last executing test programs: 2.741848772s ago: executing program 0 (id=8935): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000280)={0x8, 0x7, 0xbe, 0x8, 0x18, "3283d562ef0ac309e54d69bca09756926dd67c"}) 2.57197818s ago: executing program 0 (id=8938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4044001}, 0xc010) 2.328005571s ago: executing program 0 (id=8943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000140)=0x1c) 2.160342889s ago: executing program 3 (id=8947): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x60001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000440)={0x400, 0x1, 0x80000000}) 2.067552803s ago: executing program 0 (id=8948): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 1.943093739s ago: executing program 3 (id=8952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 1.726894509s ago: executing program 0 (id=8956): setresuid(0xee00, 0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.71621094s ago: executing program 3 (id=8958): r0 = socket(0x18, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0xffffffffffffffbd, 0x1082, 0x0, 0x0) 1.463225591s ago: executing program 0 (id=8961): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="0fc73164f20f2cd6260f0764670f005900fdf2a60fc71ff26f6766c7442400790000006766c7442402ce8900006766c744240600000000670f011c24660f3a16220f", 0x42}], 0x1, 0x11, 0x0, 0x0) syz_usb_connect(0x3, 0xc7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405", @ANYRESDEC], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 1.462997831s ago: executing program 3 (id=8964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d617371000000000c000280080002"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.28510961s ago: executing program 1 (id=8966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x7, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x0) 1.230381642s ago: executing program 3 (id=8969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0xeb, {{0xa, 0x4e24, 0x0, @mcast1, 0x5e8}}}, 0x90) 1.093844208s ago: executing program 3 (id=8971): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000004740)={0x6, 0x7fff}) 1.047293371s ago: executing program 2 (id=8972): syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.021679272s ago: executing program 4 (id=8973): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x181041) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x49, @time={0xffff, 0x8d}, 0xf8, {0x5, 0xe}, 0x8, 0x36d9e8a9c9c1abd5, 0x6}) 959.879275ms ago: executing program 1 (id=8974): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x48}}, 0x0) 819.384092ms ago: executing program 2 (id=8975): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0xb, @pix_mp={0x10000, 0x0, 0x31363553, 0x2, 0x0, [{0x1, 0x2}, {0x7f, 0x8000000}, {0xef}, {0x1, 0xfffff800}, {0xa, 0xb}, {0xd, 0x4}, {0x2, 0xff}, {0x200}], 0x86, 0xfe, 0x2, 0x1, 0x5}}}) 819.253361ms ago: executing program 4 (id=8976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="d6ab", 0x2, 0xfffffffffffffffe) 743.254435ms ago: executing program 1 (id=8977): prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 671.995179ms ago: executing program 4 (id=8978): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) 633.872301ms ago: executing program 2 (id=8979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f01000000000000000000000d0200000000002e2e5f"], 0x0, 0x44}, 0x20) 547.025985ms ago: executing program 1 (id=8980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 488.932447ms ago: executing program 4 (id=8981): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x5e46fd0728d6ba1d) 472.873568ms ago: executing program 2 (id=8982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x18, 0x58, 0x284f, 0x70bd2c, 0x25dfdbfb, {}, [{0x4}]}, 0x18}}, 0x80) 317.915065ms ago: executing program 1 (id=8983): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 317.728045ms ago: executing program 4 (id=8984): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x792}) 251.295478ms ago: executing program 2 (id=8985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0xc, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45}}) 152.683223ms ago: executing program 4 (id=8986): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x7, 0x81, 0x8000}, 0x10) 69.159727ms ago: executing program 1 (id=8987): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 0s ago: executing program 2 (id=8988): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000100), &(0x7f00000003c0)}) kernel console output (not intermixed with test programs): ="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 775.013197][ T27] audit: type=1326 audit(2000002733.509:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19564 comm="syz.0.6876" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 775.158412][ T27] audit: type=1326 audit(2000002733.509:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19564 comm="syz.0.6876" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 775.261564][T19587] SET target dimension over the limit! [ 775.296753][ T27] audit: type=1326 audit(2000002733.509:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19564 comm="syz.0.6876" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 775.354869][T19592] netlink: 'syz.3.6889': attribute type 10 has an invalid length. [ 775.398147][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 775.410342][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 775.432663][ T27] audit: type=1326 audit(2000002733.509:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19564 comm="syz.0.6876" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 775.434632][ T4763] udevd[4763]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 775.508846][T19592] team0: Port device macvlan1 added [ 775.784878][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6898'. [ 775.853382][ T4321] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 776.056375][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 776.080891][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.116478][ T4321] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 776.134624][T19622] netlink: 'syz.2.6904': attribute type 1 has an invalid length. [ 776.147212][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.164182][T19622] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6904'. [ 776.177204][ T4321] usb 5-1: Product: syz [ 776.181420][ T4321] usb 5-1: Manufacturer: syz [ 776.201338][ T4321] usb 5-1: SerialNumber: syz [ 776.207659][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6904'. [ 776.233447][ T4321] usb 5-1: config 0 descriptor?? [ 776.254307][ T4321] usb 5-1: bad CDC descriptors [ 776.270807][ T4321] usb 5-1: unsupported MDLM descriptors [ 776.430393][T19634] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 776.504363][ T4321] usb 5-1: USB disconnect, device number 105 [ 776.837497][T19649] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 777.181903][T19662] netlink: 'syz.0.6924': attribute type 3 has an invalid length. [ 777.433255][T19675] netlink: 'syz.2.6930': attribute type 7 has an invalid length. [ 777.764742][T19690] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 778.265661][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.298158][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.307421][ T5802] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 778.336187][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.355627][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.365952][T19718] autofs4:pid:19718:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 778.393185][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.421253][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.459241][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 778.478161][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 778.506769][ T5802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 778.519603][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.535889][ T5802] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 778.542898][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.567991][ T5802] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 778.591894][ T5802] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 778.599588][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.619603][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.632896][ T5802] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 778.665267][T19713] __nla_validate_parse: 17 callbacks suppressed [ 778.665298][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.668257][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.672294][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.693643][T19701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 778.717108][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.732615][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.745635][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.788744][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.801566][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.813514][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.828609][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 778.851734][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 779.069339][ T5802] ims_pcu 1-1:1.0: Failed to set line coding, error: -71 [ 779.099582][ T5802] ims_pcu: probe of 1-1:1.0 failed with error -71 [ 779.146880][ T5802] usb 1-1: USB disconnect, device number 121 [ 779.812058][T19763] loop1: detected capacity change from 0 to 1024 [ 779.959026][T19763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 779.967721][T19763] ext4 filesystem being mounted at /1458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.041161][T19763] EXT4-fs error (device loop1): ext4_xattr_block_find:1828: inode #15: comm syz.1.6973: corrupted xattr block 128 [ 780.106798][T19763] EXT4-fs (loop1): Remounting filesystem read-only [ 780.198374][T19782] netlink: 'syz.3.6979': attribute type 2 has an invalid length. [ 780.252393][T19784] netlink: 'syz.0.6978': attribute type 10 has an invalid length. [ 780.331605][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 780.399622][T19784] team0: Port device macvlan1 added [ 780.476054][T19792] netlink: 'syz.1.6983': attribute type 21 has an invalid length. [ 780.506135][T19790] loop3: detected capacity change from 0 to 1764 [ 781.108469][ T4283] Bluetooth: hci1: unexpected event for opcode 0x080c [ 781.170635][T19818] Cannot find set identified by id 0 to match [ 781.429879][T19833] netlink: 'syz.1.7004': attribute type 21 has an invalid length. [ 781.582631][T19838] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 781.642762][T19844] trusted_key: encrypted_key: master key parameter is missing [ 781.918941][T19852] loop4: detected capacity change from 0 to 1024 [ 781.975600][T19852] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 782.032448][T19852] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 782.069563][T19852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 782.086053][T19852] System zones: 0-1, 3-36 [ 782.177202][T19852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 782.407562][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 783.678734][T18811] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 783.843559][T19941] loop2: detected capacity change from 0 to 256 [ 783.892610][T18811] usb 4-1: Using ep0 maxpacket: 8 [ 783.900517][T18811] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 783.929290][T19941] FAT-fs (loop2): Directory bread(block 64) failed [ 783.938090][T18811] usb 4-1: config 2 has no interface number 0 [ 783.968099][T18811] usb 4-1: config 2 interface 31 has no altsetting 0 [ 783.988862][T19941] FAT-fs (loop2): Directory bread(block 65) failed [ 783.995585][T19941] FAT-fs (loop2): Directory bread(block 66) failed [ 784.000211][T18811] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 784.020606][T19941] FAT-fs (loop2): Directory bread(block 67) failed [ 784.028149][T19941] FAT-fs (loop2): Directory bread(block 68) failed [ 784.033367][T18811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.046073][T19941] FAT-fs (loop2): Directory bread(block 69) failed [ 784.058340][T19941] FAT-fs (loop2): Directory bread(block 70) failed [ 784.064729][T18811] usb 4-1: Product: syz [ 784.069087][T18811] usb 4-1: Manufacturer: syz [ 784.085963][T19941] FAT-fs (loop2): Directory bread(block 71) failed [ 784.106400][T18811] usb 4-1: SerialNumber: syz [ 784.109986][T19941] FAT-fs (loop2): Directory bread(block 72) failed [ 784.138715][T19941] FAT-fs (loop2): Directory bread(block 73) failed [ 784.165664][T19950] netlink: 'syz.4.7062': attribute type 10 has an invalid length. [ 784.209546][T19950] team0: Device veth1_macvtap failed to register rx_handler [ 784.569583][T18811] ch9200: probe of 4-1:2.31 failed with error -22 [ 784.595714][T18811] usb 4-1: USB disconnect, device number 2 [ 784.715664][T15875] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 784.781973][ T4321] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 784.931181][T15875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 784.948969][T15875] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 784.993833][T15875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.010900][T19974] xt_CT: No such helper "syz0" [ 785.022934][T15875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.052417][ T4321] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 785.065474][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.095515][T19956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 785.132482][ T4321] usb 1-1: Product: syz [ 785.156183][ T4321] usb 1-1: Manufacturer: syz [ 785.160839][ T4321] usb 1-1: SerialNumber: syz [ 785.246706][T19983] __nla_validate_parse: 48 callbacks suppressed [ 785.246726][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7077'. [ 785.395816][T15875] usb 2-1: USB disconnect, device number 113 [ 785.468323][T19985] Process accounting paused [ 785.536598][T19991] loop2: detected capacity change from 0 to 16 [ 785.573834][T19991] erofs: (device loop2): mounted with root inode @ nid 36. [ 785.865653][T19998] loop4: detected capacity change from 0 to 64 [ 786.161430][T20006] netlink: 'syz.3.7088': attribute type 3 has an invalid length. [ 786.348946][T20013] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7092'. [ 786.362634][ T4321] ath6kl: Failed to submit usb control message: -110 [ 786.372089][ T4321] ath6kl: unable to send the bmi data to the device: -110 [ 786.400256][ T4321] ath6kl: Unable to send get target info: -110 [ 786.445825][ T4321] ath6kl: Failed to init ath6kl core: -110 [ 786.549415][ T4321] ath6kl_usb: probe of 1-1:1.0 failed with error -110 [ 786.593163][ T4321] usb 1-1: USB