last executing test programs: 15m37.293173281s ago: executing program 2 (id=7613): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000100), 0x41000004, 0x0) 15m36.027545093s ago: executing program 2 (id=7632): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fb, 0xfff, 0x32314742, 0x3, 0x8, [{0x8, 0x3}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0xc}, {0x10001, 0x1800000}], 0x6, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 15m35.900706437s ago: executing program 2 (id=7634): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)='\v\x00\x00\x00', 0x4}], 0x1) 15m35.671340443s ago: executing program 2 (id=7638): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 15m34.956867981s ago: executing program 2 (id=7648): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000023c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@flush}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@gid}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@numtail}, {@uni_xlate}, {@shortname_win95}, {@rodir}]}, 0xfe, 0x2a8, &(0x7f0000000240)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) 15m34.21061832s ago: executing program 2 (id=7658): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x20, 0x27, 0x7, "be9301e176d474"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m33.798736511s ago: executing program 32 (id=7658): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x20, 0x27, 0x7, "be9301e176d474"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m54.885189424s ago: executing program 4 (id=8092): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89a2, 0x0) 14m54.590622332s ago: executing program 4 (id=8097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m54.236462461s ago: executing program 4 (id=8102): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) write$evdev(r0, 0x0, 0x0) 14m53.84315334s ago: executing program 4 (id=8107): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 14m53.380912923s ago: executing program 4 (id=8115): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) 14m52.763355668s ago: executing program 4 (id=8122): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x5, 0x0, 0x100001, 0x900, 0x0, 0x1}}) 14m52.30890601s ago: executing program 33 (id=8122): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x5, 0x0, 0x100001, 0x900, 0x0, 0x1}}) 3.987518357s ago: executing program 1 (id=19044): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000800000000000005000600000000000a0080ff00000000fc010000000000000000000000002200000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b000203"], 0xa0}}, 0x0) 3.730877474s ago: executing program 1 (id=19047): syz_usb_connect(0x0, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902300002010080320904000001ffffff00070581031000010904010002ffffff000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.713259835s ago: executing program 0 (id=19049): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 3.416522892s ago: executing program 0 (id=19052): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x6, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0x61}}], 0x18}}], 0x1, 0x0) 3.129919859s ago: executing program 0 (id=19057): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.550871314s ago: executing program 5 (id=19062): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4078) 2.177792624s ago: executing program 5 (id=19065): syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030303030372c6e6f68696464656e2c646973636172642c696f636861727365743d69736f383835392d342c646973636172642c6e6f68696464656e2c666f7263652c696f636861727365743d63703837342c61636c2c646973636172642c73686f776d6574612c00403627c4cf3d4d6bde25a3f2e650aa591753c17e35c646e4ec01e69f8ef78451d96a5ad513040beb8daeb45348143203a1a4e3a2ef8a8502b4c8457c8b9fd345179e"], 0x1, 0x1f788, &(0x7f0000020ac0)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 2.138688385s ago: executing program 3 (id=19066): openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)={[&(0x7f0000000100)='\\\\\x00\x00\x007H\x84\xdf\xa2\x86\xdb\xe1\xd6\x99<\xef\xd2\xd6\xbaz\xe3\x03\xdfi\x88#on\xe2\xb3\x87\xe2\x87\aT\xff\xf5l\x7f\xd6\xc8\xcd\xbee\x83m\x95\xd0-h\x82\x9b+\xb9~uhUnz\x97D!Z@\xa3\xdc@WV)<\b\x1d\xfd\xabx&\xa9U\xd7\xb2\xb0H\'\xd5\x1f\xa3\xdf\xad\xb5\x1f%\n\x82\x9d\x89\xbd\x1bOC\xd1\xaeQ\xb6\xf9\xe4z\xca\x03\xef&\xa8\xd4\x01\xeb\x03\xbd\xe8D\x11 \xbcxH\xaa\xc5\xf6\x7f\x10\x7f\xd5\xaa\xad*\xc8**-\xdd\x9b\xbb\x82]\x12\bOb\x11j\xee\x04QE\x82\xa7S\xc0\xd6e\x8d\x8d\x14Z\ry\xe4_i\xdc\x10\xb3\xab\xd8\xb3z{\xa6Sb\x8e\x91O\xe5*\xb7%\x96\xa4L~\x189=\x96\xe9L\x0f\x8f\xe8C\x859\x87#\xe4\x13\x8f\x1f\xc5r\xabR\x87RF\xe3\xe7\xfc\x0e\xcc\x80\xc0)\x14']}) 1.965659569s ago: executing program 6 (id=19067): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) 1.850367202s ago: executing program 0 (id=19068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) finit_module(r0, 0x0, 0x2) 1.55944755s ago: executing program 6 (id=19069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0xdc, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x800) 1.447144802s ago: executing program 0 (id=19070): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xb, 0x6, "91ed3ffa23033427dd0da5c8350eb686b8bdd0bd00a5b027b04821b88a7e8bf5e0a941abe6f409d8b90fc583c5e761faa93adfd1666719f28a929086f908ba", 0x1e}, 0x60) 1.441191723s ago: executing program 3 (id=19071): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) 1.304280776s ago: executing program 5 (id=19072): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1.15504596s ago: executing program 0 (id=19073): syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001"], 0x0) 1.139331281s ago: executing program 3 (id=19074): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.078434802s ago: executing program 6 (id=19075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}]}, 0x48}}, 0x0) 988.021084ms ago: executing program 1 (id=19076): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x2c, 0x3a, 0x1, 0x7fffb, 0x4, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 897.983557ms ago: executing program 5 (id=19077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) 794.920339ms ago: executing program 6 (id=19078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) 680.000262ms ago: executing program 3 (id=19079): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x1, 0x100, 0x4, 0x6d, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x200009, 0x8, 0xfe9, 0x401, 0x0, 0x2, 0x7, 0x9, 0x148, 0x9, 0x7, 0x6a77, 0x5, 0x0, 0x8]}) 626.106644ms ago: executing