz [ 693.962996][T24866] usb 6-1: SerialNumber: syz [ 694.335972][ T2450] loop0: detected capacity change from 0 to 64 [ 694.493102][T24866] usb 6-1: MIDIStreaming interface descriptor not found [ 694.582998][T24866] usb 6-1: USB disconnect, device number 23 [ 694.721146][ T2479] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 694.738527][ T2487] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 695.173059][ T4598] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 695.379328][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 695.404596][ T4615] udevd[4615]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.420518][ T4598] usb 1-1: Using ep0 maxpacket: 32 [ 695.432874][ T4686] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 695.553022][ T4598] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 695.561561][ T4598] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 695.597062][ T4598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.659527][ T4598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 695.682310][ T2554] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14354'. [ 695.682641][ T4598] usb 1-1: config 1 has no interface number 0 [ 695.742919][ T4686] usb 5-1: Using ep0 maxpacket: 16 [ 695.793423][ T4598] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 695.860209][ T4598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.893124][ T4686] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 695.965552][ T4598] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 696.072967][ T4686] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 696.092672][ T4686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.127316][ T4686] usb 5-1: Product: syz [ 696.127342][ T4686] usb 5-1: Manufacturer: syz [ 696.127360][ T4686] usb 5-1: SerialNumber: syz [ 696.134722][ T4686] r8152-cfgselector 5-1: config 0 descriptor?? [ 696.182961][ T4598] snd_usb_pod 1-1:1.1: set_interface failed [ 696.183014][ T4598] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 696.183203][ T4598] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 696.205108][ T4598] usb 1-1: USB disconnect, device number 44 [ 696.613085][ T4686] r8152-cfgselector 5-1: Unknown version 0x0000 [ 696.639567][ T4686] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 697.052317][ T2611] loop5: detected capacity change from 0 to 8192 [ 697.138877][ T2611] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 697.149460][ T2611] REISERFS (device loop5): using ordered data mode [ 697.156922][ T2611] reiserfs: using flush barriers [ 697.174265][ T2611] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 697.205102][ T2611] REISERFS (device loop5): checking transaction log (loop5) [ 697.523999][ T2651] netlink: 256 bytes leftover after parsing attributes in process `syz.3.14387'. [ 697.584604][ T2611] REISERFS (device loop5): Using tea hash to sort names [ 697.592603][ T2611] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 697.675734][ T2611] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 697.892987][T24866] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 698.332964][T24866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.367616][ T2700] SET target dimension over the limit! [ 698.523019][T24866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.544385][T24866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.570640][T24866] usb 1-1: Product: syz [ 698.584312][T24866] usb 1-1: Manufacturer: syz [ 698.605427][T24866] usb 1-1: SerialNumber: syz [ 698.663776][ T2721] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14417'. [ 698.934151][T24866] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 698.971713][T24866] usb 1-1: USB disconnect, device number 45 [ 699.126868][ T2763] netlink: 'syz.2.14433': attribute type 9 has an invalid length. [ 699.153003][ T2763] netlink: 'syz.2.14433': attribute type 6 has an invalid length. [ 699.392951][ T4686] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 699.547299][ T2784] netlink: 'syz.3.14442': attribute type 5 has an invalid length. [ 699.686452][ T2796] loop3: detected capacity change from 0 to 64 [ 699.843064][ T4686] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.875499][ T4686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 699.912157][ T4686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 699.931626][ T4686] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.008064][ T4686] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 700.022077][ T4686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.033264][ T4686] usb 6-1: config 0 descriptor?? [ 700.288418][ T5142] usb 6-1: USB disconnect, device number 24 [ 700.450713][ T4686] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 700.652990][T24866] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 700.883176][ T4686] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 700.899377][ T2856] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14473'. [ 700.911928][ T4686] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 700.931258][ T2856] batman_adv: Cannot find parent device [ 700.941954][ T4686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64 [ 700.962642][ T4686] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.073071][ T4686] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 701.082825][T24866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 701.092596][T24866] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.120903][ T4686] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.149608][ T4686] usb 4-1: Manufacturer: syz [ 701.158653][ T2868] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 701.176114][ T4686] usb 4-1: config 0 descriptor?? [ 701.340385][ T2878] IPv6: Can't replace route, no match found [ 701.347038][T24866] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 701.366935][T24866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.379254][T24866] usb 1-1: Product: syz [ 701.400977][ T2877] loop5: detected capacity change from 0 to 4096 [ 701.405588][T24866] usb 1-1: Manufacturer: syz [ 701.412174][T24866] usb 1-1: SerialNumber: syz [ 701.459980][ T5142] usb 4-1: USB disconnect, device number 62 [ 701.461254][ T2877] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 701.521247][ T2877] ntfs3: loop5: failed to convert "c46c" to iso8859-14 [ 701.692877][ T4227] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 701.744422][ T4598] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 701.932090][ T2888] loop5: detected capacity change from 0 to 32768 [ 701.938915][T24866] usb 1-1: MIDIStreaming interface descriptor not found [ 701.952907][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 701.959704][T24866] usb 1-1: USB disconnect, device number 46 [ 702.032135][ T2888] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 702.057737][ T2888] BTRFS info (device loop5): using free space tree [ 702.065193][ T2888] BTRFS info (device loop5): has skinny extents [ 702.073053][ T4227] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 702.081288][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.104356][ T4227] usb 5-1: config 0 has no interface number 0 [ 702.110923][ T4227] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.162974][ T4598] usb 3-1: unable to get BOS descriptor or descriptor too short [ 702.187542][T16873] udevd[16873]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.226807][ T2888] BTRFS info (device loop5): enabling ssd optimizations [ 702.262995][ T4598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.283022][ T4227] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 702.292356][ T4598] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 702.301577][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.311714][ T4598] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 702.323164][ T4227] usb 5-1: Product: syz [ 702.327366][ T4227] usb 5-1: Manufacturer: syz [ 702.331987][ T4227] usb 5-1: SerialNumber: syz [ 702.339439][ T4227] usb 5-1: config 0 descriptor?? [ 702.385375][ T4227] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 702.393071][ T4227] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 702.503077][ T4598] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 702.543036][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.569937][ T4598] usb 3-1: Product: syz [ 702.615076][ T4227] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 702.623794][ T4598] usb 3-1: Manufacturer: syz [ 702.630492][ T4598] usb 3-1: SerialNumber: syz [ 702.796794][ T2942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14500'. [ 702.843371][ T4227] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 702.846121][ T2947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14501'. [ 702.981547][ T4227] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 703.035892][ T4227] usb 5-1: USB disconnect, device number 62 [ 703.042221][ T4227] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 703.083124][ T4598] usb 3-1: Can't get UAC3 power state for id 10 [ 703.163461][ T4598] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 703.194572][ T4598] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 703.367897][ T4598] usb 3-1: USB disconnect, device number 57 [ 703.444026][ T2973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14510'. [ 703.496493][ T2973] netlink: 'syz.3.14510': attribute type 1 has an invalid length. [ 703.570975][ T2981] loop0: detected capacity change from 0 to 64 [ 703.653468][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.812946][T24873] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 703.919466][ T3006] netlink: 'syz.5.14526': attribute type 2 has an invalid length. [ 704.188242][T24873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.204723][T24873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.303180][T24873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 704.320370][T24873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.353836][T24873] usb 5-1: SerialNumber: syz [ 704.376676][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.447250][T24873] usb 5-1: 0:2 : does not exist [ 704.571720][ T3047] netlink: 'syz.2.14546': attribute type 8 has an invalid length. [ 704.588042][ T3049] overlayfs: unrecognized mount option "\{\" or missing value [ 704.877162][ T3010] loop0: detected capacity change from 0 to 32768 [ 704.880567][T24873] usb 5-1: USB disconnect, device number 63 [ 705.112902][ T3010] JBD2: Ignoring recovery information on journal [ 705.166586][ T3010] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 705.177499][ T3010] JBD2: bad block at offset 32 [ 705.185364][ T3072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14558'. [ 705.222271][ T3010] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 705.569052][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 705.788446][ T3108] loop0: detected capacity change from 0 to 256 [ 706.051033][ T3126] loop5: detected capacity change from 0 to 64 [ 706.195533][ T3134] device bond5 entered promiscuous mode [ 706.213326][ T3134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.052886][ T4227] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 707.136880][ T3200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.226289][ T3202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14621'. [ 707.412991][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.431207][ T3209] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14623'. [ 707.452880][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 707.488643][ T3204] xt_CT: No such helper "pptp" [ 707.703255][ T4227] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 707.723013][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.733177][ T4227] usb 4-1: Product: syz [ 707.737545][ T4227] usb 4-1: Manufacturer: syz [ 707.742292][ T4227] usb 4-1: SerialNumber: syz [ 707.819414][ T3219] xt_TCPMSS: Only works on TCP SYN packets [ 708.212989][ T4227] usb 4-1: MIDIStreaming interface descriptor not found [ 708.299606][ T4227] usb 4-1: USB disconnect, device number 63 [ 708.312067][ T3244] netlink: 4844 bytes leftover after parsing attributes in process `syz.0.14640'. [ 708.327995][ T3243] loop5: detected capacity change from 0 to 128 [ 708.431232][ T3252] netlink: 'syz.0.14644': attribute type 1 has an invalid length. [ 708.552572][T22138] sysv_free_block: flc_count > flc_size [ 708.580068][T22138] sysv_free_block: flc_count > flc_size [ 708.589706][T22138] sysv_free_block: flc_count > flc_size [ 708.625858][ T3262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14650'. [ 708.627689][T22138] sysv_free_block: flc_count > flc_size [ 708.663648][ T4615] udevd[4615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.670654][T22138] sysv_free_block: flc_count > flc_size [ 708.680549][ T3262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14650'. [ 708.691899][T22138] sysv_free_block: flc_count > flc_size [ 708.730346][T22138] sysv_free_block: flc_count > flc_size [ 708.749786][T22138] sysv_free_block: flc_count > flc_size [ 708.792931][T22138] sysv_free_block: flc_count > flc_size [ 708.798675][T22138] sysv_free_block: flc_count > flc_size [ 708.820660][T22138] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 708.842880][T24866] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 708.867254][ T3271] openvswitch: netlink: Missing valid actions attribute. [ 708.905023][ T3271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.108001][ T3283] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 709.244270][T24866] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 709.273241][T24866] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 709.292778][T24866] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.333959][ T3285] loop0: detected capacity change from 0 to 4096 [ 709.344002][T24866] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.345694][ T3295] rdma_rxe: ignoring netdev event = 14 for lo [ 709.360397][T24866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.387509][ T3295] infiniband syz1: set active [ 709.398112][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 709.402827][ T3285] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 709.414534][ T3295] infiniband syz1: set active [ 709.420675][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 709.454245][ T3295] infiniband syz1: set active [ 709.456316][T24866] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 709.489504][ T3295] device sit0 left promiscuous mode [ 709.522452][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 709.538279][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 709.539091][T16873] udevd[16873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.549246][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.601793][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 709.627553][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 709.659927][ T3295] device team0 left promiscuous mode [ 709.690264][ T3295] device team_slave_0 left promiscuous mode [ 709.722651][ T3295] device team_slave_1 left promiscuous mode [ 709.737008][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.749421][T24866] usb 5-1: USB disconnect, device number 64 [ 709.774578][ T3295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.812887][ T1108] lo speed is unknown, defaulting to 1000 [ 709.821841][ T4598] lo speed is unknown, defaulting to 1000 [ 709.833965][ T4604] lo speed is unknown, defaulting to 1000 [ 709.856622][ T4227] lo speed is unknown, defaulting to 1000 [ 709.887232][ T3303] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 709.897513][ T3303] overlayfs: missing 'lowerdir' [ 710.443182][ T4227] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 710.561461][ T3341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.633061][T24869] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 710.813070][ T4227] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 710.841368][ T4227] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 710.892804][ T4227] usb 4-1: config 0 interface 0 has no altsetting 0 [ 710.922951][T24869] usb 5-1: Using ep0 maxpacket: 8 [ 711.063197][ T4227] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 711.073005][T24869] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 711.080080][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.098365][T24869] usb 5-1: config 179 has no interface number 0 [ 711.114631][ T4227] usb 4-1: Product: syz [ 711.118903][ T4227] usb 4-1: Manufacturer: syz [ 711.126784][T24869] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 711.150746][T24869] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 711.162473][ T4227] usb 4-1: SerialNumber: syz [ 711.174226][ T4227] usb 4-1: config 0 descriptor?? [ 711.206153][T24869] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 711.214314][ T4227] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 711.235377][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 711.247216][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 711.256737][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 711.258426][T24869] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 711.268807][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 711.283356][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 711.288577][T24869] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 711.310543][T24869] usb 5-1: config 179 interface 65 has no altsetting 0 [ 711.312092][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 711.317848][T24869] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 711.335085][T24869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.351427][ T4227] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 711.368733][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 711.381576][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 711.421780][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 711.424627][T24869] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 711.433007][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 711.462803][ T4227] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 711.492838][ T1108] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 711.500796][ T4227] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 711.514727][ T4227] usb 4-1: USB disconnect, device number 64 [ 711.586640][ T4227] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 711.633724][ T4227] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 711.694078][ T4227] keyspan 4-1:0.0: device disconnected [ 712.013057][ T1108] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 712.032822][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.041146][ T1108] usb 1-1: Product: syz [ 712.051374][ T1108] usb 1-1: Manufacturer: syz [ 712.060058][ T1108] usb 1-1: SerialNumber: syz [ 712.221362][T24869] usb 5-1: USB disconnect, device number 65 [ 712.232758][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 712.299680][T24869] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 712.344088][ T3412] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14721'. [ 712.369198][ T3412] netlink: 56 bytes leftover after parsing attributes in process `syz.5.14721'. [ 712.405440][ T3412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14721'. [ 712.422937][ T1108] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 712.450653][ T1108] usb 1-1: USB disconnect, device number 47 [ 712.472349][ T3412] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14721'. [ 712.633872][T24866] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 712.851303][ T3438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.972477][ T3444] /dev/loop4: Can't open blockdev [ 713.025598][ T3446] netlink: 'syz.2.14737': attribute type 9 has an invalid length. [ 713.052915][ T3446] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.14737'. [ 713.062970][T24866] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 713.071177][T24866] usb 4-1: config 0 has no interface number 0 [ 713.113154][T24866] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.161075][T24866] usb 4-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.187273][T24866] usb 4-1: config 0 interface 110 has no altsetting 0 [ 713.255400][ T3458] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14741'. [ 713.288084][ T3458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.309292][ T3459] netlink: 'syz.4.14742': attribute type 10 has an invalid length. [ 713.383117][T24866] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 713.392229][T24866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.433609][T24866] usb 4-1: Product: syz [ 713.437956][T24866] usb 4-1: Manufacturer: syz [ 713.442665][T24866] usb 4-1: SerialNumber: syz [ 713.523212][T24866] usb 4-1: config 0 descriptor?? [ 713.702915][ T3491] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14753'. [ 713.735551][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14753'. [ 713.793480][T24866] cdc_subset: probe of 4-1:0.110 failed with error -22 [ 713.818247][ T3497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14757'. [ 713.857585][ T3502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14758'. [ 713.983221][ T3511] netlink: 'syz.2.14762': attribute type 1 has an invalid length. [ 714.008931][ T4227] usb 4-1: USB disconnect, device number 65 [ 714.232980][ T1108] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 714.296381][T24866] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 714.332876][ T4598] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 714.544670][ T3552] sctp: [Deprecated]: syz.5.14779 (pid 3552) Use of int in maxseg socket option. [ 714.544670][ T3552] Use struct sctp_assoc_value instead [ 714.573004][ T4598] usb 3-1: Using ep0 maxpacket: 32 [ 714.593175][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.612236][ T1108] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 714.622538][ T1108] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 714.644151][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.668495][ T1108] usb 1-1: config 0 descriptor?? [ 714.721272][ T3561] loop3: detected capacity change from 0 to 764 [ 714.754991][ T3563] dlm: no local IP address has been set [ 714.763524][T24866] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 714.765769][ T3563] dlm: cannot start dlm midcomms -107 [ 714.772658][T24866] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 714.786989][T24866] usb 5-1: Manufacturer: syz [ 714.795819][ T4598] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 714.808856][T24866] usb 5-1: config 0 descriptor?? [ 714.833092][ T4598] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 715.053064][ T4598] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.05 [ 715.062280][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.097145][ T4598] usb 3-1: Product: syz [ 715.101382][ T4598] usb 3-1: Manufacturer: syz [ 715.106492][ T4598] usb 3-1: SerialNumber: syz [ 715.156425][ T4598] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 715.158679][T24866] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 715.186872][ T4598] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 715.189570][T24866] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 715.194276][ T1108] Bluetooth: Can't get state to change to load configuration err [ 715.227581][T24866] usb 5-1: USB disconnect, device number 66 [ 715.247380][ T1108] Bluetooth: Loading sysconfig file failed [ 715.262816][ T1108] ath3k: probe of 1-1:0.0 failed with error -16 [ 715.312447][ T1108] usb 1-1: USB disconnect, device number 48 [ 715.369867][ T4598] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 715.398610][ T4598] usb 3-1: USB disconnect, device number 58 [ 715.446769][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.575689][ T3596] loop3: detected capacity change from 0 to 64 [ 715.866811][ T3608] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 715.945488][ T3614] loop0: detected capacity change from 0 to 256 [ 716.055866][ T3614] FAT-fs (loop0): Directory bread(block 64) failed [ 716.062617][ T3614] FAT-fs (loop0): Directory bread(block 65) failed [ 716.103122][ T3614] FAT-fs (loop0): Directory bread(block 66) failed [ 716.121724][ T3614] FAT-fs (loop0): Directory bread(block 67) failed [ 716.131797][ T3627] xt_nat: multiple ranges no longer supported [ 716.152357][ T3614] FAT-fs (loop0): Directory bread(block 68) failed [ 716.172946][ T3614] FAT-fs (loop0): Directory bread(block 69) failed [ 716.200041][ T3614] FAT-fs (loop0): Directory bread(block 70) failed [ 716.233099][ T3614] FAT-fs (loop0): Directory bread(block 71) failed [ 716.240370][ T3614] FAT-fs (loop0): Directory bread(block 72) failed [ 716.279244][ T3614] FAT-fs (loop0): Directory bread(block 73) failed [ 716.628343][ T3646] loop3: detected capacity change from 0 to 4096 [ 716.730465][ T3646] ntfs: volume version 3.1. [ 716.758250][ T3646] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 716.812758][ T3646] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 716.847471][ T3646] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 716.901575][ T3646] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 716.921594][ T3670] device bond6 entered promiscuous mode [ 716.942953][ T3646] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 716.974861][ T3670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 717.041848][ T3646] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 717.185185][ T3680] netlink: 'syz.0.14840': attribute type 8 has an invalid length. [ 717.806353][ T3716] netlink: 'syz.0.14859': attribute type 3 has an invalid length. [ 718.022821][ T4598] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 718.037755][ T3728] __nla_validate_parse: 4 callbacks suppressed [ 718.037773][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14864'. [ 718.129028][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14867'. [ 718.142977][T24866] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 718.225800][ T3739] netlink: 'syz.3.14870': attribute type 2 has an invalid length. [ 718.292909][ T4598] usb 3-1: Using ep0 maxpacket: 32 [ 718.413125][ T4598] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 718.427119][ T4598] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 718.460381][ T4598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 718.494563][ T4598] usb 3-1: config 1 has no interface number 0 [ 718.527187][ T4598] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 718.559535][ T4598] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 718.604945][ T4598] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 718.611956][ T3763] loop3: detected capacity change from 0 to 64 [ 718.633645][T24866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 718.645443][ T4598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.690678][T24866] usb 5-1: not running at top speed; connect to a high speed hub [ 718.715483][ T4598] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 718.802986][T24866] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 718.811227][T24866] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 718.858881][T24866] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 718.872529][T24866] usb 5-1: config 2 has no interface number 0 [ 718.881569][T24866] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 718.920227][T24866] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 718.943746][ T4598] snd_usb_pod 3-1:1.1: invalid control EP [ 718.949539][ T4598] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 718.967290][ T4598] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 718.973382][T24866] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 718.997585][ T4598] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 719.179231][ T4598] usb 3-1: USB disconnect, device number 59 [ 719.193130][T24866] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 719.213224][T24866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.238236][T24866] usb 5-1: Product: syz [ 719.249199][T24866] usb 5-1: Manufacturer: syz [ 719.260469][T24866] usb 5-1: SerialNumber: syz [ 719.432897][T24869] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 719.607833][T24866] usb 5-1: USB disconnect, device number 67 [ 719.813527][T24869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.843631][T24869] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 719.953161][T24869] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.971302][T24869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 719.988281][T24869] usb 6-1: SerialNumber: syz [ 720.054175][T24869] cdc_ether 6-1:1.0: skipping garbage [ 720.061122][T24869] usb 6-1: bad CDC descriptors [ 720.298123][T24869] usb 6-1: USB disconnect, device number 25 [ 720.335214][ T3858] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 720.462833][ T1108] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 720.843156][ T1108] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 720.869300][ T1108] usb 5-1: config 0 has no interface number 0 [ 720.887125][ T1108] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 720.939168][ T1108] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 720.959749][ T1108] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 721.111979][ T3898] program syz.2.14943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.134070][ T3886] loop5: detected capacity change from 0 to 8192 [ 721.157298][ T3886] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 721.182008][ T1108] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 721.193044][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 721.201812][ T1108] usb 5-1: Product: syz [ 721.202014][ T3886] REISERFS (device loop5): using ordered data mode [ 721.206976][ T1108] usb 5-1: Manufacturer: syz [ 721.217877][ T1108] usb 5-1: SerialNumber: syz [ 721.234498][ T1108] usb 5-1: config 0 descriptor?? [ 721.253010][ T3886] reiserfs: using flush barriers [ 721.263409][T24869] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 721.284611][ T1108] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 721.297374][ T3886] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 721.319619][ T1108] xpad: probe of 5-1:0.237 failed with error -5 [ 721.331402][ T3886] REISERFS (device loop5): checking transaction log (loop5) [ 721.353426][ T3886] REISERFS (device loop5): Using rupasov hash to sort names [ 721.395073][ T3886] REISERFS (device loop5): using 3.5.x disk format [ 721.401980][ T3886] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 721.450272][ T3886] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 721.473350][ T3886] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 721.501532][ T3886] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 721.562982][T24869] usb 1-1: Using ep0 maxpacket: 16 [ 721.592119][ T1108] usb 5-1: USB disconnect, device number 68 [ 721.692993][T24869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.800812][ T3913] ipt_ECN: cannot use operation on non-tcp rule [ 721.888612][T24869] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 721.912879][T24869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.936289][T24869] usb 1-1: Product: syz [ 721.951650][T24869] usb 1-1: Manufacturer: syz [ 721.962873][T24869] usb 1-1: SerialNumber: syz [ 721.979923][T24869] usb 1-1: config 0 descriptor?? [ 722.248201][T24869] usb 1-1: USB disconnect, device number 49 [ 722.717491][ T3961] netlink: 'syz.5.14971': attribute type 1 has an invalid length. [ 722.998768][ T3980] netlink: 'syz.0.14979': attribute type 30 has an invalid length. [ 723.045109][ T3980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14979'. [ 723.202353][ T3994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 723.542168][ T4017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14995'. [ 723.695525][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14999'. [ 723.771674][ T4025] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14999'. [ 724.185507][ T3998] loop3: detected capacity change from 0 to 32768 [ 724.247202][ T3998] __jfs_setxattr: xattr_size = 92, new_size = 13116 [ 724.436296][ T4047] loop5: detected capacity change from 0 to 4096 [ 724.483365][ T4055] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 724.505646][ T4052] loop0: detected capacity change from 0 to 4096 [ 724.579491][ T4052] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 724.594108][ T4047] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 724.629514][ T4047] ntfs3: loop5: Failed to load $Extend. [ 724.662840][T24865] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 724.757321][ T4052] ntfs3: Cannot use different iocharset when remounting! [ 724.912861][T24865] usb 5-1: Using ep0 maxpacket: 32 [ 725.054018][T24865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.079642][T24865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.093682][T24865] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 725.172734][T24865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.184670][T24865] usb 5-1: config 0 descriptor?? [ 725.234100][T24865] hub 5-1:0.0: USB hub found [ 725.324562][ T4085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15028'. [ 725.453038][T24865] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 725.763011][T24865] usbhid 5-1:0.0: can't add hid device: -71 [ 725.769846][T24865] usbhid: probe of 5-1:0.0 failed with error -71 [ 725.843579][T24865] usb 5-1: USB disconnect, device number 69 [ 726.131016][ T4131] netlink: 10 bytes leftover after parsing attributes in process `syz.5.15051'. [ 726.642921][ T4604] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 726.661577][ T4167] usb usb1: usbfs: process 4167 (syz.5.15069) did not claim