disconnect, device number 122 [ 786.763006][T20029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 787.037377][T20041] comedi: valid board names for 8255 driver are: [ 787.067531][T20041] 8255 [ 787.070352][T20041] comedi: valid board names for vmk80xx driver are: [ 787.144232][T20041] vmk80xx [ 787.156972][T20041] comedi: valid board names for usbduxsigma driver are: [ 787.215845][T20041] usbduxsigma [ 787.245251][T20041] comedi: valid board names for usbduxfast driver are: [ 787.278636][T20041] usbduxfast [ 787.297635][T20041] comedi: valid board names for usbdux driver are: [ 787.319466][T20041] usbdux [ 787.322476][T20041] comedi: valid board names for ni6501 driver are: [ 787.340085][T20041] ni6501 [ 787.343070][T20041] comedi: valid board names for dt9812 driver are: [ 787.373747][T20041] dt9812 [ 787.377137][T20041] comedi: valid board names for ni_labpc_cs driver are: [ 787.405873][T20041] ni_labpc_cs [ 787.409319][T20041] comedi: valid board names for ni_daq_700 driver are: [ 787.467443][T20041] ni_daq_700 [ 787.470794][T20041] comedi: valid board names for labpc_pci driver are: [ 787.497134][T20041] labpc_pci [ 787.509310][T20041] comedi: valid board names for adl_pci9118 driver are: [ 787.545167][T20041] pci9118dg [ 787.548456][T20041] pci9118hg [ 787.587571][T20041] pci9118hr [ 787.590801][T20041] comedi: valid board names for 8255_pci driver are: [ 787.623428][T20041] 8255_pci [ 787.626618][T20041] comedi: valid board names for s526 driver are: [ 787.676955][T20041] s526 [ 787.679835][T20041] comedi: valid board names for multiq3 driver are: [ 787.686827][T20041] multiq3 [ 787.719764][T20041] comedi: valid board names for pcmuio driver are: [ 787.726351][T20041] pcmuio48 [ 787.729487][T20041] pcmuio96 [ 787.772813][T20041] comedi: valid board names for pcmmio driver are: [ 787.780587][T20041] pcmmio [ 787.783616][T20041] comedi: valid board names for pcmda12 driver are: [ 787.792767][T20041] pcmda12 [ 787.796394][T20041] comedi: valid board names for pcmad driver are: [ 787.803008][T20041] pcmad12 [ 787.806757][T20041] pcmad16 [ 787.824768][T20041] comedi: valid board names for ni_labpc driver are: [ 787.880072][T20041] lab-pc-1200 [ 787.883593][T20041] lab-pc-1200ai [ 787.887161][T20041] lab-pc+ [ 787.890208][T20041] comedi: valid board names for atmio16 driver are: [ 787.908688][T20041] atmio16 [ 787.911764][T20041] atmio16d [ 787.973786][T20041] comedi: valid board names for ni_at_ao driver are: [ 788.014502][T20077] trusted_key: encrypted_key: master key parameter is missing [ 788.062069][T20041] at-ao-6 [ 788.083550][T20041] at-ao-10 [ 788.086721][T20041] comedi: valid board names for ni_at_a2150 driver are: [ 788.125673][T20041] ni_at_a2150 [ 788.150315][T20041] comedi: valid board names for adq12b driver are: [ 788.166557][T20041] adq12b [ 788.177957][T20041] comedi: valid board names for mpc624 driver are: [ 788.195468][T20041] mpc624 [ 788.198593][T20041] comedi: valid board names for c6xdigio driver are: [ 788.210136][T20041] c6xdigio [ 788.214631][T20041] comedi: valid board names for aio_iiro_16 driver are: [ 788.247490][T20041] aio_iiro_16 [ 788.260429][T20041] comedi: valid board names for aio_aio12_8 driver are: [ 788.276866][T20085] loop2: detected capacity change from 0 to 256 [ 788.293145][T20041] aio_aio12_8 [ 788.300144][T20087] libceph: resolve 'c' (ret=-3): failed [ 788.309031][T20041] aio_ai12_8 [ 788.316006][T20041] aio_ao12_4 [ 788.336668][T20041] comedi: valid board names for fl512 driver are: [ 788.358779][T20041] fl512 [ 788.370018][T20041] comedi: valid board names for dmm32at driver are: [ 788.393108][T20041] dmm32at [ 788.407871][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7130'. [ 788.421459][T20041] comedi: valid board names for dt282x driver are: [ 788.437525][T20041] dt2821 [ 788.445466][T20041] dt2821-f [ 788.454881][T20041] dt2821-g [ 788.466413][T20041] dt2823 [ 788.477515][T20041] dt2824-pgh [ 788.489856][T20041] dt2824-pgl [ 788.499152][T20041] dt2825 [ 788.508314][T20041] dt2827 [ 788.519261][T20041] dt2828 [ 788.528260][T20041] dt2829 [ 788.537281][T20041] dt21-ez [ 788.554646][T20041] dt23-ez [ 788.567572][T20041] dt24-ez [ 788.578987][T20041] dt24-ez-pgl [ 788.597419][T20041] comedi: valid board names for dt2817 driver are: [ 788.614707][T20041] dt2817 [ 788.620359][T20041] comedi: valid board names for dt2815 driver are: [ 788.631897][T20041] dt2815 [ 788.634891][T20041] comedi: valid board names for dt2814 driver are: [ 788.642802][T20041] dt2814 [ 788.646023][T20041] comedi: valid board names for dt2811 driver are: [ 788.663277][T20041] dt2811-pgh [ 788.666666][T20041] dt2811-pgl [ 788.684373][T20095] usb usb8: usbfs: process 20095 (syz.4.7133) did not claim interface 0 before use [ 788.694031][T20041] comedi: valid board names for dt2801 driver are: [ 788.700577][T20041] dt2801 [ 788.703668][T20041] comedi: valid board names for das6402 driver are: [ 788.724511][T20041] das6402-12 [ 788.730803][T20041] das6402-16 [ 788.734721][T20041] comedi: valid board names for das1800 driver are: [ 788.749826][T20041] das-1701st [ 788.755614][T20041] das-1701st-da [ 788.764054][T20041] das-1702st [ 788.768368][T20041] das-1702st-da [ 788.772279][T20041] das-1702hr [ 788.775920][T20041] das-1702hr-da [ 788.780642][T20099] Cannot find set identified by id 0 to match [ 788.786893][T20041] das-1701ao [ 788.790321][T20041] das-1702ao [ 788.793668][T20041] das-1801st [ 788.796955][T20041] das-1801st-da [ 788.811119][T20041] das-1802st [ 788.814458][T20041] das-1802st-da [ 788.818008][T20041] das-1802hr [ 788.823665][T20041] das-1802hr-da [ 788.827626][T20041] das-1801hc [ 788.831198][T20041] das-1802hc [ 788.834746][T20041] das-1801ao [ 788.838048][T20041] das-1802ao [ 788.841373][T20041] comedi: valid board names for das800 driver are: [ 788.848887][T20041] das-800 [ 788.851939][T20041] cio-das800 [ 788.855431][T20041] das-801 [ 788.858468][T20041] cio-das801 [ 788.861795][T20041] das-802 [ 788.868086][T20041] cio-das802 [ 788.871480][T20041] cio-das802/16 [ 788.877381][T20041] comedi: valid board names for isa-das08 driver are: [ 788.880040][T20101] netlink: 'syz.4.7136': attribute type 2 has an invalid length. [ 788.884255][T20041] isa-das08 [ 788.900399][ T6018] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 788.908692][T20041] das08-pgm [ 788.912074][T20041] das08-pgh [ 788.915622][T20041] das08-pgl [ 788.924930][T20041] das08-aoh [ 788.943617][T20041] das08-aol [ 788.946942][T20041] das08-aom [ 788.950580][T20041] das08/jr-ao [ 788.954574][T20041] das08jr-16-ao [ 788.958221][T20041] pc104-das08 [ 788.962242][T20041] das08jr/16 [ 788.965616][T20041] comedi: valid board names for das16m1 driver are: [ 788.972705][T20041] das16m1 [ 788.975832][T20041] comedi: valid board names for dac02 driver are: [ 788.981079][ T4321] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 788.982890][T20041] dac02 [ 788.993144][T20041] comedi: valid board names for rti802 driver are: [ 788.999761][T20041] rti802 [ 789.003483][T20041] comedi: valid board names for rti800 driver are: [ 789.010095][T20041] rti800 [ 789.013446][T20041] rti815 [ 789.016483][T20041] comedi: valid board names for pcm3724 driver are: [ 789.034520][T20041] pcm3724 [ 789.037638][T20041] comedi: valid board names for pcl818 driver are: [ 789.044162][T20041] pcl818l [ 789.061860][T20041] pcl818h [ 789.065437][T20041] pcl818hd [ 789.074604][T20041] pcl818hg [ 789.078272][T20041] pcl818 [ 789.081408][T20041] pcl718 [ 789.084355][T20041] pcm3718 [ 789.087405][T20041] comedi: valid board names for pcl816 driver are: [ 789.109387][ T6018] usb 3-1: Using ep0 maxpacket: 8 [ 789.122237][ T6018] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.136579][ T6018] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 789.146687][T20104] [U] ^C [ 789.150559][T20041] pcl816 [ 789.155518][T20041] pcl814b [ 789.155531][T20041] comedi: valid board names for pcl812 driver are: [ 789.155541][T20041] pcl812 [ 789.155548][T20041] pcl812pg [ 789.155555][T20041] acl8112pg [ 789.155562][T20041] acl8112dg [ 789.155569][T20041] acl8112hg [ 789.155576][T20041] a821pgl [ 789.155583][T20041] a821pglnda [ 789.155590][T20041] a821pgh [ 789.155596][T20041] a822pgl [ 789.155603][T20041] a822pgh [ 789.155610][T20041] a823pgl [ 789.155617][T20041] a823pgh [ 789.155623][T20041] pcl813 [ 789.155630][T20041] pcl813b [ 789.155636][T20041] acl8113 [ 789.155643][T20041] iso813 [ 789.155650][T20041] acl8216 [ 789.155656][T20041] a826pg [ 789.155663][T20041] comedi: valid board names for pcl730 driver are: [ 789.155672][T20041] pcl730 [ 789.155679][T20041] iso730 [ 789.155685][T20041] acl7130 [ 789.155692][T20041] pcm3730 [ 789.155698][T20041] pcl725 [ 789.155705][T20041] p8r8dio [ 789.155712][T20041] acl7225b [ 789.155718][T20041] p16r16dio [ 789.155725][T20041] pcl733 [ 789.155732][T20041] pcl734 [ 789.155739][T20041] opmm-1616-xt [ 789.155746][T20041] pearl-mm-p [ 789.155753][T20041] ir104-pbf [ 789.155759][T20041] comedi: valid board names for pcl726 driver are: [ 789.155768][T20041] pcl726 [ 789.155775][T20041] pcl727 [ 789.155782][T20041] pcl728 [ 789.155788][T20041] acl6126 [ 789.155796][T20041] acl6128 [ 789.155803][T20041] comedi: valid board names for pcl724 driver are: [ 789.155812][T20041] pcl724 [ 789.155819][T20041] pcl722 [ 789.155825][T20041] pcl731 [ 789.155840][T20041] acl7122 [ 789.155846][T20041] acl7124 [ 789.155852][T20041] pet48dio [ 789.155859][T20041] pcmio48 [ 789.155866][T20041] onyx-mm-dio [ 789.155873][T20041] comedi: valid board names for pcl711 driver are: [ 789.155882][T20041] pcl711 [ 789.155889][T20041] pcl711b [ 789.155896][T20041] acl8112hg [ 789.155902][T20041] acl8112dg [ 789.155909][T20041] comedi: valid board names for amplc_pc263 driver are: [ 789.155918][T20041] pc263 [ 789.155925][T20041] comedi: valid board names for amplc_pc236 driver are: [ 789.155934][T20041] pc36at [ 789.155941][T20041] comedi: valid board names for amplc_dio200 driver are: [ 789.155950][T20041] pc212e [ 789.155956][T20041] pc214e [ 789.155963][T20041] pc215e [ 789.155970][T20041] pc218e [ 789.155976][T20041] pc272e [ 789.155983][T20041] comedi: valid board names for comedi_parport driver are: [ 789.155992][T20041] comedi_parport [ 789.156000][T20041] comedi: valid board names for comedi_test driver are: [ 789.156009][T20041] comedi_test [ 789.156016][T20041] comedi: valid board names for comedi_bond driver are: [ 789.156024][T20041] comedi_bond [ 789.162132][ T6018] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 789.226954][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 789.251546][ T6018] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 789.299061][ T4321] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 789.333243][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.379720][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.450664][ T6018] usb 3-1: Product: syz [ 789.456210][ T4321] usb 1-1: config 0 has no interface number 0 [ 789.519019][ T4321] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.537279][ T6018] usb 3-1: Manufacturer: syz [ 789.554146][ T4321] usb 1-1: config 0 interface 85 has no altsetting 0 [ 789.558446][ T6018] usb 3-1: SerialNumber: syz [ 789.572516][T20093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 789.592049][ T4321] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 789.605727][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.615779][ T4321] usb 1-1: Product: syz [ 789.620420][ T4321] usb 1-1: Manufacturer: syz [ 789.625273][T20117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7144'. [ 789.635159][ T4321] usb 1-1: SerialNumber: syz [ 789.641619][ T4321] usb 1-1: config 0 descriptor?? [ 789.647569][T20117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7144'. [ 789.658940][ T4321] appletouch 1-1:0.85: Could not find int-in endpoint [ 789.661451][T20117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7144'. [ 789.667829][ T4321] appletouch: probe of 1-1:0.85 failed with error -5 [ 789.682534][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 789.686415][ T4321] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 789.713622][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 789.736467][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 789.780112][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 789.810088][T20120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 789.824191][T20120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 789.841294][ T6018] usb 3-1: MIDIStreaming interface descriptor not found [ 789.856422][T20120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 789.889882][T20120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 789.898397][ T6018] usb 3-1: USB disconnect, device number 94 [ 789.941697][T20120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 789.950918][ T6020] usb 1-1: USB disconnect, device number 123 [ 789.968772][T20120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 790.006915][T20122] device sit0 entered promiscuous mode [ 790.053590][T20122] netlink: 'syz.1.7146': attribute type 1 has an invalid length. [ 790.698287][T20151] delete_channel: no stack [ 791.264706][T20176] overlayfs: empty lowerdir [ 791.572310][T20189] x_tables: duplicate entry at hook 3 [ 792.144823][T20215] netlink: 'syz.0.7191': attribute type 10 has an invalid length. [ 792.298173][T20215] team0: Device veth1_macvtap failed to register rx_handler [ 792.395719][T18806] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 792.638890][T18806] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 792.668288][T18806] usb 3-1: config 0 has no interface number 0 [ 792.691631][T18806] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 792.774056][T18806] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 792.802103][T18806] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 792.813634][T20238] loop4: detected capacity change from 0 to 512 [ 792.837411][T18806] usb 3-1: Manufacturer: syz [ 792.849528][T18806] usb 3-1: SerialNumber: syz [ 792.879178][T18806] usb 3-1: config 0 descriptor?? [ 792.906980][T20238] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 792.914954][T20238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 792.968672][T20238] System zones: 0-1, 15-15, 18-18, 34-34 [ 792.975919][T20238] EXT4-fs (loop4): orphan cleanup on readonly fs [ 793.015945][T20238] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 793.025559][T20238] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 793.040374][T20238] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 793.048021][T20238] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.7203: bad orphan inode 16 [ 793.070386][T20238] ext4_test_bit(bit=15, block=18) = 1 [ 793.075988][T20238] is_bad_inode(inode)=0 [ 793.080190][T20238] NEXT_ORPHAN(inode)=0 [ 