last executing test programs: 9m3.942681981s ago: executing program 3 (id=9170): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x36, 0x0, &(0x7f0000000240)="f8ad48cc02cb09dcc800ab5b86dd1f2575895f0bc97a2a028849a23efaf826975b013f9690e0a3abfc51397c53a89fe8b501000080eb", 0x0, 0xe5, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m3.690303677s ago: executing program 3 (id=9172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x7, 0x4450290}) 9m3.544144761s ago: executing program 3 (id=9175): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001240)={0x2020}, 0x2020) 9m3.365382706s ago: executing program 3 (id=9178): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 9m2.916676487s ago: executing program 3 (id=9183): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000010080)={'wlan1\x00'}) 9m2.483840888s ago: executing program 3 (id=9189): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4001, 0x0, @mcast1, 0xd}, 0x1c) 9m1.98257808s ago: executing program 32 (id=9189): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4001, 0x0, @mcast1, 0xd}, 0x1c) 2.364247531s ago: executing program 4 (id=16254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000000000000001b00140002"], 0x30}}, 0x0) 2.337271622s ago: executing program 0 (id=16255): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'macvlan1\x00'}) 2.203447125s ago: executing program 4 (id=16256): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x6, @win={{0xca, 0xa, 0x0, 0x5}, 0x9, 0x9, 0x0, 0xb, 0x0, 0x72}}) 2.190442935s ago: executing program 2 (id=16257): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x4, &(0x7f00000006c0)=[{0x15, '\x00', @data=0x13a6, 0x8}, {0xc, '\x00', @st={0x4, [{0x0, @svalue=0x961eefb}, {0x2, @uvalue=0x1}, {0x3, @uvalue=0xff}, {0x0, @svalue=0x9e4}]}, 0x33}, {0x2b, '\x00', @data=0x7c7, 0x5}, {0x3e, '\x00', @st={0x4, [{0x2, @uvalue=0x1}, {0x1, @svalue=0x6}, {0x1, @uvalue=0x9}, {0x2, @uvalue=0x84}]}, 0x5}]}) 2.189411675s ago: executing program 0 (id=16258): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x6, 0x1, 0x0, 0x0, 0x0) 2.038974319s ago: executing program 2 (id=16259): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) fanotify_init(0x40, 0x80000) 1.99084249s ago: executing program 4 (id=16260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="40000000100001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="240025800a0013"], 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.885103613s ago: executing program 2 (id=16262): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0xc0045003, &(0x7f0000001100)) 1.772450366s ago: executing program 4 (id=16264): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000300)={[{@block={'block', 0x3d, 0x800}}, {@overriderock}, {@cruft}, {@map_off}, {@showassoc}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@unhide}]}, 0x1, 0x3ec, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.688645438s ago: executing program 2 (id=16265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) 1.549202931s ago: executing program 2 (id=16267): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000480)={0x0, 0x0, r0}) 1.496366663s ago: executing program 4 (id=16268): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2000008a1) 1.345789836s ago: executing program 1 (id=16269): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) 1.345187777s ago: executing program 2 (id=16270): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.22493527s ago: executing program 4 (id=16271): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x40, 0x14, 0x10, "b3e5664f790d666c48b5a1552fdb112b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.21522129s ago: executing program 0 (id=16272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x2}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 968.013616ms ago: executing program 1 (id=16273): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) 914.523857ms ago: executing program 0 (id=16274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 737.916761ms ago: executing program 1 (id=16275): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x800}, 0xd, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x8804) 733.341391ms ago: executing program 0 (id=16276): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000000)) 618.145505ms ago: executing program 0 (id=16277): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000010c0)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@noquota}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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") symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') 539.241237ms ago: executing program 1 (id=16278): r0 = gettid() waitid(0x2, r0, 0x0, 0x8, 0x0) 154.819986ms ago: executing program 1 (id=16279): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) 0s ago: executing program 1 (id=16280): r0 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x50, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) kernel console output (not intermixed with test programs): uct: syz [ 1225.535945][T14130] usb 5-1: Manufacturer: syz [ 1225.540607][T14130] usb 5-1: SerialNumber: syz [ 1225.558420][T15532] XFS (loop2): Quotacheck needed: Please wait. [ 1225.582921][T14130] usb 5-1: config 0 descriptor?? [ 1225.653308][T15609] IPv6: NLM_F_CREATE should be specified when creating new route [ 1225.680010][T15532] XFS (loop2): Quotacheck: Done. [ 1225.806000][T14130] i2c-cp2615: probe of 5-1:0.1 failed with error -22 [ 1225.845639][ T5777] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1226.056001][ T9855] usb 5-1: USB disconnect, device number 40 [ 1226.137270][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1226.137285][ T28] audit: type=1326 audit(2000000240.630:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.220812][ T28] audit: type=1326 audit(2000000240.630:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.287379][ T28] audit: type=1326 audit(2000000240.630:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.350805][ T28] audit: type=1326 audit(2000000240.660:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.401079][ T28] audit: type=1326 audit(2000000240.660:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.439910][T15634] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1226.475273][ T28] audit: type=1326 audit(2000000240.660:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.532819][ T28] audit: type=1326 audit(2000000240.660:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.590839][ T28] audit: type=1326 audit(2000000240.660:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.650896][ T28] audit: type=1326 audit(2000000240.660:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.0.14944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1226.855024][ T5792] blk_print_req_error: 134 callbacks suppressed [ 1226.855042][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1226.873281][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1226.883557][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.914325][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.925125][ T5870] buffer_io_error: 110 callbacks suppressed [ 1226.925139][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1226.971275][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1226.991579][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.994153][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.026940][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1227.044888][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1227.053740][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.070038][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.088484][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1227.115026][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.131127][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1227.161555][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.179725][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1227.205418][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1227.214388][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1227.228518][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1227.238782][T15669] usb usb8: usbfs: process 15669 (syz.0.14957) did not claim interface 0 before use [ 1227.700572][T15696] netlink: 'syz.2.14965': attribute type 1 has an invalid length. [ 1227.925405][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14969'. [ 1228.140628][T15729] netlink: 'syz.1.14973': attribute type 2 has an invalid length. [ 1228.156136][T15728] loop2: detected capacity change from 0 to 512 [ 1228.304811][T15728] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000103) [ 1228.511139][T15754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14980'. [ 1228.520406][T15754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14980'. [ 1228.561234][T15756] netlink: 'syz.0.14981': attribute type 21 has an invalid length. [ 1228.599175][T15756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14981'. [ 1228.620886][T26076] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1228.833000][T26076] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1228.868968][T26076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.888528][T26076] usb 2-1: Product: syz [ 1228.896847][T26076] usb 2-1: Manufacturer: syz [ 1228.922623][T26076] usb 2-1: SerialNumber: syz [ 1228.946842][T26076] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1228.987959][ T5823] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1229.160976][T26076] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1229.363988][T26076] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.376382][T26076] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1229.387971][T26076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.426758][T26076] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1229.507525][T14130] usb 2-1: USB disconnect, device number 90 [ 1229.595311][T15806] netlink: 'syz.0.14996': attribute type 1 has an invalid length. [ 1229.606059][T15806] netlink: 'syz.0.14996': attribute type 2 has an invalid length. [ 1230.041577][T15831] loop4: detected capacity change from 0 to 2048 [ 1230.069558][T15831] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1230.095853][ T5823] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1230.113011][ T5823] ath9k_htc: Failed to initialize the device [ 1230.127833][T15831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1230.144489][T14130] usb 2-1: ath9k_htc: USB layer deinitialized [ 1230.200170][T15834] loop0: detected capacity change from 0 to 4096 [ 1230.251026][T15841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1230.587475][T15861] kAFS: unable to lookup cell '/' [ 1230.694525][T26076] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1230.713121][T14130] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1230.727451][T26076] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1230.738980][T26076] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 1230.762995][T26076] usb 3-1: USB disconnect, device number 80 [ 1230.943937][T14130] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1230.963035][T14130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.986013][T14130] usb 5-1: config 0 descriptor?? [ 1231.075963][T15889] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1231.360138][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15021'. [ 1231.405716][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15021'. [ 1231.417745][T14130] [drm:udl_init] *ERROR* Selecting channel failed [ 1231.505831][T14130] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1231.540965][T14130] [drm] Initialized udl on minor 2 [ 1231.562884][T14130] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1231.589585][T14130] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1231.641878][ T5824] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1231.652499][T14130] usb 5-1: USB disconnect, device number 41 [ 1231.670312][ T5824] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1231.864659][ T5870] blk_print_req_error: 116 callbacks suppressed [ 1231.864677][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1231.921184][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.935944][ T5870] buffer_io_error: 95 callbacks suppressed [ 1231.935960][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1231.955694][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.965682][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1231.977850][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.990045][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1232.003765][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1232.033309][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1232.054964][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1232.077818][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1232.368928][T15958] loop0: detected capacity change from 0 to 2048 [ 1232.400450][T15958] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1232.435493][T15958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1232.737030][T15945] loop2: detected capacity change from 0 to 32768 [ 1232.847558][T15945] ERROR: (device loop2): diWrite: ixpxd invalid [ 1232.847558][T15945] [ 1232.883112][T15945] ERROR: (device loop2): remounting filesystem as read-only [ 1232.901583][ T5824] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1232.931959][T15945] ERROR: (device loop2): txCommit: [ 1232.931959][T15945] [ 1233.112747][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 1233.139289][ T5824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.180774][ T5824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.210974][ T5824] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.253604][ T5824] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1233.267322][ T5824] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 1233.316478][ T5824] usb 1-1: Product: syz [ 1233.325255][ T5824] usb 1-1: Manufacturer: syz [ 1233.329972][ T5824] usb 1-1: SerialNumber: syz [ 1233.368636][ T5824] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input58 [ 1233.496540][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1233.520295][T14980] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1233.536651][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.548735][T14980] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.577333][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1233.588949][T14980] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1233.611891][T14980] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1233.620679][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1233.629352][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1233.695378][T26120] usb 