program 1 (id=19080): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) 562.446476ms ago: executing program 5 (id=19081): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 479.448538ms ago: executing program 6 (id=19082): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xdce8) 366.531551ms ago: executing program 3 (id=19083): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) 329.926752ms ago: executing program 1 (id=19084): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd9, &(0x7f0000000240), &(0x7f00000003c0)=0x4) 244.018114ms ago: executing program 6 (id=19085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000000)) 174.987815ms ago: executing program 5 (id=19086): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x32, 0x1, 0x1, "3a8e07000034b52ba75088c27891ca55e21f0000000000b2b679d2009800", 0x272e5f7d}) 40.493479ms ago: executing program 1 (id=19087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 3 (id=19088): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): OR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 1511.720301][ T5426] [ 1511.779134][ T5426] xtLookup: xtSearch returned -5 [ 1511.784170][ T5426] free_index: error reading directory table [ 1512.464892][ T5484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14943'. [ 1514.186514][ T5524] Process accounting resumed [ 1514.218649][ T5499] loop5: detected capacity change from 0 to 32768 [ 1514.426826][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1514.426826][ T5499] [ 1514.481151][ T5499] ERROR: (device loop5): remounting filesystem as read-only [ 1514.513222][ T5499] xtLookup: xtSearch returned -5 [ 1514.518949][ T5499] free_index: error reading directory table [ 1514.541602][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1514.541602][ T5499] [ 1514.589081][ T5499] xtLookup: xtSearch returned -5 [ 1514.613205][ T5499] free_index: error reading directory table [ 1514.641501][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1514.641501][ T5499] [ 1514.718428][ T5499] xtLookup: xtSearch returned -5 [ 1514.762766][ T5499] free_index: error reading directory table [ 1514.803233][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1514.803233][ T5499] [ 1514.884200][ T5499] xtLookup: xtSearch returned -5 [ 1514.889228][ T5499] free_index: error reading directory table [ 1514.950862][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1514.950862][ T5499] [ 1515.017986][ T5499] xtLookup: xtSearch returned -5 [ 1515.023009][ T5499] free_index: error reading directory table [ 1515.074079][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1515.074079][ T5499] [ 1515.131854][ T5499] xtLookup: xtSearch returned -5 [ 1515.142056][ T5499] add_index: get/read_metapage failed! [ 1515.147776][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1515.147776][ T5499] [ 1515.160238][ T5543] loop1: detected capacity change from 0 to 512 [ 1515.196416][ T5499] xtLookup: xtSearch returned -5 [ 1515.228996][ T5499] free_index: error reading directory table [ 1515.235096][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1515.235096][ T5499] [ 1515.294651][ T5543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1515.322432][ T5499] xtLookup: xtSearch returned -5 [ 1515.342849][ T5543] Quota error (device loop1): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 1515.364133][ T5499] free_index: error reading directory table [ 1515.433962][ T5499] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1515.433962][ T5499] [ 1515.437480][ T5543] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1515.467620][ T5499] xtLookup: xtSearch returned -5 [ 1515.497541][ T5499] free_index: error reading directory table [ 1515.512867][ T5543] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.14970: Failed to acquire dquot type 0 [ 1515.768772][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1515.889084][ T5528] loop3: detected capacity change from 0 to 32768 [ 1516.081158][ T5528] XFS (loop3): Mounting V5 Filesystem [ 1516.372565][ T22] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1516.402471][ T5528] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1516.503516][ T5528] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1516.579094][ T5528] XFS (loop3): Ending clean mount [ 1516.589999][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 1516.627338][ T22] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1516.665792][ T22] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1516.674573][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.761417][ T5573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14978'. [ 1516.837111][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1516.846327][ T22] usb 7-1: config 1 has no interface number 0 [ 1516.923328][ T22] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1516.951155][ T4283] XFS (loop3): Unmounting Filesystem [ 1516.968440][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.040404][ T22] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1517.245644][ T22] snd_usb_pod 7-1:1.1: set_interface failed [ 1517.252829][ T22] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1517.294121][ T22] snd_usb_pod: probe of 7-1:1.1 failed with error -71 [ 1517.321783][ T5585] netlink: 'syz.1.14984': attribute type 29 has an invalid length. [ 1517.363741][ T22] usb 7-1: USB disconnect, device number 30 [ 1517.392354][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14984'. [ 1517.438070][ T5585] netlink: 'syz.1.14984': attribute type 29 has an invalid length. [ 1517.477421][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14984'. [ 1517.878011][ T5595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14988'. [ 1517.961068][ T5595] netlink: 112 bytes leftover after parsing attributes in process `syz.1.14988'. [ 1518.378778][ T4320] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1518.639301][ T4320] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 1518.668491][ T4320] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1518.713243][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.721403][ T4320] usb 7-1: Product: syz [ 1518.780387][ T4320] usb 7-1: Manufacturer: syz [ 1518.785156][ T4320] usb 7-1: SerialNumber: syz [ 1518.837527][ T4320] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1518.915489][ T4813] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1519.175944][ C0] usb 7-1: ath: unknown panic pattern! [ 1519.411396][ T9425] usb 7-1: USB disconnect, device number 31 [ 1519.446893][ T5633] loop1: detected capacity