793.088404][T20238] max_ino=32 [ 793.091679][T20238] i_nlink=2 [ 793.094973][T20238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 793.179113][T20238] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 793.283956][T20244] loop3: detected capacity change from 0 to 8192 [ 793.313999][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 793.332550][T18806] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 793.354676][T20244] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 793.372024][T20244] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 793.388061][T20244] REISERFS (device loop3): using ordered data mode [ 793.394600][T20244] reiserfs: using flush barriers [ 793.397053][T18806] usb 3-1: USB disconnect, device number 95 [ 793.416453][T20244] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 793.447959][T20244] REISERFS (device loop3): checking transaction log (loop3) [ 793.706421][T20265] __nla_validate_parse: 73 callbacks suppressed [ 793.706447][T20265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7215'. [ 793.734683][T20244] REISERFS (device loop3): Using tea hash to sort names [ 793.770795][T20244] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 794.341963][ T4321] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 794.353590][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7224'. [ 794.568615][ T4321] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 794.588738][ T4321] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 794.622786][ T4321] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 794.649185][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.687424][T20275] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 795.012657][ T5802] usb 3-1: USB disconnect, device number 96 [ 796.036906][T18806] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 796.154390][ T4321] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 796.300185][T18806] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 796.319473][T18806] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 796.328453][T18806] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 796.346913][T18806] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 796.368190][T18806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 796.392083][ T4321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.421924][T18806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 796.435847][ T4321] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.461922][ T4321] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 796.472452][T18806] usb 3-1: string descriptor 0 read error: -22 [ 796.493070][T18806] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 796.502535][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.521121][T18806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.532651][ T4321] usb 5-1: Product: syz [ 796.536872][ T4321] usb 5-1: Manufacturer: syz [ 796.574520][T18806] usb 3-1: config 0 descriptor?? [ 796.579960][ T4321] usb 5-1: SerialNumber: syz [ 796.585458][T20339] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 796.604355][T18806] hub 3-1:0.0: bad descriptor, ignoring hub [ 796.619066][T18806] hub: probe of 3-1:0.0 failed with error -5 [ 796.628646][T18806] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 796.838231][ T4321] usb 5-1: unit 4 not found! [ 796.906410][ T4321] usb 5-1: USB disconnect, device number 106 [ 796.926715][T18806] usb 3-1: USB disconnect, device number 97 [ 797.096227][T20387] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 797.193532][ T4763] udevd[4763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.468233][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7282'. [ 797.476137][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7280'. [ 797.498241][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7280'. [ 798.214110][T20429] netlink: 'syz.1.7296': attribute type 1 has an invalid length. [ 798.248820][T20429] netlink: 'syz.1.7296': attribute type 2 has an invalid length. [ 798.884268][T20455] sock: sock_timestamping_bind_phc: sock not bind to device [ 798.911004][T20457] bond0: (slave bond_slave_1): Releasing backup interface [ 799.035659][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7312'. [ 799.057202][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7312'. [ 799.235141][T20469] IPVS: length: 15 != 8 [ 799.511382][ T6018] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 799.549220][ T27] audit: type=1326 audit(2000002756.969:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20485 comm="syz.2.7324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 799.624324][ T27] audit: type=1326 audit(2000002757.006:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20485 comm="syz.2.7324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 799.700888][T20490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7326'. [ 799.735794][ T6018] usb 1-1: Using ep0 maxpacket: 32 [ 799.737940][ T27] audit: type=1326 audit(2000002757.006:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20485 comm="syz.2.7324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 799.747945][ T6018] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 799.764934][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.770483][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7326'. [ 799.799050][ T27] audit: type=1326 audit(2000002757.006:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20485 comm="syz.2.7324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 799.816423][ T6018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.896293][ T6018] usb 1-1: Product: syz [ 799.901131][ T6018] usb 1-1: Manufacturer: syz [ 799.905772][ T6018] usb 1-1: SerialNumber: syz [ 799.931909][ T6018] usb 1-1: config 0 descriptor?? [ 800.144274][T20508] Cannot find set identified by id 0 to match [ 800.172798][T20503] loop4: detected capacity change from 0 to 4096 [ 800.281222][T20503] NILFS (loop4): the device already has a read-only mount. [ 800.382887][ T6018] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 800.409431][ T6018] airspy 1-1:0.0: Could not detect board [ 800.428557][ T6018] airspy: probe of 1-1:0.0 failed with error -71 [ 800.482651][ T6018] usb 1-1: USB disconnect, device number 124 [ 800.652335][T20523] loop3: detected capacity change from 0 to 256 [ 800.686055][T20523] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 800.943813][ T4321] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 800.961315][T20536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7350'. [ 801.139312][ T4321] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 801.157534][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 801.169698][ T6018] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 801.201075][ T4321] usb 3-1: Product: syz [ 801.205325][ T4321] usb 3-1: SerialNumber: syz [ 801.245107][ T4321] usb 3-1: config 0 descriptor?? [ 801.395111][ T6018] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.420923][ T6018] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 801.470704][ T4321] hso 3-1:0.0: Can't find BULK IN endpoint [ 801.472010][ T6018] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 801.507568][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.537130][ T6018] usb 2-1: Product: syz [ 801.553938][ T6018] usb 2-1: Manufacturer: syz [ 801.558589][ T6018] usb 2-1: SerialNumber: syz [ 801.594214][ T6018] usb-storage 2-1:1.0: USB Mass Storage device detected [ 801.643939][ T6018] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 801.692756][ T6020] usb 3-1: USB disconnect, device number 98 [ 801.762189][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7364'. [ 801.867697][ T5802] usb 2-1: USB disconnect, device number 114 [ 802.021495][T20576] loop4: detected capacity change from 0 to 2048 [ 802.060262][T20576] Alternate GPT is invalid, using primary GPT. [ 802.078065][T20576] loop4: p1 p2 p3 [ 802.435388][ T4763] udevd[4763]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 802.460835][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 802.477220][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 802.633761][T20586] loop4: detected capacity change from 0 to 4096 [ 802.703594][T20586] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 802.860095][T20603] netlink: 'syz.1.7381': attribute type 3 has an invalid length. [ 803.508629][T20626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7392'. [ 803.591224][T20596] loop3: detected capacity change from 0 to 32768 [ 803.656836][T20596] jfs_strtoUCS: char2uni returned -22. [ 803.709040][T20596] charset = cp949, char = 0xd4 [ 803.931507][ T6020] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 804.147382][T20647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7403'. [ 804.161681][ T6020] usb 5-1: Using ep0 maxpacket: 32 [ 804.176494][ T6020] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 804.201221][ T6020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.249182][ T6020] usb 5-1: config 0 has no interface number 0 [ 804.255440][ T6020] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 804.324986][ T6020] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 804.365154][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.407400][ T6020] usb 5-1: Product: syz [ 804.411644][ T6020] usb 5-1: Manufacturer: syz [ 804.416265][ T6020] usb 5-1: SerialNumber: syz [ 804.458132][ T6020] usb 5-1: config 0 descriptor?? [ 804.471844][ T6020] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input73 [ 804.488912][ T27] audit: type=1326 audit(2000002761.590:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 804.570450][ T27] audit: type=1326 audit(2000002761.627:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 804.594761][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.665692][ T27] audit: type=1326 audit(2000002761.627:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 804.770837][ T27] audit: type=1326 audit(2000002761.627:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 804.886660][T20671] loop3: detected capacity change from 0 to 64 [ 804.904111][ T27] audit: type=1326 audit(2000002761.627:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 804.962023][ T27] audit: type=1326 audit(2000002761.627:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 804.979765][ T6020] usb 5-1: USB disconnect, device number 107 [ 804.986620][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.026666][ T27] audit: type=1326 audit(2000002761.627:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 805.056951][ T27] audit: type=1326 audit(2000002761.627:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 805.087868][ T27] audit: type=1326 audit(2000002761.627:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20660 comm="syz.2.7410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 805.190635][ T27] audit: type=1326 audit(2000002762.245:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20673 comm="syz.0.7426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 805.196387][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7417'. [ 805.282307][ T27] audit: type=1326 audit(2000002762.273:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20673 comm="syz.0.7426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 805.369164][ T27] audit: type=1326 audit(2000002762.273:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20673 comm="syz.0.7426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 805.412553][ T27] audit: type=1326 audit(2000002762.273:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20673 comm="syz.0.7426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bb59e159 code=0x7ffc0000 [ 805.909097][ T6020] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 806.139294][ T6020] usb 2-1: Using ep0 maxpacket: 16 [ 806.157748][ T6020] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 806.208825][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.229497][ T6020] usb 2-1: Product: syz [ 806.241189][ T6020] usb 2-1: Manufacturer: syz [ 806.245867][ T6020] usb 2-1: SerialNumber: syz [ 806.283831][ T6020] r8152-cfgselector 2-1: config 0 descriptor?? [ 806.430167][T20712] loop2: detected capacity change from 0 to 4096 [ 806.460184][T20712] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 806.540776][ T6020] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 806.559771][T20712] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 806.603489][T20691] loop4: detected capacity change from 0 to 32768 [ 806.615094][T20717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.724836][T20691] read_mapping_page failed! [ 806.743913][T20691] ERROR: (device loop4): txCommit: [ 806.743913][T20691] [ 806.779535][ T5802] usb 2-1: USB disconnect, device number 115 [ 806.805824][T20691] ERROR: (device loop4): remounting filesystem as read-only [ 807.485470][T20737] xt_CT: No such helper "pptp" [ 807.612788][T20748] netlink: 'syz.3.7453': attribute type 1 has an invalid length. [ 808.123013][T20766] loop2: detected capacity change from 0 to 64 [ 808.184118][T20766] Bad inode number on dev loop2: 2 is out of range [ 808.248676][T20772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7465'. [ 808.428573][T20743] loop1: detected capacity change from 0 to 32768 [ 808.436802][T20777] Illegal XDP return value 4294967262 on prog (id 481) dev N/A, expect packet loss! [ 808.515169][T20743] XFS (loop1): Mounting V5 Filesystem [ 808.561861][T20785] xt_nat: multiple ranges no longer supported [ 808.573597][T20743] XFS (loop1): Starting recovery (logdev: internal) [ 808.674905][T20743] XFS (loop1): Ending recovery (logdev: internal) [ 808.803736][T20795] loop2: detected capacity change from 0 to 256 [ 808.912196][T20795] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 809.067721][ T4280] XFS (loop1): Unmounting Filesystem [ 809.132913][T20799] loop4: detected capacity change from 0 to 4096 [ 809.259164][T20799] ntfs: volume version 3.1. [ 809.343953][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7476'. [ 809.731393][ T6020] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 809.757912][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7481'. [ 809.911779][T20823] xt_TCPMSS: Only works on TCP SYN packets [ 809.962406][ T6020] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 809.977202][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 810.009287][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 810.058237][ T6020] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 810.121488][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.137744][ T6020] usb 4-1: Product: syz [ 810.142330][ T6020] usb 4-1: Manufacturer: syz [ 810.157392][ T6020] usb 4-1: SerialNumber: syz [ 810.174117][ T6020] usb 4-1: config 0 descriptor?? [ 810.404337][ T6020] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 810.450345][T20841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.473283][ T6020] usb 4-1: USB disconnect, device number 3 [ 810.480985][T20841] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 810.515980][ T4763] udevd[4763]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 810.542815][T20843] loop1: detected capacity change from 0 to 64 [ 810.592839][T20843] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 810.625214][T20843] hfs: get root inode failed [ 810.716282][T20829] loop2: detected capacity change from 0 to 32768 [ 810.824024][T20829] XFS (loop2): Mounting V5 Filesystem [ 810.936768][T20829] XFS (loop2): Starting recovery (logdev: internal) [ 810.975155][T20829] XFS (loop2): Ending recovery (logdev: internal) [ 811.097216][ T4278] XFS (loop2): Unmounting Filesystem [ 811.235934][T20860] netlink: 'syz.3.7496': attribute type 7 has an invalid length. [ 811.311153][T20864] loop4: detected capacity change from 0 to 256 [ 811.437135][T20867] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7500'. [ 812.202645][T20895] netlink: 392 bytes leftover after parsing attributes in process `syz.2.7497'. [ 812.506216][T20912] loop1: detected capacity change from 0 to 128 [ 812.542129][T20910] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 812.600898][T20912] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 812.648562][T20912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 812.724246][T20918] deleting an unspecified loop device is not supported. [ 812.737236][T20912] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 812.928913][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 812.960355][T20926] tmpfs: Bad value for 'mpol' [ 812.989974][T20929] netlink: 'syz.4.7525': attribute type 10 has an invalid length. [ 813.102528][T20929] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 813.668208][T20957] loop1: detected capacity change from 0 to 256 [ 813.895936][T20960] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 814.191269][T20977] netlink: 'syz.1.7543': attribute type 1 has an invalid length. [ 815.052425][T20984] loop2: detected capacity change from 0 to 32768 [ 815.113713][T20984] ea_get: invalid extended attribute [ 815.132326][T20984] ffff8880547295b0: 04 00 00 00 .... [ 815.151587][T18806] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 815.366853][T18806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.387991][T18806] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 815.437623][T18806] usb 4-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 815.480395][T18806] usb 4-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 815.492655][T18806] usb 4-1: Product: syz [ 815.526136][T18806] usb 4-1: Manufacturer: syz [ 815.530794][T18806] usb 4-1: SerialNumber: syz [ 815.581138][T18806] usb 4-1: config 0 descriptor?? [ 815.602362][T18806] cdc_acm 4-1:0.0: skipping garbage [ 815.888754][ T5802] usb 4-1: USB disconnect, device number 4 [ 816.394722][T21054] netlink: 'syz.4.7582': attribute type 2 has an invalid length. [ 816.614176][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7588'. [ 816.825707][T21072] loop2: detected capacity change from 0 to 512 [ 816.870902][T21072] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 817.294885][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7602'. [ 817.361288][T21094] loop2: detected capacity change from 0 to 64 [ 817.714168][T21104] Process accounting resumed [ 817.761668][ T5802] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 817.975410][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.003072][ T5802] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 818.029528][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.040184][T21124] x_tables: duplicate entry at hook 2 [ 818.046318][ T5802] usb 1-1: Product: syz [ 818.064147][ T5802] usb 1-1: Manufacturer: syz [ 818.068807][ T5802] usb 1-1: SerialNumber: syz [ 818.112938][ T5802] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 818.200735][T21130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7620'. [ 818.327616][ T5802] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 818.361194][ T5802] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 818.381081][ T5802] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 818.400170][ T5802] usb 1-1: media controller created [ 818.451976][ T5802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 818.469061][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7627'. [ 818.559506][ T5802] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 818.652131][ T5802] usb 1-1: USB disconnect, device number 125 [ 818.833210][T21152] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 819.200623][T21138] loop1: detected capacity change from 0 to 40427 [ 819.227100][T21138] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 819.259744][T21138] F2FS-fs (loop1): invalid crc value [ 819.313098][T21138] F2FS-fs (loop1): Found nat_bits in checkpoint [ 819.448363][T21138] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 819.471036][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7642'. [ 819.535354][T21138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 819.564169][T21177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7644'. [ 819.842740][T21186] netlink: 'syz.2.7647': attribute type 1 has an invalid length. [ 820.195936][T21198] xt_connbytes: Forcing CT accounting to be enabled [ 820.216417][T21198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 820.767615][T21221] Cannot find del_set index 4 as target [ 821.230959][T21231] nvme_rdma: malformed src address passed: 1270.0.1 [ 821.376330][T21243] netlink: 'syz.3.7674': attribute type 3 has an invalid length. [ 821.395275][T21243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7674'. [ 821.641534][T21213] loop2: detected capacity change from 0 to 40427 [ 821.690850][T21213] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 821.744236][T21213] F2FS-fs (loop2): invalid crc value [ 821.793231][T21213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 821.944992][T21213] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 822.010247][T21213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 822.033234][ T27] audit: type=1326 audit(2000002777.997:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.093168][T21272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7688'. [ 822.109554][ T4321] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 822.145940][ T27] audit: type=1326 audit(2000002777.997:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.252293][ T27] audit: type=1326 audit(2000002778.044:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.315625][ T4321] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 822.341006][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.342389][ T27] audit: type=1326 audit(2000002778.044:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.390132][ T4321] usb 5-1: config 0 descriptor?? [ 822.421988][ T27] audit: type=1326 audit(2000002778.044:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.514080][ T27] audit: type=1326 audit(2000002778.044:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.644834][ T27] audit: type=1326 audit(2000002778.044:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.762407][ T27] audit: type=1326 audit(2000002778.044:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.830878][ T4321] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 822.848449][ T4321] hackrf 5-1:0.0: Could not detect board [ 822.864633][ T4321] hackrf: probe of 5-1:0.0 failed with error -71 [ 822.877861][ T27] audit: type=1326 audit(2000002778.072:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.3.7687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 822.898059][ T4321] usb 5-1: USB disconnect, device number 108 [ 823.436892][T18806] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 823.552734][T21315] device bridge1 entered promiscuous mode [ 823.643919][T18806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 823.665570][ T4283] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 823.675769][T18806] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 823.752194][T18806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.798146][T18806] usb 3-1: Product: syz [ 823.806873][T18806] usb 3-1: Manufacturer: syz [ 823.814199][T18806] usb 3-1: SerialNumber: syz [ 823.845143][T18806] usb 3-1: config 0 descriptor?? [ 823.863090][T18806] hub 3-1:0.0: bad descriptor, ignoring hub [ 823.905872][T18806] hub: probe of 3-1:0.0 failed with error -5 [ 823.927425][T18806] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 824.039815][T21298] loop3: detected capacity change from 0 to 40427 [ 824.064280][T21298] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 824.117946][T21298] F2FS-fs (loop3): invalid crc value [ 824.131022][T21298] F2FS-fs (loop3): Found nat_bits in checkpoint [ 824.202096][T21298] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 824.287437][T21298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 824.292134][T21336] loop1: detected capacity change from 0 to 256 [ 824.330555][T21336] exfat: Deprecated parameter 'utf8' [ 824.364083][T21336] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 824.700324][T21344] netlink: 'syz.1.7723': attribute type 32 has an invalid length. [ 825.327871][T21358] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 825.341602][T21358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.774728][T21351] loop4: detected capacity change from 0 to 32768 [ 825.812427][T21372] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.855641][T21374] printk: syz.3.7738 (21374): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 825.883699][T21351] ea_get: invalid extended attribute [ 825.901289][T21351] ffff88805472cd30: 04 00 00 00 .... [ 826.515756][T21396] netlink: 'syz.0.7749': attribute type 10 has an invalid length. [ 826.582174][T21396] team0: Device hsr_slave_0 failed to register rx_handler [ 827.375212][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7763'. [ 827.611770][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7765'. [ 827.781517][T21405] loop3: detected capacity change from 0 to 32768 [ 827.855276][T21450] loop1: detected capacity change from 0 to 16 [ 827.870241][T21405] ea_get: invalid extended attribute [ 827.891387][T21405] ffff88804d602830: 04 00 00 00 .... [ 827.916483][T21450] erofs: (device loop1): mounted with root inode @ nid 36. [ 829.050165][T21491] loop2: detected capacity change from 0 to 4096 [ 829.084920][T18806] usb 3-1: USB disconnect, device number 99 [ 829.093442][T21491] EXT4-fs: inline encryption not supported [ 829.118824][T21491] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 829.173457][T21491] EXT4-fs (loop2): Test dummy encryption mode enabled [ 829.213011][T21491] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 829.261582][T21491] System zones: 0-5 [ 829.301893][T21491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 829.637681][T21521] Cannot find add_set index 0 as target [ 829.950766][T21534] netlink: 'syz.3.7800': attribute type 13 has an invalid length. [ 829.984789][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 829.986226][T21534] netlink: 'syz.3.7800': attribute type 12 has an invalid length. [ 830.003020][T21536] openvswitch: netlink: Message has 1 unknown bytes. [ 830.043060][ T5802] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 830.217147][T21540] program syz.2.7803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.279236][ T5802] usb 2-1: Using ep0 maxpacket: 8 [ 830.286297][ T5802] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 830.287402][T21544] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.7805'. [ 830.301716][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.332060][T21544] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.7805'. [ 830.354983][ T5802] usb 2-1: config 0 descriptor?? [ 830.374175][ T5802] usb 2-1: probing VID:PID(0424:012C) [ 830.402579][ T5802] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 830.427476][ T5802] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 830.465007][ T5802] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 830.507299][ T5802] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 830.516256][ T27] audit: type=1326 audit(2000002785.939:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.2.7808" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 830.534928][T21549] Invalid ELF header magic: != ELF [ 830.568494][ T5802] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 830.624531][ T27] audit: type=1326 audit(2000002785.967:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.2.7808" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 830.727448][ T27] audit: type=1326 audit(2000002785.967:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.2.7808" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 830.820468][ T5802] vub300: probe of 2-1:0.0 failed with error -71 [ 830.824683][ T27] audit: type=1326 audit(2000002785.967:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.2.7808" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311cf9e159 code=0x7ffc0000 [ 830.837912][ T5802] usb 2-1: USB disconnect, device number 116 [ 831.052576][T21569] loop2: detected capacity change from 0 to 16 [ 831.084112][T21569] erofs: (device loop2): mounted with root inode @ nid 36. [ 831.683953][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7831'. [ 831.732993][T21597] device geneve1 entered promiscuous mode [ 832.040950][T21616] netlink: 'syz.3.7837': attribute type 10 has an invalid length. [ 832.140074][T21616] team0: Device hsr_slave_0 failed to register rx_handler [ 832.541536][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7850'. [ 832.617708][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7852'. [ 832.652274][T21638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7852'. [ 832.716849][T21638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7852'. [ 833.395418][T21674] loop2: detected capacity change from 0 to 512 [ 833.446816][T21678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7871'. [ 833.456557][T21674] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 833.506488][T21674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 833.544830][T21674] ext4 filesystem being mounted at /1441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.625919][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 833.710434][T18806] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 833.738731][T21667] loop4: detected capacity change from 0 to 32768 [ 833.768413][T21667] (syz.4.7866,21667,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.801468][T21667] (syz.4.7866,21667,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.823979][T21685] loop2: detected capacity change from 0 to 4096 [ 833.880259][T21667] (syz.4.7866,21667,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 833.896921][T21685] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 833.907200][T21689] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 833.922046][T21685] NILFS (loop2): mounting fs with errors [ 833.932564][T21687] loop3: detected capacity change from 0 to 4096 [ 833.948811][T18806] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 833.959014][T18806] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 833.968188][T18806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.980154][T21667] JBD2: Ignoring recovery information on journal [ 834.001285][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.007629][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.163749][T21667] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 834.178875][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7875'. [ 834.223673][T21692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7875'. [ 834.287196][T21692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7875'. [ 834.420714][T18806] qmi_wwan: probe of 1-1:1.0 failed with error -22 [ 834.446887][T18806] usb 1-1: USB disconnect, device number 126 [ 834.528397][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 835.046208][ T5802] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 835.154933][T21723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7890'. [ 835.256242][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 835.289967][ T5802] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 835.345570][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.353693][ T5802] usb 2-1: Product: syz [ 835.374351][ T5802] usb 2-1: Manufacturer: syz [ 835.389337][ T5802] usb 2-1: SerialNumber: syz [ 835.418676][ T5802] usb 2-1: config 0 descriptor?? [ 835.446288][ T5802] hub 2-1:0.0: bad descriptor, ignoring hub [ 835.452281][ T5802] hub: probe of 2-1:0.0 failed with error -5 [ 835.481104][ T5802] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input75 [ 835.597370][T21738] loop2: detected capacity change from 0 to 64 [ 835.851228][T21746] Unknown options in mask b7f2 [ 836.406715][T21769] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.7913'. [ 836.736211][T21783] comedi comedi2: Minor 64 is invalid! [ 837.095411][T21801] loop3: detected capacity change from 0 to 256 [ 837.142775][T21801] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 837.349557][T21805] loop4: detected capacity change from 0 to 4096 [ 837.419518][T21805] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 837.526760][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7936'. [ 838.217156][T21809] loop1: detected capacity change from 0 to 32768 [ 838.246015][T21809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7931 (21809) [ 838.342011][T21809] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 838.404948][T21809] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 838.460852][T21809] BTRFS info (device loop1): force clearing of disk cache [ 838.502881][T21809] BTRFS info (device loop1): force zlib compression, level 3 [ 838.517543][T21809] BTRFS info (device loop1): disabling free space tree [ 838.548540][T21809] BTRFS info (device loop1): max_inline at 0 [ 838.584985][T21809] BTRFS info (device loop1): enabling free space tree [ 838.591834][T21809] BTRFS info (device loop1): using free space tree [ 838.991051][T21809] BTRFS info (device loop1): enabling ssd optimizations [ 839.245002][ T4280] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 839.417750][T21892] netlink: 'syz.0.7965': attribute type 12 has an invalid length. [ 839.525804][T18806] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 839.749959][T18806] usb 4-1: Using ep0 maxpacket: 8 [ 839.757344][T18806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 839.783388][T18806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 839.837814][T18806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.899652][T18806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 839.943343][T18806] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 839.986560][T18806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 840.033817][T18806] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 840.059333][T18806] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 840.124146][T18806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.143118][T18806] usb 4-1: Product: syz [ 840.161124][T18806] usb 4-1: Manufacturer: syz [ 840.167161][T18806] usb 4-1: SerialNumber: syz [ 840.195043][T18806] usb 4-1: config 0 descriptor?? [ 840.220383][T21883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 840.227824][T21883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 840.356670][T21922] i2c i2c-0: Invalid block read size 255 [ 840.431357][T21921] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.553150][ T6018] usb 2-1: USB disconnect, device number 117 [ 840.607632][T21928] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 840.673529][T18693] usb 4-1: USB disconnect, device number 5 [ 840.684304][T21932] netlink: 'syz.1.7984': attribute type 3 has an invalid length. [ 840.960322][T21941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7987'. [ 841.330431][T21952] loop2: detected capacity change from 0 to 4096 [ 841.520234][T21952] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 842.368644][T22001] cgroup: Name too long [ 842.839556][T18693] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 842.876402][T22023] netlink: 'syz.0.8021': attribute type 3 has an invalid length. [ 843.042756][T18693] usb 3-1: Using ep0 maxpacket: 32 [ 843.049887][T18693] usb 3-1: config 245 has an invalid interface number: 214 but max is 0 [ 843.074738][T18693] usb 3-1: config 245 has no interface number 0 [ 843.081087][T18693] usb 3-1: config 245 interface 214 has no altsetting 0 [ 843.091822][T22032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8022'. [ 843.120816][T22032] unsupported nlmsg_type 40 [ 843.134224][T18693] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 843.169236][T18693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.195227][T18693] usb 3-1: Product: syz [ 843.207940][T18693] usb 3-1: Manufacturer: syz [ 843.234456][T18693] usb 3-1: SerialNumber: syz [ 843.344842][T22037] loop3: detected capacity change from 0 to 2048 [ 843.418332][T22037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 843.690848][T18693] f81534a_ctrl 3-1:245.214: failed to enable ports: -71 [ 843.710184][T18693] f81534a_ctrl: probe of 3-1:245.214 failed with error -71 [ 843.749445][T18693] usb 3-1: USB disconnect, device number 100 [ 843.895615][T22055] comedi comedi1: dmm32at: I/O port conflict (0x3,16) [ 844.891011][T22102] netlink: 'syz.1.8052': attribute type 21 has an invalid length. [ 845.121010][T22108] netlink: 'syz.2.8056': attribute type 1 has an invalid length. [ 845.176407][T22108] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8056'. [ 845.417521][T22123] program syz.2.8062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 845.445063][T18692] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 845.454081][T22123] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 845.653207][T18692] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 845.712469][T18692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.766352][T18692] usb 4-1: config 0 has no interface number 0 [ 845.794909][T18692] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 845.817549][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8068'. [ 845.832866][T18692] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.874450][T18692] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 845.907174][T18692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.939556][T18692] usb 4-1: Product: syz [ 845.974438][T18692] usb 4-1: Manufacturer: syz [ 845.979085][T18692] usb 4-1: SerialNumber: syz [ 846.022433][T18692] usb 4-1: config 0 descriptor?? [ 846.156218][T22149] loop1: detected capacity change from 0 to 2048 [ 846.201905][T22149] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 846.272177][T22149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.483425][T18692] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 846.510312][T18692] usb 4-1: USB disconnect, device number 6 [ 846.649551][T22167] loop1: detected capacity change from 0 to 512 [ 846.761602][T22174] loop2: detected capacity change from 0 to 256 [ 846.795041][T22167] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 846.837962][T22167] ext4 filesystem being mounted at /1671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.917686][T22167] Quota error (device loop1): do_check_range: Getting block 134217728 out of range 0-5 [ 847.170019][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 847.404426][T22189] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8090'. [ 847.852132][T22217] TCP: TCP_TX_DELAY enabled [ 848.382077][T22244] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 849.008129][ T4321] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 849.117818][T22273] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 849.221694][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 849.234286][ T4321] usb 1-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 849.290540][ T4321] usb 1-1: config 30 interface 0 has no altsetting 0 [ 849.322578][ T4321] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 849.354624][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.386226][ T4321] usb 1-1: Product: syz [ 849.392920][ T4321] usb 1-1: Manufacturer: syz [ 849.397585][ T4321] usb 1-1: SerialNumber: syz [ 849.426534][ T4321] snd_usb_toneport 1-1:30.0: Line 6 TonePort UX2 found [ 849.645552][ T4321] snd_usb_toneport 1-1:30.0: cannot get proper max packet size [ 849.658969][T22296] loop4: detected capacity change from 0 to 64 [ 849.660358][ T4321] snd_usb_toneport 1-1:30.0: Line 6 TonePort UX2 now disconnected [ 849.679521][ T27] audit: type=1326 audit(2000002803.852:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22294 comm="syz.3.8143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x0 [ 849.712738][ T4321] snd_usb_toneport: probe of 1-1:30.0 failed with error -22 [ 849.918976][T18687] usb 1-1: USB disconnect, device number 127 [ 849.935337][T22302] Process accounting paused [ 850.594734][ T4283] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 850.860153][T22341] netlink: 'syz.4.8165': attribute type 10 has an invalid length. [ 850.896261][T22345] JFS: discard option not supported on device [ 850.930386][T22341] team0: Port device virt_wifi0 added [ 850.947211][T22345] Mount JFS Failure: -22 [ 850.962634][T22345] jfs_mount failed w/return code = -22 [ 851.438647][T22366] loop4: detected capacity change from 0 to 128 [ 851.495696][T22366] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (19291!=39978) [ 851.550304][T22366] EXT4-fs (loop4): group descriptors corrupted! [ 851.619608][ T4283] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 851.698014][T22374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8180'. [ 851.893738][T22378] loop2: detected capacity change from 0 to 2048 [ 851.943414][T22378] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 852.076040][T22378] UDF-fs: unknown compression code (0) [ 852.752396][T22415] netlink: 'syz.3.8200': attribute type 29 has an invalid length. [ 852.752420][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8200'. [ 853.189471][T22432] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 853.696387][T22456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8220'. [ 853.792814][T22462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8222'. [ 854.220488][T22482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8232'. [ 854.389850][T22488] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8236'. [ 854.933018][T22475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 854.955106][T22475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.994242][T22475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 855.015675][T22475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 855.331776][T15875] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 855.514198][T22529] loop3: detected capacity change from 0 to 16 [ 855.565899][T15875] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 855.575573][T22529] erofs: (device loop3): mounted with root inode @ nid 36. [ 855.595957][T15875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.624142][T15875] usb 2-1: Product: syz [ 855.633782][T15875] usb 2-1: Manufacturer: syz [ 855.648749][T22529] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 855.679351][T15875] usb 2-1: SerialNumber: syz [ 855.694882][T22529] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 855.736539][T22529] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 855.761420][T22529] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 855.812485][T15875] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 855.830464][T22529] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 855.870207][T22529] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 855.899196][T22529] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 855.932801][ T27] audit: type=1800 audit(2000002809.708:73): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8256" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 856.081630][T22493] random: crng reseeded on system resumption [ 856.309713][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 856.891804][T22570] tipc: Trying to set illegal importance in message [ 856.999118][T15875] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 857.029098][T15875] ath9k_htc: Failed to initialize the device [ 857.078375][T22578] netlink: 'syz.3.8275': attribute type 1 has an invalid length. [ 857.100088][T15875] usb 2-1: ath9k_htc: USB layer deinitialized [ 857.164725][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 857.164946][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 857.170807][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 857.647789][T18806] usb 2-1: USB disconnect, device number 118 [ 857.774468][T22603] device geneve2 entered promiscuous mode [ 857.797561][T22606] netlink: 'syz.4.8286': attribute type 10 has an invalid length. [ 857.876473][T22606] team0: Port device wlan1 added [ 857.998739][ T6018] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 858.212527][ T6018] usb 1-1: Using ep0 maxpacket: 32 [ 858.220405][ T6018] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 858.278142][ T6018] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 858.313613][ T6018] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.326263][ T6018] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 858.342031][ T6018] usb 1-1: config 1 has no interface number 0 [ 858.348315][ T6018] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 858.374818][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.420707][ T27] audit: type=1326 audit(2000002812.037:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 858.433112][ T6018] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 858.496519][ T27] audit: type=1326 audit(2000002812.074:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 858.629297][ T27] audit: type=1326 audit(2000002812.074:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 858.658088][ T6018] snd_usb_pod 1-1:1.1: set_interface failed [ 858.667381][ T6018] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 858.692032][ T6018] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 858.704592][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8299'. [ 858.743397][ T6018] usb 1-1: USB disconnect, device number 2 [ 858.766052][ T27] audit: type=1326 audit(2000002812.074:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 858.795731][T22641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8299'. [ 858.892787][ T27] audit: type=1326 audit(2000002812.074:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 859.083026][ T27] audit: type=1326 audit(2000002812.074:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 859.204365][ T27] audit: type=1326 audit(2000002812.074:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 859.284295][ T27] audit: type=1326 audit(2000002812.074:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22627 comm="syz.1.8296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 859.377270][T22670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8308'. [ 859.399393][T22668] netlink: 'syz.1.8309': attribute type 2 has an invalid length. [ 859.420479][T22670] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8308'. [ 859.429489][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8308'. [ 860.086339][T22698] CIFS mount error: No usable UNC path provided in device string! [ 860.086339][T22698] [ 860.125970][T15875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 860.159757][T22698] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 860.350650][T15875] usb 1-1: Using ep0 maxpacket: 8 [ 860.358334][T15875] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 860.369611][T22712] loop4: detected capacity change from 0 to 256 [ 860.379585][T15875] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 860.393218][T15875] usb 1-1: config 3 has no interface number 0 [ 860.399809][T15875] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.439295][T22712] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 860.462738][T15875] usb 1-1: config 3 interface 45 has no altsetting 0 [ 860.503703][T15875] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 860.542829][T15875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.579124][T15875] usb 1-1: Product: syz [ 860.583375][T15875] usb 1-1: Manufacturer: syz [ 860.617638][T15875] usb 1-1: SerialNumber: syz [ 860.940815][T15875] usb 1-1: USB disconnect, device number 3 [ 861.080496][T22735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8338'. [ 861.195951][ T4763] udevd[4763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.231736][T22738] netlink: 'syz.1.8340': attribute type 6 has an invalid length. [ 861.253213][T22738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8340'. [ 861.472233][T22753] netlink: 'syz.3.8347': attribute type 1 has an invalid length. [ 861.480190][T22753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8347'. [ 861.847348][T22765] device geneve3 entered promiscuous mode [ 861.884732][T22768] netlink: 'syz.1.8355': attribute type 10 has an invalid length. [ 861.906150][T22773] syz.0.8357 (22773): /proc/22773/oom_adj is deprecated, please use /proc/22773/oom_score_adj instead. [ 861.913559][T22772] loop3: detected capacity change from 0 to 64 [ 862.029326][T22768] team0: Port device wlan1 added [ 862.575756][T22797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8368'. [ 862.760566][T22802] loop1: detected capacity change from 0 to 64 [ 863.276940][T22789] loop4: detected capacity change from 0 to 32768 [ 863.750663][T22835] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8388'. [ 864.239831][T22857] usb usb8: usbfs: process 22857 (syz.4.8400) did not claim interface 0 before use [ 864.419896][T22863] device geneve2 entered promiscuous mode [ 864.430065][T22859] loop3: detected capacity change from 0 to 4096 [ 864.507872][T22859] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 864.592582][T22865] loop2: detected capacity change from 0 to 4096 [ 864.632097][T22859] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 864.742993][T22871] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8405'. [ 864.800724][T22865] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 864.854605][ T4339] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 864.879074][ T4271] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 864.916114][ T4271] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 864.944917][ T4271] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 864.973275][ T4326] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 865.007376][ T4271] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 865.033066][T22875] device geneve2 entered promiscuous mode [ 865.160952][T22879] loop4: detected capacity change from 0 to 512 [ 865.294188][T22879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 865.351411][T22885] lo speed is unknown, defaulting to 1000 [ 865.358378][T22885] lo speed is unknown, defaulting to 1000 [ 865.369979][T22885] lo speed is unknown, defaulting to 1000 [ 865.386822][T22885] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 865.404242][T22879] ext4 filesystem being mounted at /1756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.441969][T22885] lo speed is unknown, defaulting to 1000 [ 865.489345][T22879] Quota error (device loop4): do_check_range: Getting block 134217728 out of range 0-5 [ 865.509527][T22885] lo speed is unknown, defaulting to 1000 [ 865.543887][T22885] lo speed is unknown, defaulting to 1000 [ 865.582303][T22885] lo speed is unknown, defaulting to 1000 [ 865.633953][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 865.649656][T22885] lo speed is unknown, defaulting to 1000 [ 866.313677][T22924] netlink: 'syz.0.8430': attribute type 2 has an invalid length. [ 866.359153][T22924] netlink: 'syz.0.8430': attribute type 1 has an invalid length. [ 866.390684][T22924] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8430'. [ 866.462210][ T27] audit: type=1326 audit(2000002819.558:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22929 comm="syz.1.8432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 866.571717][ T27] audit: type=1326 audit(2000002819.567:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22929 comm="syz.1.8432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 866.611043][T22936] siw: device registration error -23 [ 866.625266][T22938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8444'. [ 866.731876][ T27] audit: type=1326 audit(2000002819.679:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22929 comm="syz.1.8432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 866.758520][T22940] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551613) [ 866.786844][T22940] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 866.815343][ T27] audit: type=1326 audit(2000002819.679:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22929 comm="syz.1.8432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8a59e159 code=0x7ffc0000 [ 866.913195][T22946] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 866.978601][T22946] [U] J"—e:ÀÆ" [ 867.279689][T22955] loop4: detected capacity change from 0 to 4096 [ 867.286586][T22964] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 867.393872][T22955] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 867.421061][T22968] siw: device registration error -23 [ 867.490804][T22955] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 867.536781][T22970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8462'. [ 867.561188][T22970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8462'. [ 867.642486][ T4326] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 867.649953][ T4284] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 867.656856][T22972] netlink: 'syz.2.8452': attribute type 10 has an invalid length. [ 867.684344][ T4284] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 867.695162][ T4284] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 867.719259][ T4338] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 867.729878][ T4284] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 867.753920][T22972] team0: Port device wlan1 added [ 868.411102][T18806] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 868.615395][T18806] usb 5-1: Using ep0 maxpacket: 32 [ 868.639145][T18806] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 868.697269][T18806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.726226][T18806] usb 5-1: config 0 descriptor?? [ 868.739087][T18806] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 869.146654][T23028] loop1: detected capacity change from 0 to 4096 [ 869.169517][T18806] gspca_nw80x: reg_r err -71 [ 869.176473][T18806] nw80x: probe of 5-1:0.0 failed with error -71 [ 869.211102][T18806] usb 5-1: USB disconnect, device number 109 [ 869.259203][T23028] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 869.874868][T23054] netlink: 'syz.3.8492': attribute type 8 has an invalid length. [ 869.893679][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8492'. [ 870.031500][T23055] loop2: detected capacity change from 0 to 4096 [ 870.123423][T23055] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 870.212576][T23055] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 870.376601][ T4339] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 870.411273][ T4278] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 870.417602][ T4278] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 870.453468][ T4278] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 870.460716][ T4339] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 870.476427][T23070] loop4: detected capacity change from 0 to 4096 [ 870.499406][ T4278] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 870.584853][T23075] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 870.812808][ T27] audit: type=1326 audit(2000002823.627:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.4.8509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 870.871794][T23088] loop1: detected capacity change from 0 to 64 [ 870.891511][ T27] audit: type=1326 audit(2000002823.627:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.4.8509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 870.991043][T23088] hfs: unable to locate alternate MDB [ 870.996494][T23088] hfs: continuing without an alternate MDB [ 871.002450][ T27] audit: type=1326 audit(2000002823.683:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.4.8509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 871.119279][ T27] audit: type=1326 audit(2000002823.917:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.4.8509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 871.157657][T18806] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 871.165633][ T27] audit: type=1326 audit(2000002823.945:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23085 comm="syz.4.8509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 871.329083][T23095] loop3: detected capacity change from 0 to 2048 [ 871.351912][T23095] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.429020][T18806] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 871.452432][T18806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.468777][T18806] usb 3-1: Product: syz [ 871.479219][T18806] usb 3-1: Manufacturer: syz [ 871.489906][T18806] usb 3-1: SerialNumber: syz [ 871.556727][T18806] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 871.723934][T23107] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8517'. [ 871.845700][T23089] random: crng reseeded on system resumption [ 872.464027][T18687] usb 3-1: USB disconnect, device number 101 [ 872.679408][T23141] netlink: 'syz.1.8536': attribute type 8 has an invalid length. [ 872.693359][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8536'. [ 872.730359][T18806] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 872.748335][T18806] ath9k_htc: Failed to initialize the device [ 872.767221][T18687] usb 3-1: ath9k_htc: USB layer deinitialized [ 872.804861][T18692] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 872.866752][T23149] device vti0 entered promiscuous mode [ 873.002987][T23155] loop4: detected capacity change from 0 to 64 [ 873.010160][T18692] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 873.040113][T18692] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 873.056510][T23155] hfs: unable to locate alternate MDB [ 873.085143][T18692] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 0.00 [ 873.086903][T23155] hfs: continuing without an alternate MDB [ 873.101607][T18692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.142752][T18692] usb 1-1: Product: syz [ 873.164353][T18692] usb 1-1: Manufacturer: syz [ 873.180673][T18692] usb 1-1: SerialNumber: syz [ 873.216819][T18692] pl2303 1-1:1.0: pl2303 converter detected [ 873.243473][T18692] pl2303 1-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 873.465356][T18692] usb 1-1: USB disconnect, device number 4 [ 873.671656][T23179] IPv6: Can't replace route, no match found [ 874.227030][T23173] loop1: detected capacity change from 0 to 32768 [ 874.284917][T23173] (syz.1.8551,23173,1):ocfs2_find_slot:468 ERROR: no free slots available! [ 874.320292][T23173] (syz.1.8551,23173,0):ocfs2_mount_volume:1808 ERROR: status = -22 [ 874.390717][T23173] (syz.1.8551,23173,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 874.640911][T23225] xt_TCPMSS: Only works on TCP SYN packets [ 874.803312][T23229] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 875.180878][T23236] loop2: detected capacity change from 0 to 4096 [ 875.272571][T23243] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 875.453988][T23248] loop1: detected capacity change from 0 to 1024 [ 875.494340][T23252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8587'. [ 875.516610][T23248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 875.569409][T23248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 