interface 0 before use [ 727.012991][ T4604] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 727.047069][ T4604] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 727.066682][ T4200] loop3: detected capacity change from 0 to 4096 [ 727.083464][ T4604] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 727.113907][ T4604] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 727.145286][ T4200] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 727.160593][ T4604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 8 [ 727.202623][ T4604] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 727.300051][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15087'. [ 727.321841][ T4200] ntfs3: loop3: failed to convert "c46c" to maccroatian [ 727.483033][ T4604] usb 3-1: string descriptor 0 read error: -22 [ 727.499648][ T4604] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 727.505977][T24869] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 727.524769][ T4604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.571269][ T4604] usb 3-1: config 0 descriptor?? [ 727.602531][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15093'. [ 727.623763][ T4604] hub 3-1:0.0: bad descriptor, ignoring hub [ 727.628440][ T4253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.650141][ T4604] hub: probe of 3-1:0.0 failed with error -5 [ 727.832891][T24869] usb 6-1: Using ep0 maxpacket: 16 [ 727.956040][ T4598] usb 3-1: USB disconnect, device number 60 [ 727.959809][T24869] usb 6-1: config 0 has no interfaces? [ 728.020988][ T4260] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.043289][ T4260] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.058888][ T4260] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.078694][ T4260] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.152911][T24869] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 728.162211][T24869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.192817][T24869] usb 6-1: Product: syz [ 728.197140][T24869] usb 6-1: Manufacturer: syz [ 728.230129][T24869] usb 6-1: SerialNumber: syz [ 728.237052][T24869] r8152-cfgselector 6-1: config 0 descriptor?? [ 728.376345][ T4276] device bridge0 entered promiscuous mode [ 728.382537][ T4276] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 728.412525][ T4278] cgroup: name respecified [ 728.533498][T24869] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 728.616272][ T4287] SET target dimension over the limit! [ 728.791359][ T1108] usb 6-1: USB disconnect, device number 26 [ 729.152842][T24865] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 729.217073][ T4316] netlink: 'syz.0.15121': attribute type 1 has an invalid length. [ 729.343164][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15124'. [ 729.390292][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15124'. [ 729.562634][ T4335] CIFS: iocharset name too long [ 729.743192][ T1108] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 729.773056][T24865] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 729.783076][T24865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.784108][ T4598] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 729.791638][T24865] usb 5-1: Product: syz [ 729.791663][T24865] usb 5-1: Manufacturer: syz [ 729.791680][T24865] usb 5-1: SerialNumber: syz [ 729.801138][T24865] usb 5-1: config 0 descriptor?? [ 729.874912][T24865] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 730.052981][T24869] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 730.163003][ T1108] usb 6-1: unable to get BOS descriptor or descriptor too short [ 730.177669][ T4598] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 730.186912][ T4598] usb 3-1: config 8 has no interface number 0 [ 730.202844][ T1108] usb 6-1: not running at top speed; connect to a high speed hub [ 730.211127][ T4598] usb 3-1: config 8 interface 188 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 730.283469][ T1108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.303127][ T1108] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.312798][T24865] usb 5-1: USB disconnect, device number 70 [ 730.323500][ T1108] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.343091][T24869] usb 1-1: Using ep0 maxpacket: 16 [ 730.383042][ T4598] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 730.397519][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.406843][ T4598] usb 3-1: Product: syz [ 730.411137][ T4598] usb 3-1: Manufacturer: syz [ 730.429855][ T4598] usb 3-1: SerialNumber: syz [ 730.453326][ T4331] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 730.502985][ T1108] usb 6-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 730.503125][T24869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.519627][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.532168][ T1108] usb 6-1: Product: syz [ 730.537913][T24869] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 730.542184][ T1108] usb 6-1: Manufacturer: syz [ 730.554208][T24869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.562543][ T1108] usb 6-1: SerialNumber: syz [ 730.564608][T24869] usb 1-1: config 0 descriptor?? [ 730.615625][T24869] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 730.713430][ T4381] loop3: detected capacity change from 0 to 4096 [ 730.718622][ T4598] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 730.733217][ T4598] usb 3-1: USB disconnect, device number 61 [ 730.806903][ T4382] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.809549][ T4381] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 730.846696][ T4381] NILFS (loop3): mounting fs with errors [ 730.917280][T24869] usbhid 1-1:0.0: can't add hid device: -71 [ 730.926832][T24869] usbhid: probe of 1-1:0.0 failed with error -71 [ 730.932958][ T1108] usb 6-1: MIDIStreaming interface descriptor not found [ 730.961141][ T4381] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 730.962556][T24869] usb 1-1: USB disconnect, device number 50 [ 731.004011][ T1108] usb 6-1: USB disconnect, device number 27 [ 731.095263][ T4381] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 731.260759][ T4391] netlink: 'syz.4.15158': attribute type 33 has an invalid length. [ 731.282162][ T4391] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15158'. [ 731.396256][ T4397] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.15160'. [ 731.775552][ T4427] loop5: detected capacity change from 0 to 64 [ 731.892040][ T4427] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 732.532861][T24869] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 732.566347][ T4461] loop5: detected capacity change from 0 to 4096 [ 732.622833][ T4461] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 732.637479][ T4465] openvswitch: netlink: Message has 4 unknown bytes. [ 732.756541][ T4461] ntfs3: Cannot use different iocharset when remounting! [ 732.842991][T24869] usb 3-1: Using ep0 maxpacket: 8 [ 733.080281][T24869] usb 3-1: config 6 has an invalid interface number: 85 but max is 0 [ 733.088248][ T4444] loop0: detected capacity change from 0 to 32768 [ 733.108984][T24869] usb 3-1: config 6 has no interface number 0 [ 733.135544][T24869] usb 3-1: config 6 interface 85 has no altsetting 0 [ 733.192050][ T4444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.15185 (4444) [ 733.245652][ T4444] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 733.274161][ T4444] BTRFS info (device loop0): using free space tree [ 733.281302][ T4444] BTRFS info (device loop0): has skinny extents [ 733.373024][T24869] usb 3-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=44.be [ 733.412867][T24869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.442013][T24869] usb 3-1: Product: syz [ 733.502974][T24869] usb 3-1: Manufacturer: syz [ 733.507660][T24869] usb 3-1: SerialNumber: syz [ 733.733068][ T4444] BTRFS info (device loop0): enabling ssd optimizations [ 733.793701][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15215'. [ 733.855969][T24869] usb-storage 3-1:6.85: USB Mass Storage device detected [ 733.886712][T24869] usb-storage 3-1:6.85: Quirks match for vid 2ca3 pid 0031: 2000000 [ 733.985169][T24869] usb 3-1: USB disconnect, device number 62 [ 734.272095][ T4543] netlink: 'syz.4.15224': attribute type 1 has an invalid length. [ 734.685891][ T4561] netlink: 280 bytes leftover after parsing attributes in process `syz.4.15233'. [ 735.198228][ T4581] loop3: detected capacity change from 0 to 4096 [ 735.244848][ T4581] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 735.341607][ T4581] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 735.382836][ T1108] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 735.383739][ T4581] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 735.476995][ T4581] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 735.507402][ T4581] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 735.589250][ T4581] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 735.612226][ T4581] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 735.633648][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 735.647805][ T4581] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 735.702936][ T4581] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 735.793032][ T4581] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 735.803070][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 735.843514][ T4581] ntfs: volume version 3.1. [ 735.883239][ T1108] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 735.892553][ T1108] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 735.917914][ T1108] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 735.928370][ T4632] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 735.933478][ T1108] usb 5-1: config 128 has no interface number 0 [ 735.948043][ T1108] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 735.996087][ T1108] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.031279][ T1108] usb 5-1: config 128 interface 127 has no altsetting 0 [ 736.043106][T24873] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 736.202956][ T1108] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 736.214557][ T4644] dlm: no locking on control device [ 736.228849][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.258788][ T1108] usb 5-1: Product: syz [ 736.272274][ T1108] usb 5-1: Manufacturer: syz [ 736.287537][ T1108] usb 5-1: SerialNumber: syz [ 736.444483][T24873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 736.481428][T24873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 736.511613][T24873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 736.547630][T24873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 736.573784][T24873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 736.589263][T24873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.633095][ T4624] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 736.758763][ T1108] usb 5-1: USB disconnect, device number 71 [ 736.796331][ T4678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15283'. [ 736.823714][T24873] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 736.885579][T24873] usb 3-1: USB disconnect, device number 63 [ 