change from 0 to 64 [ 1519.942645][ T4813] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1519.949893][ T4813] ath9k_htc: Failed to initialize the device [ 1520.142518][ T9425] usb 7-1: ath9k_htc: USB layer deinitialized [ 1520.309443][ T5654] loop5: detected capacity change from 0 to 2048 [ 1520.333030][ T5653] netlink: 52 bytes leftover after parsing attributes in process `syz.6.15014'. [ 1520.531890][ T5654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1520.706936][ T5661] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1520.905641][ T5666] loop1: detected capacity change from 0 to 256 [ 1521.419260][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1521.668603][ T22] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1521.709295][ T22] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1521.741973][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.799966][ T22] usb 4-1: Product: syz [ 1521.804209][ T22] usb 4-1: Manufacturer: syz [ 1521.808846][ T22] usb 4-1: SerialNumber: syz [ 1521.892712][ T22] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1522.048697][ T6631] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1522.310885][ C1] usb 4-1: ath: unknown panic pattern! [ 1522.524083][T10178] usb 4-1: USB disconnect, device number 13 [ 1523.057496][ T6631] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1523.064560][ T6631] ath9k_htc: Failed to initialize the device [ 1523.128818][T10178] usb 4-1: ath9k_htc: USB layer deinitialized [ 1523.213098][ T5722] netlink: 'syz.6.15048': attribute type 1 has an invalid length. [ 1523.221066][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15048'. [ 1523.998336][ T5743] binder: 5742:5743 ioctl c018620b 0 returned -14 [ 1524.435081][ T5746] loop1: detected capacity change from 0 to 8192 [ 1524.481587][ T5755] overlayfs: empty lowerdir [ 1524.536256][ T5746] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1524.648698][ T5746] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 1524.684428][ T5746] FAT-fs (loop1): Filesystem has been set read-only [ 1524.849188][ T4275] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 1526.007650][ T5794] loop6: detected capacity change from 0 to 256 [ 1526.076442][ T4813] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1526.311884][ T4813] usb 1-1: Using ep0 maxpacket: 16 [ 1526.331308][ T4813] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1526.378731][ T4813] usb 1-1: config 0 has no interface number 0 [ 1526.414447][ T4813] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1526.465336][ T4813] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1526.559910][ T4813] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1526.579015][ T4813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.617941][ T4813] usb 1-1: Product: syz [ 1526.657712][ T4813] usb 1-1: Manufacturer: syz [ 1526.662387][ T4813] usb 1-1: SerialNumber: syz [ 1526.701746][ T4813] usb 1-1: config 0 descriptor?? [ 1526.733884][ T5788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1526.753582][ T5788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1526.784353][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15092'. [ 1527.007522][ T5788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1527.027476][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15094'. [ 1527.052742][ T5788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1527.287674][ T4813] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1527.325079][ T4813] asix: probe of 1-1:0.34 failed with error -71 [ 1527.347360][ T5824] loop1: detected capacity change from 0 to 256 [ 1527.376730][ T4813] usb 1-1: USB disconnect, device number 107 [ 1528.421961][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15107'. [ 1528.613474][ T5857] ip6t_srh: unknown srh invflags 4000 [ 1528.711769][ T5859] (unnamed net_device) (uninitialized): up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1528.775231][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1528.839210][ T5859] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 1528.979379][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15115'. [ 1529.652737][ T5874] nvme_fabrics: missing parameter 'nqn=%s' [ 1530.041506][ T5890] [U]  [ 1530.229256][ T5895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15131'. [ 1531.263340][ T5888] loop1: detected capacity change from 0 to 32768 [ 1532.232216][ T5943] netlink: 'syz.3.15154': attribute type 21 has an invalid length. [ 1532.296523][ T5943] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15154'. [ 1532.362940][ T5943] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15154'. [ 1532.763241][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15163'. [ 1533.392195][ T5976] netlink: 'syz.5.15170': attribute type 4 has an invalid length. [ 1533.411476][ T5977] (unnamed net_device) (uninitialized): up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1533.421080][ T5976] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15170'. [ 1533.488989][ T5977] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 1533.620508][ T4813] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1533.917991][ T4813] usb 1-1: Using ep0 maxpacket: 32 [ 1533.925744][ T4813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1533.955238][ T4813] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1533.982077][ T4813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.059976][ T5985] loop5: detected capacity change from 0 to 4096 [ 1534.067484][ T5985] EXT4-fs: Ignoring removed mblk_io_submit option [ 1534.084819][ T4813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1534.144224][ T4813] usb 1-1: string descriptor 0 read error: -22 [ 1534.150571][ T4813] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1534.202541][ T5985] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1534.227818][ T4813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.264545][ T5985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1534.344098][ T4813] usb 1-1: 0:2 : does not exist [ 1534.582723][T10178] usb 1-1: USB disconnect, device number 108 [ 1534.672538][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1534.681719][ T5993] nvme_fabrics: missing parameter 'nqn=%s' [ 1534.727506][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15181'. [ 1534.737025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.296968][ T6015] rdma_rxe: rxe_register_device failed with error -23 [ 1535.304534][ T6015] rdma_rxe: failed to add team_slave_1 [ 1535.878451][ T9425] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1536.100480][ T9425] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.138285][ T9425] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1536.192344][ T9425] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 1536.238154][ T9425] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1536.306129][ T9425] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1536.322699][ T9425] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1536.356692][ T9425] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1536.395924][ T9425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.438132][ T9425] usb 4-1: Product: syz [ 1536.448338][ T9425] usb 4-1: Manufacturer: syz [ 1536.481891][ T9425] usb 4-1: SerialNumber: syz [ 1536.629300][ T6043] SET target dimension over the limit! [ 1536.751989][ T9425] usb 4-1: selecting invalid altsetting 0 [ 1536.765781][ T9425] usb 4-1: selecting invalid altsetting 0 [ 1536.771623][ T9425] usbtest: probe of 4-1:220.1 failed with error -22 [ 1536.879522][ T9425] usb 4-1: USB disconnect, device number 14 [ 1537.163200][ T6056] loop5: detected capacity change from 0 to 64 [ 1537.387705][ T6056] Trying to free block not in datazone [ 1537.558155][ T6062] netlink: 'syz.6.15210': attribute type 4 has an invalid length. [ 1537.582797][ T6062] netlink: 224 bytes leftover after parsing attributes in process `syz.6.15210'. [ 1537.628089][T10178] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1537.860629][T10178] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1537.880120][T10178] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1537.940412][T10178] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1537.970843][T10178] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1538.011182][T10178] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1538.090225][T10178] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1538.134953][T10178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.171527][T10178] usb 2-1: Product: syz [ 1538.195428][T10178] usb 2-1: Manufacturer: syz [ 1538.200133][T10178] usb 2-1: SerialNumber: syz [ 1538.205323][ T6074] netlink: 'syz.6.15216': attribute type 12 has an invalid length. [ 1538.245577][ T6074] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 1538.373669][ T6078] xt_l2tp: v2 tid > 0xffff: 117440512 [ 1538.526167][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1538.558157][T10178] usb 2-1: USB disconnect, device number 12 [ 1538.868457][ T9425] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1539.102539][ T9425] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.148036][ T9425] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1539.177276][ T9425] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 1539.227802][ T9425] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1539.259173][ T9425] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1539.305531][ T9425] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1539.333021][ T9425] usb 7-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1539.373232][ T9425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.411733][ T9425] usb 7-1: Product: syz [ 1539.415971][ T9425] usb 7-1: Manufacturer: syz [ 1539.445110][ T9425] usb 7-1: SerialNumber: syz [ 1539.640022][ T4320] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1539.695246][ T9425] usb 7-1: selecting invalid altsetting 0 [ 1539.749110][ T9425] usb 7-1: selecting invalid altsetting 0 [ 1539.787819][ T9425] usbtest: probe of 7-1:220.1 failed with error -22 [ 1539.875235][ T9425] usb 7-1: USB disconnect, device number 32 [ 1539.888124][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 1539.917333][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1539.983469][ T4320] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1539.992256][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.068550][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1540.110334][ T6106] loop3: detected capacity change from 0 to 512 [ 1540.118969][ T4320] usb 2-1: string descriptor 0 read error: -22 [ 1540.125279][ T4320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1540.191555][ T6106] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1: comm syz.3.15232: invalid block [ 1540.211889][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.275964][ T6106] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.15232: couldn't read orphan inode 11 (err -117) [ 1540.291031][ T4320] usb 2-1: 0:2 : does not exist [ 1540.354591][ T6106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1540.538929][T18314] usb 2-1: USB disconnect, device number 13 [ 1540.626927][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1540.718338][ T4320] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1540.839164][ T6118] netlink: 'syz.3.15237': attribute type 13 has an invalid length. [ 1540.931484][ T4320] usb 7-1: Using ep0 maxpacket: 32 [ 1540.943199][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.995096][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.998714][ T6122] Zero length message leads to an empty skb [ 1541.059439][ T4320] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1541.097348][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.136843][ T4320] usb 7-1: config 0 descriptor?? [ 1541.175140][ T4320] hub 7-1:0.0: USB hub found [ 1541.237909][ T6126] netlink: 572 bytes leftover after parsing attributes in process `syz.3.15240'. [ 1541.335632][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15240'. [ 1541.349805][ T4320] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 1541.553837][ T4320] usbhid 7-1:0.0: can't add hid device: -71 [ 1541.564066][ T4320] usbhid: probe of 7-1:0.0 failed with error -71 [ 1541.653875][ T4320] usb 7-1: USB disconnect, device number 33 [ 1542.021362][ T6145] netlink: 'syz.0.15250': attribute type 13 has an invalid length. [ 1542.862508][ T6165] Process accounting paused [ 1543.308346][ T26] audit: type=1326 audit(1817.109:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.15266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1543.367045][T18314] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1543.480023][ T26] audit: type=1326 audit(1817.162:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.15266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1543.602387][ T26] audit: type=1326 audit(1817.162:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.15266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1543.632856][T18314] usb 