875.757744][T23248] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 875.921279][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 876.059969][T23257] loop4: detected capacity change from 0 to 32768 [ 876.113649][T23257] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.8590 (23257) [ 876.208603][T23257] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 876.247185][T23257] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 876.256481][T23257] BTRFS info (device loop4): using free space tree [ 876.393495][T23279] IPv6: Can't replace route, no match found [ 876.786317][T23257] BTRFS info (device loop4): enabling ssd optimizations [ 876.950148][T23316] loop3: detected capacity change from 0 to 4096 [ 877.022933][ T4284] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 877.058683][T23316] NILFS (loop3): invalid segment: Checksum error in segment payload [ 877.080120][T23316] NILFS (loop3): trying rollback from an earlier position [ 877.182479][T23316] NILFS (loop3): recovery complete [ 877.241732][T23327] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 877.320527][T15875] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 877.540919][T15875] usb 2-1: Using ep0 maxpacket: 16 [ 877.547982][T15875] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 877.562034][T15875] usb 2-1: config 0 has no interface number 0 [ 877.582968][T15875] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 877.653803][T15875] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 877.694648][T15875] usb 2-1: config 0 interface 41 has no altsetting 0 [ 877.726535][T15875] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 877.761287][T15875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.776929][T15875] usb 2-1: Product: syz [ 877.786073][T15875] usb 2-1: Manufacturer: syz [ 877.802177][T15875] usb 2-1: SerialNumber: syz [ 877.815900][T15875] usb 2-1: config 0 descriptor?? [ 877.829555][T23321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 877.852982][T23321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 878.086259][T23321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 878.103128][T23321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 878.376848][T15875] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 878.427358][T15875] usb 2-1: USB disconnect, device number 119 [ 878.478169][T23364] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8629'. [ 879.364215][T23372] loop4: detected capacity change from 0 to 32768 [ 879.449567][T23372] ERROR: (device loop4): diNewExt: no free extents [ 879.449567][T23372] [ 879.519318][T23372] ERROR: (device loop4): remounting filesystem as read-only [ 879.533642][T23372] ialloc: diAlloc returned -5! [ 879.663680][T23407] loop1: detected capacity change from 0 to 256 [ 879.687353][T23407] exfat: Deprecated parameter 'utf8' [ 879.723671][T23407] exfat: Deprecated parameter 'utf8' [ 879.729229][T23407] exfat: Deprecated parameter 'namecase' [ 879.823423][T23407] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 879.854482][T23413] netlink: 'syz.0.8653': attribute type 1 has an invalid length. [ 879.918550][T23413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8653'. [ 879.946111][T18687] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 880.152214][T18687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 880.169653][T18687] usb 4-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 880.201963][T18687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 880.251605][T18687] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.307473][T18687] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 880.320202][T18692] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 880.331594][T18687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 880.339636][T18687] usb 4-1: Product: syz [ 880.367104][T18687] usb 4-1: Manufacturer: syz [ 880.453000][T23433] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 880.528913][T18692] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 880.577410][T18692] usb 3-1: config 0 has no interface number 0 [ 880.583820][T18692] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 880.604824][T18687] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 880.614912][T23437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8664'. [ 880.624292][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 880.640903][T18692] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.674951][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 880.690996][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 880.705809][T18692] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 880.720191][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 880.743556][T18692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.752867][T18692] usb 3-1: Product: syz [ 880.757215][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 880.790713][T18692] usb 3-1: Manufacturer: syz [ 880.801002][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 880.817047][T18692] usb 3-1: SerialNumber: syz [ 880.829135][T18692] usb 3-1: config 0 descriptor?? [ 880.838805][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 880.849895][T23417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 880.867582][T18687] usb 4-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 880.887897][T18692] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 880.903582][T18687] usb 4-1: No streaming interface found for terminal 2. [ 880.913145][T18692] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 880.972740][T18687] usb 4-1: USB disconnect, device number 7 [ 881.112351][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 881.208301][T23455] loop4: detected capacity change from 0 to 16 [ 881.251253][T23455] erofs: (device loop4): mounted with root inode @ nid 36. [ 881.328203][T18687] usb 3-1: USB disconnect, device number 102 [ 881.359171][T18687] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 881.408658][T18687] cyberjack 3-1:0.69: device disconnected [ 881.472129][T23465] netlink: 'syz.4.8678': attribute type 3 has an invalid length. [ 881.480803][T23465] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8678'. [ 881.644036][T23473] dlm: no locking on control device [ 881.801873][T23475] ip_tables: iptables: counters copy to user failed while replacing table [ 882.021581][T23488] xt_TCPMSS: Only works on TCP SYN packets [ 882.241138][T23492] Process accounting resumed [ 882.380304][T23503] loop3: detected capacity change from 0 to 512 [ 882.480959][T23503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 882.505720][T23503] ext4 filesystem being mounted at /1717/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 882.633132][T23503] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 882.720840][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 883.076294][T23505] loop4: detected capacity change from 0 to 32768 [ 883.138325][T23505] (syz.4.8699,23505,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 883.159879][T23505] (syz.4.8699,23505,0):ocfs2_mount_volume:1808 ERROR: status = -22 [ 883.182237][T23505] (syz.4.8699,23505,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 883.340441][T23544] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.506192][ T130] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 883.607045][T23546] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8714'. [ 883.716614][ T130] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.748553][ T130] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.803144][ T130] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 883.857259][ T130] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 883.881983][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.146040][ T130] snd-usb-caiaq 2-1:1.0: invalid EPs [ 884.156769][ T130] usb 2-1: unable to init card! (ret=-22) [ 884.166924][T23563] loop4: detected capacity change from 0 to 64 [ 884.177393][ T130] snd-usb-caiaq: probe of 2-1:1.0 failed with error -22 [ 884.385887][ T4321] usb 2-1: USB disconnect, device number 120 [ 884.888007][T23596] xt_hashlimit: max too large, truncated to 1048576 [ 885.419673][T18687] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 885.625358][T18687] usb 1-1: not running at top speed; connect to a high speed hub [ 885.634894][T18687] usb 1-1: config 1 interface 0 has no altsetting 0 [ 885.657952][T18687] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.40 [ 885.681874][T18687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.708259][T23638] netlink: 'syz.2.8754': attribute type 2 has an invalid length. [ 885.716222][T23638] netlink: 'syz.2.8754': attribute type 1 has an invalid length. [ 885.730430][T18687] usb 1-1: Product: syz [ 885.734650][T18687] usb 1-1: Manufacturer: syz [ 885.739351][T18687] usb 1-1: SerialNumber: syz [ 885.745225][T23638] netlink: 'syz.2.8754': attribute type 1 has an invalid length. [ 885.769583][T23638] netlink: 'syz.2.8754': attribute type 2 has an invalid length. [ 885.790652][T23638] netlink: 'syz.2.8754': attribute type 1 has an invalid length. [ 885.798621][T23638] netlink: 'syz.2.8754': attribute type 2 has an invalid length. [ 885.812589][T23638] netlink: 'syz.2.8754': attribute type 2 has an invalid length. [ 885.820632][T23638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8754'. [ 885.879742][T23642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8758'. [ 885.992857][T18687] usbhid 1-1:1.0: can't add hid device: -71 [ 886.019283][T18687] usbhid: probe of 1-1:1.0 failed with error -71 [ 886.049426][T18687] usb 1-1: USB disconnect, device number 5 [ 886.270403][T23660] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 886.695653][T23650] loop1: detected capacity change from 0 to 32768 [ 886.755172][T23650] ERROR: (device loop1): diNewExt: no free extents [ 886.755172][T23650] [ 886.808839][T23650] ERROR: (device loop1): remounting filesystem as read-only [ 886.835534][T23650] ialloc: diAlloc returned -5! [ 887.461565][T23701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8786'. [ 887.482933][T23701] openvswitch: netlink: EtherType 300 is less than min 600 [ 887.524922][T23706] fuse: Invalid rootmode [ 887.698522][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8791'. [ 887.739575][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8793'. [ 888.760112][T23756] lo speed is unknown, defaulting to 1000 [ 888.861946][ T6018] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 889.069833][ T6018] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 889.094596][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.139797][ T6018] usb 3-1: Product: syz [ 889.152980][ T6018] usb 3-1: Manufacturer: syz [ 889.168630][ T6018] usb 3-1: SerialNumber: syz [ 889.213640][ T6018] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 889.345839][ T4321] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 889.557253][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 889.581183][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 889.621612][ T4321] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 889.639006][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.649914][ T4321] usb 1-1: Product: syz [ 889.654554][ T4321] usb 1-1: Manufacturer: syz [ 889.659279][ T4321] usb 1-1: SerialNumber: syz [ 889.670090][T18687] usb 3-1: USB disconnect, device number 103 [ 889.678332][ T4321] usb 1-1: config 0 descriptor?? [ 889.907214][ T4321] usb 1-1: USB disconnect, device number 6 [ 890.433500][ T6018] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 890.444575][ T6018] ath9k_htc: Failed to initialize the device [ 890.487379][T18687] usb 3-1: ath9k_htc: USB layer deinitialized [ 891.139030][ T4321] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 891.245041][ T27] audit: type=1326 audit(2000002842.737:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.247160][T23852] loop1: detected capacity change from 0 to 4096 [ 891.349420][ T27] audit: type=1326 audit(2000002842.775:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.374231][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 891.388052][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 891.445600][ T4321] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 891.465849][ T27] audit: type=1326 audit(2000002842.775:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.485825][ T4321] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 891.527032][ T4321] usb 3-1: Product: syz [ 891.546281][ T4321] usb 3-1: Manufacturer: syz [ 891.551108][ T4321] usb 3-1: SerialNumber: syz [ 891.577206][ T27] audit: type=1326 audit(2000002842.775:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.607387][T23866] sctp: [Deprecated]: syz.3.8864 (pid 23866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.607387][T23866] Use struct sctp_sack_info instead [ 891.697304][ T27] audit: type=1326 audit(2000002842.775:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.754439][ T27] audit: type=1326 audit(2000002842.775:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.803778][ T4321] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 891.811751][ T4321] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 891.863289][ T4321] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 891.881984][T23864] loop4: detected capacity change from 0 to 8192 [ 891.899179][ T27] audit: type=1326 audit(2000002842.775:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23857 comm="syz.4.8859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb2919e159 code=0x7ffc0000 [ 891.948962][T23864] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 892.035059][ T4321] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 892.045984][T23864] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 892.063762][ T4321] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 892.085499][T23864] REISERFS (device loop4): using ordered data mode [ 892.096234][T23864] reiserfs: using flush barriers [ 892.101882][ T4321] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 892.122537][T23864] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 892.160170][T23864] REISERFS (device loop4): checking transaction log (loop4) [ 892.161444][ T4321] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 892.196901][T23864] REISERFS (device loop4): Using rupasov hash to sort names [ 892.207482][T23864] REISERFS (device loop4): using 3.5.x disk format [ 892.229611][T23864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 892.234410][ T4321] usb 3-1: USB disconnect, device number 104 [ 892.283695][ T4321] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 892.285994][T23864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 892.336775][ T4321] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 892.346627][ T4321] visor 3-1:1.0: device