736.984255][T16873] udevd[16873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.160680][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.742819][ T4740] netlink: 748 bytes leftover after parsing attributes in process `syz.0.15313'. [ 737.898341][ T4753] netlink: 'syz.5.15320': attribute type 1 has an invalid length. [ 737.910281][ T4751] loop0: detected capacity change from 0 to 512 [ 737.927343][ T4753] netlink: 200 bytes leftover after parsing attributes in process `syz.5.15320'. [ 737.960869][ T4757] loop3: detected capacity change from 0 to 1024 [ 738.012910][ T4751] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 738.020268][ T4751] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 738.118460][ T4751] EXT4-fs (loop0): orphan cleanup on readonly fs [ 738.163317][ T4757] hfsplus: trying to free free bnode 0(1) [ 738.194614][ T4751] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 738.228522][ T4751] EXT4-fs (loop0): Remounting filesystem read-only [ 738.274577][ T4751] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.15319: Failed to acquire dquot type 0 [ 738.330689][ T4751] EXT4-fs (loop0): Remounting filesystem read-only [ 738.333665][ T154] hfsplus: b-tree write err: -5, ino 25 [ 738.386228][ T154] hfsplus: b-tree write err: -5, ino 4 [ 738.391845][ T154] hfsplus: b-tree write err: -5, ino 2 [ 738.429481][ T4751] EXT4-fs (loop0): 1 truncate cleaned up [ 738.519070][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,bsddf,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 738.743196][ T4788] dlm: no locking on control device [ 738.763029][ T4789] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 739.172842][ T1108] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 739.201727][ T4813] netlink: 'syz.0.15347': attribute type 10 has an invalid length. [ 739.292159][ T4813] team0: Device veth0_vlan failed to register rx_handler [ 739.417270][ T4823] (syz.5.15351,4823,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 739.421776][T24864] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 739.455860][ T4823] (syz.5.15351,4823,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 739.546858][ T4827] netlink: 'syz.0.15353': attribute type 5 has an invalid length. [ 739.555246][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.581743][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.620193][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.667801][ T1108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.690104][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.722009][ T1108] usb 5-1: config 0 descriptor?? [ 739.783622][ T1108] hub 5-1:0.0: USB hub found [ 739.834314][T24864] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 739.879210][T24864] usb 3-1: config 0 has no interface number 0 [ 739.888881][T24864] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 739.892130][ T4849] netlink: 'syz.3.15363': attribute type 26 has an invalid length. [ 739.930719][ T4844] loop0: detected capacity change from 0 to 4096 [ 739.931415][T24864] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 739.978668][ T4844] EXT4-fs (loop0): Test dummy encryption mode enabled [ 740.003093][ T1108] hub 5-1:0.0: 14 ports detected [ 740.022884][ T1108] hub 5-1:0.0: insufficient power available to use all downstream ports [ 740.063157][ T4844] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 740.173134][T24864] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 740.202951][T24864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.212626][T24864] usb 3-1: Product: syz [ 740.222943][ T1108] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 740.224773][T24864] usb 3-1: Manufacturer: syz [ 740.229370][ T1108] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 740.238483][T24864] usb 3-1: SerialNumber: syz [ 740.252398][T24864] usb 3-1: config 0 descriptor?? [ 740.273052][ T4808] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 740.303631][ T1108] usb 5-1: USB disconnect, device number 72 [ 740.351720][T24864] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 740.567262][ T4227] usb 3-1: USB disconnect, device number 64 [ 740.596283][ T4227] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 740.821178][ T4879] loop3: detected capacity change from 0 to 1024 [ 740.954013][ T4889] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.265189][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15393'. [ 741.501693][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15400'. [ 741.525040][ T4927] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15401'. [ 742.152314][ T4969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.423807][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15426'. [ 742.749351][ T4937] loop5: detected capacity change from 0 to 32768 [ 742.759632][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15434'. [ 742.807756][ T5142] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 742.844318][ T4998] netlink: 'syz.2.15435': attribute type 21 has an invalid length. [ 742.875050][ T4937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.15406 (4937) [ 742.890241][ T4998] netlink: 'syz.2.15435': attribute type 1 has an invalid length. [ 742.919521][ T4937] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 742.929827][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15438'. [ 742.962826][ T4937] BTRFS info (device loop5): using free space tree [ 742.969647][ T4937] BTRFS info (device loop5): has skinny extents [ 743.213053][ T5142] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 743.311306][ T5037] xt_ecn: cannot match TCP bits for non-tcp packets [ 743.333326][ T4937] BTRFS info (device loop5): enabling ssd optimizations [ 743.433046][ T5142] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 743.468156][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.492888][ T5142] usb 1-1: Product: syz [ 743.497323][ T5142] usb 1-1: Manufacturer: syz [ 743.502145][ T5142] usb 1-1: SerialNumber: syz [ 743.615227][ T5142] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 743.640178][ T5142] dvb-usb: bulk message failed: -22 (3/0) [ 743.695880][ T5142] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 743.759143][ T5142] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 743.769375][ T5142] dvb_usb_umt_010: probe of 1-1:54.0 failed with error -22 [ 743.846311][ T5142] usb 1-1: USB disconnect, device number 51 [ 743.912961][ T4227] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 744.152579][ T5073] netlink: 'syz.3.15463': attribute type 5 has an invalid length. [ 744.175307][ T5073] device  entered promiscuous mode [ 744.443173][ T4227] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 744.464105][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.472212][ T4227] usb 3-1: Product: syz [ 744.510811][ T4227] usb 3-1: Manufacturer: syz [ 744.525559][ T5086] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.15450'. [ 744.545387][ T4227] usb 3-1: SerialNumber: syz [ 744.923206][ T4227] usb 3-1: unit 5 not found! [ 744.928201][ T4227] usb 3-1: unit 102 not found! [ 745.013614][ T4227] usb 3-1: USB disconnect, device number 65 [ 745.102505][ T5129] netlink: 'syz.0.15489': attribute type 1 has an invalid length. [ 745.624189][ T5166] program syz.0.15505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 745.741666][T16873] udevd[16873]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.890059][ T5186] netlink: 'syz.4.15516': attribute type 10 has an invalid length. [ 745.902305][T24862] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 745.929172][ T5186] team0: Device veth0_vlan failed to register rx_handler [ 746.042882][ T5194] Unsupported ieee802154 address type: 0 [ 746.188042][ T5207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15526'. [ 746.313143][T24862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.423235][T24862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.468095][ T5218] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15530'. [ 746.543032][T24862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.733095][T24862] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 746.758621][T24862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.784140][T24862] usb 6-1: Product: syz [ 746.793108][T24862] usb 6-1: Manufacturer: syz [ 746.800319][T24862] usb 6-1: SerialNumber: syz [ 746.815882][T24862] usb 6-1: config 0 descriptor?? [ 746.854505][T24862] ti_usb_3410_5052 6-1:0.0: required endpoints missing [ 747.058319][T24862] usb 6-1: USB disconnect, device number 28 [ 747.328504][ T5251] netlink: 'syz.0.15547': attribute type 1 has an invalid length. [ 747.357292][ T5251] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.15547'. [ 747.405659][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.719318][ T5273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15558'. [ 747.832971][ T4227] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 748.222948][ T4227] usb 3-1: config 251 has an invalid interface number: 33 but max is 0 [ 748.256614][T24862] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 748.258942][ T4227] usb 3-1: config 251 has no interface number 0 [ 748.320376][ T4227] usb 3-1: config 251 interface 33 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 748.355562][ T4227] usb 3-1: config 251 interface 33 has no altsetting 0 [ 748.485544][ T5315] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15577'. [ 748.542984][ T4227] usb 3-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=94.85 [ 748.552219][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.584104][ T4227] usb 3-1: Product: syz [ 748.588845][ T4227] usb 3-1: Manufacturer: syz [ 748.601897][ T4227] usb 3-1: SerialNumber: syz [ 748.633060][ T5263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 748.851933][ T5331] loop0: detected capacity change from 0 to 4096 [ 748.870247][T24862] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 748.881924][T24862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.898879][T24862] usb 4-1: Product: syz [ 748.905020][T24862] usb 4-1: Manufacturer: syz [ 748.909799][T24862] usb 4-1: SerialNumber: syz [ 748.953959][ T4227] smsc95xx v2.0.0 [ 748.957855][ T4227] smsc95xx 3-1:251.33 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 748.968738][ T5331] __ntfs_error: 13 callbacks suppressed [ 748.968756][ T5331] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 748.994649][ T4227] smsc95xx: probe of 3-1:251.33 failed with error -22 [ 749.002542][ T5331] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 749.037347][ T5331] ntfs: volume version 0.0. [ 749.040030][ T4227] usb 3-1: USB disconnect, device number 66 [ 749.230514][ T5313] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.238361][ T5313] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.393069][T24862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 749.425240][T24862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 749.472957][T24862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 749.492885][T24862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 749.536138][T24862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 749.556395][T24862] lan78xx: probe of 4-1:1.0 failed with error -71 [ 749.608785][T24862] usb 4-1: USB disconnect, device