6-1: Using ep0 maxpacket: 16 [ 1543.644047][T18314] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1543.726048][T18314] usb 6-1: string descriptor 0 read error: -22 [ 1543.748119][ T26] audit: type=1326 audit(1817.162:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.15266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1543.772664][T18314] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1543.812096][T18314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.173114][T18314] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 1544.223823][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.264098][ T6193] loop1: detected capacity change from 0 to 2048 [ 1544.316109][T18314] usb 6-1: USB disconnect, device number 49 [ 1544.489564][ T6198] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1545.898624][ T9425] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1546.113752][ T6233] netlink: 572 bytes leftover after parsing attributes in process `syz.5.15292'. [ 1546.161532][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15292'. [ 1546.171503][ T9425] usb 7-1: Using ep0 maxpacket: 32 [ 1546.182439][ T9425] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1546.213601][ T9425] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1546.251954][ T9425] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.295975][ T9425] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1546.341579][ T9425] usb 7-1: string descriptor 0 read error: -22 [ 1546.393375][ T9425] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1546.450390][ T9425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.531249][ T9425] usb 7-1: 0:2 : does not exist [ 1546.744818][ T9425] usb 7-1: USB disconnect, device number 34 [ 1546.900024][ T6225] loop1: detected capacity change from 0 to 32768 [ 1547.016849][ T6225] JBD2: Ignoring recovery information on journal [ 1547.133143][ T6225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1547.269559][T18459] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1547.448056][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 1547.498315][T18459] usb 1-1: Using ep0 maxpacket: 32 [ 1547.525325][T18459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.583869][T18459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.613145][T18459] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1547.683404][T18459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.737279][T18459] usb 1-1: config 0 descriptor?? [ 1547.810203][T18459] hub 1-1:0.0: USB hub found [ 1547.994822][T18459] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1548.209293][T18459] usbhid 1-1:0.0: can't add hid device: -71 [ 1548.216088][T18459] usbhid: probe of 1-1:0.0 failed with error -71 [ 1548.313520][T18459] usb 1-1: USB disconnect, device number 109 [ 1549.473089][ T6303] netlink: 'syz.5.15326': attribute type 10 has an invalid length. [ 1550.183576][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15337'. [ 1550.425168][ T6334] netlink: 'syz.3.15341': attribute type 10 has an invalid length. [ 1552.590801][ T6356] loop3: detected capacity change from 0 to 32768 [ 1552.770696][ T6356] JBD2: Ignoring recovery information on journal [ 1552.960015][ T6356] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1553.243828][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 1553.638888][ T6414] loop1: detected capacity change from 0 to 512 [ 1553.705025][ T6414] EXT4-fs: Ignoring removed i_version option [ 1553.753317][ T6414] EXT4-fs: Ignoring removed bh option [ 1553.988249][ T6422] x_tables: unsorted underflow at hook 1 [ 1553.996429][ T6414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1554.048358][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15381'. [ 1554.154027][ T6396] loop6: detected capacity change from 0 to 32768 [ 1554.271154][ T6396] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1554.356997][ T6396] JBD2: Ignoring recovery information on journal [ 1554.408462][T10178] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1554.569581][ T6396] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1554.608670][T10178] usb 2-1: Using ep0 maxpacket: 8 [ 1554.615815][T10178] usb 2-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1554.651198][T10178] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1554.728109][T10178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.783929][T10178] usb 2-1: config 0 descriptor?? [ 1554.822319][T10178] usb 2-1: bad CDC descriptors [ 1554.828646][T10178] usb 2-1: bad CDC descriptors [ 1554.877932][T10178] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 1554.917409][T10178] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 1554.956318][T10178] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 1555.064162][T10178] usb 2-1: USB disconnect, device number 14 [ 1555.075412][T22566] ocfs2: Unmounting device (7,6) on (node local) [ 1555.687902][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1555.985117][ T6453] netlink: 'syz.0.15393': attribute type 3 has an invalid length. [ 1555.993003][ T6453] netlink: 'syz.0.15393': attribute type 1 has an invalid length. [ 1556.394954][ T6440] loop5: detected capacity change from 0 to 32768 [ 1556.525375][ T6440] JBD2: Ignoring recovery information on journal [ 1556.748578][ T6440] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1557.075576][ T6482] xt_NFQUEUE: number of total queues is 0 [ 1557.103216][T21372] ocfs2: Unmounting device (7,5) on (node local) [ 1557.113299][ T6483] netlink: 'syz.0.15404': attribute type 4 has an invalid length. [ 1557.508472][ T6490] netlink: 'syz.1.15408': attribute type 3 has an invalid length. [ 1557.526993][ T6493] SET target dimension over the limit! [ 1557.566837][ T6490] netlink: 'syz.1.15408': attribute type 1 has an invalid length. [ 1558.228926][ T6508] tmpfs: Bad value for 'mpol' [ 1558.587524][ T6518] loop3: detected capacity change from 0 to 8 [ 1558.845635][ T6523] netlink: 'syz.5.15424': attribute type 21 has an invalid length. [ 1558.966463][ T6526] netlink: 'syz.3.15426': attribute type 2 has an invalid length. [ 1558.999940][ T6526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15426'. [ 1559.638534][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15434'. [ 1560.150457][ T6520] loop1: detected capacity change from 0 to 32768 [ 1560.227052][ T6520] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1560.684400][ T6566] ieee802154 phy1 wpan1: encryption failed: -22 [ 1560.900659][ T4505] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1561.100729][ T6579] tmpfs: Bad value for 'mpol' [ 1562.009573][ T6600] ieee802154 phy1 wpan1: encryption failed: -22 [ 1562.249178][ T6572] loop6: detected capacity change from 0 to 32768 [ 1562.449445][ T6572] JBD2: Ignoring recovery information on journal [ 1562.500646][ T6611] comedi comedi2: board detection failed [ 1562.542589][ T6614] loop3: detected capacity change from 0 to 256 [ 1562.603089][ T6572] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1562.688588][ T6614] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1562.805693][ T6614] overlayfs: filesystem on './file0' not supported [ 1563.033316][T22566] ocfs2: Unmounting device (7,6) on (node local) [ 1563.502943][ T6639] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1563.636531][ T6642] loop1: detected capacity change from 0 to 256 [ 1564.338785][ T6659] netlink: 'syz.1.15487': attribute type 27 has an invalid length. [ 1564.396387][ T6659] netlink: 'syz.1.15487': attribute type 3 has an invalid length. [ 1564.452143][ T6661] netlink: 'syz.5.15488': attribute type 1 has an invalid length. [ 1565.126116][ T6681] loop5: detected capacity change from 0 to 512 [ 1565.144560][ T9425] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1565.240326][ T6678] loop3: detected capacity change from 0 to 4096 [ 1565.304334][ T6678] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1565.377261][ T9425] usb 1-1: Using ep0 maxpacket: 8 [ 1565.382726][ T6681] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1565.438252][ T9425] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.463921][ T9425] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1565.528544][ T9425] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1565.605451][ T9425] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1565.614680][ T9425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.695756][ T9425] usb 1-1: Product: syz [ 1565.719466][ T9425] usb 1-1: Manufacturer: syz [ 1565.749840][ T9425] usb 1-1: SerialNumber: syz [ 1565.769949][ T4283] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 1565.779766][ T6673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1565.780613][ T4283] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1565.795665][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1565.826572][ T4283] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 1566.035362][ T9425] usb 1-1: MIDIStreaming interface descriptor not found [ 1566.132194][ T9425] usb 1-1: USB disconnect, device number 110 [ 1566.614016][ T6705] netlink: 'syz.6.15508': attribute type 10 has an invalid length. [ 1566.796556][ T6711] cgroup: Name too long [ 1567.136928][ T6719] loop5: detected capacity change from 0 to 256 [ 1567.205947][ T6715] loop6: detected capacity change from 0 to 4096 [ 1567.227675][ T6719] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1567.268006][ T6715] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1567.340303][ T6719] overlayfs: filesystem on './file0' not supported [ 1567.749773][T22566] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22. [ 1567.756295][T22566] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1567.805681][T22566] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 1568.074140][ T6731] device veth5 entered promiscuous mode [ 1568.396583][ T6736] netlink: 'syz.3.15523': attribute type 10 has an invalid length. [ 1568.848332][ T6755] loop1: detected capacity change from 0 to 256 [ 1569.005586][ T6755] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1569.101673][ T6755] overlayfs: filesystem on './file0' not supported [ 1569.531502][ T6771] device veth7 entered promiscuous mode [ 1570.187126][ T6791] netlink: 'syz.1.15548': attribute type 21 has an invalid length. [ 1570.195159][ T6791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15548'. [ 1571.507914][ T6822] Process accounting resumed [ 1571.628169][ T6793] loop5: detected capacity change from 0 to 32768 [ 1572.016552][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15572'. [ 1572.081369][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15572'. [ 1572.149272][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15574'. [ 1572.835382][ T26] audit: type=1326 audit(1848.101:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.1.15583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1572.901890][ T6862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15584'. [ 1572.916156][ T6865] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15585'. [ 1572.946253][ T26] audit: type=1326 audit(1848.153:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.1.15583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1573.066400][ T26] audit: type=1326 audit(1848.153:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.1.15583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1573.216685][ T26] audit: type=1326 audit(1848.153:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.1.15583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1573.666283][T18459] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1573.689159][ T6887] loop5: detected capacity change from 0 to 64 [ 1573.873248][T18459] usb 1-1: Using ep0 maxpacket: 8 [ 1573.896029][T18459] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1573.940329][T18459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.995825][T18459] usb 1-1: Product: syz [ 1574.006875][T18459] usb 1-1: Manufacturer: syz [ 1574.011573][T18459] usb 1-1: SerialNumber: syz [ 1574.075607][T18459] usb 1-1: config 0 descriptor?? [ 1574.106736][T18459] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1574.399955][ T6903] loop5: detected capacity change from 0 to 512 [ 1574.458491][ T6907] netlink: 'syz.1.15605': attribute type 27 has an invalid length. [ 1574.493688][T18459] gspca_sq930x: ucbus_write failed -71 [ 1574.529221][ T6911] xt_cgroup: xt_cgroup: no path or classid specified [ 1574.561637][ T6903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1574.626403][ T6903] UBIFS error (pid: 6903): cannot open "./file1", error -22 [ 1574.763715][T18459] gspca_sq930x: Sensor ov9630 not yet treated [ 1574.780529][T18459] sq930x: probe of 1-1:0.0 failed with error -22 [ 1574.784409][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1574.826907][T18459] usb 1-1: USB disconnect, device number 111 [ 1575.363655][T18314] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1575.570503][ T6937] netlink: 9 bytes leftover after parsing attributes in process `syz.0.15618'. [ 1575.624772][T18314] usb 6-1: Using ep0 maxpacket: 8 [ 1575.633427][T18314] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1575.663602][T18314] usb 6-1: config 2 has no interface number 0 [ 1575.690051][T18314] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1575.721550][T18314] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1575.732634][ T6939] loop3: detected capacity change from 0 to 1024 [ 1575.756588][ T6941] loop1: detected capacity change from 0 to 512 [ 1575.778184][T18314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.838603][T18314] usb 6-1: Product: syz [ 1575.842844][T18314] usb 6-1: Manufacturer: syz [ 1575.896283][T18314] usb 6-1: SerialNumber: syz [ 1576.122610][ T6941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1576.361942][T18314] ch9200: probe of 6-1:2.31 failed with error -22 [ 1576.407141][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1576.424029][T18314] usb 6-1: USB disconnect, device number 50 [ 1576.639320][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15627'. [ 1577.391279][ T26] audit: type=1400 audit(1852.888:455): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=6979 comm="syz.3.15636" [ 1577.585208][ T9425] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1577.818805][ T9425] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1577.845555][ T9425] usb 7-1: config 0 has no interface number 0 [ 1577.908792][ T9425] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1577.935986][ T9425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.978730][ T9425] usb 7-1: Product: syz [ 1577.983053][ T9425] usb 7-1: Manufacturer: syz [ 1578.026140][ T9425] usb 7-1: SerialNumber: syz [ 1578.046828][ T9425] usb 7-1: config 0 descriptor?? [ 1578.226466][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15646'. [ 1578.246037][T18459] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1578.436163][T18459] usb 4-1: Using ep0 maxpacket: 16 [ 1578.447255][T18459] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1578.467056][ T9425] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1578.497091][ T9425] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1578.530338][T18459] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1578.556325][ T9425] asix: probe of 7-1:0.251 failed with error -5 [ 1578.563008][T18459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.606290][T18459] usb 4-1: Product: syz [ 1578.607606][ T9425] usb 7-1: USB disconnect, device number 35 [ 1578.645255][T18459] usb 4-1: Manufacturer: syz [ 1578.649929][T18459] usb 4-1: SerialNumber: syz [ 1578.691280][T18459] r8152-cfgselector 4-1: config 0 descriptor?? [ 1578.989175][ T7007] netlink: 68 bytes leftover after parsing attributes in process `syz.5.15651'. [ 1579.035346][ T6981] loop1: detected capacity change from 0 to 40427 [ 1579.126839][T18459] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1579.140561][ T6981] F2FS-fs (loop1): invalid crc value [ 1579.160868][T18459] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 1579.284788][ T6981] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1579.485789][ T6981] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1579.607832][ T6981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1580.416147][ T26] audit: type=1326 audit(1856.059:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.6.15666" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1580.508169][ T26] audit: type=1326 audit(1856.059:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.6.15666" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1580.581487][ T7045] loop1: detected capacity change from 0 to 64 [ 1580.676522][ T26] audit: type=1326 audit(1856.090:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.6.15666" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1580.827031][ T26] audit: type=1326 audit(1856.090:459): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.6.15666" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1580.975954][ T26] audit: type=1326 audit(1856.090:460): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.6.15666" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1581.380453][T10178] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1581.589455][T10178] usb 2-1: Using ep0 maxpacket: 32 [ 1581.606403][T10178] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1581.661837][T10178] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1581.711136][T10178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.759796][T10178] usb 2-1: Product: syz [ 1581.784244][T10178] usb 2-1: Manufacturer: syz [ 1581.788922][T10178] usb 2-1: SerialNumber: syz [ 1581.831986][ T7075] loop6: detected capacity change from 0 to 256 [ 1581.856698][T10178] usb 2-1: config 0 descriptor?? [ 1581.864635][ T7057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1581.902656][T10178] hub 2-1:0.0: bad descriptor, ignoring hub [ 1581.922505][T10178] hub: probe of 2-1:0.0 failed with error -5 [ 1581.950787][T10178] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input98 [ 1582.284510][T10178] usb 2-1: USB disconnect, device number 15 [ 1582.295479][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1582.432634][ T7088] loop6: detected capacity change from 0 to 64 [ 1582.535261][ T7088] syz.6.15687: attempt to access beyond end of device [ 1582.535261][ T7088] loop6: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1582.605515][ T7088] Buffer I/O error on dev loop6, logical block 22533, async page read [ 1582.689073][ T7088] syz.6.15687: attempt to access beyond end of device [ 1582.689073][ T7088] loop6: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1582.760395][ T7088] Buffer I/O error on dev loop6, logical block 22533, async page read [ 1583.250697][ T26] audit: type=1326 audit(1859.040:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.5.15697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1583.370261][ T26] audit: type=1326 audit(1859.082:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.5.15697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1583.503082][ T26] audit: type=1326 audit(1859.082:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.5.15697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1583.543785][ T7114] netlink: 'syz.3.15700': attribute type 15 has an invalid length. [ 1583.598862][ T7114] netlink: 'syz.3.15700': attribute type 7 has an invalid length. [ 1583.628948][ T7114] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15700'. [ 1583.665015][ T26] audit: type=1326 