1-1: USB disconnect, device number 78 [ 1233.766578][T26120] appletouch 1-1:1.0: input: appletouch disconnected [ 1234.472911][T16001] loop4: detected capacity change from 0 to 65536 [ 1234.519354][T16001] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1234.648244][T16001] XFS (loop4): Ending clean mount [ 1234.674605][T16001] XFS (loop4): Quotacheck needed: Please wait. [ 1234.833695][T16001] XFS (loop4): Quotacheck: Done. [ 1234.986723][T25882] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1235.280979][T26120] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1235.471172][T26120] usb 2-1: Using ep0 maxpacket: 8 [ 1235.482319][T26120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.505747][T26120] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1235.541357][T26120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.565866][T26120] usb 2-1: config 0 descriptor?? [ 1235.591933][T26120] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1235.821504][ T5823] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1235.955454][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1236.006303][T26120] gspca_vc032x: reg_w err -71 [ 1236.017755][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1236.023806][T26120] vc032x: probe of 2-1:0.0 failed with error -71 [ 1236.038061][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 1236.058761][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1236.075044][T26120] usb 2-1: USB disconnect, device number 91 [ 1236.085758][ T5823] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1236.100196][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.152135][ T5823] usb 5-1: Product: syz [ 1236.156386][ T5823] usb 5-1: Manufacturer: syz [ 1236.171072][ T5823] usb 5-1: SerialNumber: syz [ 1236.186752][ T5823] usb 5-1: config 0 descriptor?? [ 1236.230558][ T5823] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress ff [ 1236.508246][ T5823] usb 5-1: USB disconnect, device number 42 [ 1236.686250][T22681] udevd[22681]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1236.908854][ T5792] blk_print_req_error: 32 callbacks suppressed [ 1236.908872][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1236.929435][ T6234] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1236.961493][ T6234] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1236.981156][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.006417][ T6234] buffer_io_error: 25 callbacks suppressed [ 1237.006435][ T6234] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1237.028077][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1237.037139][ T6234] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.053479][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.063574][ T6234] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1237.090920][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1237.101560][ T6234] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.121887][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.132737][ T6234] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1237.152506][ T6234] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.162436][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1237.187977][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1237.197561][ T6234] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1237.211287][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1237.221523][ T6234] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1237.251957][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1238.975793][T16297] loop2: detected capacity change from 0 to 64 [ 1239.464025][T16270] loop4: detected capacity change from 0 to 32768 [ 1239.550047][T16270] JBD2: Ignoring recovery information on journal [ 1239.745305][T16270] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1239.825660][T16334] loop0: detected capacity change from 0 to 16 [ 1239.845880][T16334] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1240.158740][T25882] ocfs2: Unmounting device (7,4) on (node local) [ 1240.178890][T16281] loop1: detected capacity change from 0 to 65536 [ 1240.301029][T16281] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1240.489650][T16281] XFS (loop1): Ending clean mount [ 1240.544970][T16281] XFS (loop1): Quotacheck needed: Please wait. [ 1240.778096][T16281] XFS (loop1): Quotacheck: Done. [ 1240.799970][T16381] netlink: 34 bytes leftover after parsing attributes in process `syz.2.15123'. [ 1241.027325][ T5774] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1241.401094][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15132'. [ 1241.807573][T16429] loop2: detected capacity change from 0 to 1024 [ 1241.942716][T16429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.187463][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.220880][T14130] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1242.434680][T14130] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1242.446100][ T5792] blk_print_req_error: 236 callbacks suppressed [ 1242.446119][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1242.467667][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1242.471160][T14130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.500281][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.521975][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.538998][T14130] usb 1-1: Product: syz [ 1242.539403][ T5870] buffer_io_error: 195 callbacks suppressed [ 1242.539443][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1242.559365][T14130] usb 1-1: Manufacturer: syz [ 1242.565735][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1242.576817][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.581533][T14130] usb 1-1: SerialNumber: syz [ 1242.597174][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.608190][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1242.627606][T14130] r8152-cfgselector 1-1: config 0 descriptor?? [ 1242.640969][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1242.649606][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.659530][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.681691][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1242.690336][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.701322][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1242.710002][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1242.749691][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1242.759384][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1242.781661][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1242.796057][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1243.030955][ T28] audit: type=1326 audit(2000000257.520:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.093918][T14130] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1243.120912][T14130] r8152-cfgselector 1-1: USB disconnect, device number 79 [ 1243.127631][ T28] audit: type=1326 audit(2000000257.520:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.213591][ T28] audit: type=1326 audit(2000000257.550:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.284152][ T28] audit: type=1326 audit(2000000257.550:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.379877][ T28] audit: type=1326 audit(2000000257.570:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.427533][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1243.457778][ T28] audit: type=1326 audit(2000000257.570:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.524462][ T28] audit: type=1326 audit(2000000257.570:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.594559][ T28] audit: type=1326 audit(2000000257.570:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.1.15153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1243.957535][T16547] usb usb8: usbfs: process 16547 (syz.4.15165) did not claim interface 0 before use [ 1244.041680][T16553] loop1: detected capacity change from 0 to 256 [ 1244.180988][ T28] audit: type=1326 audit(2000000258.670:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.2.15169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275d9e019 code=0x7ffc0000 [ 1244.226110][T16565] loop0: detected capacity change from 0 to 1024 [ 1244.251740][ T28] audit: type=1326 audit(2000000258.670:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.2.15169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe275d9e019 code=0x7ffc0000 [ 1244.335462][T16565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1244.424156][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.439179][T16575] netlink: 'syz.1.15171': attribute type 1 has an invalid length. [ 1244.448684][T16575] netlink: 244 bytes leftover after parsing attributes in process `syz.1.15171'. [ 1244.671463][T16589] tmpfs: Bad value for 'mpol' [ 1244.810534][T16598] netlink: 'syz.1.15177': attribute type 7 has an invalid length. [ 1244.843890][T16598] netlink: 'syz.1.15177': attribute type 8 has an invalid length. [ 1244.869273][T16598] netlink: 'syz.1.15177': attribute type 15 has an invalid length. [ 1245.279389][T16628] comedi comedi0: s526: I/O port conflict (0x2,64) [ 1245.795653][T16659] IPv6: NLM_F_CREATE should be specified when creating new route [ 1246.096156][T16679] loop2: detected capacity change from 0 to 512 [ 1246.199779][T16679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.249205][T16693] loop0: detected capacity change from 0 to 1024 [ 1246.259486][T16679] ext4 filesystem being mounted at /3757/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.355139][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.571040][T14130] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1246.603222][T16709] loop1: detected capacity change from 0 to 512 [ 1246.632032][T16709] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1246.659597][T16709] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1246.670967][T16709] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.15205: Block bitmap for bg 0 marked uninitialized [ 1246.690335][T16709] EXT4-fs (loop1): Remounting filesystem read-only [ 1246.697364][T16709] EXT4-fs (loop1): 1 orphan inode deleted [ 1246.704767][T16709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1246.724129][T16709] loop1: Can't mount, would change RO state [ 1246.756629][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.770850][T14130] usb 1-1: Using ep0 maxpacket: 32 [ 1246.798743][T14130] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1246.830926][T14130] usb 1-1: config 0 has no interface number 0 [ 1246.847345][T14130] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 65519, setting to 1024 [ 1246.882819][T14130] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1246.904717][T14130] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1246.930789][T14130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.962077][T14130] usb 1-1: Product: syz [ 1246.966340][T14130] usb 1-1: Manufacturer: syz [ 1246.996929][T14130] usb 1-1: SerialNumber: syz [ 1247.024095][T14130] usb 1-1: config 0 descriptor?? [ 1247.030029][T16693] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1247.053319][T14130] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1247.088155][T14130] em28xx 1-1:0.132: Video interface 132 found: bulk [ 1247.321329][T14130] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1247.408959][T14130] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1247.439179][T14130] em28xx 1-1:0.132: board has no eeprom [ 1247.469965][T16757] netlink: 'syz.2.15214': attribute type 2 has an invalid length. [ 1247.495551][ T5784] blk_print_req_error: 234 callbacks suppressed [ 1247.495576][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1247.517681][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1247.541110][T14130] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1247.549204][T14130] em28xx 1-1:0.132: analog set to bulk mode. [ 1247.555583][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.570388][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.580804][ T5870] buffer_io_error: 193 callbacks suppressed [ 1247.580818][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1247.597432][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1247.597447][T26120] em28xx 1-1:0.132: Registering V4L2 extension [ 1247.626817][T14130] usb 1-1: USB disconnect, device number 80 [ 1247.641377][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.651490][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.669967][T14130] em28xx 1-1:0.132: Disconnecting em28xx [ 1247.671734][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1247.703535][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1247.727864][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.730037][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.767177][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1247.784286][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1247.792455][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.792488][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1247.793935][ T5870] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1247.851610][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1247.860413][ T5870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1247.886609][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1248.197011][T26120] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1248.229370][T26120] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1248.267224][T26120] em28xx 1-1:0.132: No AC97 audio processor [ 1248.306509][T26120] usb 1-1: Decoder not found [ 1248.325703][T26120] em28xx 1-1:0.132: failed to create media graph [ 1248.381028][T26120] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1248.403140][T26120] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1248.443171][T14130] em28xx 1-1:0.132: Closing input extension [ 1248.517647][T14130] em28xx 1-1:0.132: Freeing device [ 1248.768949][T16751] loop1: detected capacity change from 0 to 40427 [ 1248.858352][T16751] F2FS-fs (loop1): invalid crc value [ 1248.876099][T16751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1249.101061][T16751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1249.395690][T16851] loop4: detected capacity change from 0 to 512 [ 1249.446096][T16851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1249.455681][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1249.467404][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1249.620539][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15236'. [ 1249.633380][T16851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1249.711042][T16851] ext4 filesystem being mounted at /1417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.784329][T16851] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15233: corrupted xattr block 33: invalid header [ 1249.840003][T16851] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 1250.100895][T25882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.530182][T16905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15246'. [ 1250.849759][T16919] netlink: 'syz.4.15250': attribute type 30 has an invalid length. [ 1251.605706][T16992] netlink: 'syz.0.15261': attribute type 3 has an invalid length. [ 1251.625826][T16992] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15261'. [ 1251.727021][T16997] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1251.727021][T16997] program syz.1.15263 not setting count and/or reply_len properly [ 1251.862268][T17005] IPv6: NLM_F_CREATE should be specified when creating new route [ 1251.916263][T17008] netlink: 'syz.2.15265': attribute type 30 has an invalid length. [ 1252.578696][ T5870] blk_print_req_error: 194 callbacks suppressed [ 1252.578717][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1252.603001][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1252.622867][T17081] loop4: detected capacity change from 0 to 1024 [ 1252.651842][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.661597][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.661637][ T5792] buffer_io_error: 160 callbacks suppressed [ 1252.661649][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1252.663078][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.701486][T17081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1252.708159][T17081] EXT4-fs: Ignoring removed bh option [ 1252.730549][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1252.741218][T17081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1252.747921][T17081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1252.771385][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.791186][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1252.799848][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.799889][T17081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1252.822131][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1252.851132][T17086] loop1: detected capacity change from 0 to 256 [ 1252.857157][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.870935][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1252.899320][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.914073][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1252.934367][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1252.962570][T17093] loop2: detected capacity change from 0 to 512 [ 1252.966842][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1253.008160][T17093] EXT4-fs: Ignoring removed bh option [ 1253.016422][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1253.042306][T17081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.121700][T17081] ext4 filesystem being mounted at /1427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.135242][T17093] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1253.190258][T17093] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1253.211985][T17093] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1253.236943][T25882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1253.251786][T17093] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1253.313949][T17093] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1253.328061][T17093] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0080] [ 1253.364333][T17093] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1253.453628][T17093] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.15280: bg 0: block 34: padding at end of block bitmap is not set [ 1253.536296][T17093] __quota_error: 3 callbacks suppressed [ 1253.536315][T17093] Quota error (device loop2): write_blk: dquota write failed [ 1253.571987][T17093] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1253.574141][T17070] loop0: detected capacity change from 0 to 32768 [ 1253.620930][T17093] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.15280: Failed to acquire dquot type 1 [ 1253.658742][T17070] jfs_strtoUCS: char2uni returned -22. [ 1253.683527][T17070] charset = cp949, char = 0xd4 [ 1253.711823][T17093] EXT4-fs (loop2): 1 truncate cleaned up [ 1253.752972][T17093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1254.004822][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.167290][T17140] bridge_slave_0: left allmulticast mode [ 1254.202829][T17146] netlink: 88 bytes leftover after parsing attributes in process `syz.2.15288'. [ 1254.212964][T17140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.257002][T17140] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1254.281198][T26120] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1254.318337][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1254.354749][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1254.483130][T26120] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1254.532065][T26120] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1254.550569][T26120] usb 1-1: Product: syz [ 1254.567100][T26120] usb 1-1: Manufacturer: syz [ 1254.572808][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1254.573922][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1254.575556][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1254.626197][T26120] usb 1-1: SerialNumber: syz [ 1254.649364][T26120] usb 1-1: config 0 descriptor?? [ 1254.684787][T26120] ch341 1-1:0.0: ch341-uart converter detected [ 1255.122190][T26120] usb 1-1: failed to send control message: -71 [ 1255.128486][T26120] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1255.188279][T26120] usb 1-1: USB disconnect, device number 81 [ 1255.191072][ T28] audit: type=1400 audit(2000000269.670:1310): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=17183 comm="syz.4.15300" [ 1255.219910][T26120] ch341 1-1:0.0: device disconnected [ 1255.795811][T17221] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15305'. [ 1256.032288][T17233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15308'. [ 1256.183789][ T2179] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1256.371550][ T2179] usb 1-1: Using ep0 maxpacket: 16 [ 1256.393273][ T2179] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1256.402268][ T2179] usb 1-1: config 0 has no interface number 0 [ 1256.424263][ T2179] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1256.441215][ T2179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.469572][ T2179] usb 1-1: Product: syz [ 1256.474257][ T2179] usb 1-1: Manufacturer: syz [ 1256.478910][ T2179] usb 1-1: SerialNumber: syz [ 1256.512001][ T2179] usb 1-1: config 0 descriptor?? [ 1256.526075][ T2179] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1256.665087][T17213] loop4: detected capacity change from 0 to 32768 [ 1256.771100][T17213] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1256.815657][T17269] loop2: detected capacity change from 0 to 256 [ 1256.874199][ T28] audit: type=1800 audit(2000000271.370:1311): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15304" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 1256.962493][ T2179] gspca_spca1528: reg_w err -71 [ 1257.001590][ T2179] spca1528: probe of 1-1:0.1 failed with error -71 [ 1257.039828][ T2179] usb 1-1: USB disconnect, device number 82 [ 1257.205405][T25882] ocfs2: Unmounting device (7,4) on (node local) [ 1257.619305][T17309] netlink: 'syz.1.15323': attribute type 1 has an invalid length. [ 1257.642665][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15323'. [ 1257.676179][T17307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.676806][T17312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15324'. [ 1258.411949][ T2179] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1258.425331][T17339] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1258.520565][ T5870] blk_print_req_error: 174 callbacks suppressed [ 1258.520584][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1258.546062][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1258.576697][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.595644][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.615901][ T5792] buffer_io_error: 143 callbacks suppressed [ 1258.615917][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1258.640293][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1258.655990][ T2179] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1258.663848][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.675472][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.690853][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1258.699027][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1258.704266][ T2179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.715662][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.725924][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.745879][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1258.754303][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1258.758117][ T2179] usb 1-1: Product: syz [ 1258.780132][ T2179] usb 1-1: Manufacturer: syz [ 1258.782861][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.794934][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.799990][ T2179] usb 1-1: SerialNumber: syz [ 1258.830787][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1258.839656][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1258.848040][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1258.859908][ T2179] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1258.868158][T17328] loop1: detected capacity change from 0 to 32768 [ 1258.869915][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1258.917305][T14130] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1259.512227][T26120] usb 1-1: USB disconnect, device number 83 [ 1259.586545][T17345] loop2: detected capacity change from 0 to 32768 [ 1259.643175][T17345] JBD2: Ignoring recovery information on journal [ 1259.720958][T17345] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1259.869878][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15341'. [ 1259.905380][T17388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15341'. [ 1259.994929][T17345] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1260.034969][T14130] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1260.059924][T17345] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1260.064483][T14130] ath9k_htc: Failed to initialize the device [ 1260.093022][T17345] OCFS2: Returning error to the calling process. [ 1260.099438][T17345] (syz.2.15333,17345,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 1260.129528][T26120] usb 1-1: ath9k_htc: USB layer deinitialized [ 1260.129551][T17345] (syz.2.15333,17345,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 1260.198578][T17345] (syz.2.15333,17345,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 1260.230808][T17345] (syz.2.15333,17345,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 1260.251314][T17345] (syz.2.15333,17345,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 1260.275745][T17345] (syz.2.15333,17345,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 1260.310658][ T28] audit: type=1326 audit(2000000274.800:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.15345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1260.350972][T17345] (syz.2.15333,17345,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 1260.358873][T17345] (syz.2.15333,17345,1):ocfs2_mknod:385 ERROR: status = -5 [ 1260.431196][T17345] (syz.2.15333,17345,0):ocfs2_mknod:502 ERROR: status = -5 [ 1260.440400][T17345] (syz.2.15333,17345,0):ocfs2_mkdir:659 ERROR: status = -5 [ 1260.458939][ T28] audit: type=1326 audit(2000000274.870:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.15345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1260.483287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.546144][ T28] audit: type=1326 audit(2000000274.870:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.15345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1260.570472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.630153][ T28] audit: type=1326 audit(2000000274.870:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.15345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9d19e019 code=0x7ffc0000 [ 1260.832935][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 1261.663636][ T3462] bond0: (slave bond_slave_0): interface is now down [ 1261.714815][ T3462] bond0: now running without any active interface! [ 1261.723590][T17474] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1263.353767][T17559] bridge0: port 2(netdevsim0) entered blocking state [ 1263.391063][T17559] bridge0: port 2(netdevsim0) entered disabled state [ 1263.418473][T17562] loop2: detected capacity change from 0 to 1024 [ 1263.423340][T17559] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1263.469969][T17566] loop0: detected capacity change from 0 to 16 [ 1263.508731][T17566] erofs: (device loop0): mounted with root inode @ nid 36. [ 1263.542729][T17566] syz.0.15391: attempt to access beyond end of device [ 1263.542729][T17566] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1263.576987][T17566] syz.0.15391: attempt to access beyond end of device [ 1263.576987][T17566] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1263.597936][T17566] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 1263.617397][ T28] audit: type=1800 audit(2000000278.110:1316): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15391" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1263.713591][ T3462] hfsplus: b-tree write err: -5, ino 25 [ 1263.738993][ T3462] hfsplus: b-tree write err: -5, ino 4 [ 1263.763751][ T3462] hfsplus: b-tree write err: -5, ino 2 [ 1263.769429][ T3462] hfsplus: b-tree write err: -5, ino 26 [ 1263.874390][T17581] CIFS mount error: No usable UNC path provided in device string! [ 1263.874390][T17581] [ 1263.914222][T17581] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1264.103699][ T5792] blk_print_req_error: 97 callbacks suppressed [ 1264.103717][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1264.127356][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1264.169109][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1264.185653][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1264.195940][T17597] loop2: detected capacity change from 0 to 128 [ 1264.205825][ T5870] buffer_io_error: 79 callbacks suppressed [ 1264.205839][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1264.224134][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1264.328295][T17597] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1264.391232][T17597] ext4 