number 66 [ 749.800427][ T5313] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 749.813939][ T5313] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 749.828450][ T5313] infiniband syz2: set down [ 749.880761][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.923942][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.328383][ T5313] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.338478][ T5313] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.347793][ T5313] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.357433][ T5313] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.702816][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15587'. [ 750.713326][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15587'. [ 750.743554][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15587'. [ 750.779005][ T5333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.807823][ T5339] tc_dump_action: action bad kind [ 751.001946][ T5357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15600'. [ 751.029539][ T5357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15600'. [ 751.116058][ T5361] device bridge2 entered promiscuous mode [ 751.154899][ T5365] syz.0.15604: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 751.221656][ T5365] CPU: 0 PID: 5365 Comm: syz.0.15604 Not tainted syzkaller #0 [ 751.229281][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.239754][ T5365] Call Trace: [ 751.243155][ T5365] [ 751.246296][ T5365] dump_stack_lvl+0x188/0x250 [ 751.251203][ T5365] ? rcu_lock_release+0x5/0x20 [ 751.256197][ T5365] ? show_regs_print_info+0x20/0x20 [ 751.262114][ T5365] ? load_image+0x400/0x400 [ 751.266664][ T5365] ? __rcu_read_unlock+0x78/0xd0 [ 751.271660][ T5365] warn_alloc+0x243/0x320 [ 751.276173][ T5365] ? rcu_lock_release+0x20/0x20 [ 751.281211][ T5365] ? zone_watermark_ok_safe+0x240/0x240 [ 751.286998][ T5365] ? dvb_demux_do_ioctl+0x313/0x530 [ 751.292249][ T5365] ? kfree+0xef/0x2a0 [ 751.296813][ T5365] __vmalloc_node_range+0x2b1/0x8b0 [ 751.298992][ T5368] loop3: detected capacity change from 0 to 4096 [ 751.302228][ T5365] ? mutex_lock_io_nested+0x60/0x60 [ 751.314198][ T5365] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 751.320168][ T5365] vmalloc+0x75/0x80 [ 751.324105][ T5365] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 751.330099][ T5365] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 751.336041][ T5365] dvb_demux_do_ioctl+0x450/0x530 [ 751.341318][ T5365] dvb_usercopy+0x191/0x2b0 [ 751.345946][ T5365] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 751.351616][ T5365] ? dvb_generic_ioctl+0xb0/0xb0 [ 751.356929][ T5365] ? dvb_demux_poll+0x210/0x210 [ 751.361863][ T5365] dvb_demux_ioctl+0x25/0x30 [ 751.366586][ T5365] __se_sys_ioctl+0xfa/0x170 [ 751.371234][ T5365] do_syscall_64+0x4c/0xa0 [ 751.375809][ T5365] ? clear_bhb_loop+0x30/0x80 [ 751.380590][ T5365] ? clear_bhb_loop+0x30/0x80 [ 751.385665][ T5365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 751.385899][ T5368] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 751.391809][ T5365] RIP: 0033:0x7faf0b933dd9 [ 751.391840][ T5365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.391859][ T5365] RSP: 002b:00007faf09b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.434417][ T5365] RAX: ffffffffffffffda RBX: 00007faf0bbacfa0 RCX: 00007faf0b933dd9 [ 751.442434][ T5365] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 751.450442][ T5365] RBP: 00007faf0b9c9d69 R08: 0000000000000000 R09: 0000000000000000 [ 751.458730][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.466733][ T5365] R13: 00007faf0bbad038 R14: 00007faf0bbacfa0 R15: 00007ffe52903c58 [ 751.474782][ T5365] [ 751.566414][ T5368] ntfs3: loop3: failed to convert "c46c" to maccyrillic [ 751.901538][ T5365] Mem-Info: [ 751.911329][ T5365] active_anon:362 inactive_anon:7598 isolated_anon:0 [ 751.911329][ T5365] active_file:15623 inactive_file:38247 isolated_file:0 [ 751.911329][ T5365] unevictable:768 dirty:350 writeback:0 [ 751.911329][ T5365] slab_reclaimable:17635 slab_unreclaimable:103440 [ 751.911329][ T5365] mapped:30478 shmem:1926 pagetables:789 bounce:0 [ 751.911329][ T5365] kernel_misc_reclaimable:0 [ 751.911329][ T5365] free:1353311 free_pcp:10543 free_cma:0 [ 751.961627][ T5365] Node 0 active_anon:1416kB inactive_anon:29784kB active_file:62292kB inactive_file:152988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121912kB dirty:1400kB writeback:0kB shmem:5628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12584kB pagetables:2956kB all_unreclaimable? no [ 752.045135][ T5394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15618'. [ 752.093003][ T5365] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 752.192255][ T1092] block nbd3: Attempted send on invalid socket [ 752.199740][ T1092] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.223416][ T150] block nbd3: Attempted send on invalid socket [ 752.230038][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.242278][ T150] block nbd3: Attempted send on invalid socket [ 752.248584][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.261090][ T1092] block nbd3: Attempted send on invalid socket [ 752.262643][ T5365] Node 0 [ 752.267477][ T1092] blk_update_request: I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.267771][ T5365] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.275129][ T1092] block nbd3: Attempted send on invalid socket [ 752.281942][ T5365] lowmem_reserve[]: [ 752.307705][ T1092] blk_update_request: I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.329457][ T150] block nbd3: Attempted send on invalid socket [ 752.329613][ T5365] 0 [ 752.335762][ T150] blk_update_request: I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.338433][ T5365] 2539 2540 2540 2540 [ 752.349894][ T5402] VFS: unable to find oldfs superblock on device nbd3 [ 752.353823][ T5365] Node 0 DMA32 free:1477420kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1420kB inactive_anon:29776kB active_file:62292kB inactive_file:152988kB unevictable:1536kB writepending:1452kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:41828kB local_pcp:21264kB free_cma:0kB [ 752.353905][ T5365] lowmem_reserve[]: 0 0 0 0 0 [ 752.353945][ T5365] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 752.614874][ T5424] vivid-001: ================= START STATUS ================= [ 752.652914][ T5424] vivid-001: Enable Output Cropping: true [ 752.671902][ T5424] vivid-001: Enable Output Composing: true [ 752.699330][ T5365] lowmem_reserve[]: 0 0 0 0 0 [ 752.704612][ T5424] vivid-001: Enable Output Scaler: true [ 752.732951][ T5424] vivid-001: Tx RGB Quantization Range: Automatic [ 752.739759][ T5365] Node 1 Normal free:3921288kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.782839][ T5424] vivid-001: Transmit Mode: HDMI [ 752.801468][ T5424] vivid-001: Display Present: true inactive [ 752.803805][ T5423] loop3: detected capacity change from 0 to 4096 [ 752.818449][ T5424] vivid-001: Hotplug Present: 0x00000001 [ 752.834369][ T5434] netlink: 'syz.4.15637': attribute type 10 has an invalid length. [ 752.842825][ T5424] vivid-001: RxSense Present: 0x00000001 [ 752.856429][ T5365] lowmem_reserve[]: 0 0 0 0 0 [ 752.861230][ T5365] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 752.881691][ T5424] vivid-001: EDID Present: 0x00000001 [ 752.882493][ T5423] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 752.903412][ T5434] team0: Device xfrm0 is of different type [ 752.912968][ T5424] vivid-001: ================== END STATUS ================== [ 752.956084][ T5365] Node 0 DMA32: 274*4kB (UME) 503*8kB (UME) 1042*16kB (UME) 483*32kB (UME) 117*64kB (UME) 91*128kB (UME) 29*256kB (UME) 5*512kB (ME) 2*1024kB (ME) 4*2048kB (UME) 342*4096kB (UM) = 1477440kB [ 752.964084][ T5423] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 753.021591][ T5365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 753.043460][ T5423] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 753.063166][ T5365] Node 1 Normal: 254*4kB (UME) 52*8kB (UME) 39*16kB (UME) 192*32kB (UME) 82*64kB (UME) 24*128kB (UE) 13*256kB (UM) 8*512kB (UE) 0*1024kB 3*2048kB (UM) 950*4096kB (M) = 3921288kB [ 753.095495][ T5423] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 753.161182][ T5423] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 753.173119][ T5365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 753.185682][ T5365] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 753.209541][ T5442] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 753.212307][ T5423] ntfs: volume version 3.1. [ 753.231697][ T5444] Unknown options in mask b7f2 [ 753.243420][ T5365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 753.265789][ T5365] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 753.284504][ T5423] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 753.302778][ T5365] 56318 total pagecache pages [ 753.307719][ T5423] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 753.320121][ T5365] 38 pages in swap cache [ 753.341550][ T5365] Swap cache stats: add 219, delete 181, find 15/28 [ 753.358429][ T5365] Free swap = 124216kB [ 753.363375][ T5423] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 753.379461][ T5365] Total swap = 124996kB [ 753.392825][ T5365] 2097051 pages RAM [ 753.403790][ T5365] 0 pages HighMem/MovableOnly [ 753.408599][ T5365] 411492 pages reserved [ 753.439803][ T5365] 0 pages cma reserved [ 754.201143][ T5492] netlink: 'syz.3.15665': attribute type 3 has an invalid length. [ 754.332277][ T5500] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 754.518078][ T5515] netlink: 'syz.2.15678': attribute type 1 has an invalid length. [ 754.861794][ T5542] rdma_rxe: ignoring netdev event = 10 for lo [ 754.892617][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15692'. [ 754.910638][T24861] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 754.938773][ T5542] infiniband syz1: set down [ 755.102787][ T1108] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 755.215742][ T5556] program syz.0.15696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.340363][T24861] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 755.349668][T24861] usb 4-1: config 1 has no interface number 0 [ 755.378796][T24861] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 755.405579][T24861] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 755.419270][T24861] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 244, changing to 11 [ 755.473057][ T1108] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 755.482917][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.539346][ T1108] pwc: Logitech/Cisco VT Camera webcam detected. [ 755.593154][T24861] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 755.602336][T24861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.615252][T24861] usb 4-1: Product: syz [ 755.619470][T24861] usb 4-1: Manufacturer: syz [ 755.624722][T24861] usb 4-1: SerialNumber: syz [ 755.638216][T24862] lo speed is unknown, defaulting to 1000 [ 755.638235][ T5563] netlink: 288 bytes leftover after parsing attributes in process `syz.0.15701'. [ 755.672767][T24866] lo speed is unknown, defaulting to 1000 [ 755.694073][T24861] usb 4-1: Error in