last executing test programs: 2.124065586s ago: executing program 3 (id=20472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 1.899025072s ago: executing program 4 (id=20475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.879441653s ago: executing program 3 (id=20476): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 1.780972126s ago: executing program 4 (id=20477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000000101040000000000000000020000002400018014000180080001"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 1.543173813s ago: executing program 3 (id=20480): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x8000000}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008041) 1.542742543s ago: executing program 2 (id=20481): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_robust_list(&(0x7f00000003c0)={0x0, 0x4}, 0x18) 1.533151833s ago: executing program 1 (id=20482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="241000003f0007010000000000000000047c0000040012800c1001"], 0x1024}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.473009315s ago: executing program 0 (id=20483): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) 1.345157409s ago: executing program 4 (id=20484): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x12, 0x1, 0xa0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xf}, 0x50) 1.247693362s ago: executing program 2 (id=20485): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4d) 1.218466873s ago: executing program 1 (id=20486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572004c0000000c0a01010000000000000000070000000900020073797a3100000000090001007379010001000000200003"], 0xe0}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 1.176579894s ago: executing program 0 (id=20487): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}, 0x40c0) 1.174518224s ago: executing program 3 (id=20488): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) 1.024950369s ago: executing program 4 (id=20489): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.011044329s ago: executing program 0 (id=20490): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) 975.61216ms ago: executing program 3 (id=20491): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@dir_resv_level}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) 934.540421ms ago: executing program 2 (id=20492): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 871.718273ms ago: executing program 4 (id=20493): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000080)="01e9ff000980ffff", 0x8) 860.528983ms ago: executing program 1 (id=20494): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xf, 0x2c436529, 0x0}) 772.588916ms ago: executing program 0 (id=20495): r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000200)) 709.182318ms ago: executing program 2 (id=20496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010724bdf000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000000039500002400128009000100626f6e640000000014000280050001000600000008000b0028"], 0x44}, 0x1, 0x0, 0x0, 0x49083}, 0x4040800) 631.431191ms ago: executing program 4 (id=20497): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 589.141522ms ago: executing program 1 (id=20498): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x1, @win={{0x7fff, 0x3, 0x2, 0x5}, 0x2, 0x2, 0x0, 0x7ff, 0x0, 0x5}}) 553.967033ms ago: executing program 0 (id=20499): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x0, @loopback}}) 347.476769ms ago: executing program 1 (id=20500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000000701030000000000000000070000070800054000000002040007800c00034000000000000000090900010073797a31000000000c0006"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 271.880251ms ago: executing program 2 (id=20501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 103.611267ms ago: executing program 1 (id=20502): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) 99.951597ms ago: executing program 2 (id=20503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 64.833528ms ago: executing program 0 (id=20504): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x3, 0x0, 0x0) 0s ago: executing program 3 (id=20505): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40085112, &(0x7f0000000f40)=0x8) kernel console output (not intermixed with test programs): 12 bytes leftover after parsing attributes in process `syz.3.18267'. [ 1770.725190][T25328] netlink: 'syz.3.18267': attribute type 1 has an invalid length. [ 1770.743052][T25328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18267'. [ 1770.833692][ T9882] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1771.071407][ T9882] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1771.090110][ T9882] usb 3-1: config 0 has no interface number 0 [ 1771.096314][ T9882] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1771.146520][ T9882] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1771.169030][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18273'. [ 1771.188463][ T9882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.196575][ T9882] usb 3-1: Product: syz [ 1771.229310][ T9882] usb 3-1: Manufacturer: syz [ 1771.253773][ T9882] usb 3-1: SerialNumber: syz [ 1771.274190][ T9882] usb 3-1: config 0 descriptor?? [ 1771.317306][ T9882] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1771.493651][T25371] program syz.3.18277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1771.565500][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1771.727026][T25382] delete_channel: no stack [ 1771.795996][ T9882] usb 3-1: USB disconnect, device number 25 [ 1771.831457][ T9882] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1771.890236][T25398] netlink: 'syz.4.18285': attribute type 1 has an invalid length. [ 1771.910121][T25398] netlink: 'syz.4.18285': attribute type 2 has an invalid length. [ 1772.009471][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18287'. [ 1773.688287][T25480] loop1: detected capacity change from 0 to 1024 [ 1773.705855][T25480] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1773.738863][T25480] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1773.783111][T25480] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.18311: unexpected bad inode w/o EXT4_IGET_BAD [ 1773.849965][T25480] EXT4-fs (loop1): no journal found [ 1773.855303][T25480] EXT4-fs (loop1): can't get journal size [ 1773.911390][T25480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1773.965891][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1774.117115][T25508] netlink: 'syz.3.18320': attribute type 10 has an invalid length. [ 1774.146983][T25501] loop4: detected capacity change from 0 to 736 [ 1774.177035][T25508] device veth1_macvtap left promiscuous mode [ 1774.357337][T25515] loop0: detected capacity change from 0 to 256 [ 1774.507531][T25515] FAT-fs (loop0): Directory bread(block 64) failed [ 1774.552759][T25515] FAT-fs (loop0): Directory bread(block 65) failed [ 1774.559492][T25515] FAT-fs (loop0): Directory bread(block 66) failed [ 1774.623881][T25515] FAT-fs (loop0): Directory bread(block 67) failed [ 1774.673150][T25515] FAT-fs (loop0): Directory bread(block 68) failed [ 1774.712202][T25515] FAT-fs (loop0): Directory bread(block 69) failed [ 1774.738872][T25515] FAT-fs (loop0): Directory bread(block 70) failed [ 1774.748059][T25515] FAT-fs (loop0): Directory bread(block 71) failed [ 1774.786251][T25515] FAT-fs (loop0): Directory bread(block 72) failed [ 1774.807740][T25515] FAT-fs (loop0): Directory bread(block 73) failed [ 1775.077868][T25500] loop2: detected capacity change from 0 to 32768 [ 1775.086634][ T5213] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1775.203975][T25500] JBD2: Ignoring recovery information on journal [ 1775.302382][ T5213] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1775.321611][ T5213] usb 4-1: config 0 has no interface number 0 [ 1775.328249][ T5213] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 1775.348395][T25500] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1775.390207][ T5213] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1775.426180][T25500] (syz.2.18316,25500,0):ocfs2_reflink_ioctl:4426 ERROR: status = -14 [ 1775.439857][ T5213] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1775.461251][ T5213] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1775.485184][ T5213] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 1775.517619][ T5213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.574568][ T5213] usb 4-1: config 0 descriptor?? [ 1775.584079][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 1775.600337][T25534] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1775.613514][ T5213] option 4-1:0.84: GSM modem (1-port) converter detected [ 1775.747545][ T26] audit: type=1326 audit(1677.187:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25577 comm="syz.1.18336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1775.775875][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18335'. [ 1775.807388][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18335'. [ 1775.838145][ T26] audit: type=1326 audit(1677.187:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25577 comm="syz.1.18336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1775.916374][ T9882] usb 4-1: USB disconnect, device number 17 [ 1775.933169][ T9882] option 4-1:0.84: device disconnected [ 1775.943505][ T26] audit: type=1326 audit(1677.187:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25577 comm="syz.1.18336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1776.059072][ T26] audit: type=1326 audit(1677.187:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25577 comm="syz.1.18336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1776.170403][ T26] audit: type=1326 audit(1677.187:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25577 comm="syz.1.18336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1776.273099][T25607] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1776.608651][T25627] loop4: detected capacity change from 0 to 512 [ 1776.644210][T25627] EXT4-fs: inline encryption not supported [ 1776.705798][T25627] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1776.800639][T25627] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1776.900891][T25627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.18349: bg 0: block 248: padding at end of block bitmap is not set [ 1776.926695][T25635] lo speed is unknown, defaulting to 1000 [ 1776.946476][T25627] Quota error (device loop4): write_blk: dquota write failed [ 1776.954105][T25627] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1776.998463][T25654] netlink: 'syz.3.18354': attribute type 8 has an invalid length. [ 1777.009792][T25654] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1777.014747][T25627] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.18349: Failed to acquire dquot type 1 [ 1777.056861][T25654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1777.074071][T25627] EXT4-fs (loop4): 1 truncate cleaned up [ 1777.079959][T25627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1777.162769][T25627] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.18349: Abort forced by user [ 1777.203331][T25627] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 1777.287982][ T5213] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1777.344985][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 1777.501541][ T5213] usb 1-1: Using ep0 maxpacket: 16 [ 1777.509251][ T5213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1777.547108][ T5213] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1777.565854][ T5213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.583907][ T5213] usb 1-1: Product: syz [ 1777.593204][ T5213] usb 1-1: Manufacturer: syz [ 1777.603994][ T5213] usb 1-1: SerialNumber: syz [ 1777.648312][ T5213] usb 1-1: config 0 descriptor?? [ 1777.684005][ T5213] hub 1-1:0.0: bad descriptor, ignoring hub [ 1777.689992][ T5213] hub: probe of 1-1:0.0 failed with error -5 [ 1777.708874][ T5213] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input104 [ 1777.792183][T25692] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 1777.864093][T25692] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1778.035355][T25703] QAT: failed to copy from user cfg_data. [ 1778.047144][ T5213] usb 1-1: USB disconnect, device number 40 [ 1778.287816][T25736] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18370'. [ 1778.431240][ T9882] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1778.639997][ T9882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1778.688973][ T9882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.730463][ T9882] usb 5-1: Product: syz [ 1778.734736][ T9882] usb 5-1: Manufacturer: syz [ 1778.739379][ T9882] usb 5-1: SerialNumber: syz [ 1778.801170][ T9882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1778.867442][ T9882] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1779.116798][ C1] usb 5-1: ath9k_htc: invalid pkt_len (ffef) [ 1779.368559][ T7] usb 5-1: USB disconnect, device number 31 [ 1779.512722][T25790] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1780.011417][ T9882] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1780.030843][ T9882] ath9k_htc: Failed to initialize the device [ 1780.069750][ T7] usb 5-1: ath9k_htc: USB layer deinitialized [ 1780.304320][T25777] loop0: detected capacity change from 0 to 32768 [ 1780.409334][T25777] [ 1780.409334][T25777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1780.409334][T25777] [ 1780.645982][ T4278] [ 1780.645982][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1780.645982][ T4278] [ 1780.694151][ T4278] [ 1780.694151][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1780.694151][ T4278] [ 1780.896651][T25852] loop0: detected capacity change from 0 to 64 [ 1780.948548][T25862] netlink: 'syz.2.18404': attribute type 30 has an invalid length. [ 1780.954814][T25852] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1781.199025][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1781.480836][T25880] loop2: detected capacity change from 0 to 4096 [ 1781.519245][T25880] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1781.618293][T25880] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1781.778939][T25924] lo speed is unknown, defaulting to 1000 [ 1781.811285][ T5879] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1781.832085][ T4279] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1781.855680][ T4279] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1781.872312][ T4279] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1781.878927][ T46] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1781.915568][ T4279] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1783.140826][T25991] loop0: detected capacity change from 0 to 512 [ 1783.173038][T25993] loop2: detected capacity change from 0 to 256 [ 1783.212642][T25991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1783.244362][T25993] FAT-fs (loop2): Directory bread(block 64) failed [ 1783.300342][T25993] FAT-fs (loop2): Directory bread(block 65) failed [ 1783.315045][T25991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1783.355600][T25993] FAT-fs (loop2): Directory bread(block 66) failed [ 1783.373426][T25993] FAT-fs (loop2): Directory bread(block 67) failed [ 1783.380464][T25993] FAT-fs (loop2): Directory bread(block 68) failed [ 1783.387245][T25993] FAT-fs (loop2): Directory bread(block 69) failed [ 1783.394452][T25993] FAT-fs (loop2): Directory bread(block 70) failed [ 1783.401366][T25993] FAT-fs (loop2): Directory bread(block 71) failed [ 1783.408012][T25993] FAT-fs (loop2): Directory bread(block 72) failed [ 1783.415027][T25993] FAT-fs (loop2): Directory bread(block 73) failed [ 1783.573106][T25964] loop3: detected capacity change from 0 to 32768 [ 1783.637659][ T4261] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1783.702244][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 1783.928288][T26037] SET target dimension over the limit! [ 1783.969424][T26035] loop0: detected capacity change from 0 to 1024 [ 1784.031255][T26035] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1784.168540][T26035] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1784.208068][T26035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1784.375389][T26054] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18444'. [ 1784.456586][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 1784.622107][T26061] netlink: 9 bytes leftover after parsing attributes in process `syz.4.18447'. [ 1784.971149][ T9880] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1785.188860][ T9880] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1785.217517][ T9880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.239091][ T9880] usb 1-1: Product: syz [ 1785.243347][ T9880] usb 1-1: Manufacturer: syz [ 1785.271548][ T9880] usb 1-1: SerialNumber: syz [ 1785.320030][ T9880] usb 1-1: config 0 descriptor?? [ 1785.338510][ T9880] hub 1-1:0.0: bad descriptor, ignoring hub [ 1785.344839][ T9880] hub: probe of 1-1:0.0 failed with error -5 [ 1785.377962][ T9880] f81232 1-1:0.0: f81534a converter detected [ 1785.506368][T20502] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1785.560276][ T9880] usb 1-1: f81534a converter now attached to ttyUSB0 [ 1785.751599][T20502] usb 4-1: Using ep0 maxpacket: 32 [ 1785.778949][T20502] usb 4-1: string descriptor 0 read error: -22 [ 1785.793946][T20502] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1785.823951][T20502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.872814][T20502] usb 4-1: MIDIStreaming interface descriptor not found [ 1785.959173][ T9880] usb 1-1: USB disconnect, device number 41 [ 1786.018557][ T9880] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1786.059921][ T9880] f81232 1-1:0.0: device disconnected [ 1786.193792][ T9882] usb 4-1: USB disconnect, device number 18 [ 1786.275268][T18714] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 1786.764538][T26208] loop0: detected capacity change from 0 to 64 [ 1787.383804][T26243] loop1: detected capacity change from 0 to 256 [ 1787.685574][ T9882] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1787.888481][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 1787.895807][ T9882] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1787.931231][ T9882] usb 3-1: config 0 has no interface number 0 [ 1787.937432][ T9882] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 39163, setting to 1024 [ 1787.982084][ T9882] usb 3-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1788.007413][T26279] loop0: detected capacity change from 0 to 64 [ 1788.034912][ T9882] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1788.076985][ T9882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1788.123417][ T9882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.131521][ T9882] usb 3-1: Product: syz [ 1788.150870][ T9882] usb 3-1: Manufacturer: syz [ 1788.171751][ T9882] usb 3-1: SerialNumber: syz [ 1788.196652][ T9882] usb 3-1: config 0 descriptor?? [ 1788.197495][T26246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1788.231266][ T9882] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1788.231308][ T9882] em28xx 3-1:0.89: Video interface 89 found: bulk [ 1788.333747][T26297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18503'. [ 1788.438253][T26305] device xfrm0 entered promiscuous mode [ 1788.487192][ T9882] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1788.568402][ T9882] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1788.605199][ T9882] em28xx 3-1:0.89: board has no eeprom [ 1788.690056][ T9882] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1788.697406][ T9882] em28xx 3-1:0.89: analog set to bulk mode. [ 1788.748287][ T9882] usb 3-1: USB disconnect, device number 26 [ 1788.764680][ T9880] em28xx 3-1:0.89: Registering V4L2 extension [ 1788.797414][ T9882] em28xx 3-1:0.89: Disconnecting em28xx [ 1789.042214][ T9880] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1789.050466][ T9880] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1789.065102][ T9880] em28xx 3-1:0.89: No AC97 audio processor [ 1789.102236][ T9880] usb 3-1: Decoder not found [ 1789.132188][ T9880] em28xx 3-1:0.89: failed to create media graph [ 1789.168325][ T9880] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1789.206324][ T9880] em28xx 3-1:0.89: Registering snapshot button... [ 1789.240553][ T9880] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input105 [ 1789.301770][ T9880] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1789.339431][ T9882] em28xx 3-1:0.89: Closing input extension [ 1789.345529][ T9882] em28xx 3-1:0.89: Deregistering snapshot button [ 1789.551968][ T9882] em28xx 3-1:0.89: Freeing device [ 1789.737297][T26382] netlink: 1392 bytes leftover after parsing attributes in process `syz.2.18525'. [ 1789.843101][T26374] loop1: detected capacity change from 0 to 4096 [ 1789.892021][T26374] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1790.000213][T26374] ntfs: volume version 3.1. [ 1790.151459][T26390] loop3: detected capacity change from 0 to 4096 [ 1790.218956][T26390] /dev/loop3: Can't open blockdev [ 1791.602008][T26489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18557'. [ 1791.682186][T26489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18557'. [ 1791.691348][T26489] netlink: 'syz.3.18557': attribute type 6 has an invalid length. [ 1791.748727][T26499] autofs4:pid:26499:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1792.037103][T26515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18566'. [ 1792.560688][T26553] cgroup: none used incorrectly [ 1793.047449][ T26] audit: type=1326 audit(1693.377:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.133864][ T26] audit: type=1326 audit(1693.423:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.159467][T26584] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1793.236754][ T26] audit: type=1326 audit(1693.423:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.356502][ T26] audit: type=1326 audit(1693.423:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.390163][T26597] netlink: 'syz.2.18590': attribute type 1 has an invalid length. [ 1793.444620][ T26] audit: type=1326 audit(1693.423:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.470175][T26597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18590'. [ 1793.501751][ T26] audit: type=1326 audit(1693.423:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.570740][ T26] audit: type=1326 audit(1693.433:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1793.622792][ T26] audit: type=1326 audit(1693.433:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26577 comm="syz.2.18585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1794.207641][T26639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18604'. [ 1794.256048][T20502] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1794.420650][T26653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18609'. [ 1794.434956][T26639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18604'. [ 1794.474675][T20502] usb 2-1: Using ep0 maxpacket: 8 [ 1794.484671][T20502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.517884][T20502] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1794.547800][T20502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.572597][T20502] usb 2-1: Product: syz [ 1794.594367][T20502] usb 2-1: Manufacturer: syz [ 1794.607586][T20502] usb 2-1: SerialNumber: syz [ 1794.632126][T20502] usb 2-1: config 0 descriptor?? [ 1794.659838][T20502] cdc_phonet 2-1:0.0: skipping garbage [ 1794.682679][T20502] cdc_phonet: probe of 2-1:0.0 failed with error -22 [ 1794.865350][T26639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18604'. [ 1794.881929][T20502] usb 2-1: USB disconnect, device number 127 [ 1794.952198][T26686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1794.996896][T26688] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18616'. [ 1795.338722][T26707] loop0: detected capacity change from 0 to 736 [ 1795.811520][T26734] delete_channel: no stack [ 1795.878488][T26741] __nla_validate_parse: 2 callbacks suppressed [ 1795.878509][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18632'. [ 1796.330644][ T9882] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1796.533334][ T9882] usb 3-1: Using ep0 maxpacket: 16 [ 1796.543276][ T9882] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1796.584815][ T9882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.617228][ T9882] usb 3-1: Product: syz [ 1796.623652][T26780] loop0: detected capacity change from 0 to 2048 [ 1796.640166][ T9882] usb 3-1: Manufacturer: syz [ 1796.650655][ T9882] usb 3-1: SerialNumber: syz [ 1796.695771][ T9882] usb 3-1: config 0 descriptor?? [ 1796.713804][T26780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1796.780158][T26780] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #12: block 2: comm syz.0.18644: lblock 0 mapped to illegal pblock 2 (length 1) [ 1796.827332][T26799] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1796.947929][ T9882] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1796.984609][ T9882] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1796.992114][ T9882] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1796.992114][ T9882] Please send a copy of this message to and [ 1797.103681][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 1797.126851][ T9882] usb 3-1: USB disconnect, device number 27 [ 1797.604993][T26746] Process accounting resumed [ 1798.005741][T26876] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1798.327230][T26892] loop0: detected capacity change from 0 to 512 [ 1798.351002][T26892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1798.464539][T26892] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1798.512489][T26892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803c01d, mo2=0102] [ 1798.522724][T26892] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1798.532537][T26892] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1798.541585][T26892] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1798.566693][T26892] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.18673: dx entry: limit 65535 != root limit 120 [ 1798.579290][T26892] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.18673: Corrupt directory, running e2fsck is recommended [ 1798.717035][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 1799.679363][T26966] loop3: detected capacity change from 0 to 2048 [ 1799.758899][T26975] netlink: 'syz.0.18698': attribute type 2 has an invalid length. [ 1799.840886][T26975] netlink: 'syz.0.18698': attribute type 8 has an invalid length. [ 1799.866283][T26975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18698'. [ 1800.340399][T27009] loop4: detected capacity change from 0 to 8 [ 1800.476291][T27019] netlink: 'syz.3.18712': attribute type 2 has an invalid length. [ 1800.508738][T27019] netlink: 'syz.3.18712': attribute type 1 has an invalid length. [ 1800.628987][T27021] loop0: detected capacity change from 0 to 2048 [ 1800.702386][T27021] loop0: p1 < > p4 < > [ 1800.730858][ T3638] loop0: p1 < > p4 < > [ 1800.937125][ T4261] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1801.362892][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1801.388215][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1801.583165][T27075] loop0: detected capacity change from 0 to 4096 [ 1801.628402][T27075] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1801.972622][ T9880] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1802.126694][T27115] netlink: 160 bytes leftover after parsing attributes in process `syz.2.18736'. [ 1802.165000][ T5213] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1802.181754][ T9880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.212465][T27120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18737'. [ 1802.214073][ T9880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1802.276876][ T9880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1802.299442][ T9880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1802.335946][ T9880] usb 2-1: SerialNumber: syz [ 1802.372392][ T5213] usb 4-1: Using ep0 maxpacket: 16 [ 1802.381566][ T9880] usb 2-1: 0:2 : does not exist [ 1802.386734][ T5213] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1802.430102][ T5213] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1802.473467][ T5213] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1802.506835][ T5213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1802.524112][ T5213] usb 4-1: SerialNumber: syz [ 1802.602318][ T5213] usb 4-1: 0:2 : does not exist [ 1802.686394][T27148] loop0: detected capacity change from 0 to 16 [ 1802.768835][T27148] erofs: (device loop0): mounted with root inode @ nid 36. [ 1802.775966][T27152] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1802.839624][T27148] syz.0.18744: attempt to access beyond end of device [ 1802.839624][T27148] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 1802.886095][ T9880] usb 2-1: USB disconnect, device number 2 [ 1802.908728][T27148] Process accounting resumed [ 1802.997904][ T5213] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1803.024168][ T5213] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1803.045501][ T5213] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1803.066961][ T5213] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1803.107282][ T5213] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1803.141101][ T5213] usb 4-1: USB disconnect, device number 19 [ 1803.503024][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1804.291184][ T26] audit: type=1326 audit(1703.895:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.3.18770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1804.341486][ T26] audit: type=1326 audit(1703.895:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.3.18770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1804.440729][ T26] audit: type=1326 audit(1703.932:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.3.18770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1804.494248][T27267] loop1: detected capacity change from 0 to 164 [ 1804.539363][ T26] audit: type=1326 audit(1703.932:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.3.18770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1804.607165][T27267] Symlink component flag not implemented [ 1804.639705][T27267] Symlink component flag not implemented (7) [ 1804.671998][ T26] audit: type=1326 audit(1703.932:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.3.18770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1804.775156][T27277] x_tables: duplicate entry at hook 2 [ 1805.734986][T27272] loop3: detected capacity change from 0 to 32768 [ 1805.777454][ T4261] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1806.079413][T27344] overlayfs: workdir and upperdir must be separate subtrees [ 1806.479297][T27369] loop3: detected capacity change from 0 to 256 [ 1806.617540][T27379] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 1806.659300][T27361] 9pnet: Could not find request transport: virTio [ 1806.885249][ T26] audit: type=1326 audit(1706.319:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.18810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1807.012596][ T26] audit: type=1326 audit(1706.319:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.18810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1807.135105][ T26] audit: type=1326 audit(1706.366:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.18810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1807.236008][T27407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1807.291840][ T26] audit: type=1326 audit(1706.366:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.18810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1807.344182][ T26] audit: type=1326 audit(1706.366:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.18810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1808.105605][T27463] loop3: detected capacity change from 0 to 16 [ 1808.153611][T27463] erofs: (device loop3): mounted with root inode @ nid 36. [ 1808.177792][T27463] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1808.192036][ T9880] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1808.239855][T27463] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1808.400068][ T9880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.438479][ T9880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1808.492272][ T9880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1808.518090][ T9880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1808.543853][ T9880] usb 3-1: SerialNumber: syz [ 1808.569331][ T9880] usb 3-1: 0:2 : does not exist [ 1808.585726][ T9880] usb 3-1: unit 64 not found! [ 1808.606900][T27488] netlink: 600 bytes leftover after parsing attributes in process `syz.1.18839'. [ 1808.816341][ T9880] usb 3-1: USB disconnect, device number 28 [ 1809.410332][ T5213] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1809.638715][ T5213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.659869][ T5213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1809.669398][T27566] IPv6: Can't replace route, no match found [ 1809.698602][ T5213] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1809.731531][ T5213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.741720][T27562] loop4: detected capacity change from 0 to 4096 [ 1809.780554][ T5213] usb 2-1: config 0 descriptor?? [ 1809.789596][T27562] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1809.836653][T27562] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1809.915663][T27562] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1809.951154][T27562] ntfs: volume version 3.1. [ 1809.979238][T27579] xt_nat: multiple ranges no longer supported [ 1810.230453][ T4287] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1810.256514][ T5213] Bluetooth: Can't get version to change to load ram patch err [ 1810.270826][T27587] netlink: 'syz.0.18866': attribute type 1 has an invalid length. [ 1810.281417][ T5213] Bluetooth: Loading patch file failed [ 1810.306182][ T5213] ath3k: probe of 2-1:0.0 failed with error -71 [ 1810.308257][T27587] netlink: 'syz.0.18866': attribute type 2 has an invalid length. [ 1810.331405][ T5213] usb 2-1: USB disconnect, device number 3 [ 1811.090313][T27636] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 1811.355713][T27658] netlink: 'syz.3.18884': attribute type 1 has an invalid length. [ 1811.363734][T27658] netlink: 192 bytes leftover after parsing attributes in process `syz.3.18884'. [ 1811.429871][ T5213] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1811.611589][T20502] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1811.624179][T27670] loop2: detected capacity change from 0 to 764 [ 1811.654370][ T5213] usb 5-1: Using ep0 maxpacket: 8 [ 1811.673553][ T5213] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1811.689838][ T5213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.708678][T27670] rock: directory entry would overflow storage [ 1811.723338][T27670] rock: sig=0x4654, size=5, remaining=4 [ 1811.734313][ T5213] usb 5-1: Product: syz [ 1811.738557][ T5213] usb 5-1: Manufacturer: syz [ 1811.759510][ T5213] usb 5-1: SerialNumber: syz [ 1811.778408][ T5213] usb 5-1: config 0 descriptor?? [ 1811.785613][T27676] loop1: detected capacity change from 0 to 2048 [ 1811.802189][ T5213] gspca_main: se401-2.14.0 probing 047d:5003 [ 1811.808796][T20502] usb 1-1: Using ep0 maxpacket: 32 [ 1811.822262][T20502] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1811.862796][T27683] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1811.863324][T20502] usb 1-1: config 0 has no interface number 0 [ 1811.903735][T20502] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1811.918668][T27676] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446744072317042688, rec_len=65535, name_len=255 [ 1811.919239][T20502] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1811.987807][T20502] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1812.039179][T27676] Remounting filesystem read-only [ 1812.061297][T20502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.073647][T20502] usb 1-1: Product: syz [ 1812.077924][T20502] usb 1-1: Manufacturer: syz [ 1812.083652][T20502] usb 1-1: SerialNumber: syz [ 1812.115830][T20502] usb 1-1: config 0 descriptor?? [ 1812.174100][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18893'. [ 1812.233702][ T5213] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1812.252034][ T5213] se401: probe of 5-1:0.0 failed with error -71 [ 1812.288157][ T5213] usb 5-1: USB disconnect, device number 32 [ 1812.508797][T27716] netlink: 'syz.1.18898': attribute type 28 has an invalid length. [ 1812.578659][T20502] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1812.594131][T20502] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 1812.653175][T20502] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1812.704120][T20502] usb 1-1: USB disconnect, device number 42 [ 1813.602184][T27786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18918'. [ 1813.893342][T27794] loop1: detected capacity change from 0 to 4096 [ 1813.934385][T27794] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1814.021961][T27794] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1814.299791][T27821] x_tables: duplicate underflow at hook 2 [ 1814.344224][T27823] netlink: 'syz.1.18930': attribute type 3 has an invalid length. [ 1814.522933][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18932'. [ 1814.656892][T20502] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1814.862499][T20502] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.881249][T20502] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1814.921234][T20502] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1814.947953][T20502] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1814.979613][T20502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.998823][T20502] usb 1-1: Product: syz [ 1815.006005][T20502] usb 1-1: Manufacturer: syz [ 1815.035620][T20502] usb 1-1: SerialNumber: syz [ 1815.104369][T27864] device netdevsim0 left promiscuous mode [ 1815.116944][T27864] bridge0: port 3(netdevsim0) entered disabled state [ 1815.140219][T27864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1815.283807][T20502] usb 1-1: USB disconnect, device number 43 [ 1816.007303][T27921] xt_socket: unknown flags 0x4c [ 1816.037358][T27925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18960'. [ 1816.381891][T27939] tmpfs: Bad value for 'nr_blocks' [ 1816.442737][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18967'. [ 1816.469623][T27948] netlink: 4260 bytes leftover after parsing attributes in process `syz.4.18967'. [ 1816.789719][T27969] tmpfs: Bad value for 'mpol' [ 1817.298942][T27981] loop1: detected capacity change from 0 to 4096 [ 1817.361187][T27996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18983'. [ 1817.403376][T27996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18983'. [ 1817.430991][T27981] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1817.446058][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1817.455739][T27981] ntfs3: loop1: Failed to load $Extend. [ 1817.470585][T28001] netlink: 'syz.3.18985': attribute type 1 has an invalid length. [ 1817.515036][T28004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18984'. [ 1817.542233][T27981] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 1817.550764][T28004] netlink: 19 bytes leftover after parsing attributes in process `syz.0.18984'. [ 1817.670546][ T4274] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 1817.692122][ T4274] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 1818.505819][T28057] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1818.668065][T28054] loop4: detected capacity change from 0 to 4096 [ 1818.676397][T28054] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1819.287717][T28103] netlink: 'syz.1.19015': attribute type 1 has an invalid length. [ 1819.478966][T28112] loop3: detected capacity change from 0 to 64 [ 1819.533017][ T4261] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1819.965763][T28136] loop1: detected capacity change from 0 to 2048 [ 1820.029751][T28140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1820.051914][T28136] NILFS (loop1): failed to count free inodes: err=-34 [ 1820.432702][ T9882] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1820.643079][ T9882] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1820.651446][ T9882] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.705174][ T9882] usb 5-1: config 220 has no interface number 2 [ 1820.711566][ T9882] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 1820.733664][ T9882] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1820.791797][ T9882] usb 5-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1820.822117][ T9882] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1820.856664][ T9882] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1820.876243][ T9882] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1820.910210][ T9882] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1820.943293][ T9882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.974435][ T9882] usb 5-1: Product: syz [ 1820.978687][ T9882] usb 5-1: Manufacturer: syz [ 1821.010558][ T9882] usb 5-1: SerialNumber: syz [ 1821.259296][ T9882] usb 5-1: selecting invalid altsetting 0 [ 1821.289727][ T9882] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1821.328258][ T9882] usb 5-1: No valid video chain found. [ 1821.349052][T28221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19049'. [ 1821.400484][ T9882] usb 5-1: selecting invalid altsetting 0 [ 1821.419282][ T9882] usbtest: probe of 5-1:220.1 failed with error -22 [ 1821.441118][ T9882] usb 5-1: USB disconnect, device number 33 [ 1821.748230][T28246] loop0: detected capacity change from 0 to 512 [ 1821.785137][T28246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1821.844216][T28246] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1821.865149][T28246] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1821.889478][T28246] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1821.919117][T28246] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1821.941841][T28246] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1821.950861][T28246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.19055: bg 0: block 34: padding at end of block bitmap is not set [ 1821.966757][T28246] Quota error (device loop0): write_blk: dquota write failed [ 1821.974260][T28246] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1821.990119][T28246] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.19055: Failed to acquire dquot type 1 [ 1822.031985][T28246] EXT4-fs (loop0): 1 truncate cleaned up [ 1822.107870][T28246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1822.138640][T28246] EXT4-fs (loop0): unmounting filesystem. [ 1822.178767][T28263] loop4: detected capacity change from 0 to 164 [ 1822.221789][T28263] ISOFS: unable to read i-node block [ 1822.227863][ T9887] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1822.264510][T28263] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1822.438409][ T9887] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1822.479082][ T9887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.509804][ T9887] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1822.516085][T28242] loop2: detected capacity change from 0 to 32768 [ 1822.529445][T18714] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1822.549429][T28242] (syz.2.19053,28242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1822.625247][T28242] (syz.2.19053,28242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1822.739422][T28242] JBD2: Ignoring recovery information on journal [ 1822.886953][T28242] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1822.938288][ T9887] gspca_sn9c20x: Write register 1001 failed -71 [ 1822.961747][ T9887] gspca_sn9c20x: Device initialization failed [ 1822.967968][ T9887] gspca_sn9c20x: probe of 2-1:252.0 failed with error -71 [ 1823.000720][T28242] (syz.2.19053,28242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC. [ 1823.021651][ T9887] usb 2-1: USB disconnect, device number 4 [ 1823.040205][T28242] (syz.2.19053,28242,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9 [ 1823.068375][T28242] (syz.2.19053,28242,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1823.109628][T28242] (syz.2.19053,28242,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1823.117573][T28242] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 2 [ 1823.142204][T28242] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 60929 [ 1823.152066][T28242] (syz.2.19053,28242,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1823.279142][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 1823.426725][T28320] loop3: detected capacity change from 0 to 256 [ 1823.605455][T28327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19074'. [ 1823.641351][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19074'. [ 1823.930501][T28348] netlink: 'syz.2.19078': attribute type 4 has an invalid length. [ 1824.407732][T28359] nvme_fabrics: missing parameter 'transport=%s' [ 1824.423114][T28359] nvme_fabrics: missing parameter 'nqn=%s' [ 1825.385808][T28432] netlink: 124 bytes leftover after parsing attributes in process `syz.3.19106'. [ 1825.967273][ T9880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1826.044313][T28469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19117'. [ 1826.197963][ T9880] usb 4-1: Using ep0 maxpacket: 16 [ 1826.208675][ T9880] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1826.249420][ T9880] usb 4-1: config 0 has no interface number 0 [ 1826.288827][ T9880] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1826.324521][ T9880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.365772][ T9880] usb 4-1: Product: syz [ 1826.367446][T28480] loop0: detected capacity change from 0 to 2048 [ 1826.379200][ T9880] usb 4-1: Manufacturer: syz [ 1826.384807][ T9880] usb 4-1: SerialNumber: syz [ 1826.424423][ T9880] usb 4-1: config 0 descriptor?? [ 1826.456201][ T9880] hub 4-1:0.132: bad descriptor, ignoring hub [ 1826.462398][ T9880] hub: probe of 4-1:0.132 failed with error -5 [ 1826.517110][ T9880] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input106 [ 1826.721554][ T5213] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1826.745909][T28510] netlink: 'syz.4.19125': attribute type 27 has an invalid length. [ 1826.775477][T28511] loop2: detected capacity change from 0 to 512 [ 1826.807538][T28507] loop1: detected capacity change from 0 to 4096 [ 1826.816772][T28507] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1826.849889][T18714] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1826.859410][T18714] Bluetooth: hci2: Injecting HCI hardware error event [ 1826.868803][T18714] Bluetooth: hci2: hardware error 0x00 [ 1826.893871][T28511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1826.951462][ T5213] usb 1-1: Using ep0 maxpacket: 16 [ 1826.973925][ T5213] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1827.033798][T28511] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.19127: invalid size [ 1827.044748][ T5213] usb 1-1: config 0 has no interface number 0 [ 1827.051098][ T5213] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xC has invalid maxpacket 37835, setting to 1024 [ 1827.098813][T28523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19128'. [ 1827.108351][ T5213] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1827.115376][ T5213] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1827.140510][ T9882] usb 4-1: USB disconnect, device number 20 [ 1827.177865][ T5213] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1827.213693][ T5213] usb 1-1: Product: syz [ 1827.218008][ T5213] usb 1-1: SerialNumber: syz [ 1827.238403][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1827.247928][ T5213] usb 1-1: config 0 descriptor?? [ 1827.253683][T28480] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1827.432884][T28537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19130'. [ 1827.515477][ T5213] usb 1-1: invalid MIDI in EP 0 [ 1827.638430][ T5213] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 1827.646517][T28562] cgroup: No subsys list or none specified [ 1827.669379][ T5213] usb 1-1: USB disconnect, device number 44 [ 1827.940477][ T4459] udevd[4459]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.068360][ T9880] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1828.249821][T28598] loop1: detected capacity change from 0 to 2048 [ 1828.281845][ T9880] usb 5-1: Using ep0 maxpacket: 32 [ 1828.287657][T28598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1828.299519][ T9880] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1828.339562][ T9880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.384365][ T9880] usb 5-1: config 0 descriptor?? [ 1828.437199][ T9880] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1828.879772][ T9880] gspca_sq930x: ucbus_write failed -71 [ 1828.888055][ T9880] sq930x: probe of 5-1:0.0 failed with error -71 [ 1828.925108][ T9880] usb 5-1: USB disconnect, device number 34 [ 1829.072864][T18714] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1829.098154][T28651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19156'. [ 1829.467366][T28672] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19162'. [ 1829.477741][ T9887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1829.681611][ T9887] usb 2-1: Using ep0 maxpacket: 16 [ 1829.688810][ T9887] usb 2-1: config 0 has no interfaces? [ 1829.715910][ T9887] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1829.758551][ T9887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.788600][ T9887] usb 2-1: Product: syz [ 1829.800337][ T9887] usb 2-1: Manufacturer: syz [ 1829.820702][ T9887] usb 2-1: SerialNumber: syz [ 1829.837987][ T9887] r8152-cfgselector 2-1: config 0 descriptor?? [ 1829.848216][T28688] Process accounting paused [ 1829.871844][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19168'. [ 1830.075847][ T9887] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1830.312471][ T9887] usb 2-1: USB disconnect, device number 5 [ 1830.556602][T28721] loop2: detected capacity change from 0 to 4096 [ 1830.595557][T28721] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1830.755034][T28691] loop3: detected capacity change from 0 to 32768 [ 1830.842427][ T4263] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1832.214027][ T7] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1832.252053][T28825] loop2: detected capacity change from 0 to 8 [ 1832.312369][T28825] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1832.417135][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 1832.424469][ T7] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1832.482713][ T7] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1832.491467][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1832.503076][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1832.503121][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1832.598671][ T7] usb 4-1: config 1 has no interface number 0 [ 1832.604947][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1832.641938][ T7] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1832.673517][ T7] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1832.682670][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.739503][ T7] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1832.954595][ T7] snd_usb_pod 4-1:1.1: invalid control EP [ 1832.960654][ T7] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1833.001365][ T7] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1833.024221][ T7] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1833.039492][T28821] loop1: detected capacity change from 0 to 32768 [ 1833.101070][T28821] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1833.209243][T28821] JBD2: Ignoring recovery information on journal [ 1833.217420][ T9887] usb 4-1: USB disconnect, device number 21 [ 1833.315824][T28821] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1833.368592][T28879] sctp: [Deprecated]: syz.2.19219 (pid 28879) Use of int in maxseg socket option. [ 1833.368592][T28879] Use struct sctp_assoc_value instead [ 1833.410560][T28821] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 393248 [ 1833.432826][T28821] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1833.466904][T28821] OCFS2: File system is now read-only. [ 1833.485468][T28821] (syz.1.19205,28821,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1833.520367][T28821] (syz.1.19205,28821,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1833.555003][T28821] (syz.1.19205,28821,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1833.603553][T28821] (syz.1.19205,28821,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1833.634114][T28821] (syz.1.19205,28821,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 1833.677755][T28821] (syz.1.19205,28821,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 1833.710303][T28821] (syz.1.19205,28821,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1833.724782][T28821] (syz.1.19205,28821,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1833.737073][T28821] (syz.1.19205,28821,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1833.750897][T28821] (syz.1.19205,28821,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1833.782595][T28821] (syz.1.19205,28821,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1833.795289][T28885] loop2: detected capacity change from 0 to 4096 [ 1833.844301][T28821] (syz.1.19205,28821,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1833.914373][T28885] ntfs: volume version 3.1. [ 1833.921216][T28821] (syz.1.19205,28821,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 1833.984452][T28821] (syz.1.19205,28821,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 1834.018731][T28885] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1834.049972][T28821] (syz.1.19205,28821,1):ocfs2_mknod:357 ERROR: status = -30 [ 1834.094995][T28821] (syz.1.19205,28821,1):ocfs2_mknod:502 ERROR: status = -30 [ 1834.127023][T28885] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1834.147413][T28821] (syz.1.19205,28821,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1834.275087][T28885] overlayfs: failed to resolve './bus': -2 [ 1834.389319][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 1834.685459][T28920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1834.726902][T28920] device batadv_slave_0 entered promiscuous mode [ 1835.131594][ T9887] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1835.165679][T28928] Process accounting paused [ 1835.246397][T28951] loop4: detected capacity change from 0 to 8 [ 1835.283028][T28951] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1835.323922][T28951] SQUASHFS error: Failed to read block 0x91: -5 [ 1835.330282][T28951] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1835.346683][ T9887] usb 4-1: not running at top speed; connect to a high speed hub [ 1835.367928][ T9887] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 1835.376108][ T9887] usb 4-1: config 95 has no interface number 0 [ 1835.407857][T28951] SQUASHFS error: Unable to read inode 0x11f [ 1835.427936][ T9887] usb 4-1: config 95 interface 1 has no altsetting 0 [ 1835.460893][ T9887] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1835.490138][ T9887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.522611][ T9887] usb 4-1: Product: syz [ 1835.540375][ T9887] usb 4-1: Manufacturer: syz [ 1835.556104][ T9887] usb 4-1: SerialNumber: syz [ 1835.858140][ T9882] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1835.922600][ T9887] usb 4-1: USB disconnect, device number 22 [ 1835.961101][T28998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19250'. [ 1836.074616][ T9882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1836.104160][ T9882] usb 1-1: not running at top speed; connect to a high speed hub [ 1836.142936][ T9882] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1836.155572][ T26] audit: type=1326 audit(1733.719:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.206038][ T9882] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1836.228489][ T26] audit: type=1326 audit(1733.756:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.258254][ T9882] usb 1-1: string descriptor 0 read error: -22 [ 1836.272025][ T9882] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1836.296918][ T9882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.307772][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1836.308443][ T26] audit: type=1326 audit(1733.756:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.308486][ T26] audit: type=1326 audit(1733.756:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.308526][ T26] audit: type=1326 audit(1733.756:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.308574][ T26] audit: type=1326 audit(1733.756:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.308612][ T26] audit: type=1326 audit(1733.756:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.308653][ T26] audit: type=1326 audit(1733.756:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29010 comm="syz.4.19251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1836.594689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1836.761843][T29042] loop4: detected capacity change from 0 to 764 [ 1836.835116][T29042] Symlink component flag not implemented [ 1836.835126][T29042] Symlink component flag not implemented [ 1836.835183][T29042] Symlink component flag not implemented (128) [ 1836.835196][T29042] Symlink component flag