filesystem being mounted at /3806/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.540505][T17597] EXT4-fs warning (device loop2): ext4_group_extend:1868: can't shrink FS - resize aborted [ 1264.654407][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1265.026112][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1265.041835][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1265.062893][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1265.072556][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1265.100160][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1265.114427][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1265.124738][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1265.138025][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1265.149071][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1265.164564][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1265.187520][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1265.197221][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1265.214944][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1265.231316][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1265.917012][T17679] loop1: detected capacity change from 0 to 4096 [ 1265.942807][T17679] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1266.051043][T26120] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1266.065088][T17679] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1266.280118][T26120] usb 1-1: Using ep0 maxpacket: 16 [ 1266.317271][T26120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1266.349413][T26120] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4f.d1 [ 1266.377118][T26120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.396248][T26120] usb 1-1: Product: syz [ 1266.400499][T26120] usb 1-1: Manufacturer: syz [ 1266.416059][T26120] usb 1-1: SerialNumber: syz [ 1266.429124][T26120] usb 1-1: config 0 descriptor?? [ 1266.448937][T26120] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1266.481321][T26120] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 1266.669167][T17730] veth1_to_team: entered allmulticast mode [ 1266.692522][T17730] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1266.793529][T26120] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1266.886698][T26120] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1266.916491][T26120] em28xx 1-1:0.0: board has no eeprom [ 1267.040965][T26120] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1267.054192][T26120] em28xx 1-1:0.0: dvb set to isoc mode. [ 1267.066070][ T2179] em28xx 1-1:0.0: Binding DVB extension [ 1267.078941][T17756] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 1267.116920][T26120] usb 1-1: USB disconnect, device number 84 [ 1267.137997][T26120] em28xx 1-1:0.0: Disconnecting em28xx [ 1267.243114][T17767] netlink: 'syz.1.15438': attribute type 10 has an invalid length. [ 1267.286263][ T2179] em28xx 1-1:0.0: Registering input extension [ 1267.321534][T26120] em28xx 1-1:0.0: Closing input extension [ 1267.412207][T26120] em28xx 1-1:0.0: Freeing device [ 1267.576541][T17794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15441'. [ 1267.607309][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15441'. [ 1267.743529][T17803] loop4: detected capacity change from 0 to 64 [ 1267.788553][T17803] hfs: unable to locate alternate MDB [ 1267.804499][T17803] hfs: continuing without an alternate MDB [ 1267.969320][T17819] xt_hashlimit: max too large, truncated to 1048576 [ 1268.003659][T17819] xt_hashlimit: overflow, try lower: 1125899906842624/0 [ 1268.015827][T17809] loop1: detected capacity change from 0 to 4096 [ 1268.033765][T17809] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1268.265432][T17809] ntfs3: loop1: failed to convert "c46c" to cp950 [ 1268.769763][T17860] loop0: detected capacity change from 0 to 256 [ 1268.901192][T26076] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1269.062146][T17875] loop0: detected capacity change from 0 to 16 [ 1269.077885][T17875] erofs: (device loop0): mounted with root inode @ nid 36. [ 1269.111295][T26076] usb 2-1: Using ep0 maxpacket: 8 [ 1269.130044][T17875] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1269.134095][T26076] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1269.150009][ T5792] blk_print_req_error: 184 callbacks suppressed [ 1269.150029][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1269.171037][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1269.187284][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.198037][T26076] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 1269.214528][T26076] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1269.226030][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.239197][ T5870] buffer_io_error: 151 callbacks suppressed [ 1269.239214][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1269.253751][T26076] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1269.263300][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1269.281062][T26076] usb 2-1: config 1 has no interface number 3 [ 1269.287980][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.299796][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.331078][T26076] usb 2-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 1269.345858][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1269.355966][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1269.372006][T26076] usb 2-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 1269.384009][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.395774][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.410938][T26076] usb 2-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 1269.424584][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1269.433081][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1269.451871][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.462399][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1269.478990][T26076] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 1269.497323][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1269.511164][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1269.523615][T26076] usb 2-1: config 1 interface 6 has no altsetting 0 [ 1269.531202][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1269.551471][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1269.560937][T26076] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1269.572937][T26076] usb 2-1: string descriptor 0 read error: -22 [ 1269.579285][T26076] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.611500][T26076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.675497][T26076] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1269.714538][T26076] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1269.741633][T26076] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1270.237379][T26076] usb 2-1: USB disconnect, device number 92 [ 1270.606405][T17976] xt_limit: Overflow, try lower: 2147483649/3300 [ 1270.721349][ T2179] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1270.927102][ T2179] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1270.949486][ T2179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.968695][ T2179] usb 5-1: Product: syz [ 1270.998578][ T2179] usb 5-1: Manufacturer: syz [ 1271.010794][ T2179] usb 5-1: SerialNumber: syz [ 1271.022679][T17999] loop1: detected capacity change from 0 to 1024 [ 1271.074539][T17999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1271.172708][T17999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.260386][ T2179] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1271.288566][ T2179] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1271.321456][ T2179] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1271.343047][ T2179] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1271.369375][ T2179] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1271.390908][T17999] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.15485: missing EA_INODE flag [ 1271.409970][ T2179] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1271.458011][ T2179] usb 5-1: USB disconnect, device number 43 [ 1271.478526][T17999] EXT4-fs (loop1): Remounting filesystem read-only [ 1271.677287][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.310980][T14130] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1272.516498][T14130] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1272.542193][T14130] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.567178][T14130] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1272.607786][T14130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.669767][T14130] hub 2-1:4.0: USB hub found [ 1272.891117][T14130] hub 2-1:4.0: 9 ports detected [ 1272.896115][T14130] usb 2-1: selecting invalid altsetting 1 [ 1272.928790][T14130] hub 2-1:4.0: Using single TT (err -22) [ 1272.941181][T14130] hub 2-1:4.0: insufficient power available to use all downstream ports [ 1273.088510][T14130] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1273.116745][T14130] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1273.192234][T14130] usb 2-1: USB disconnect, device number 93 [ 1273.275045][T18127] loop2: detected capacity change from 0 to 4096 [ 1273.320911][T18127] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1273.367917][T18141] netlink: 'syz.0.15520': attribute type 13 has an invalid length. [ 1273.399253][T18141] netlink: 172 bytes leftover after parsing attributes in process `syz.0.15520'. [ 1273.429834][T18141] erspan0: refused to change device tx_queue_len [ 1273.763994][ T28] audit: type=1326 audit(2000000288.250:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.0.15525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1273.848032][ T28] audit: type=1326 audit(2000000288.250:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.0.15525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1273.901656][T26076] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1273.949473][ T28] audit: type=1326 audit(2000000288.300:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.0.15525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1274.018205][ T28] audit: type=1326 audit(2000000288.300:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.0.15525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1274.046798][T18173] dlm: Unknown command passed to DLM device : 11 [ 1274.046798][T18173] [ 1274.061227][ T28] audit: type=1326 audit(2000000288.300:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.0.15525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1274.085594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.097729][T26076] usb 3-1: Using ep0 maxpacket: 32 [ 1274.141231][T26076] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1274.150602][T26076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.172168][T26076] usb 3-1: Product: syz [ 1274.176412][T26076] usb 3-1: Manufacturer: syz [ 1274.181540][T26076] usb 3-1: SerialNumber: syz [ 1274.257870][T18181] IPv6: NLM_F_CREATE should be specified when creating new route [ 1274.274111][T18183] netlink: del zone limit has 8 unknown bytes [ 1274.481385][T26076] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1274.496884][T26076] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1274.516381][T26076] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1274.668888][T18208] loop1: detected capacity change from 0 to 16 [ 1274.699260][T18208] erofs: (device loop1): mounted with root inode @ nid 36. [ 1274.770218][T26076] usb 3-1: USB disconnect, device number 81 [ 1274.803783][T26076] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1274.834210][T26076] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1274.867588][T26076] visor 3-1:1.0: device disconnected [ 1275.011644][ T2179] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1275.210776][ T2179] usb 5-1: Using ep0 maxpacket: 8 [ 1275.223177][ T2179] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1275.240801][ T2179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.263716][ T2179] usb 5-1: config 0 descriptor?? [ 1275.284950][ T2179] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1275.438575][ T5870] blk_print_req_error: 205 callbacks suppressed [ 1275.438625][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1275.472478][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1275.509470][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.520154][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.537963][ T5792] buffer_io_error: 169 callbacks suppressed [ 1275.537982][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1275.562049][ T2179] dvb-usb: bulk message failed: -22 (1/0) [ 1275.573147][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1275.585892][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.598719][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1275.619411][ T2179] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1275.631404][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.641798][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.660861][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1275.677978][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1275.681808][ T2179] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1275.702444][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.714078][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.725933][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1275.728048][ T2179] usb 5-1: media controller created [ 1275.739350][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1275.739416][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1275.758124][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1275.771151][ T9855] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1275.781588][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1275.802304][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1275.880500][ T2179] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1275.940625][T18245] loop0: detected capacity change from 0 to 32768 [ 1276.003184][ T9855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.032287][ T2179] DVB: Unable to find symbol lgdt330x_attach() [ 1276.039824][ T9855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.055979][ T2179] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1276.074650][ T9855] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1276.084555][ T9855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.093168][ T9855] usb 3-1: Product: syz [ 1276.097016][ T2179] dvb-usb: bulk message failed: -22 (1/0) [ 1276.112264][ T9855] usb 3-1: Manufacturer: syz [ 1276.117056][ T2179] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1276.117827][ T9855] usb 3-1: SerialNumber: syz [ 1276.158312][ T2179] usb 5-1: USB disconnect, device number 44 [ 1276.211213][T26120] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1276.312230][ T2179] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1276.378247][ T9855] usb 3-1: 0:1 : does not exist [ 1276.378663][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15548'. [ 1276.393091][ T9855] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 1276.403837][T18298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1276.411145][T18298] IPv6: NLM_F_CREATE should be set when creating new route [ 1276.418491][T18298] IPv6: NLM_F_CREATE should be set when creating new route [ 1276.426837][ T9855] usb 3-1: unit 80 not found! [ 1276.443146][T26120] usb 2-1: Using ep0 maxpacket: 8 [ 1276.463672][T26120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1276.490143][T26120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1276.496391][ T9855] usb 3-1: USB disconnect, device number 82 [ 1276.517589][T26120] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1276.548239][T26120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1276.619929][T26120] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1276.628066][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1276.655591][T26120] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1276.685328][T26120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.718760][T26120] usb 2-1: config 0 descriptor?? [ 1276.731768][T18272] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1277.040719][ C0] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 1277.047866][T25887] Bluetooth: hci4: unexpected event 0x10 length: 71 > 1 [ 1277.252929][T10106] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1277.269972][T10106] Bluetooth: hci4: hardware error 0x51 [ 1277.285247][T10106] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1277.294907][T26120] usb 2-1: USB disconnect, device number 94 [ 1277.556437][T18365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15560'. [ 1277.633833][T18371] Cannot find add_set index 4 as target [ 1278.874721][T18448] netlink: 'syz.0.15584': attribute type 29 has an invalid length. [ 1278.900646][T18448] netlink: 'syz.0.15584': attribute type 29 has an invalid length. [ 1279.652805][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15597'. [ 1279.829204][T18501] loop1: detected capacity change from 0 to 512 [ 1279.909642][T18501] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.15600: bad orphan inode 15 [ 1279.924851][T18501] ext4_test_bit(bit=14, block=5) = 0 [ 1279.932299][T18501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.176636][T18471] loop2: detected capacity change from 0 to 32768 [ 1280.179320][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.337385][T18471] ERROR: (device loop2): diNewExt: no free extents [ 1280.337385][T18471] [ 1280.404448][T18471] ERROR: (device loop2): remounting filesystem as read-only [ 1280.426101][T18471] ialloc: diAlloc returned -5! [ 1281.222664][ T5784] blk_print_req_error: 110 callbacks suppressed [ 1281.222682][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1281.268582][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1281.321223][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.330630][ T5792] buffer_io_error: 90 callbacks suppressed [ 1281.330644][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1281.331391][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.389559][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.419278][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1281.439809][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1281.454652][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.468416][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.495261][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1281.501014][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1281.528215][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.538206][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.557991][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1281.570888][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1281.597937][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.618518][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1281.623978][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1281.682673][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1281.999362][T18609] loop1: detected capacity change from 0 to 4096 [ 1282.057699][T18617] loop2: detected capacity change from 0 to 2048 [ 1282.150652][T18617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.154481][T18622] loop4: detected capacity change from 0 to 2048 [ 1282.317214][T18617] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1282.385439][T18609] ntfs3: loop1: mft corrupted [ 1282.581812][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.285988][ T28] audit: type=1326 audit(2000000297.770:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.15647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x0 [ 1283.924226][T18720] netlink: 'syz.4.15658': attribute type 2 has an invalid length. [ 1283.965198][T18720] netlink: 'syz.4.15658': attribute type 1 has an invalid length. [ 1284.019036][T18720] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15658'. [ 1284.104096][T18731] loop0: detected capacity change from 0 to 512 [ 1284.154503][T18731] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 1284.190982][T18731] FAT-fs (loop0): Filesystem has been set read-only [ 1284.211373][T18731] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000103) [ 1284.237302][T18739] comedi comedi4: bad chanlist[0]=0x00200007 chan=7 range length=2 [ 1285.385474][T18822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15685'. [ 1285.405268][T18822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15685'. [ 1286.164910][T18866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15697'. [ 1286.197840][T18870] netlink: 'syz.0.15700': attribute type 2 has an invalid length. [ 1286.197865][T18870] netlink: 'syz.0.15700': attribute type 1 has an invalid length. [ 1286.251160][ T5870] blk_print_req_error: 211 callbacks suppressed [ 1286.251188][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1286.251287][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.251380][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.251935][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.252961][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.253530][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.254139][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.516886][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1286.517060][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.517191][ T5792] buffer_io_error: 180 callbacks suppressed [ 1286.517202][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1286.517835][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1286.517866][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1286.518386][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1286.518910][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1286.519494][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1286.526890][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1286.527453][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1286.527998][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1286.528504][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1286.529092][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1287.595759][T18954] loop4: detected capacity change from 0 to 4096 [ 1287.619821][T18954] EXT4-fs: inline encryption not supported [ 1287.633456][T18954] EXT4-fs: inline encryption not supported [ 1287.653683][T18954] ext4: Unknown parameter 'fowner' [ 1287.675181][T18954] exfat: Deprecated parameter 'debug' [ 1287.689030][T18954] exFAT-fs (loop4): invalid boot record signature [ 1287.692751][T26076] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1287.704169][T18954] exFAT-fs (loop4): failed to read boot sector [ 1287.710379][T18954] exFAT-fs (loop4): failed to recognize exfat type [ 1287.901636][T26076] usb 3-1: Using ep0 maxpacket: 8 [ 1287.909042][T26076] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1287.932213][T26076] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.962105][T26076] usb 3-1: config 0 has no interface number 0 [ 1287.980419][T26076] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1288.000373][T26076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.027684][T26076] usb 3-1: Product: syz [ 1288.043803][T26076] usb 3-1: Manufacturer: syz [ 1288.065461][T26076] usb 3-1: SerialNumber: syz [ 1288.102597][T26076] usb 3-1: config 0 descriptor?? [ 1288.332550][T26076] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1288.338990][T26076] usb 3-1: No valid video chain found. [ 1288.381072][T26120] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1288.492482][T18964] loop1: detected capacity change from 0 to 32768 [ 1288.563088][T26076] usb 3-1: USB disconnect, device number 83 [ 1288.591360][T26120] usb 1-1: Using ep0 maxpacket: 8 [ 1288.600067][T26120] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1288.615037][T26120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.636897][T26120] usb 1-1: config 0 descriptor?? [ 1288.650151][T26120] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1288.700894][ T2179] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1288.746809][T19004] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1288.861571][T26120] dvb-usb: bulk message failed: -22 (1/0) [ 1288.883653][T26120] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1288.904094][ T2179] usb 5-1: Using ep0 maxpacket: 8 [ 1288.915804][ T2179] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.930239][T26120] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1288.951328][ T2179] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 1288.966614][T26120] usb 1-1: media controller created [ 1288.983850][ T2179] usb 5-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=61.6b [ 1289.001844][ T2179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.030948][ T2179] usb 5-1: Product: syz [ 1289.035198][ T2179] usb 5-1: Manufacturer: syz [ 1289.039833][ T2179] usb 5-1: SerialNumber: syz [ 1289.047279][T26120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1289.216767][T26120] DVB: Unable to find symbol lgdt330x_attach() [ 1289.224629][T26120] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1289.234258][T26120] dvb-usb: bulk message failed: -22 (1/0) [ 1289.240073][T26120] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1289.296375][T26120] usb 1-1: USB disconnect, device number 85 [ 1289.364236][ T2179] usb 5-1: USB disconnect, device number 45 [ 1289.471607][T26120] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1289.733529][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15737'. [ 1290.470482][T19107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15749'. [ 1290.487797][T19107] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1290.816119][T19131] loop0: detected capacity change from 0 to 256 [ 1291.144448][T19151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15760'. [ 1291.409393][ T5870] blk_print_req_error: 177 callbacks suppressed [ 1291.409411][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1291.419452][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1291.453434][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.462123][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.491387][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.493570][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.511416][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.528781][ T5870] buffer_io_error: 143 callbacks suppressed [ 1291.528796][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1291.550119][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.561200][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1291.570039][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.571423][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1291.583083][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1291.608731][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.614104][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1291.641108][ T5824] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1291.650484][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1291.681097][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1291.749808][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1291.759739][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15770'. [ 1291.761749][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1291.781928][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1291.837032][ T5824] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1291.864280][ T5824] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1291.903667][ T5824] usb 1-1: Product: syz [ 1291.914718][ T5824] usb 1-1: Manufacturer: syz [ 1291.920187][ T5824] usb 1-1: SerialNumber: syz [ 1291.928780][ T5824] usb 1-1: config 0 descriptor?? [ 1291.934214][T19188] libceph: resolve 'c' (ret=-3): failed [ 1292.164909][ T5824] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1292.207189][T19172] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1292.366263][ T5824] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1292.384093][ T5824] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1292.483278][ T5824] peak_usb: probe of 1-1:0.0 failed with error -71 [ 1292.524754][ T5824] usb 1-1: USB disconnect, device number 86 [ 1292.685847][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15781'. [ 1292.699471][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15782'. [ 1293.461061][T10106] Bluetooth: hci0: command 0x0406 tx timeout [ 1293.730971][T26076] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1293.778454][T19303] loop0: detected capacity change from 0 to 4096 [ 1293.798200][T19303] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1293.845180][T19303] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1293.920871][T26076] usb 5-1: Using ep0 maxpacket: 16 [ 1293.957506][T26076] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1293.976171][T26076] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.995824][T26076] usb 5-1: config 0 descriptor?? [ 1294.026451][T26076] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1294.241326][T26076] usb 5-1: Detected FT232B [ 1294.450007][T19339] bond0: entered allmulticast mode [ 