usbnet_get_endpoints (-22) [ 755.803854][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15705'. [ 755.828665][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15705'. [ 755.950563][ T5579] x_tables: duplicate underflow at hook 4 [ 755.962982][ T1108] pwc: send_video_command error -71 [ 755.968541][ T1108] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 755.985705][ T1108] Philips webcam: probe of 5-1:127.0 failed with error -71 [ 756.020723][ T1108] usb 5-1: USB disconnect, device number 73 [ 756.039423][ T4604] usb 4-1: USB disconnect, device number 67 [ 756.910161][ T5643] loop5: detected capacity change from 0 to 512 [ 756.991640][ T5643] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 757.031365][ T5650] loop0: detected capacity change from 0 to 64 [ 757.036442][ T5643] EXT4-fs (loop5): Test dummy encryption mode enabled [ 757.072299][ T5643] EXT4-fs (loop5): Test dummy encryption mode enabled [ 757.083260][ T5643] EXT4-fs (loop5): Mount option "journal_async_commit" incompatible with ext3 [ 757.331177][ T5662] loop3: detected capacity change from 0 to 4096 [ 757.612861][ T1108] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 757.973052][ T1108] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 757.981814][ T1108] usb 6-1: config 0 has no interface number 0 [ 758.003205][ T1108] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 758.031207][ T5709] x_tables: unsorted underflow at hook 2 [ 758.063211][ T1108] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 758.077103][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15774'. [ 758.253167][ T1108] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 758.262421][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.293644][ T1108] usb 6-1: Product: syz [ 758.297964][ T1108] usb 6-1: Manufacturer: syz [ 758.345097][ T1108] usb 6-1: SerialNumber: syz [ 758.374521][ T1108] usb 6-1: config 0 descriptor?? [ 758.393132][ T5643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 758.438779][ T5731] loop3: detected capacity change from 0 to 512 [ 758.455887][ T1108] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 758.672998][ T5731] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback. [ 758.721134][T24863] usb 6-1: USB disconnect, device number 29 [ 758.753149][ T5731] ext4 filesystem being mounted at /3131/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.753424][T24863] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 759.036885][ T5757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15794'. [ 759.078078][ T5759] tmpfs: Bad value for 'mpol' [ 759.113195][ T5757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15794'. [ 759.142524][ T5757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15794'. [ 759.835142][ T5796] SET target dimension over the limit! [ 759.957720][ T5805] loop0: detected capacity change from 0 to 128 [ 760.090828][ T5805] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 760.149751][ T5805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 760.917001][ T5852] loop5: detected capacity change from 0 to 8192 [ 760.959602][ T5852] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 760.973330][ T5852] REISERFS (device loop5): using ordered data mode [ 760.979902][ T5852] reiserfs: using flush barriers [ 761.096260][ T5880] loop0: detected capacity change from 0 to 512 [ 761.148624][ T5852] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 761.200064][ T5852] REISERFS (device loop5): checking transaction log (loop5) [ 761.265375][ T5880] EXT4-fs (loop0): orphan cleanup on readonly fs [ 761.283057][ T5880] __quota_error: 6 callbacks suppressed [ 761.283076][ T5880] Quota error (device loop0): v2_read_file_info: Block with free entry too big (9 >= 6). [ 761.310659][ T5852] REISERFS (device loop5): Using r5 hash to sort names [ 761.323229][ T5880] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 761.339340][ T5852] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 761.406415][ T5880] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 761.435230][ T5852] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 761.440448][ T5880] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.15854: bad orphan inode 14 [ 761.541970][ T5880] ext4_test_bit(bit=13, block=18) = 1 [ 761.572940][ T5880] is_bad_inode(inode)=0 [ 761.577424][ T5880] NEXT_ORPHAN(inode)=0 [ 761.581809][ T5880] max_ino=32 [ 761.634730][ T5880] i_nlink=1 [ 761.637958][ T5880] EXT4-fs (loop0): 1 truncate cleaned up [ 761.676167][ T5897] netlink: 'syz.3.15862': attribute type 3 has an invalid length. [ 761.684468][ T5880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 761.733035][ T5897] netlink: 'syz.3.15862': attribute type 3 has an invalid length. [ 762.311186][ T5909] loop3: detected capacity change from 0 to 8192 [ 762.405272][ T5909] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 762.477598][ T5909] REISERFS (device loop3): using ordered data mode [ 762.485965][ T5909] reiserfs: using flush barriers [ 762.493273][ T5909] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 762.574664][ T5942] comedi comedi0: aio_iiro_16: I/O port conflict (0x1c,8) [ 762.659174][ T5909] REISERFS (device loop3): checking transaction log (loop3) [ 762.745574][ T5952] netlink: 'syz.0.15888': attribute type 4 has an invalid length. [ 762.815010][ T5952] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15888'. [ 762.945601][ T5960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 762.993355][ T4604] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 763.053096][ T5909] REISERFS (device loop3): Using tea hash to sort names [ 763.121418][ T5909] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 763.353071][ T4604] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 763.517321][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15907'. [ 763.562991][ T4604] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 763.592587][ T4604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.633288][ T4604] usb 3-1: Product: syz [ 763.637563][ T4604] usb 3-1: Manufacturer: syz [ 763.673004][ T4604] usb 3-1: SerialNumber: syz [ 763.879582][ T6012] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 764.003011][ T4604] usb 3-1: Cannot retrieve CPort count: -71 [ 764.009244][ T4604] usb 3-1: Cannot retrieve CPort count: -71 [ 764.043345][ T4604] es2_ap_driver: probe of 3-1:246.0 failed with error -71 [ 764.059657][ T6014] loop5: detected capacity change from 0 to 4096 [ 764.086616][ T4604] usb 3-1: USB disconnect, device number 67 [ 764.183626][ T6014] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 764.187893][ T6028] netlink: 'syz.3.15925': attribute type 21 has an invalid length. [ 764.253730][ T6014] ntfs: volume version 3.1. [ 764.278948][ T6014] ntfs: (device loop5): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 764.283546][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15925'. [ 764.297977][ T6014] ntfs: (device loop5): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 764.589198][ T6004] 9pnet: p9_fd_create_tcp (6004): problem connecting socket to 127.0.0.1 [ 764.620646][ T6041] ieee802154 phy1 wpan1: encryption failed: -90 [ 764.903872][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15943'. [ 764.934238][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15943'. [ 765.125932][ T6080] netlink: 'syz.5.15951': attribute type 32 has an invalid length. [ 765.436958][ T6093] loop0: detected capacity change from 0 to 4096 [ 765.452910][ T4604] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 765.477019][ T6103] netlink: 'syz.5.15963': attribute type 11 has an invalid length. [ 765.493155][ T6103] netlink: 140 bytes leftover after parsing attributes in process `syz.5.15963'. [ 765.568701][ T6093] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 765.772032][ T6111] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15967'. [ 765.810557][ T6111] rdma_rxe: ignoring netdev event = 14 for lo [ 765.813036][ T4604] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 765.845323][ T6111] infiniband syz1: set active [ 765.851082][ T4604] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 765.854902][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 765.875386][ T6115] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 765.882443][ T6111] infiniband syz1: set active [ 765.888884][T24861] lo speed is unknown, defaulting to 1000 [ 765.895070][T24863] lo speed is unknown, defaulting to 1000 [ 765.901146][T24863] lo speed is unknown, defaulting to 1000 [ 766.064369][ T4604] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 766.098650][ T4604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.129715][ T4604] usb 4-1: Product: syz [ 766.153126][ T4604] usb 4-1: Manufacturer: syz [ 766.168690][ T4604] usb 4-1: SerialNumber: syz [ 766.179566][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15973'. [ 766.240969][ T4604] rndis_wlan 4-1:7.0: skipping garbage [ 766.246937][ T4604] usb 4-1: bad CDC descriptors [ 766.275344][ T4604] rndis_host 4-1:7.0: skipping garbage [ 766.281202][ T4604] usb 4-1: bad CDC descriptors [ 766.297970][ T4604] option 4-1:7.0: GSM modem (1-port) converter detected [ 766.366791][ T6126] device geneve1 entered promiscuous mode [ 766.503718][T24866] usb 4-1: USB disconnect, device number 68 [ 766.510637][T24866] option 4-1:7.0: device disconnected [ 767.407525][ T6198] comedi comedi0: pcmda12: I/O port conflict (0x3,16) [ 767.454431][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16010'. [ 767.476202][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16011'. [ 767.546204][ T6203] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16010'. [ 767.844699][ T6232] device wg1 entered promiscuous mode [ 768.002819][ T1108] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 768.063659][ T6245] xt_CT: No such helper "snmp_trap" [ 768.363048][ T1108] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 768.402256][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.513036][ T1108] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 768.532360][ T1108] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 768.560505][ T6276] __nla_validate_parse: 1 callbacks suppressed [ 768.560524][ T6276] netlink: 136 bytes leftover after parsing attributes in process `syz.2.16045'. [ 768.576200][ T1108] usb 6-1: Manufacturer: syz [ 768.619608][ T1108] usb 6-1: config 0 descriptor?? [ 768.703071][ T6283] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 768.749841][ T6288] overlayfs: './file0' not a directory [ 768.814302][ T6291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16051'. [ 768.833052][ T1108] rc_core: IR keymap rc-hauppauge not found [ 768.839714][ T1108] Registered IR keymap rc-empty [ 768.876574][ T1108] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 768.919012][ T1108] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59 [ 768.942940][T24866] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 769.018841][ T6302] usb usb7: usbfs: process 6302 (syz.3.16056) did not claim interface 0 before use [ 769.125912][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16060'. [ 769.158495][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16060'. [ 769.183603][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16060'. [ 