not implemented (105) [ 1836.857264][ T9882] usb 1-1: USB disconnect, device number 45 [ 1837.124806][T29067] SET target dimension over the limit! [ 1837.649536][T29094] sctp: [Deprecated]: syz.4.19271 (pid 29094) Use of int in max_burst socket option. [ 1837.649536][T29094] Use struct sctp_assoc_value instead [ 1838.557066][T29148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19288'. [ 1838.830954][T29163] xt_hashlimit: max too large, truncated to 1048576 [ 1839.100798][T20502] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1839.322616][T20502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1839.344350][T20502] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1839.376469][T20502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1839.410500][T20502] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1839.431729][T20502] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1839.452450][T20502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.472692][T20502] usb 2-1: config 0 descriptor?? [ 1839.520671][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.527458][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.537423][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.555727][ T9882] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1839.571400][T29198] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1839.607069][T29198] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1839.671620][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.703438][T20502] hdpvr 2-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 1839.703438][T20502] †Ã›‘êpY [ 1839.714762][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.731556][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.739644][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.746913][T29198] wg1 speed is unknown, defaulting to 1000 [ 1839.771689][ T9882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1839.802378][ T9882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.833938][ T9882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1839.857909][ T9882] usb 3-1: string descriptor 0 read error: -22 [ 1839.875159][ T9882] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1839.895728][ T9882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.919677][ T9882] usb 3-1: selecting invalid altsetting 1 [ 1839.927608][ T9882] usb 3-1: unit 3 not found! [ 1839.932912][T20502] hdpvr 2-1:0.0: device init failed [ 1839.940268][T20502] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1839.960314][T20502] usb 2-1: USB disconnect, device number 6 [ 1840.126675][ T9882] usb 3-1: unit 0 not found! [ 1840.252124][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1840.344387][ T9882] usb 3-1: USB disconnect, device number 29 [ 1840.722334][T29271] loop0: detected capacity change from 0 to 1764 [ 1840.780024][T29271] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1841.034204][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19324'. [ 1841.586572][T29323] x_tables: duplicate entry at hook 1 [ 1841.824727][T29338] loop3: detected capacity change from 0 to 1024 [ 1842.002642][T20502] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1842.230005][T20502] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1842.250750][T20502] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1842.290643][T20502] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1842.320766][T20502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.352652][T20502] usb 1-1: Product: syz [ 1842.372998][T20502] usb 1-1: Manufacturer: syz [ 1842.377999][T20502] usb 1-1: SerialNumber: syz [ 1842.416818][T29328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1842.588951][T29381] loop2: detected capacity change from 0 to 16 [ 1842.617898][T29381] erofs: (device loop2): mounted with root inode @ nid 36. [ 1842.755720][T20502] usb 1-1: USB disconnect, device number 46 [ 1842.974554][T29426] infiniband syz2: set down [ 1843.120513][T29435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19359'. [ 1843.402401][ T9887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1843.590810][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.605395][ T9887] usb 2-1: Using ep0 maxpacket: 16 [ 1843.612432][ T9887] usb 2-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 1843.632289][ T9887] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 1843.654977][ T9887] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1843.680169][ T9887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.703924][ T9887] usb 2-1: Product: syz [ 1843.709455][ T9887] usb 2-1: Manufacturer: syz [ 1843.737993][ T9887] usb 2-1: SerialNumber: syz [ 1843.749496][ T9887] r8152-cfgselector 2-1: config 0 descriptor?? [ 1843.786946][T29426] infiniband syg0: set down [ 1843.990196][ T9887] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1844.012624][ T9887] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 1844.205002][T29479] tmpfs: Bad value for 'mpol' [ 1844.652695][ T7] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1844.889818][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.922627][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.970252][ T7] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1844.992507][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.001734][ T7] usb 1-1: Product: syz [ 1845.006054][ T7] usb 1-1: Manufacturer: syz [ 1845.010791][ T7] usb 1-1: SerialNumber: syz [ 1845.034223][ T7] usb 1-1: config 0 descriptor?? [ 1845.072834][ T7] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 1845.079468][ T7] usb 1-1: No valid video chain found. [ 1845.281625][ T7] usb 1-1: USB disconnect, device number 47 [ 1845.770511][T29549] loop4: detected capacity change from 0 to 1024 [ 1845.823196][T29549] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1845.844890][T29549] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1845.892946][T29549] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1845.900086][T29549] EXT4-fs (loop4): 1 truncate cleaned up [ 1845.907846][T29549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1846.027855][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 1846.158145][T29426] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.171882][T29426] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.186744][T29426] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.196975][T29426] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.214352][ T674] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1846.364859][T29574] netlink: 'syz.4.19395': attribute type 1 has an invalid length. [ 1846.434746][ T674] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1846.456455][ T674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.481834][ T674] usb 2-1: config 0 descriptor?? [ 1846.502664][ T674] cp210x 2-1:0.0: cp210x converter detected [ 1846.597163][T29426] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 45714 - 0 [ 1846.606801][T29426] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 45714 - 0 [ 1846.624532][T29426] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 45714 - 0 [ 1846.635764][T29426] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 45714 - 0 [ 1846.653493][T29426] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 47390 - 0 [ 1846.667592][T29426] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 47390 - 0 [ 1846.678050][T29426] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 47390 - 0 [ 1846.696957][T29426] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 47390 - 0 [ 1846.797179][T29584] loop4: detected capacity change from 0 to 512 [ 1846.943517][ T674] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1846.971573][ T674] usb 2-1: USB disconnect, device number 8 [ 1847.010649][ T674] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1847.043751][ T674] cp210x 2-1:0.0: device disconnected [ 1847.101132][T29430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19357'. [ 1847.111974][ T5213] lo speed is unknown, defaulting to 1000 [ 1847.112784][T29430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19357'. [ 1847.157603][ T9880] team0 speed is unknown, defaulting to 1000 [ 1847.179035][ T5213] lo speed is unknown, defaulting to 1000 [ 1847.196234][ T675] team0 speed is unknown, defaulting to 1000 [ 1847.223999][T29577] loop0: detected capacity change from 0 to 32768 [ 1847.327549][T29577] XFS (loop0): Mounting V5 Filesystem [ 1847.552411][T29577] XFS (loop0): Ending clean mount [ 1847.697540][T29630] xt_recent: Unsupported userspace flags (000000de) [ 1847.757147][ T4278] XFS (loop0): Unmounting Filesystem [ 1849.803638][T29743] nfs: Unknown parameter 'ntext' [ 1849.962820][T29750] binder: 29749:29750 ioctl c018620c 200000001600 returned -1 [ 1850.465015][T29780] loop2: detected capacity change from 0 to 512 [ 1850.618719][T29780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1850.841611][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1851.214927][T29830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1851.234244][T29831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19468'. [ 1851.469923][T29844] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19473'. [ 1852.602034][T29854] loop2: detected capacity change from 0 to 32768 [ 1852.658040][T29882] loop4: detected capacity change from 0 to 4096 [ 1852.716705][T29893] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1852.751721][T29854] XFS (loop2): Mounting V5 Filesystem [ 1852.778199][T29882] syz.4.19483: attempt to access beyond end of device [ 1852.778199][T29882] loop4: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 1852.834591][T29882] syz.4.19483: attempt to access beyond end of device [ 1852.834591][T29882] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 1852.850086][ T26] audit: type=1800 audit(1749.347:643): pid=29882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19483" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1852.961630][ T26] audit: type=1326 audit(1749.384:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.1.19485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1853.020920][T29854] XFS (loop2): Ending clean mount [ 1853.041156][ T26] audit: type=1326 audit(1749.384:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.1.19485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1853.133600][T29905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1853.158019][T29905] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1853.177735][T29905] overlayfs: missing 'lowerdir' [ 1853.188555][ T26] audit: type=1326 audit(1749.403:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.1.19485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1853.316157][ T4279] XFS (loop2): Unmounting Filesystem [ 1853.351252][ T26] audit: type=1326 audit(1749.403:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.1.19485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1853.552335][ T26] audit: type=1326 audit(1749.403:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.1.19485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1853.967378][T29945] loop3: detected capacity change from 0 to 512 [ 1854.039844][T29945] /dev/loop3: Can't open blockdev [ 1854.184680][ T9880] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1854.310520][T29967] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.19504' sets config #2 [ 1854.327328][ T26] audit: type=1400 audit(1750.722:649): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=29963 comm="syz.1.19502" [ 1854.371529][T29968] loop2: detected capacity change from 0 to 64 [ 1854.414394][ T9880] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1854.423446][T29968] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1854.442178][ T9880] usb 1-1: config 0 has no interface number 0 [ 1854.459336][ T9880] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1854.493570][ T9880] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1854.517810][ T9880] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1854.559591][ T9880] usb 1-1: Manufacturer: syz [ 1854.574587][ T9880] usb 1-1: SerialNumber: syz [ 1854.604811][ T9880] usb 1-1: config 0 descriptor?? [ 1855.078098][ T9880] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 1855.113113][ T9880] usb 1-1: USB disconnect, device number 48 [ 1855.829237][ T26] audit: type=1326 audit(1752.126:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30051 comm="syz.2.19527" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1855.905239][ T26] audit: type=1326 audit(1752.164:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30051 comm="syz.2.19527" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1856.033334][ T26] audit: type=1326 audit(1752.164:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30051 comm="syz.2.19527" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa19ce59 code=0x7ffc0000 [ 1856.158882][T30071] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1856.734052][T30110] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1856.786828][T30109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1857.248408][T30132] loop3: detected capacity change from 0 to 1764 [ 1857.450715][T30147] loop4: detected capacity change from 0 to 256 [ 1857.548221][T30147] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1857.565390][T30147] FAT-fs (loop4): Filesystem has been set read-only [ 1859.204986][T30255] loop2: detected capacity change from 0 to 256 [ 1859.772515][T30285] loop1: detected capacity change from 0 to 2048 [ 1859.803224][T30289] loop2: detected capacity change from 0 to 8 [ 1859.824260][T30285] loop1: p1 < > p3 [ 1859.857114][T30285] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1859.867583][T30289] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1859.929983][T30289] SQUASHFS error: Failed to read block 0x633: -5 [ 1859.975520][T30289] SQUASHFS error: Unable to read metadata cache entry [631] [ 1859.994200][T30289] SQUASHFS error: Unable to read directory block [631:26] [ 1860.041921][ T4274] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1860.049402][ T4263] I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1860.049681][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1860.108065][ T4263] I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.136874][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.147002][ T4263] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 1860.169578][ T4263] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.191906][ T4261] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1860.200170][ T4263] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 1860.234211][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.242112][ T4263] I/O error, dev loop1, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.259132][ T4261] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1860.298921][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.336272][ T4263] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 1860.350475][ T4261] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1860.372734][ T4263] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.404879][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.414117][ T4261] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1860.433850][ T4263] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 1860.462395][ T4263] Buffer I/O error on dev loop1p3, logical block 12, async page read [ 1860.491917][ T4261] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 1860.663846][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1860.669932][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1860.779733][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1860.814097][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1860.867306][T30351] loop1: detected capacity change from 0 to 256 [ 1861.299436][T30374] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1861.323560][T30373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19624'. [ 1861.996333][ T675] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1862.085343][T30414] Process accounting resumed [ 1862.128264][T30424] loop3: detected capacity change from 0 to 256 [ 1862.179321][T30427] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1862.194732][T30427] overlayfs: missing 'lowerdir' [ 1862.211834][ T675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.246331][T30424] FAT-fs (loop3): Directory bread(block 64) failed [ 1862.254692][ T675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1862.274017][T30424] FAT-fs (loop3): Directory bread(block 65) failed [ 1862.284965][T30424] FAT-fs (loop3): Directory bread(block 66) failed [ 1862.298300][ T675] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1862.302867][T30424] FAT-fs (loop3): Directory bread(block 67) failed [ 1862.330881][ T675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.354778][T30424] FAT-fs (loop3): Directory bread(block 68) failed [ 1862.364769][ T675] usb 5-1: config 0 descriptor?? [ 1862.378563][T30424] FAT-fs (loop3): Directory bread(block 69) failed [ 1862.400227][T30424] FAT-fs (loop3): Directory bread(block 70) failed [ 1862.444405][T30424] FAT-fs (loop3): Directory bread(block 71) failed [ 1862.462477][T30424] FAT-fs (loop3): Directory bread(block 72) failed [ 1862.483975][T30424] FAT-fs (loop3): Directory bread(block 73) failed [ 1862.594981][T30446] tipc: Can't bind to reserved service type 2 [ 1862.701495][ T5447] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1862.834398][ T675] Bluetooth: Can't get state to change to load configuration err [ 1862.853374][ T675] Bluetooth: Loading sysconfig file failed [ 1862.859293][ T675] ath3k: probe of 5-1:0.0 failed with error -16 [ 1862.892960][ T675] usb 5-1: USB disconnect, device number 35 [ 1862.915318][ T5447] usb 2-1: Using ep0 maxpacket: 16 [ 1862.932939][ T5447] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.966692][ T5447] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1862.987229][ T5447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.998019][ T5447] usb 2-1: Product: syz [ 1863.002410][ T5447] usb 2-1: Manufacturer: syz [ 1863.007059][ T5447] usb 2-1: SerialNumber: syz [ 1863.047538][ T5447] usb 2-1: config 0 descriptor?? [ 1863.078603][ T5447] asix: probe of 2-1:0.0 failed with error -22 [ 1863.253394][T30485] netlink: 'syz.2.19653': attribute type 13 has an invalid length. [ 1863.283658][ T5447] usb 2-1: USB disconnect, device number 9 [ 1864.751048][T30579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19682'. [ 1865.185564][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19690'. [ 1865.739038][T30635] loop0: detected capacity change from 0 to 512 [ 1865.859913][T30635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1865.964754][T30644] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19704'. [ 1866.248891][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 1866.495427][T30634] loop3: detected capacity change from 0 to 32768 [ 1866.648177][T30673] loop0: detected capacity change from 0 to 764 [ 1866.824827][T30673] Symlink component flag not implemented [ 1866.837044][T30673] Symlink component flag not implemented (116) [ 1867.228952][T30695] Process accounting resumed [ 1867.483054][T30712] loop4: detected capacity change from 0 to 256 [ 1867.570296][T30712] FAT-fs (loop4): Directory bread(block 64) failed [ 1867.621094][T30712] FAT-fs (loop4): Directory bread(block 65) failed [ 1867.640087][T30712] FAT-fs (loop4): Directory bread(block 66) failed [ 1867.647924][T30712] FAT-fs (loop4): Directory bread(block 67) failed [ 1867.663113][T30712] FAT-fs (loop4): Directory bread(block 68) failed [ 1867.669786][T30712] FAT-fs (loop4): Directory bread(block 69) failed [ 1867.683968][T30712] FAT-fs (loop4): Directory bread(block 70) failed [ 1867.691044][T30712] FAT-fs (loop4): Directory bread(block 71) failed [ 1867.719945][T30712] FAT-fs (loop4): Directory bread(block 72) failed [ 1867.727809][T30712] FAT-fs (loop4): Directory bread(block 73) failed [ 1868.407919][ T5447] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1868.639191][ T5447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.667403][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1868.667421][ T26] audit: type=1400 audit(1764.142:658): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=30773 comm="syz.3.19741" [ 1868.673768][ T5447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.757582][ T5447] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1868.781676][ T5447] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1868.834011][ T5447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.879034][ T5447] usb 2-1: config 0 descriptor?? [ 1868.900027][ T5447] hub 2-1:0.0: USB hub found [ 1869.034383][T30792] netlink: 'syz.4.19746': attribute type 1 has an invalid length. [ 1869.106869][ T5447] hub 2-1:0.0: 9 ports detected [ 1869.113621][ T5447] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1869.328255][ T5447] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1869.358806][ T5447] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1869.452914][ T5447] usb 2-1: USB disconnect, device number 10 [ 1870.078976][T30795] loop3: detected capacity change from 0 to 32768 [ 1870.123472][T30795] /dev/loop3: Can't open blockdev [ 1870.331429][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19764'. [ 1870.649988][T30872] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19769'. [ 1871.049259][T30889] loop0: detected capacity change from 0 to 64 [ 1871.157682][T30889] hfs: keylen 40 too large [ 1871.438811][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19781'. [ 1871.476565][T30915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19780'. [ 1871.688475][ T674] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1871.896383][ T674] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 1871.931222][ T674] usb 3-1: config 0 has no interface number 1 [ 1871.952006][ T674] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1871.979411][ T674] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1871.998781][ T674] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1872.024090][T30947] loop3: detected capacity change from 0 to 256 [ 1872.033383][ T674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1872.058977][ T674] usb 3-1: SerialNumber: syz [ 1872.070109][ T674] usb 3-1: config 0 descriptor?? [ 1872.104512][ T674] usb 3-1: Found UVC 0.00 device (0002:0000) [ 1872.130430][ T674] usb 3-1: No valid video chain found. [ 1872.354567][ T674] usb 3-1: USB disconnect, device number 30 [ 1872.753246][T30995] loop3: detected capacity change from 0 to 4096 [ 1872.853546][ T675] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1872.934683][T30996] loop4: detected capacity change from 0 to 4096 [ 1873.056219][ T675] usb 2-1: Using ep0 maxpacket: 8 [ 1873.065109][ T675] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 1873.126017][ T675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1873.183326][ T675] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1873.227039][ T675] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1873.235404][ T675] usb 2-1: Product: syz [ 1873.277236][ T675] usb 2-1: Manufacturer: syz [ 1873.284684][ T675] usb 2-1: SerialNumber: syz [ 1873.311783][ T675] usb 2-1: config 0 descriptor?? [ 1873.331350][ T675] smsusb:smsusb_probe: board id=2, interface number 0 [ 1873.361491][ T675] smsusb:smsusb_probe: Device initialized with return code -19 [ 1873.415095][T31015] loop3: detected capacity change from 0 to 4096 [ 1873.590654][ T674] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1873.666506][ T675] usb 2-1: USB disconnect, device number 11 [ 1873.795785][ T674] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.812091][ T674] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1873.843289][ T674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.878527][ T674] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1874.535973][T31079] loop3: detected capacity change from 0 to 4096 [ 1874.571421][T31079] /dev/loop3: Can't open blockdev [ 1874.886531][T31101] x_tables: unsorted underflow at hook 2 [ 1875.066237][ T674] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1875.204247][ T9880] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1875.283834][ T674] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1875.306490][ T674] stv0680 1-1:4.0: last error: 86, command = 0x3 [ 1875.354522][ T674] usb 1-1: USB disconnect, device number 49 [ 1875.423158][ T9880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1875.446148][ T9880] usb 5-1: not running at top speed; connect to a high speed hub [ 1875.473671][ T9880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.514240][ T9880] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1875.549969][ T9880] usb 5-1: string descriptor 0 read error: -22 [ 1875.564817][ T9880] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1875.591621][ T9880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.931420][ T9880] usb 5-1: USB disconnect, device number 36 [ 1876.159122][T31192] loop1: detected capacity change from 0 to 764 [ 1876.494874][T31208] loop2: detected capacity change from 0 to 128 [ 1876.541792][T31208] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1876.849273][T31233] netlink: 'syz.2.19860': attribute type 21 has an invalid length. [ 1877.284702][T31260] SET target dimension over the limit! [ 1877.351976][ T675] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1877.576425][ T675] usb 2-1: Using ep0 maxpacket: 16 [ 1877.594322][ T675] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1877.598865][ T5447] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1877.645302][ T675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.660365][ T675] usb 2-1: Product: syz [ 1877.664894][ T675] usb 2-1: Manufacturer: syz [ 1877.669565][ T675] usb 2-1: SerialNumber: syz [ 1877.712311][ T675] usb 2-1: config 0 descriptor?? [ 1877.823307][T31297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19879'. [ 1877.843203][ T5447] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1877.867347][ T5447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.903757][ T5447] usb 3-1: Product: syz [ 1877.908461][ T5447] usb 3-1: Manufacturer: syz [ 1877.925408][ T5447] usb 3-1: SerialNumber: syz [ 1877.946322][ T675] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1877.953775][ T5447] usb 3-1: config 0 descriptor?? [ 1877.965412][ T675] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1877.985140][ T5447] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 031 [ 1878.162516][ T675] usb 2-1: USB disconnect, device number 12 [ 1878.267657][T31321] netlink: 'syz.0.19884': attribute type 5 has an invalid length. [ 1878.343560][T31327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19886'. [ 1878.417113][ T5447] (null): failure reading functionality [ 1878.443538][ T5447] i2c i2c-2: failure reading functionality [ 1878.471553][ T5447] i2c i2c-2: connected i2c-tiny-usb device [ 1878.503152][ T5447] usb 3-1: USB disconnect, device number 31 [ 1879.253595][T31381] netlink: 'syz.2.19899': attribute type 2 has an invalid length. [ 1879.290776][T31381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19899'. [ 1879.423377][ T26] audit: type=1326 audit(1774.202:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.529390][ T26] audit: type=1326 audit(1774.230:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.585734][ T26] audit: type=1326 audit(1774.239:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.649520][ T26] audit: type=1326 audit(1774.239:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.732330][ T26] audit: type=1326 audit(1774.239:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.757141][ T26] audit: type=1326 audit(1774.239:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.788612][ T674] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1879.801427][T31408] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4287] was attempted by ""[31408] [ 1879.811919][ T26] audit: type=1326 audit(1774.239:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.852703][T31410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19908'. [ 1879.897279][ T26] audit: type=1326 audit(1774.239:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1879.987191][ T26] audit: type=1326 audit(1774.239:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.3.19901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efcec79ce59 code=0x7ffc0000 [ 1880.013042][ T674] usb 2-1: Using ep0 maxpacket: 16 [ 1880.020726][ T674] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1880.058403][T31418] loop4: detected capacity change from 0 to 1024 [ 1880.063945][ T674] usb 2-1: config 254 has no interface number 0 [ 1880.095732][ T674] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1880.126435][ T674] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1880.160440][ T674] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1880.199007][ T674] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1880.232791][ T674] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1880.254490][ T674] usb 2-1: Product: syz [ 1880.283965][ T674] usb 2-1: Manufacturer: syz [ 1880.312701][ T674] usb 2-1: SerialNumber: syz [ 1880.318900][ T46] hfsplus: b-tree write err: -5, ino 25 [ 1880.324958][ T46] hfsplus: b-tree write err: -5, ino 4 [ 1880.331127][ T46] hfsplus: b-tree write err: -5, ino 2 [ 1880.339435][T31392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1880.513995][ T26] audit: type=1326 audit(1775.222:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31439 comm="syz.0.19916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019ce59 code=0x7ffc0000 [ 1880.579330][T31392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1880.616885][ T674] usbtest 2-1:254.235: Linux gadget zero [ 1880.637921][ T674] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1880.859894][ T674] usb 2-1: USB disconnect, device number 13 [ 1880.882775][T31463] usb usb7: usbfs: process 31463 (syz.4.19921) did not claim interface 0 before use [ 1880.948502][ T9882] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1881.156143][ T9882] usb 3-1: Using ep0 maxpacket: 8 [ 1881.163315][ T9882] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1881.187646][ T9882] usb 3-1: config 0 has no interface number 0 [ 1881.200150][ T9882] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1881.211360][ T9882] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1881.230852][ T9882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.254250][T31487] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19927'. [ 1881.284362][ T9882] usb 3-1: Product: syz [ 1881.288791][ T9882] usb 3-1: Manufacturer: syz [ 1881.293443][ T9882] usb 3-1: SerialNumber: syz [ 1881.316044][ T9882] usb 3-1: config 0 descriptor?? [ 1881.545169][ T9882] i2c-cp2615: probe of 3-1:0.1 failed with error -22 [ 1881.772769][ T9882] usb 3-1: USB disconnect, device number 32 [ 1882.524222][ T9882] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1882.716431][ T9882] usb 5-1: Using ep0 maxpacket: 32 [ 1882.725462][ T9882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1882.755262][ T9882] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.786975][ T9882] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1882.804359][T31573] netlink: 'syz.2.19951': attribute type 2 has an invalid length. [ 1882.823185][ T9882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.831418][T31573] netlink: 119 bytes leftover after parsing attributes in process `syz.2.19951'. [ 1882.841271][ T9882] usb 5-1: Product: syz [ 1882.855180][ T9882] usb 5-1: Manufacturer: syz [ 1882.860278][ T9882] usb 5-1: SerialNumber: syz [ 1883.110562][ T9882] usb 5-1: Invalid number of CPorts: 0 [ 1883.116563][ T9882] es2_ap_driver: probe of 5-1:7.0 failed with error -22 [ 1883.350436][ T9882] usb 5-1: USB disconnect, device number 37 [ 1883.521020][T31614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19962'. [ 1883.559405][T31614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19962'. [ 1883.828660][T31631] loop2: detected capacity change from 0 to 22 [ 1883.836506][T31631] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1883.843940][T31628] loop1: detected capacity change from 0 to 1764 [ 1883.854355][T31631] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1883.942527][T31628] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1883.967753][T31628] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1884.066481][T31637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19969'. [ 1884.384585][T31662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1884.575717][ T9882] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1884.781038][ T9882] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1884.806849][ T9882] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.828298][ T9882] usb 2-1: config 220 has no interface number 2 [ 1884.842888][ T9882] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1884.878713][ T9882] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1884.910365][ T9882] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1884.917325][ T9882] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1884.992066][ T9882] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1885.014560][ T9882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.022659][ T9882] usb 2-1: Product: syz [ 1885.040864][ T9882] usb 2-1: Manufacturer: syz [ 1885.056562][ T9882] usb 2-1: SerialNumber: syz [ 1885.319108][ T9882] usb 2-1: selecting invalid altsetting 0 [ 1885.344397][ T9882] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1885.373946][ T9882] usb 2-1: No valid video chain found. [ 1885.434823][ T9882] usb 2-1: selecting invalid altsetting 0 [ 1885.441808][ T9882] usbtest: probe of 2-1:220.1 failed with error -22 [ 1885.462521][ T9882] usb 2-1: USB disconnect, device number 14 [ 1885.847450][ T5447] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1885.859614][T31750] netlink: 'syz.4.19999': attribute type 2 has an invalid length. [ 1886.061165][ T5447] usb 1-1: Using ep0 maxpacket: 8 [ 1886.085528][ T5447] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1886.107186][ T5447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.132669][ T5447] usb 1-1: Product: syz [ 1886.154410][ T5447] usb 1-1: Manufacturer: syz [ 1886.177887][ T5447] usb 1-1: SerialNumber: syz [ 1886.205746][ T5447] usb 1-1: config 0 descriptor?? [ 1886.225608][ T5447] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1886.406492][T31779] netlink: 6 bytes leftover after parsing attributes in process `syz.2.20008'. [ 1886.667124][ T5447] gspca_sq930x: ucbus_write failed -71 [ 1886.682341][ T5447] sq930x: probe of 1-1:0.0 failed with error -71 [ 1886.696828][ T5447] usb 1-1: USB disconnect, device number 50 [ 1886.787188][T31802] loop3: detected capacity change from 0 to 128 [ 1886.817713][T31805] loop1: detected capacity change from 0 to 8 [ 1886.839533][T31807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20016'. [ 1886.859221][T31802] /dev/loop3: Can't open blockdev [ 1887.686122][T31862] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1887.708789][T31864] loop2: detected capacity change from 0 to 128 [ 1887.726861][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1887.726880][ T26] audit: type=1326 audit(1781.969:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31865 comm="syz.4.20030" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1887.789345][T31864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1887.950238][ T26] audit: type=1326 audit(1781.997:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31865 comm="syz.4.20030" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1888.018570][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1888.068975][T31885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1888.076814][ T26] audit: type=1326 audit(1782.006:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31865 comm="syz.4.20030" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1888.197594][ T26] audit: type=1326 audit(1782.006:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31865 comm="syz.4.20030" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1888.222962][T31885] infiniband syz1: set active [ 1888.252848][T31885] infiniband syz1: set active [ 1888.284473][ T26] audit: type=1326 audit(1782.006:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31865 comm="syz.4.20030" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b379ce59 code=0x7ffc0000 [ 1888.356928][T31885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl3: link becomes ready [ 1888.389688][T31885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl3: link becomes ready [ 1888.996936][T31934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20050'. [ 1889.481428][T31961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20058'. [ 1889.490501][T31961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20058'. [ 1889.728591][T31966] loop2: detected capacity change from 0 to 4096 [ 1889.735458][T31976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20063'. [ 1889.790003][T31979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1889.819728][T31966] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1889.841479][T31966] ntfs3: loop2: Failed to load $Extend. [ 1889.901887][T31972] loop0: detected capacity change from 0 to 4096 [ 1890.015963][ T4279] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 1890.039445][ T4279] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 1890.235710][ T4278] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 1890.250021][ T4278] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1890.607479][T32008] netlink: 'syz.2.20073': attribute type 5 has an invalid length. [ 1890.651112][T32011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20074'. [ 1890.856344][T32023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20077'. [ 1890.934440][T32023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20077'. [ 1890.984668][T32027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20078'. [ 1891.038141][T32027] netlink: set zone limit has 8 unknown bytes [ 1891.252479][T32040] loop4: detected capacity change from 0 to 512 [ 1891.293637][T32032] loop1: detected capacity change from 0 to 4096 [ 1891.304773][T32032] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1891.379966][T32040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1891.527287][T32040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.20082: bg 0: bad block bitmap checksum [ 1891.847588][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 1892.003985][T32074] xt_cgroup: path and classid specified [ 1892.927670][T32118] loop2: detected capacity change from 0 to 4096 [ 1893.041565][T32118] ntfs3: loop2: ino=5, "/" directory corrupted [ 1893.281153][T32144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20113'. [ 1893.322166][T32145] netlink: 'syz.2.20112': attribute type 10 has an invalid length. [ 1893.425940][T32145] team0: Device wg1 is of different type [ 1893.763145][T32171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20120'. [ 1893.801406][T32164] loop1: detected capacity change from 0 to 4096 [ 1893.823078][T32164] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1894.189754][T32188] Process accounting paused [ 1894.565886][T32210] tmpfs: Bad value for 'mpol' [ 1895.319541][T32251] __nla_validate_parse: 20 callbacks suppressed [ 1895.319562][T32251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20147'. [ 1895.641138][T32271] dlm: no locking on control device [ 1895.805475][ T26] audit: type=1326 audit(1789.530:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32276 comm="syz.1.20156" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1895.879909][ T26] audit: type=1326 audit(1789.530:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32276 comm="syz.1.20156" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1895.990097][ T26] audit: type=1326 audit(1789.596:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32276 comm="syz.1.20156" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1896.106105][ T26] audit: type=1326 audit(1789.596:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32276 comm="syz.1.20156" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1896.211245][ T26] audit: type=1326 audit(1789.596:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32276 comm="syz.1.20156" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1cb39ce59 code=0x7ffc0000 [ 1897.074480][T32341] loop3: detected capacity change from 0 to 4096 [ 1897.121257][T32341] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1897.266994][T32341] ntfs3: loop3: failed to convert "c46c" to cp857 [ 1898.008118][T32408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20193'. [ 1898.066753][T32406] loop3: detected capacity change from 0 to 4096 [ 1898.085967][T32416] netlink: 'syz.1.20194': attribute type 1 has an invalid length. [ 1898.113227][T32414] loop4: detected capacity change from 0 to 2048 [ 1898.148985][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1898.155375][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1898.198491][T32414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1898.738861][ T5213] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1898.969884][ T5213] usb 2-1: Using ep0 maxpacket: 32 [ 1898.978996][ T5213] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1899.006287][ T5213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.027227][ T5213] usb 2-1: config 0 descriptor?? [ 1899.050736][ T5213] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1899.082226][T32472] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 1899.098009][ T674] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1899.133256][T32472] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 1899.324383][ T674] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.342570][ T674] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1899.365786][ T674] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1899.403894][ T674] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1899.424281][ T674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.444083][ T674] usb 4-1: Product: syz [ 1899.450863][ T674] usb 4-1: Manufacturer: syz [ 1899.470167][ T674] usb 4-1: SerialNumber: syz [ 1899.479420][ T5213] gspca_sunplus: reg_w_riv err -71 [ 1899.487997][ T5213] sunplus: probe of 2-1:0.0 failed with error -71 [ 1899.509891][ T674] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 1899.520746][ T5213] usb 2-1: USB disconnect, device number 15 [ 1899.536360][ T674] cdc_mbim 4-1:1.0: bind() failure [ 1899.560781][T32498] loop4: detected capacity change from 0 to 16 [ 1899.574800][T32498] erofs: (device loop4): mounted with root inode @ nid 36. [ 1899.628189][T32498] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 1899.763922][T32504] loop4: detected capacity change from 0 to 512 [ 1899.784726][T32478] loop0: detected capacity change from 0 to 32768 [ 1899.821826][T32478] read_mapping_page failed! [ 1899.839622][T32504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1899.941370][T32478] Process accounting paused [ 1899.973801][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 1900.190928][T32521] loop0: detected capacity change from 0 to 1024 [ 1900.354515][ T5447] usb 4-1: USB disconnect, device number 23 [ 1900.469364][T32531] loop2: detected capacity change from 0 to 2048 [ 