1294.493036][T26076] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1294.509297][T19346] netlink: 'syz.1.15808': attribute type 2 has an invalid length. [ 1294.526758][T26076] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1294.558611][T26076] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1294.606263][T26076] usb 5-1: USB disconnect, device number 46 [ 1294.629080][T26076] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1294.666993][T26076] ftdi_sio 5-1:0.0: device disconnected [ 1295.854799][T19425] loop4: detected capacity change from 0 to 4096 [ 1295.893133][T19425] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1296.017372][T19425] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1296.052017][T19445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1296.059323][T19445] IPv6: NLM_F_CREATE should be set when creating new route [ 1296.066651][T19445] IPv6: NLM_F_CREATE should be set when creating new route [ 1296.194688][T19449] netlink: 'syz.1.15834': attribute type 7 has an invalid length. [ 1296.573216][ T5870] blk_print_req_error: 242 callbacks suppressed [ 1296.573234][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1296.595789][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1296.644198][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.649708][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.690072][ T5792] buffer_io_error: 197 callbacks suppressed [ 1296.690087][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1296.703099][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1296.728106][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.747803][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1296.749530][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.791458][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.791766][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1296.825136][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1296.841446][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.862567][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.872419][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1296.874532][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1296.893226][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1296.903788][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1296.933918][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1296.960936][ T5824] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1296.969924][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1297.171011][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 1297.178567][ T5824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1297.203008][ T5824] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1297.231611][ T5824] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1297.276787][ T5824] usb 2-1: Product: syz [ 1297.301457][ T5824] usb 2-1: Manufacturer: syz [ 1297.313905][ T5824] usb 2-1: SerialNumber: syz [ 1297.486100][T19527] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1297.600950][ T5824] usb 2-1: Invalid connection information received from device [ 1297.826554][T26076] usb 2-1: USB disconnect, device number 95 [ 1297.889272][T19555] netlink: 'syz.4.15858': attribute type 15 has an invalid length. [ 1297.915222][T19555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15858'. [ 1298.181283][ T5824] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1298.382875][ T5824] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1298.409143][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.440989][ T5824] usb 1-1: Product: syz [ 1298.445258][ T5824] usb 1-1: Manufacturer: syz [ 1298.449898][ T5824] usb 1-1: SerialNumber: syz [ 1298.455480][T19592] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15866'. [ 1298.507542][ T5824] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1298.529587][ T2179] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1299.183212][ T5824] usb 1-1: USB disconnect, device number 87 [ 1299.502412][T19644] netlink: 'syz.1.15878': attribute type 1 has an invalid length. [ 1299.611225][ T2179] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1299.627248][T19609] loop4: detected capacity change from 0 to 32768 [ 1299.629333][ T2179] ath9k_htc: Failed to initialize the device [ 1299.651105][T14130] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1299.664288][ T5824] usb 1-1: ath9k_htc: USB layer deinitialized [ 1299.676867][T19609] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.15870 (19609) [ 1299.725333][T19609] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1299.756250][T19609] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1299.766631][T19609] BTRFS info (device loop4): enabling ssd optimizations [ 1299.786723][T19609] BTRFS info (device loop4): not using ssd optimizations [ 1299.806101][T19609] BTRFS info (device loop4): turning off barriers [ 1299.825432][T19609] BTRFS info (device loop4): using free space tree [ 1299.893255][T14130] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1299.921430][T14130] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.941101][T14130] usb 3-1: config 0 has no interface number 0 [ 1299.952267][T14130] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1299.962363][T14130] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1300.002334][T14130] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1300.020848][T14130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.037005][T14130] usb 3-1: Product: syz [ 1300.045276][T14130] usb 3-1: Manufacturer: syz [ 1300.049951][T14130] usb 3-1: SerialNumber: syz [ 1300.072335][T14130] usb 3-1: config 0 descriptor?? [ 1300.147513][T25882] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1300.382343][T19690] veth6: entered promiscuous mode [ 1300.387505][T19690] veth6: entered allmulticast mode [ 1300.397597][T19692] loop1: detected capacity change from 0 to 512 [ 1300.437871][T19692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1300.487162][T19692] EXT4-fs error (device loop1): __ext4_iget:5079: inode #11: block 196632: comm syz.1.15886: invalid block [ 1300.560041][T14130] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 1300.563253][T19692] EXT4-fs (loop1): Remounting filesystem read-only [ 1300.607159][T19692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.620305][T14130] usb 3-1: USB disconnect, device number 84 [ 1300.842639][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.858241][T19720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15888'. [ 1301.444474][T19752] loop1: detected capacity change from 0 to 1024 [ 1301.716244][ T5784] blk_print_req_error: 182 callbacks suppressed [ 1301.716261][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1301.739334][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1301.791257][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1301.800906][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1301.815833][ T5784] buffer_io_error: 150 callbacks suppressed [ 1301.815849][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1301.842399][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1301.868250][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1301.872782][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1301.901875][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1301.910495][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1301.960850][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1301.961031][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1302.016901][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1302.040640][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1302.054707][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1302.061345][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1302.077167][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1302.091709][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1302.122360][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1302.131241][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1302.380872][ T2179] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1302.562633][T19806] loop0: detected capacity change from 0 to 4096 [ 1302.585106][T19806] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1302.601016][ T2179] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1302.614514][ T2179] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1302.624890][ T2179] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1302.658930][ T2179] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1302.674753][ T2179] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1302.737267][ T2179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.760906][ T2179] usb 2-1: Product: syz [ 1302.790188][ T2179] usb 2-1: Manufacturer: syz [ 1302.807838][T19806] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1302.814672][ T2179] usb 2-1: SerialNumber: syz [ 1302.858355][ T2179] smsusb:smsusb_probe: board id=8, interface number 0 [ 1302.948370][ T42] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1302.980638][ T5775] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1302.994830][ T5775] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1303.023597][ T5775] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1303.033933][ T1094] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1303.074856][ T2179] smsusb:smsusb_probe: Device initialized with return code -19 [ 1303.279857][T26076] usb 2-1: USB disconnect, device number 96 [ 1303.325433][T19846] loop2: detected capacity change from 0 to 128 [ 1303.403843][T19846] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1303.469527][T19846] ext4 filesystem being mounted at /3935/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.613200][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1303.671216][T19874] netlink: 252 bytes leftover after parsing attributes in process `syz.4.15924'. [ 1304.380840][ T2179] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1304.594297][ T2179] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1304.615405][ T2179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.641494][ T2179] usb 1-1: Product: syz [ 1304.648868][ T2179] usb 1-1: Manufacturer: syz [ 1304.656055][ T2179] usb 1-1: SerialNumber: syz [ 1304.687508][ T2179] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1304.731494][T14130] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1305.471636][ T2179] usb 1-1: USB disconnect, device number 88 [ 1305.551332][T19976] netlink: 'syz.1.15949': attribute type 1 has an invalid length. [ 1305.596264][T19979] loop2: detected capacity change from 0 to 256 [ 1305.857145][T14130] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1305.891855][T14130] ath9k_htc: Failed to initialize the device [ 1305.923560][ T2179] usb 1-1: ath9k_htc: USB layer deinitialized [ 1305.966775][T20007] binfmt_misc: register: failed to install interpreter file ./file0 [ 1306.376884][T20029] netlink: 'syz.0.15964': attribute type 1 has an invalid length. [ 1306.484690][T20035] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15967'. [ 1306.641147][T20046] netlink: 'syz.1.15969': attribute type 1 has an invalid length. [ 1306.724217][ T5792] blk_print_req_error: 206 callbacks suppressed [ 1306.724237][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1306.772089][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1306.826880][ T5792] buffer_io_error: 170 callbacks suppressed [ 1306.826897][ T5792] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1306.883539][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1306.902412][ T5792] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1306.914306][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1306.960906][ T5792] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1306.969608][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1307.030859][ T5792] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1307.039715][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1307.090413][T20073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1307.111826][ T5792] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1307.284232][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1307.319777][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1307.332908][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1307.367260][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1307.380168][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1307.405893][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1307.413420][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1307.432759][T20088] nfs: Unknown parameter 'ntext' [ 1307.451480][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1307.475784][T20091] loop2: detected capacity change from 0 to 128 [ 1307.546006][T20091] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1307.585199][T20091] hpfs: filesystem error: improperly stopped [ 1307.600974][T20091] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1307.650937][T20091] hpfs: You really don't want any checks? You are crazy... [ 1307.658261][T20091] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 1307.680893][T20091] hpfs: code page support is disabled [ 1307.686553][T20091] hpfs: hpfs_map_4sectors(): unaligned read [ 1307.712385][T20091] hpfs: hpfs_map_4sectors(): unaligned read [ 1307.718359][T20091] hpfs: filesystem error: unable to find root dir [ 1308.004867][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1308.271027][ T5823] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1308.491845][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 1308.512497][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.545325][ T5823] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1308.574228][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.608907][ T5823] usb 5-1: Product: syz [ 1308.624792][ T5823] usb 5-1: Manufacturer: syz [ 1308.644937][ T5823] usb 5-1: SerialNumber: syz [ 1308.681644][ T5823] usb 5-1: config 0 descriptor?? [ 1308.708236][ T5823] usb 5-1: bad CDC descriptors [ 1308.718390][ T5823] usb 5-1: unsupported MDLM descriptors [ 1309.000181][ T9855] usb 5-1: USB disconnect, device number 47 [ 1309.393436][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16009'. [ 1309.872645][T20248] netlink: 344 bytes leftover after parsing attributes in process `syz.0.16015'. [ 1310.171525][T20265] netlink: 'syz.1.16021': attribute type 5 has an invalid length. [ 1310.465394][T20283] netlink: 'syz.0.16026': attribute type 8 has an invalid length. [ 1311.255456][T20324] loop2: detected capacity change from 0 to 4096 [ 1311.280832][ T5823] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1311.295863][T20324] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1311.376235][T20324] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1311.408608][T20324] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1311.427958][T20324] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1311.443311][T20324] ntfs: volume version 3.1. [ 1311.510315][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 1311.545673][ T5823] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1311.561235][ T5823] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1311.600840][ T5823] usb 5-1: config 0 has no interface number 0 [ 1311.613444][ T5777] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1311.629377][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1311.641048][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.649137][ T5823] usb 5-1: Product: syz [ 1311.673262][ T5823] usb 5-1: Manufacturer: syz [ 1311.677974][ T5823] usb 5-1: SerialNumber: syz [ 1311.696962][ T5823] usb 5-1: config 0 descriptor?? [ 1311.708029][ T5823] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1311.714960][T20350] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1311.742670][ T5823] usb 5-1: No valid video chain found. [ 1311.896530][ T5870] blk_print_req_error: 158 callbacks suppressed [ 1311.896548][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1311.932614][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1311.949509][ T5823] usb 5-1: USB disconnect, device number 48 [ 1311.951687][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.999132][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.011191][ T5870] buffer_io_error: 129 callbacks suppressed [ 1312.011207][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1312.021196][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1312.062934][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.068046][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.105074][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1312.124531][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1312.139912][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.149986][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1312.161378][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.177966][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.192221][T20379] loop0: detected capacity change from 0 to 1024 [ 1312.200255][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1312.214507][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.226011][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1312.245588][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1312.247828][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1312.273659][T20379] hfsplus: catalog record size mismatch (type 4, got 20, expected 10) [ 1312.276306][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1312.892221][T20401] loop4: detected capacity change from 0 to 4096 [ 1313.314848][T20431] ipip0: entered promiscuous mode [ 1313.330818][T20431] ipip0: entered allmulticast mode [ 1313.452835][T20438] ip6tnl6: entered allmulticast mode [ 1313.465112][ T3462] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1313.505911][ T2179] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1313.513813][ T3462] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1313.661324][ T2179] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1313.926949][T14130] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1314.446370][T20485] loop1: detected capacity change from 0 to 4096 [ 1314.617218][ T28] audit: type=1326 audit(2000000329.110:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.0.16078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1314.702564][T20485] ntfs3: loop1: ino=5, "/" directory corrupted [ 1314.708916][T20485] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1314.721982][ T28] audit: type=1326 audit(2000000329.110:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.0.16078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1314.849753][ T28] audit: type=1326 audit(2000000329.150:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.0.16078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1314.989245][ T28] audit: type=1326 audit(2000000329.150:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.0.16078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1315.013599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.077416][ T28] audit: type=1326 audit(2000000329.150:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.0.16078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2119e019 code=0x7ffc0000 [ 1315.101759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.202362][T20512] loop0: detected capacity change from 0 to 4096 [ 1315.233221][T20512] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1316.155711][T20561] loop2: detected capacity change from 0 to 4096 [ 1316.189280][T20561] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1316.347039][T20561] ntfs3: loop2: Failed to load $Extend (-2). [ 1316.361093][T20561] ntfs3: loop2: Failed to initialize $Extend. [ 1316.449468][T20561] ntfs3: Cannot use different iocharset when remounting! [ 1317.105577][T20608] loop4: detected capacity change from 0 to 2048 [ 1317.146236][ T5870] blk_print_req_error: 170 callbacks suppressed [ 1317.146254][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1317.172371][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1317.208504][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.217169][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.258028][ T5792] buffer_io_error: 140 callbacks suppressed [ 1317.258046][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1317.271864][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1317.280745][T20619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1317.307807][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.341826][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.364532][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1317.381492][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.390891][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1317.392319][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.419475][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1317.458591][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.499760][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1317.508164][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1317.530353][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1317.540946][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1317.561649][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1317.590351][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1317.641644][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1317.883091][T20646] xt_nfacct: accounting object `syz1' does not exist [ 1318.966817][T20712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16137'. [ 1319.276699][T20729] loop0: detected capacity change from 0 to 512 [ 1319.285346][T20729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1319.336374][T20729] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1319.352247][T20729] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.16142: EA inode hash validation failed [ 1319.383804][T20729] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1319.422960][T20729] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.16142: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1319.473047][T20729] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.16142: ea_inode dec ref err=-117 [ 1319.493382][T20729] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.16142: bit already cleared for inode 11 [ 1319.510276][T20729] EXT4-fs (loop0): 1 orphan inode deleted [ 1319.520010][T20729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1319.632814][T20729] EXT4-fs error (device loop0): __ext4_iget:5079: inode #14: block 1886221359: comm syz.0.16142: invalid block [ 1319.756174][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.000964][ T5823] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1320.090162][T20773] netlink: 'syz.0.16152': attribute type 1 has an invalid length. [ 1320.113060][T20773] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.16152'. [ 1320.190845][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 1320.204091][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.232911][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.243431][ T5823] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1320.298988][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.320387][ T5823] usb 3-1: config 0 descriptor?? [ 1320.332936][ T5823] hub 3-1:0.0: USB hub found [ 1320.556286][ T5823] hub 3-1:0.0: 3 ports detected [ 1320.751601][ T5823] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1320.758068][ T5823] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1320.800083][ T5823] usbhid 3-1:0.0: can't add hid device: -71 [ 1320.812363][T20810] xt_ecn: cannot match TCP bits for non-tcp packets [ 1320.824927][ T5823] usbhid: probe of 3-1:0.0 failed with error -71 [ 1320.888732][ T5823] usb 3-1: USB disconnect, device number 85 [ 1321.159146][T20831] loop0: detected capacity change from 0 to 4096 [ 1321.201268][T20833] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.335124][T20839] loop1: detected capacity change from 0 to 256 [ 1321.632368][T20857] netlink: 'syz.1.16175': attribute type 10 has an invalid length. [ 1321.704515][T20857] bond0: left allmulticast mode [ 1321.719818][T20857] bond0: left promiscuous mode [ 1321.736761][T20857] bridge0: port 1(bond0) entered disabled state [ 1322.067236][T20876] loop4: detected capacity change from 0 to 1024 [ 1322.344506][ T5792] blk_print_req_error: 158 callbacks suppressed [ 1322.344524][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1322.377191][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1322.418023][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.427542][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.427576][ T5870] buffer_io_error: 130 callbacks suppressed [ 1322.427586][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1322.428895][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.501714][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1322.518852][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1322.529605][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.586698][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1322.592519][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.622388][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1322.634525][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1322.634522][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.634551][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1322.682668][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.712888][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1322.726012][ T5870] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1322.751599][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1322.770125][ T5870] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1322.885836][T20853] loop0: detected capacity change from 0 to 32768 [ 1323.073691][ T28] audit: type=1326 audit(2000000337.570:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.4.16193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57df79e019 code=0x7ffc0000 [ 1323.116744][T20853] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1323.229189][ T28] audit: type=1326 audit(2000000337.570:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.4.16193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57df79e019 code=0x7ffc0000 [ 1323.254197][ T28] audit: type=1326 audit(2000000337.570:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.4.16193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f57df79e019 code=0x7ffc0000 [ 1323.278484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.284986][ T28] audit: type=1326 audit(2000000337.570:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.4.16193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57df79e019 code=0x7ffc0000 [ 1323.309238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.400907][T20853] XFS (loop0): Ending clean mount [ 1323.433634][T20853] XFS (loop0): Quotacheck needed: Please wait. [ 1323.547687][T20853] XFS (loop0): Quotacheck: Done. [ 1323.712673][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1323.856587][T20968] netlink: 'syz.1.16201': attribute type 1 has an invalid length. [ 1323.971642][ T2179] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1324.180932][ T2179] usb 5-1: Using ep0 maxpacket: 8 [ 1324.204119][ T2179] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.225085][ T2179] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1324.228873][T20989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16206'. [ 1324.244248][ T2179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.260441][ T2179] usb 5-1: Product: syz [ 1324.265553][T20989] netlink: 'syz.1.16206': attribute type 2 has an invalid length. [ 1324.267101][ T2179] usb 5-1: Manufacturer: syz [ 1324.284618][T20989] netlink: 'syz.1.16206': attribute type 1 has an invalid length. [ 1324.296265][ T2179] usb 5-1: SerialNumber: syz [ 1324.301015][T20989] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16206'. [ 1324.332645][ T2179] usb 5-1: config 0 descriptor?? [ 1324.342869][ T2179] cdc_phonet 5-1:0.0: invalid descriptor buffer length [ 1324.349816][ T2179] cdc_phonet: probe of 5-1:0.0 failed with error -22 [ 1324.590563][ T9855] usb 5-1: USB disconnect, device number 49 [ 1324.864816][T21029] loop2: detected capacity change from 0 to 256 [ 1325.052152][T21032] loop1: detected capacity change from 0 to 4096 [ 1325.115214][T21032] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1325.611167][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1325.750136][T21070] netlink: 116 bytes leftover after parsing attributes in process `syz.0.16222'. [ 1326.891853][T21143] x_tables: duplicate entry at hook 2 [ 1327.031238][ T2179] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1327.235401][ T2179] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 1327.298730][ T2179] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 64 [ 1327.360808][ T2179] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.403958][ T2179] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1327.424145][ T2179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.446237][ T2179] usb 2-1: Product: syz [ 1327.450477][ T2179] usb 2-1: Manufacturer: syz [ 1327.478770][ T2179] usb 2-1: SerialNumber: syz [ 1327.502074][ T2179] cdc_subset: probe of 2-1:1.0 failed with error -22 [ 1327.517230][ T5792] blk_print_req_error: 264 callbacks suppressed [ 1327.517250][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1327.553620][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1327.571180][ T2179] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 1327.589073][ T2179] cdc_ncm 2-1:1.0: bind() failure [ 1327.594599][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.601382][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.632943][ T2179] cdc_subset: probe of 2-1:1.1 failed with error -22 [ 1327.640147][ T2179] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1327.650897][ T5792] buffer_io_error: 218 callbacks suppressed [ 1327.650912][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1327.651923][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1327.662762][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.721960][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.732452][ T2179] cdc_ncm 2-1:1.1: bind() failure [ 1327.742659][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1327.748468][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1327.769217][ T2179] usb 2-1: USB disconnect, device number 97 [ 1327.789241][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.794762][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.810159][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1327.819369][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.859356][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1327.868259][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1327.887403][ T5792] I/O error, dev loop2, sector 775 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1327.902299][ T5784] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1327.914645][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1327.925105][ T5792] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1328.424396][T21225] netlink: 'syz.4.16260': attribute type 19 has an invalid length. [ 1328.469714][T21225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16260'. [ 1328.665058][T21239] loop4: detected capacity change from 0 to 136 [ 1328.844135][T21250] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16266'. [ 1328.983958][T21259] loop4: detected capacity change from 0 to 64 [ 1329.143767][T21268] loop1: detected capacity change from 0 to 128 [ 1329.237420][T21268] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1329.271464][T21268] FAT-fs (loop1): Filesystem has been set read-only [ 1329.376012][ T5774] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1329.591071][T26120] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1329.782079][T21263] loop2: detected capacity change from 0 to 32768 [ 1329.801376][T21263] (syz.2.16270,21263,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1329.817010][T26120] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1329.820096][T21263] (syz.2.16270,21263,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1329.846037][T26120] usb 5-1: config 0 has no interface number 0 [ 1329.877038][T26120] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1329.900881][T26120] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1329.920407][T26120] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1329.930532][T26120] usb 5-1: Manufacturer: syz [ 1329.940664][T26120] usb 5-1: SerialNumber: syz [ 1329.960812][T26120] usb 5-1: config 0 descriptor?? [ 1329.974002][T21263] JBD2: Ignoring recovery information on journal [ 1330.169728][T21263] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1330.401607][T21263] [ 1330.404026][T21263] ====================================================== [ 1330.411072][T21263] WARNING: possible circular locking dependency detected [ 1330.418137][T21263] syzkaller #0 Not tainted [ 1330.422595][T21263] ------------------------------------------------------ [ 1330.429652][T21263] syz.2.16270/21263 is trying to acquire lock: [ 1330.435853][T21263] ffff888054519538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 1330.445293][T21263] [ 1330.445293][T21263] but task is already holding lock: [ 1330.452692][T21263] ffff88805c0548e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 1330.463059][T21263] [ 1330.463059][T21263] which lock already depends on the new lock. [ 1330.463059][T21263] [ 1330.473504][T21263] [ 1330.473504][T21263] the existing dependency chain (in reverse order) is: [ 1330.482574][T21263] [ 1330.482574][T21263] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1330.491150][T21263] down_read+0x46/0x2e0 [ 1330.495886][T21263] ocfs2_start_trans+0x3a8/0x6f0 [ 1330.501447][T21263] ocfs2_reserve_suballoc_bits+0x7a5/0x44a0 [ 1330.507918][T21263] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1330.514827][T21263] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1330.521030][T21263] ocfs2_xattr_set+0xc75/0x13a0 [ 1330.526462][T21263] ocfs2_set_acl+0x4d4/0x580 [ 1330.531633][T21263] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1330.537143][T21263] vfs_set_acl+0x80f/0xa70 [ 1330.542113][T21263] do_set_acl+0xf5/0x180 [ 1330.546897][T21263] path_setxattr+0x362/0x590 [ 1330.552044][T21263] __x64_sys_setxattr+0xbb/0xd0 [ 1330.557443][T21263] do_syscall_64+0x55/0xb0 [ 1330.562407][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.568846][T21263] [ 1330.568846][T21263] -> #3 (sb_internal#3){.+.+}-{0:0}: [ 1330.576370][T21263] ocfs2_start_trans+0x2a9/0x6f0 [ 1330.581851][T21263] ocfs2_reserve_suballoc_bits+0x7a5/0x44a0 [ 1330.588287][T21263] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1330.595159][T21263] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1330.601342][T21263] ocfs2_xattr_set+0xc75/0x13a0 [ 1330.606731][T21263] ocfs2_set_acl+0x4d4/0x580 [ 1330.611877][T21263] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1330.617421][T21263] vfs_set_acl+0x80f/0xa70 [ 1330.622397][T21263] do_set_acl+0xf5/0x180 [ 1330.627182][T21263] path_setxattr+0x362/0x590 [ 1330.632323][T21263] __x64_sys_setxattr+0xbb/0xd0 [ 1330.637725][T21263] do_syscall_64+0x55/0xb0 [ 1330.642689][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.649126][T21263] [ 1330.649126][T21263] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1330.659664][T21263] down_write+0x97/0x200 [ 1330.664457][T21263] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1330.670933][T21263] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 1330.677814][T21263] ocfs2_reserve_suballoc_bits+0x783/0x44a0 [ 1330.684258][T21263] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1330.691135][T21263] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1330.697308][T21263] ocfs2_xattr_set+0xc75/0x13a0 [ 1330.702697][T21263] ocfs2_set_acl+0x4d4/0x580 [ 1330.707840][T21263] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1330.713327][T21263] vfs_set_acl+0x80f/0xa70 [ 1330.718279][T21263] do_set_acl+0xf5/0x180 [ 1330.723062][T21263] path_setxattr+0x362/0x590 [ 1330.728196][T21263] __x64_sys_setxattr+0xbb/0xd0 [ 1330.733588][T21263] do_syscall_64+0x55/0xb0 [ 1330.738541][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.744973][T21263] [ 1330.744973][T21263] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 1330.755520][T21263] down_write+0x97/0x200 [ 1330.760342][T21263] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1330.766799][T21263] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1330.773690][T21263] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1330.779881][T21263] ocfs2_xattr_set+0xc75/0x13a0 [ 1330.785287][T21263] ocfs2_set_acl+0x4d4/0x580 [ 1330.790423][T21263] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1330.795902][T21263] vfs_set_acl+0x80f/0xa70 [ 1330.800861][T21263] do_set_acl+0xf5/0x180 [ 1330.805671][T21263] path_setxattr+0x362/0x590 [ 1330.810823][T21263] __x64_sys_setxattr+0xbb/0xd0 [ 1330.816247][T21263] do_syscall_64+0x55/0xb0 [ 1330.821220][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.827665][T21263] [ 1330.827665][T21263] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1330.835520][T21263] __lock_acquire+0x37ef/0x7d80 [ 1330.840926][T21263] lock_acquire+0x19e/0x420 [ 1330.846008][T21263] down_read+0x46/0x2e0 [ 1330.850733][T21263] ocfs2_init_acl+0x30a/0x770 [ 1330.855965][T21263] ocfs2_mknod+0x1427/0x2310 [ 1330.861099][T21263] ocfs2_create+0x196/0x430 [ 1330.866143][T21263] path_openat+0x1705/0x3270 [ 1330.871279][T21263] do_filp_open+0x1f2/0x430 [ 1330.876325][T21263] do_sys_openat2+0x134/0x1d0 [ 1330.881579][T21263] __x64_sys_openat+0x139/0x160 [ 1330.886976][T21263] do_syscall_64+0x55/0xb0 [ 1330.891942][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.898401][T21263] [ 1330.898401][T21263] other info that might help us debug this: [ 1330.898401][T21263] [ 1330.908663][T21263] Chain exists of: [ 1330.908663][T21263] &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier [ 1330.908663][T21263] [ 1330.922650][T21263] Possible unsafe locking scenario: [ 1330.922650][T21263] [ 1330.930149][T21263] CPU0 CPU1 [ 1330.935534][T21263] ---- ---- [ 1330.940918][T21263] rlock(&journal->j_trans_barrier); [ 1330.946313][T21263] lock(sb_internal#3); [ 1330.953101][T21263] lock(&journal->j_trans_barrier); [ 1330.960936][T21263] rlock(&oi->ip_xattr_sem); [ 1330.965627][T21263] [ 1330.965627][T21263] *** DEADLOCK *** [ 1330.965627][T21263] [ 1330.973779][T21263] 8 locks held by syz.2.16270/21263: [ 1330.979074][T21263] #0: ffff888025664418 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1330.988343][T21263] #1: ffff888054519818 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: path_openat+0x7f4/0x3270 [ 1330.998639][T21263] #2: ffff88805b145f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1331.012428][T21263] #3: ffff88805b1442d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1331.026162][T21263] #4: ffff88805b1409d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 1331.040115][T21263] #5: ffff888025664608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 1331.049376][T21263] #6: ffff88805c0548e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 1331.060114][T21263] #7: ffff88805822e990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 1331.070040][T21263] [ 1331.070040][T21263] stack backtrace: [ 1331.075949][T21263] CPU: 0 PID: 21263 Comm: syz.2.16270 Not tainted syzkaller #0 [ 1331.083528][T21263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1331.093603][T21263] Call Trace: [ 1331.096900][T21263] [ 1331.099852][T21263] dump_stack_lvl+0x18c/0x250 [ 1331.104561][T21263] ? load_image+0x420/0x420 [ 1331.109090][T21263] ? show_regs_print_info+0x20/0x20 [ 1331.114312][T21263] ? print_circular_bug+0x12b/0x1a0 [ 1331.119540][T21263] check_noncircular+0x2fc/0x400 [ 1331.124533][T21263] ? print_deadlock_bug+0x5d0/0x5d0 [ 1331.129772][T21263] ? _find_first_zero_bit+0xd6/0x100 [ 1331.135106][T21263] ? add_lock_to_list+0x191/0x280 [ 1331.140170][T21263] __lock_acquire+0x37ef/0x7d80 [ 1331.145051][T21263] ? ocfs2_lock_res_init_common+0x32a/0x450 [ 1331.151004][T21263] ? verify_lock_unused+0x140/0x140 [ 1331.156232][T21263] ? __lock_acquire+0x7d80/0x7d80 [ 1331.161370][T21263] ? do_raw_spin_lock+0x11f/0x2b0 [ 1331.166424][T21263] ? ocfs2_local_write_dquot+0x243/0x370 [ 1331.172084][T21263] lock_acquire+0x19e/0x420 [ 1331.176614][T21263] ? ocfs2_init_acl+0x30a/0x770 [ 1331.181499][T21263] ? __might_sleep+0xe0/0xe0 [ 1331.186118][T21263] ? read_lock_is_recursive+0x20/0x20 [ 1331.191512][T21263] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 1331.198132][T21263] ? dquot_alloc_inode+0x772/0xa40 [ 1331.203314][T21263] down_read+0x46/0x2e0 [ 1331.207505][T21263] ? ocfs2_init_acl+0x30a/0x770 [ 1331.212392][T21263] ocfs2_init_acl+0x30a/0x770 [ 1331.217203][T21263] ? ocfs2_mknod_locked+0x159/0x290 [ 1331.222444][T21263] ? ocfs2_acl_chmod+0x340/0x340 [ 1331.227424][T21263] ? dquot_alloc_inode+0x8ac/0xa40 [ 1331.232611][T21263] ? dquot_alloc_inode+0x15e/0xa40 [ 1331.237760][T21263] ? ocfs2_block_signals+0x9b/0xe0 [ 1331.242906][T21263] ? ocfs2_init_security_get+0x139/0x1a0 [ 1331.248562][T21263] ocfs2_mknod+0x1427/0x2310 [ 1331.253208][T21263] ? ocfs2_mkdir+0x430/0x430 [ 1331.257826][T21263] ? __lock_acquire+0x7d80/0x7d80 [ 1331.262875][T21263] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1331.268803][T21263] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1331.274724][T21263] ? _raw_spin_unlock+0x40/0x40 [ 1331.279610][T21263] ? ocfs2_inode_unlock+0xa5/0x140 [ 1331.284740][T21263] ? __lock_acquire+0x7d80/0x7d80 [ 1331.289781][T21263] ? __rwlock_init+0x150/0x150 [ 1331.294569][T21263] ? do_raw_spin_unlock+0x121/0x230 [ 1331.299800][T21263] ? rcu_is_watching+0x15/0xb0 [ 1331.304594][T21263] ? ocfs2_lookup+0x4ac/0x960 [ 1331.309306][T21263] ocfs2_create+0x196/0x430 [ 1331.313843][T21263] ? ocfs2_update_inode_fsync_trans+0x230/0x230 [ 1331.320113][T21263] ? ocfs2_lookup+0x960/0x960 [ 1331.324815][T21263] ? HAS_UNMAPPED_ID+0x101/0x170 [ 1331.329809][T21263] ? inode_permission+0xf3/0x480 [ 1331.334782][T21263] ? bpf_lsm_inode_create+0x9/0x10 [ 1331.339917][T21263] ? security_inode_create+0xb7/0x100 [ 1331.345319][T21263] ? ocfs2_lookup+0x960/0x960 [ 1331.350018][T21263] path_openat+0x1705/0x3270 [ 1331.354648][T21263] ? do_filp_open+0x430/0x430 [ 1331.359350][T21263] do_filp_open+0x1f2/0x430 [ 1331.363881][T21263] ? vfs_tmpfile+0x620/0x620 [ 1331.368496][T21263] ? _raw_spin_unlock+0x28/0x40 [ 1331.373376][T21263] ? alloc_fd+0x590/0x640 [ 1331.377731][T21263] do_sys_openat2+0x134/0x1d0 [ 1331.382452][T21263] ? do_sys_open+0xe0/0xe0 [ 1331.386920][T21263] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1331.392932][T21263] ? lock_chain_count+0x20/0x20 [ 1331.397828][T21263] __x64_sys_openat+0x139/0x160 [ 1331.402715][T21263] do_syscall_64+0x55/0xb0 [ 1331.407157][T21263] ? clear_bhb_loop+0x40/0x90 [ 1331.411852][T21263] ? clear_bhb_loop+0x40/0x90 [ 1331.416571][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1331.422479][T21263] RIP: 0033:0x7fe275d9e019 [ 1331.426917][T21263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.446546][T21263] RSP: 002b:00007fe276c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1331.454992][T21263] RAX: ffffffffffffffda RBX: 00007fe276025fa0 RCX: 00007fe275d9e019 [ 1331.462985][T21263] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1331.471011][T21263] RBP: 00007fe275e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1331.479002][T21263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.486989][T21263] R13: 00007fe276026038 R14: 00007fe276025fa0 R15: 00007ffdef4f7f28 [ 1331.495007][T21263] [ 1331.498094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.537751][T21300] loop0: detected capacity change from 0 to 32768 [ 1331.586280][T26120] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 1331.637849][T26120] usb 5-1: USB disconnect, device number 50 [ 1331.718676][ T5777] ocfs2: Unmounting device (7,2) on (node local)