769.186661][ T1108] usb 6-1: USB disconnect, device number 30 [ 769.363038][T24866] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 769.383836][T24866] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 769.416775][T24866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.485157][T24866] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 769.517673][ T6331] device gtp0 entered promiscuous mode [ 769.612305][ T6340] tmpfs: Bad value for 'mpol' [ 769.996386][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16087'. [ 770.561306][ T6401] rtc_cmos 00:00: Alarms can be up to one day in the future [ 770.573043][T24866] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 770.590461][ T6404] loop3: detected capacity change from 0 to 16 [ 770.600774][ T6404] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 770.782877][T24866] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 770.791154][T24866] stv0680 5-1:4.0: last error: 86, command = 0x3 [ 770.808432][ T6416] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 770.838590][ T6416] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 770.853114][T24866] usb 5-1: USB disconnect, device number 74 [ 770.882106][ T6416] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 770.972424][ T6426] netlink: 'syz.0.16117': attribute type 1 has an invalid length. [ 770.980954][ T6426] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16117'. [ 771.076871][ T6430] ip6t_srh: unknown srh match flags 4000 [ 771.552862][T24866] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 771.842806][T24866] usb 1-1: Using ep0 maxpacket: 16 [ 771.900211][ T6468] loop3: detected capacity change from 0 to 736 [ 771.983103][T24866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 772.121239][ T6480] netlink: 'syz.4.16143': attribute type 46 has an invalid length. [ 772.170413][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16143'. [ 772.182993][T24866] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 772.192113][T24866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.219561][T24866] usb 1-1: Product: syz [ 772.236961][T24866] usb 1-1: Manufacturer: syz [ 772.252892][T24866] usb 1-1: SerialNumber: syz [ 772.288550][T24866] usb 1-1: config 0 descriptor?? [ 772.315704][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16147'. [ 772.344033][ T6487] [ 772.346563][ T6487] ====================================================== [ 772.353928][ T6487] WARNING: possible circular locking dependency detected [ 772.361068][ T6487] syzkaller #0 Not tainted [ 772.365974][ T6487] ------------------------------------------------------ [ 772.373104][ T6487] syz.4.16148/6487 is trying to acquire lock: [ 772.379374][ T6487] ffff88807a0e8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 772.390851][ T6487] [ 772.390851][ T6487] but task is already holding lock: [ 772.398242][ T6487] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 772.408034][ T6487] [ 772.408034][ T6487] which lock already depends on the new lock. [ 772.408034][ T6487] [ 772.418961][ T6487] [ 772.418961][ T6487] the existing dependency chain (in reverse order) is: [ 772.428367][ T6487] [ 772.428367][ T6487] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 772.436420][ T6487] __mutex_lock_common+0x1e3/0x2400 [ 772.442183][ T6487] mutex_lock_nested+0x17/0x20 [ 772.447729][ T6487] rfkill_register+0x33/0x980 [ 772.453059][ T6487] hci_register_dev+0x452/0x970 [ 772.458476][ T6487] vhci_create_device+0x32c/0x5c0 [ 772.464102][ T6487] vhci_write+0x391/0x450 [ 772.469182][ T6487] vfs_write+0x745/0xd60 [ 772.474155][ T6487] ksys_write+0x152/0x260 [ 772.479136][ T6487] do_syscall_64+0x4c/0xa0 [ 772.484285][ T6487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 772.490748][ T6487] [ 772.490748][ T6487] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 772.498673][ T6487] __mutex_lock_common+0x1e3/0x2400 [ 772.504604][ T6487] mutex_lock_nested+0x17/0x20 [ 772.510269][ T6487] vhci_send_frame+0x88/0x100 [ 772.515466][ T6487] hci_send_frame+0x1a9/0x2e0 [ 772.520824][ T6487] hci_tx_work+0x9f9/0x1710 [ 772.526200][ T6487] process_one_work+0x85f/0x1010 [ 772.531779][ T6487] worker_thread+0xaa6/0x1290 [ 772.536984][ T6487] kthread+0x436/0x520 [ 772.541673][ T6487] ret_from_fork+0x1f/0x30 [ 772.546626][ T6487] [ 772.546626][ T6487] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 772.556472][ T6487] __flush_work+0x116/0x210 [ 772.561615][ T6487] hci_dev_do_open+0xc58/0x1270 [ 772.567231][ T6487] hci_power_on+0x1c1/0x610 [ 772.572352][ T6487] process_one_work+0x85f/0x1010 [ 772.578048][ T6487] worker_thread+0xaa6/0x1290 [ 772.583435][ T6487] kthread+0x436/0x520 [ 772.588036][ T6487] ret_from_fork+0x1f/0x30 [ 772.593077][ T6487] [ 772.593077][ T6487] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 772.600944][ T6487] __mutex_lock_common+0x1e3/0x2400 [ 772.606930][ T6487] mutex_lock_nested+0x17/0x20 [ 772.612334][ T6487] bg_scan_update+0x44/0x3b0 [ 772.617578][ T6487] process_one_work+0x85f/0x1010 [ 772.623222][ T6487] worker_thread+0xaa6/0x1290 [ 772.628514][ T6487] kthread+0x436/0x520 [ 772.633107][ T6487] ret_from_fork+0x1f/0x30 [ 772.638162][ T6487] [ 772.638162][ T6487] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 772.648242][ T6487] __lock_acquire+0x2c42/0x7d10 [ 772.653617][ T6487] lock_acquire+0x19e/0x400 [ 772.658661][ T6487] __flush_work+0x116/0x210 [ 772.664276][ T6487] __cancel_work_timer+0x3f4/0x560 [ 772.670104][ T6487] hci_request_cancel_all+0xcc/0x300 [ 772.676156][ T6487] hci_dev_do_close+0x4e/0x1030 [ 772.681722][ T6487] hci_rfkill_set_block+0x10a/0x190 [ 772.687564][ T6487] rfkill_set_block+0x1c9/0x3d0 [ 772.693043][ T6487] rfkill_fop_write+0x452/0x560 [ 772.698452][ T6487] vfs_write+0x30b/0xd60 [ 772.703569][ T6487] ksys_write+0x152/0x260 [ 772.708606][ T6487] do_syscall_64+0x4c/0xa0 [ 772.713558][ T6487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 772.720012][ T6487] [ 772.720012][ T6487] other info that might help us debug this: [ 772.720012][ T6487] [ 772.730674][ T6487] Chain exists of: [ 772.730674][ T6487] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 772.730674][ T6487] [ 772.747274][ T6487] Possible unsafe locking scenario: [ 772.747274][ T6487] [ 772.755047][ T6487] CPU0 CPU1 [ 772.760521][ T6487] ---- ---- [ 772.765934][ T6487] lock(rfkill_global_mutex); [ 772.771095][ T6487] lock(&data->open_mutex); [ 772.778526][ T6487] lock(rfkill_global_mutex); [ 772.785822][ T6487] lock((work_completion)(&hdev->bg_scan_update)); [ 772.792699][ T6487] [ 772.792699][ T6487] *** DEADLOCK *** [ 772.792699][ T6487] [ 772.801060][ T6487] 1 lock held by syz.4.16148/6487: [ 772.806273][ T6487] #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 772.816593][ T6487] [ 772.816593][ T6487] stack backtrace: [ 772.822475][ T6487] CPU: 1 PID: 6487 Comm: syz.4.16148 Not tainted syzkaller #0 [ 772.829937][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.840217][ T6487] Call Trace: [ 772.843514][ T6487] [ 772.846453][ T6487] dump_stack_lvl+0x188/0x250 [ 772.851168][ T6487] ? load_image+0x400/0x400 [ 772.855665][ T6487] ? show_regs_print_info+0x20/0x20 [ 772.860883][ T6487] ? print_circular_bug+0x12b/0x1a0 [ 772.866277][ T6487] check_noncircular+0x296/0x330 [ 772.871214][ T6487] ? look_up_lock_class+0x71/0x110 [ 772.876325][ T6487] ? add_chain_block+0x940/0x940 [ 772.881271][ T6487] ? lockdep_lock+0xf1/0x1f0 [ 772.886062][ T6487] ? __lock_acquire+0x12e8/0x7d10 [ 772.891211][ T6487] ? mark_lock+0x94/0x320 [ 772.895554][ T6487] ? _find_first_zero_bit+0xce/0xf0 [ 772.900948][ T6487] __lock_acquire+0x2c42/0x7d10 [ 772.905814][ T6487] ? verify_lock_unused+0x140/0x140 [ 772.911012][ T6487] ? mark_lock+0x94/0x320 [ 772.915345][ T6487] lock_acquire+0x19e/0x400 [ 772.919938][ T6487] ? __flush_work+0xfa/0x210 [ 772.924615][ T6487] ? __lock_acquire+0x7d10/0x7d10 [ 772.929671][ T6487] ? read_lock_is_recursive+0x10/0x10 [ 772.935226][ T6487] ? start_flush_work+0x776/0x820 [ 772.940263][ T6487] __flush_work+0x116/0x210 [ 772.944934][ T6487] ? __flush_work+0xfa/0x210 [ 772.949603][ T6487] ? flush_work+0x20/0x20 [ 772.954014][ T6487] ? try_to_grab_pending+0xfa/0x7f0 [ 772.959231][ T6487] ? mark_lock+0x94/0x320 [ 772.963556][ T6487] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 772.969721][ T6487] ? lock_chain_count+0x20/0x20 [ 772.974567][ T6487] ? mark_lock+0x94/0x320 [ 772.978894][ T6487] ? __cancel_work_timer+0x36a/0x560 [ 772.984262][ T6487] __cancel_work_timer+0x3f4/0x560 [ 772.989577][ T6487] ? cancel_work_sync+0x20/0x20 [ 772.994715][ T6487] ? __cancel_work+0x1f9/0x2e0 [ 772.999579][ T6487] ? lockdep_hardirqs_on+0x94/0x140 [ 773.004960][ T6487] ? __cancel_work+0x27b/0x2e0 [ 773.009823][ T6487] ? cancel_work+0x20/0x20 [ 773.014240][ T6487] ? lock_chain_count+0x20/0x20 [ 773.019197][ T6487] hci_request_cancel_all+0xcc/0x300 [ 773.024488][ T6487] hci_dev_do_close+0x4e/0x1030 [ 773.029430][ T6487] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 773.035416][ T6487] ? _raw_spin_unlock+0x40/0x40 [ 773.040430][ T6487] hci_rfkill_set_block+0x10a/0x190 [ 773.045651][ T6487] ? rcu_lock_release+0x20/0x20 [ 773.050584][ T6487] rfkill_set_block+0x1c9/0x3d0 [ 773.055452][ T6487] rfkill_fop_write+0x452/0x560 [ 773.060305][ T6487] ? rfkill_fop_read+0x520/0x520 [ 773.065258][ T6487] ? common_file_perm+0x140/0x1c0 [ 773.070401][ T6487] ? fsnotify_perm+0x5d/0x560 [ 773.075161][ T6487] ? security_file_permission+0x75/0xa0 [ 773.080704][ T6487] ? rfkill_fop_read+0x520/0x520 [ 773.085647][ T6487] vfs_write+0x30b/0xd60 [ 773.089889][ T6487] ? file_end_write+0x250/0x250 [ 773.094831][ T6487] ? __fget_files+0x40f/0x480 [ 773.099527][ T6487] ? __fdget_pos+0x1e2/0x370 [ 773.104316][ T6487] ? ksys_write+0x71/0x260 [ 773.108900][ T6487] ksys_write+0x152/0x260 [ 773.113603][ T6487] ? __ia32_sys_read+0x80/0x80 [ 773.118383][ T6487] ? lockdep_hardirqs_on+0x94/0x140 [ 773.123583][ T6487] do_syscall_64+0x4c/0xa0 [ 773.128003][ T6487] ? clear_bhb_loop+0x30/0x80 [ 773.132680][ T6487] ? clear_bhb_loop+0x30/0x80 [ 773.137366][ T6487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.143673][ T6487] RIP: 0033:0x7f52bbe5cdd9 [ 773.148097][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.168618][ T6487] RSP: 002b:00007f52ba0b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.177231][ T6487] RAX: ffffffffffffffda RBX: 00007f52bc0d5fa0 RCX: 00007f52bbe5cdd9 [ 773.185234][ T6487] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 773.193344][ T6487] RBP: 00007f52bbef2d69 R08: 0000000000000000 R09: 0000000000000000 [ 773.201553][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.209542][ T6487] R13: 00007f52bc0d6038 R14: 00007f52bc0d5fa0 R15: 00007ffd2d8a5378 [ 773.217637][ T6487] [ 773.220740][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.242313][T24866] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 773.437363][ T1108] usb 1-1: USB disconnect, device number 52 [ 773.443422][ T4910] usb 1-1: Failed to submit usb control message: -71 [ 773.450356][ T4910] usb 1-1: unable to send the bmi data to the device: -71 [ 773.457753][ T4910] usb 1-1: unable to get target info from device [ 773.464328][ T4910] usb 1-1: could not get target info (-71) [ 773.470179][ T4910] usb 1-1: could not probe fw (-71)