disconnected [ 892.356952][T23864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 892.411901][T23864] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 892.453593][T23864] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 892.518798][T23864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 892.532839][T23864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 893.136146][T23914] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 893.155381][T23916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8887'. [ 893.192729][T23914] comedi comedi1: 8255: I/O port conflict (0xc,4) [ 893.205452][T23914] comedi comedi1: 8255: I/O port conflict (0x90000,4) [ 893.234374][T23914] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 893.246872][T23914] comedi comedi1: 8255: I/O port conflict (0x40000,4) [ 893.264057][T23914] comedi comedi1: 8255: I/O port conflict (0x280ffa,4) [ 893.314177][T23914] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 893.362545][T23914] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 893.389817][T23914] comedi comedi1: 8255: I/O port conflict (0x1000008,4) [ 893.419159][T23914] comedi comedi1: 8255: I/O port conflict (0x10,4) [ 893.425778][T23914] comedi comedi1: 8255: I/O port conflict (0x40000009,4) [ 893.467621][T23914] comedi comedi1: 8255: I/O port conflict (0xfffffffffff7ffa6,4) [ 893.523106][T23914] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 893.596864][ T27] audit: type=1326 audit(2000002844.935:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23929 comm="syz.3.8893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 893.693948][ T27] audit: type=1326 audit(2000002844.973:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23929 comm="syz.3.8893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 893.763513][ T27] audit: type=1326 audit(2000002844.973:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23929 comm="syz.3.8893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b299e159 code=0x7ffc0000 [ 894.549302][ T6018] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 894.746267][T23979] loop3: detected capacity change from 0 to 1024 [ 894.757089][ T6018] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 894.780882][ T6018] usb 5-1: config 179 has no interface number 0 [ 894.809246][ T6018] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 894.852085][ T6018] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 894.880673][ T6018] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 894.901979][ T6018] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 894.915650][T23985] MTDSB: Device #1 doesn't appear to exist [ 894.915650][T23985] [ 894.919085][ T6018] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 894.937482][ T6018] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 894.946655][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.000100][T23956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 895.009602][T23956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 895.158583][ T6020] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 895.309752][ T6018] usb 5-1: USB disconnect, device number 110 [ 895.315917][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 895.315967][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 895.367862][ T6020] usb 3-1: unable to get BOS descriptor or descriptor too short [ 895.389506][ T6020] usb 3-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 895.425923][ T6020] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 895.434875][ T6020] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 895.481565][ T6020] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 895.509806][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 895.535068][ T6020] usb 3-1: Product: syz [ 895.539299][ T6020] usb 3-1: Manufacturer: syz [ 895.793674][ T6020] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 895.818875][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 895.850544][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 895.880263][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 895.913874][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 895.955220][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 895.979309][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 895.991777][T24017] netlink: 'syz.1.8937': attribute type 3 has an invalid length. [ 896.005102][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 896.040563][ T6020] usb 3-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 896.103710][ T6020] usb 3-1: No streaming interface found for terminal 2. [ 896.193226][ T6020] usb 3-1: USB disconnect, device number 105 [ 896.229940][T24027] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 896.580504][T24043] netlink: 'syz.4.8951': attribute type 9 has an invalid length. [ 896.602469][T24043] netlink: 'syz.4.8951': attribute type 7 has an invalid length. [ 896.610252][T24043] netlink: 'syz.4.8951': attribute type 8 has an invalid length. [ 897.188553][T24071] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 897.357114][T24081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 897.364493][T24081] IPv6: NLM_F_CREATE should be set when creating new route [ 897.371770][T24081] IPv6: NLM_F_CREATE should be set when creating new route [ 897.467743][ T6020] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 897.615615][T24091] IPv6: sit1: Disabled Multicast RS [ 897.683914][ T6020] usb 1-1: unable to get BOS descriptor or descriptor too short [ 897.712292][ T6020] usb 1-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 897.744709][ T6020] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.777720][ T6020] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.827067][ T6020] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 897.863237][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 897.871317][ T6020] usb 1-1: Product: syz [ 897.882001][ T6020] usb 1-1: Manufacturer: syz [ 898.109497][T24107] netlink: 'syz.2.8982': attribute type 1 has an invalid length. [ 898.109821][T24085] loop3: detected capacity change from 0 to 32768 [ 898.127457][ T6020] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 898.141620][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 898.173336][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 898.184107][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 898.211424][T24085] (syz.3.8971,24085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 898.221650][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 898.273301][T24085] (syz.3.8971,24085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 898.280397][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 898.333755][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 898.338229][T24085] JBD2: Ignoring recovery information on journal [ 898.410545][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 898.426285][T24085] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 898.496280][ T6020] usb 1-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 898.542957][ T6020] usb 1-1: No streaming interface found for terminal 2. [ 898.573505][T24118] [ 898.575891][T24118] ====================================================== [ 898.582917][T24118] WARNING: possible circular locking dependency detected [ 898.590042][T24118] syzkaller #0 Not tainted [ 898.592754][ T6020] usb 1-1: USB disconnect, device number 7 [ 898.594457][T24118] ------------------------------------------------------ [ 898.594465][T24118] syz.1.8987/24118 is trying to acquire lock: [ 898.594474][T24118] ffff888020370428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 898.622435][T24118] [ 898.622435][T24118] but task is already holding lock: [ 898.629795][T24118] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 898.638829][T24118] [ 898.638829][T24118] which lock already depends on the new lock. [ 898.638829][T24118] [ 898.649324][T24118] [ 898.649324][T24118] the existing dependency chain (in reverse order) is: [ 898.658337][T24118] [ 898.658337][T24118] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 898.665717][T24118] __mutex_lock+0x12d/0xae0 [ 898.670742][T24118] rfcomm_security_cfm+0x95/0x780 [ 898.676344][T24118] hci_encrypt_cfm+0x363/0x4d0 [ 898.681670][T24118] hci_encrypt_change_evt+0x961/0xd30 [ 898.687551][T24118] hci_event_packet+0x806/0x1290 [ 898.692997][T24118] hci_rx_work+0x3eb/0xd40 [ 898.697978][T24118] process_one_work+0x8ab/0x1160 [ 898.703481][T24118] worker_thread+0xaf5/0x12a0 [ 898.708673][T24118] kthread+0x29d/0x330 [ 898.713307][T24118] ret_from_fork+0x1f/0x30 [ 898.718267][T24118] [ 898.718267][T24118] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 898.725990][T24118] __mutex_lock+0x12d/0xae0 [ 898.731023][T24118] hci_remote_features_evt+0x464/0xa10 [ 898.737013][T24118] hci_event_packet+0x806/0x1290 [ 898.742471][T24118] hci_rx_work+0x3eb/0xd40 [ 898.747404][T24118] process_one_work+0x8ab/0x1160 [ 898.753318][T24118] worker_thread+0xaf5/0x12a0 [ 898.758529][T24118] kthread+0x29d/0x330 [ 898.763134][T24118] ret_from_fork+0x1f/0x30 [ 898.768074][T24118] [ 898.768074][T24118] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 898.775441][T24118] __lock_acquire+0x2d18/0x7c40 [ 898.780838][T24118] lock_acquire+0x1bb/0x4a0 [ 898.785867][T24118] __mutex_lock+0x12d/0xae0 [ 898.790894][T24118] l2cap_chan_connect+0xfb/0xe20 [ 898.796365][T24118] l2cap_sock_connect+0x576/0x750 [ 898.801931][T24118] kernel_connect+0x13e/0x1c0 [ 898.807220][T24118] rfcomm_dlc_open+0x600/0x10c0 [ 898.812585][T24118] rfcomm_sock_connect+0x2e9/0x600 [ 898.818209][T24118] __sys_connect+0x3cb/0x450 [ 898.823311][T24118] __x64_sys_connect+0x76/0x80 [ 898.828579][T24118] do_syscall_64+0x4c/0xa0 [ 898.833508][T24118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.839929][T24118] [ 898.839929][T24118] other info that might help us debug this: [ 898.839929][T24118] [ 898.850597][T24118] Chain exists of: [ 898.850597][T24118] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 898.850597][T24118] [ 898.863109][T24118] Possible unsafe locking scenario: [ 898.863109][T24118] [ 898.870546][T24118] CPU0 CPU1 [ 898.875896][T24118] ---- ---- [ 898.881243][T24118] lock(rfcomm_mutex); [ 898.885386][T24118] lock(hci_cb_list_lock); [ 898.892394][T24118] lock(rfcomm_mutex); [ 898.899053][T24118] lock(&hdev->lock); [ 898.903118][T24118] [ 898.903118][T24118] *** DEADLOCK *** [ 898.903118][T24118] [ 898.911247][T24118] 1 lock held by syz.1.8987/24118: [ 898.916342][T24118] #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 898.925728][T24118] [ 898.925728][T24118] stack backtrace: [ 898.931606][T24118] CPU: 0 PID: 24118 Comm: syz.1.8987 Not tainted syzkaller #0 [ 898.939068][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.949115][T24118] Call Trace: [ 898.952384][T24118] [ 898.955305][T24118] dump_stack_lvl+0x188/0x24e [ 898.959974][T24118] ? load_image+0x410/0x410 [ 898.964469][T24118] ? show_regs_print_info+0x12/0x12 [ 898.969656][T24118] ? print_circular_bug+0x12b/0x1a0 [ 898.974848][T24118] check_noncircular+0x296/0x330 [ 898.979785][T24118] ? add_chain_block+0x9b0/0x9b0 [ 898.984713][T24118] ? lockdep_lock+0xf1/0x1f0 [ 898.989295][T24118] ? _find_first_zero_bit+0xd2/0x100 [ 898.994673][T24118] __lock_acquire+0x2d18/0x7c40 [ 898.999526][T24118] ? verify_lock_unused+0x140/0x140 [ 899.004717][T24118] ? verify_lock_unused+0x140/0x140 [ 899.010006][T24118] lock_acquire+0x1bb/0x4a0 [ 899.014518][T24118] ? l2cap_chan_connect+0xfb/0xe20 [ 899.019618][T24118] ? __might_sleep+0xd0/0xd0 [ 899.024248][T24118] ? read_lock_is_recursive+0x10/0x10 [ 899.029633][T24118] ? __lock_acquire+0x7c40/0x7c40 [ 899.034673][T24118] ? __lock_acquire+0x28d6/0x7c40 [ 899.039693][T24118] __mutex_lock+0x12d/0xae0 [ 899.044194][T24118] ? l2cap_chan_connect+0xfb/0xe20 [ 899.049301][T24118] ? do_raw_read_unlock+0x39/0x70 [ 899.054312][T24118] ? _raw_read_unlock+0x24/0x40 [ 899.059164][T24118] ? hci_get_route+0x3a1/0x4d0 [ 899.063921][T24118] ? l2cap_chan_connect+0xfb/0xe20 [ 899.069045][T24118] ? mutex_lock_nested+0x10/0x10 [ 899.073991][T24118] ? print_unlock_imbalance_bug+0x160/0x160 [ 899.079888][T24118] ? mark_lock+0x94/0x320 [ 899.084221][T24118] l2cap_chan_connect+0xfb/0xe20 [ 899.089159][T24118] ? lock_chain_count+0x20/0x20 [ 899.094022][T24118] ? l2cap_sock_connect+0x13e/0x750 [ 899.099240][T24118] ? l2cap_chan_le_send_credits+0x590/0x590 [ 899.105133][T24118] ? __local_bh_enable_ip+0x136/0x1c0 [ 899.110521][T24118] ? _local_bh_enable+0xa0/0xa0 [ 899.115366][T24118] l2cap_sock_connect+0x576/0x750 [ 899.120388][T24118] ? l2cap_sock_bind+0x870/0x870 [ 899.125314][T24118] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 899.131296][T24118] ? memset+0x1e/0x40 [ 899.135273][T24118] ? kernel_connect+0xee/0x1c0 [ 899.140027][T24118] kernel_connect+0x13e/0x1c0 [ 899.144696][T24118] ? kernel_accept+0x420/0x420 [ 899.149454][T24118] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 899.154493][T24118] rfcomm_dlc_open+0x600/0x10c0 [ 899.159446][T24118] ? lock_chain_count+0x20/0x20 [ 899.164386][T24118] ? rfcomm_sock_connect+0x2c2/0x600 [ 899.169709][T24118] ? rfcomm_dlc_free+0x40/0x40 [ 899.174474][T24118] ? __local_bh_enable_ip+0x136/0x1c0 [ 899.179848][T24118] ? lockdep_hardirqs_on+0x94/0x140 [ 899.185126][T24118] ? __local_bh_enable_ip+0x136/0x1c0 [ 899.190485][T24118] ? _local_bh_enable+0xa0/0xa0 [ 899.195325][T24118] ? do_raw_spin_unlock+0x11d/0x230 [ 899.200512][T24118] rfcomm_sock_connect+0x2e9/0x600 [ 899.205614][T24118] ? rfcomm_sock_bind+0x550/0x550 [ 899.210632][T24118] __sys_connect+0x3cb/0x450 [ 899.215219][T24118] ? __sys_connect_file+0x170/0x170 [ 899.220406][T24118] __x64_sys_connect+0x76/0x80 [ 899.225157][T24118] do_syscall_64+0x4c/0xa0 [ 899.229648][T24118] ? clear_bhb_loop+0x60/0xb0 [ 899.234317][T24118] ? clear_bhb_loop+0x60/0xb0 [ 899.238979][T24118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.244863][T24118] RIP: 0033:0x7f7a8a59e159 [ 899.249266][T24118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.268863][T24118] RSP: 002b:00007f7a8b38e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 899.277267][T24118] RAX: ffffffffffffffda RBX: 00007f7a8a825fa0 RCX: 00007f7a8a59e159 [ 899.285230][T24118] RDX: 000000000000000a RSI: 0000200000005dc0 RDI: 0000000000000004 [ 899.293274][T24118] RBP: 00007f7a8a63506b R08: 0000000000000000 R09: 0000000000000000 [ 899.301231][T24118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.309192][T24118] R13: 00007f7a8a826038 R14: 00007f7a8a825fa0 R15: 00007ffec2309888 [ 899.317156][T24118] [ 899.407698][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 899.682296][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 899.688742][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.647688][T22581] Bluetooth: hci4: command 0x0405 tx timeout