1900.535661][T32531] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1900.887014][T32564] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1901.320198][T32592] loop3: detected capacity change from 0 to 512 [ 1901.368673][T32592] /dev/loop3: Can't open blockdev [ 1902.282526][ T5447] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1902.485536][ T5447] usb 4-1: Using ep0 maxpacket: 32 [ 1902.493227][ T5447] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1902.545086][ T5447] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1902.592004][ T5447] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1902.644232][ T5447] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1902.681337][ T5447] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1902.705793][ T5447] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1902.726461][ T5447] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1902.742785][ T5447] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1902.766110][ T5447] usb 4-1: Product: syz [ 1902.784015][ T5447] usb 4-1: Manufacturer: syz [ 1902.827153][ T5447] usb 4-1: SerialNumber: syz [ 1902.851487][ T5447] usb 4-1: config 0 descriptor?? [ 1902.878517][ T5447] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1902.928743][ T5447] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1903.097028][T32630] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1903.139847][ T5447] usb 4-1: USB disconnect, device number 24 [ 1903.158772][T32701] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1903.181565][ T5447] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1903.426943][T32725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20275'. [ 1903.598037][T32735] netlink: 'syz.4.20278': attribute type 3 has an invalid length. [ 1903.628992][T32738] SET target dimension over the limit! [ 1903.778770][T32746] openvswitch: netlink: IP tunnel dst address not specified [ 1903.877134][T32750] netlink: 'syz.2.20283': attribute type 10 has an invalid length. [ 1904.072524][T13438] smc: removing ib device syg0 [ 1904.120843][T32750] team0 (unregistering): Port device team_slave_0 removed [ 1904.339250][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20290'. [ 1904.415294][T32765] netlink: 'syz.3.20288': attribute type 10 has an invalid length. [ 1904.453996][T32765] device wg1 left promiscuous mode [ 1904.591108][T32765] team0: Device wg1 is of different type [ 1905.057177][ T358] loop0: detected capacity change from 0 to 4096 [ 1905.152315][ T369] loop1: detected capacity change from 0 to 512 [ 1905.175134][ T358] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1905.206628][ T358] ntfs3: loop0: Failed to load $Extend. [ 1907.048487][ T5447] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1907.254528][ T5447] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1907.270913][ T5447] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1907.288563][ T5447] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1907.328251][ T5447] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1907.367951][ T5447] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1907.388784][ T5447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.442710][ T5447] usb 4-1: Product: syz [ 1907.460273][ T5447] usb 4-1: Manufacturer: syz [ 1907.464969][ T5447] usb 4-1: SerialNumber: syz [ 1907.517807][ T5447] smsusb:smsusb_probe: board id=8, interface number 0 [ 1907.733955][ T5447] smsusb:smsusb_probe: Device initialized with return code -19 [ 1907.783250][ T468] loop1: detected capacity change from 0 to 32768 [ 1907.916258][ T468] XFS (loop1): Mounting V5 Filesystem [ 1907.991830][ T525] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1908.008838][ T468] XFS (loop1): Ending clean mount [ 1908.038967][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20339'. [ 1908.115159][ T5447] usb 4-1: USB disconnect, device number 25 [ 1908.227773][ T4274] XFS (loop1): Unmounting Filesystem [ 1908.352141][ T539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20346'. [ 1908.400110][ T539] device geneve1 entered promiscuous mode [ 1909.170007][ T582] loop1: detected capacity change from 0 to 64 [ 1909.265713][ T588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20360'. [ 1909.487789][ T603] MTD: Couldn't look up './bus': -15 [ 1909.553885][ T5447] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1909.652601][ T613] loop3: detected capacity change from 0 to 8 [ 1909.714819][ T613] /dev/loop3: Can't open blockdev [ 1909.776024][ T5447] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1909.800238][ T5447] usb 2-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1909.840856][ T5447] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1909.858116][ T5447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 63311, setting to 1024 [ 1909.904131][ T5447] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1909.931248][ T5447] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1909.951528][ T5447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.969244][ T5447] usb 2-1: Product: syz [ 1909.978414][ T5447] usb 2-1: Manufacturer: syz [ 1910.002556][ T5447] usb 2-1: SerialNumber: syz [ 1910.026053][ T5447] usb 2-1: config 0 descriptor?? [ 1910.037817][ T582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1910.047820][ T582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1910.059938][ C1] usb 2-1: NFC: Urb failure (status -71) [ 1910.091888][ C1] usb 2-1: NFC: Urb failure (status -71) [ 1910.115235][ T5447] usb 2-1: NFC: Unable to get FW version [ 1910.122346][ T5447] pn533_usb: probe of 2-1:0.0 failed with error -71 [ 1910.363292][ T5447] usb 2-1: USB disconnect, device number 16 [ 1910.398609][ T656] loop2: detected capacity change from 0 to 256 [ 1910.432528][ T656] FAT-fs (loop2): Directory bread(block 64) failed [ 1910.453039][ T656] FAT-fs (loop2): Directory bread(block 65) failed [ 1910.475121][ T656] FAT-fs (loop2): Directory bread(block 66) failed [ 1910.483260][ T656] FAT-fs (loop2): Directory bread(block 67) failed [ 1910.498305][ T656] FAT-fs (loop2): Directory bread(block 68) failed [ 1910.525435][ T656] FAT-fs (loop2): Directory bread(block 69) failed [ 1910.538339][ T656] FAT-fs (loop2): Directory bread(block 70) failed [ 1910.546429][ T656] FAT-fs (loop2): Directory bread(block 71) failed [ 1910.553185][ T656] FAT-fs (loop2): Directory bread(block 72) failed [ 1910.570259][ T656] FAT-fs (loop2): Directory bread(block 73) failed [ 1910.599929][ T656] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1910.882550][ T679] loop3: detected capacity change from 0 to 128 [ 1910.962304][ T4261] blk_print_req_error: 5 callbacks suppressed [ 1910.962324][ T4261] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1911.248161][ T701] netlink: 'syz.3.20388': attribute type 10 has an invalid length. [ 1911.602340][ T701] team0 (unregistering): Port device team_slave_0 removed [ 1911.668077][ T701] team0 (unregistering): Port device team_slave_1 removed [ 1911.851841][ T718] xt_CT: No such helper "snmp" [ 1912.856997][ T792] Timeout policy `syz1' can only be used by L3 protocol number 33011 [ 1913.615309][ T871] xt_NFQUEUE: number of total queues is 0 [ 1913.637586][ T857] loop3: detected capacity change from 0 to 4096 [ 1913.646906][ T857] /dev/loop3: Can't open blockdev [ 1913.844969][ T675] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1914.068539][ T675] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 1914.109530][ T675] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1914.146027][ T675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.200741][ T675] usb 3-1: config 0 descriptor?? [ 1914.222313][ T675] pwc: Samsung MPC-C10 USB webcam detected. [ 1914.243173][ T675] pwc: Warning: more than 1 configuration available. [ 1914.439417][ T675] pwc: send_video_command error -71 [ 1914.448411][ T675] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1914.469453][ T675] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1914.526668][ T675] usb 3-1: USB disconnect, device number 33 [ 1915.172153][ T964] loop4: detected capacity change from 0 to 2048 [ 1915.227945][ T964] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1915.341085][ T977] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1915.391353][ T964] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 147 [ 1915.437094][ T964] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1915.619087][ T964] Remounting filesystem read-only [ 1915.624212][ T964] NILFS (loop4): error -5 truncating bmap (ino=15) [ 1915.681445][ T994] x_tables: unsorted underflow at hook 4 [ 1915.735413][ T964] syz.4.20451: attempt to access beyond end of device [ 1915.735413][ T964] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1915.843139][ T964] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 1916.014583][ T4287] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1916.129264][ T1022] sctp: [Deprecated]: syz.0.20466 (pid 1022) Use of int in maxseg socket option. [ 1916.129264][ T1022] Use struct sctp_assoc_value instead [ 1916.799978][ T1057] loop0: detected capacity change from 0 to 2048 [ 1916.866096][ T1057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1916.915128][ T1069] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20477'. [ 1916.965358][ T1069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20477'. [ 1917.008703][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20477'. [ 1917.046705][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20477'. [ 1917.209236][ T1084] netlink: 'syz.1.20482': attribute type 1 has an invalid length. [ 1918.141007][ T1135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20497'. [ 1918.194655][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.318915][ T1112] loop3: detected capacity change from 0 to 32768 [ 1918.328362][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20500'. [ 1918.373885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1918.385659][ T1112] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1918.413707][ T1112] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 1918.582172][ T4283] INFO: trying to register non-static key. [ 1918.588162][ T4283] The code is fine but needs lockdep annotation, or maybe [ 1918.595316][ T4283] you didn't initialize this object before use? [ 1918.601803][ T4283] turning off the locking correctness validator. [ 1918.608263][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0 [ 1918.615855][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1918.626138][ T4283] Call Trace: [ 1918.629463][ T4283] [ 1918.632434][ T4283] dump_stack_lvl+0x188/0x24e [ 1918.637273][ T4283] ? show_regs_print_info+0x12/0x12 [ 1918.642543][ T4283] ? load_image+0x400/0x400 [ 1918.647721][ T4283] ? _find_next_bit+0x11e/0x130 [ 1918.653340][ T4283] ? __is_module_percpu_address+0x279/0x3b0 [ 1918.659538][ T4283] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1918.665326][ T4283] assign_lock_key+0x201/0x230 [ 1918.670552][ T4283] ? SOFTIRQ_verbose+0x10/0x10 [ 1918.675464][ T4283] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1918.682640][ T4283] register_lock_class+0x21d/0x870 [ 1918.687906][ T4283] ? mark_lock+0x94/0x320 [ 1918.692385][ T4283] ? is_dynamic_key+0x260/0x260 [ 1918.697393][ T4283] ? __lock_acquire+0x13cf/0x7d10 [ 1918.702479][ T4283] ? __lock_acquire+0x7d10/0x7d10 [ 1918.707743][ T4283] __lock_acquire+0x16f/0x7d10 [ 1918.712573][ T4283] ? is_bpf_text_address+0x28b/0x2a0 [ 1918.717915][ T4283] ? kernel_text_address+0x9c/0xd0 [ 1918.723188][ T4283] ? verify_lock_unused+0x140/0x140 [ 1918.728456][ T4283] ? stack_trace_save+0xf0/0xf0 [ 1918.733391][ T4283] ? arch_stack_walk+0xf2/0x140 [ 1918.738332][ T4283] ? verify_lock_unused+0x140/0x140 [ 1918.743596][ T4283] ? stack_trace_save+0xa6/0xf0 [ 1918.748597][ T4283] lock_acquire+0x1bb/0x4a0 [ 1918.753168][ T4283] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1918.759229][ T4283] ? memset+0x1e/0x40 [ 1918.763413][ T4283] ? read_lock_is_recursive+0x10/0x10 [ 1918.768928][ T4283] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1918.775487][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 1918.780740][ T4283] _raw_spin_lock_irqsave+0xb0/0x100 [ 1918.786077][ T4283] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1918.792064][ T4283] ? _raw_spin_lock+0x40/0x40 [ 1918.797180][ T4283] ? ktime_get+0x247/0x270 [ 1918.801661][ T4283] ocfs2_mark_lockres_freeing+0x159/0x600 [ 1918.807621][ T4283] ? kasan_quarantine_put+0xd4/0x220 [ 1918.812966][ T4283] ? ocfs2_dlm_shutdown+0x240/0x240 [ 1918.818225][ T4283] ? ocfs2_journal_shutdown+0x673/0xc20 [ 1918.823828][ T4283] ? ocfs2_journal_init+0xdb0/0xdb0 [ 1918.829430][ T4283] ? __kmem_cache_free+0xb6/0x1f0 [ 1918.834606][ T4283] ocfs2_dlm_shutdown+0x36/0x240 [ 1918.840142][ T4283] ocfs2_dismount_volume+0x47f/0x940 [ 1918.845668][ T4283] ? ocfs2_enable_quotas+0x490/0x490 [ 1918.851185][ T4283] ? clear_inode+0x150/0x150 [ 1918.855836][ T4283] ? ocfs2_free_inode+0x20/0x20 [ 1918.860823][ T4283] generic_shutdown_super+0x130/0x340 [ 1918.866346][ T4283] kill_block_super+0x7c/0xe0 [ 1918.871101][ T4283] deactivate_locked_super+0x93/0xf0 [ 1918.876707][ T4283] cleanup_mnt+0x42c/0x4b0 [ 1918.881285][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 1918.886545][ T4283] task_work_run+0x1d0/0x260 [ 1918.891209][ T4283] ? task_work_cancel+0x220/0x220 [ 1918.896298][ T4283] ? exit_to_user_mode_loop+0x3b/0x110 [ 1918.901995][ T4283] exit_to_user_mode_loop+0xe6/0x110 [ 1918.907350][ T4283] exit_to_user_mode_prepare+0xee/0x180 [ 1918.912965][ T4283] syscall_exit_to_user_mode+0x16/0x40 [ 1918.918491][ T4283] do_syscall_64+0x58/0xa0 [ 1918.922965][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 1918.927692][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 1918.932513][ T4283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1918.938475][ T4283] RIP: 0033:0x7efcec79e097 [ 1918.942937][ T4283] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1918.962775][ T4283] RSP: 002b:00007ffdc39f9f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1918.971266][ T4283] RAX: 0000000000000000 RBX: 00007efcec8321ca RCX: 00007efcec79e097 [ 1918.979304][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc39fa030 [ 1918.987331][ T4283] RBP: 00007ffdc39fa030 R08: 00007ffdc39fb030 R09: 00000000ffffffff [ 1918.995402][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc39fb0c0 [ 1919.003425][ T4283] R13: 00007efcec8321ca R14: 00000000001ba12e R15: 00007ffdc39fb100 [ 1919.011494][ T4283] [ 1919.025802][ T4283] ocfs2: Unmounting device (7,3) on (node local)