audit(1859.082:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.5.15697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1583.768518][ T7118] tmpfs: Bad value for 'mpol' [ 1583.782986][ T26] audit: type=1326 audit(1859.082:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.5.15697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1584.130114][ T7131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15708'. [ 1584.217655][ T7131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15708'. [ 1584.496514][ T7140] netlink: 'syz.6.15712': attribute type 29 has an invalid length. [ 1584.496940][ T7140] netlink: 'syz.6.15712': attribute type 29 has an invalid length. [ 1584.510759][ T7141] loop5: detected capacity change from 0 to 256 [ 1584.635190][ T7141] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1585.483178][ T7165] loop6: detected capacity change from 0 to 736 [ 1586.987034][ T7210] loop1: detected capacity change from 0 to 512 [ 1587.208078][ T7210] EXT4-fs (loop1): 1 truncate cleaned up [ 1587.254009][ T7210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1587.296460][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1587.300620][ T4815] kworker/dying (4815) used greatest stack depth: 15488 bytes left [ 1587.534544][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1587.570526][ T7224] netlink: 'syz.0.15753': attribute type 7 has an invalid length. [ 1587.756105][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15756'. [ 1587.830252][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15755'. [ 1588.255655][ T7244] loop1: detected capacity change from 0 to 1024 [ 1588.338491][ T7244] EXT4-fs (loop1): barriers disabled [ 1588.345609][ T7244] JBD2: no valid journal superblock found [ 1588.423695][ T7244] EXT4-fs (loop1): error loading journal [ 1589.199115][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15772'. [ 1589.854985][ T7278] loop1: detected capacity change from 0 to 64 [ 1589.938026][ T7278] hfs: keylen 40 too large [ 1590.008884][ T22] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1590.202038][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1590.235536][ T22] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1590.270563][ T22] usb 4-1: config 0 has no interface number 0 [ 1590.306692][ T22] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1590.342086][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.369918][ T22] usb 4-1: Product: syz [ 1590.389107][ T22] usb 4-1: Manufacturer: syz [ 1590.417395][ T22] usb 4-1: SerialNumber: syz [ 1590.457571][ T22] usb 4-1: config 0 descriptor?? [ 1590.681778][ T22] usb 4-1: selecting invalid altsetting 1 [ 1590.687721][ T22] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1590.742476][ T22] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1590.779036][ T22] speedtch: probe of 4-1:0.1 failed with error -22 [ 1590.827707][ T22] usb 4-1: USB disconnect, device number 16 [ 1591.363562][ T7312] xt_nat: multiple ranges no longer supported [ 1591.389659][ T7313] loop5: detected capacity change from 0 to 512 [ 1591.447689][ T7313] EXT4-fs: Ignoring removed bh option [ 1591.547156][ T7313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1591.601462][ T7313] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1591.672537][ T7313] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1591.732797][ T7313] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1591.791206][ T7313] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1591.799188][ T7313] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0080] [ 1591.885287][ T7313] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1591.947682][ T7313] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.15796: bg 0: block 34: padding at end of block bitmap is not set [ 1592.053197][ T7313] __quota_error: 8 callbacks suppressed [ 1592.053217][ T7313] Quota error (device loop5): write_blk: dquota write failed [ 1592.115065][ T7313] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1592.159370][ T7313] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.15796: Failed to acquire dquot type 1 [ 1592.229996][ T7313] EXT4-fs (loop5): 1 truncate cleaned up [ 1592.285538][ T7313] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1592.532315][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1593.260507][ T7357] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15817'. [ 1593.503087][ T7361] cgroup: none used incorrectly [ 1594.163964][ T7378] netlink: 'syz.0.15826': attribute type 13 has an invalid length. [ 1594.418929][ T7380] netlink: 'syz.3.15829': attribute type 1 has an invalid length. [ 1594.426820][ T7380] netlink: 'syz.3.15829': attribute type 2 has an invalid length. [ 1594.514856][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15829'. [ 1594.892943][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15835'. [ 1595.014246][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15838'. [ 1595.034626][ T7399] loop1: detected capacity change from 0 to 512 [ 1595.159137][ T7399] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1595.174705][ T7397] netlink: 'syz.6.15838': attribute type 8 has an invalid length. [ 1595.192584][ T7399] FAT-fs (loop1): Filesystem has been set read-only [ 1595.199472][ T7399] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1595.324256][ T7399] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1595.638893][ T7406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1595.705392][ T7406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1595.982622][ T7412] libceph: resolve '9.' (ret=-3): failed [ 1596.074799][ T7417] loop6: detected capacity change from 0 to 512 [ 1596.136031][ T7417] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1596.190546][ T7417] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0) [ 1596.429453][ T7392] loop3: detected capacity change from 0 to 32768 [ 1596.553202][ T7392] JBD2: Ignoring recovery information on journal [ 1596.798955][ T7392] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1596.860585][T18459] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1597.084598][T18459] usb 7-1: Using ep0 maxpacket: 32 [ 1597.093747][T18459] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1597.157807][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 1597.168533][T18459] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1597.217550][T18459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.247903][T18459] usb 7-1: Product: syz [ 1597.252137][T18459] usb 7-1: Manufacturer: syz [ 1597.256765][T18459] usb 7-1: SerialNumber: syz [ 1597.320373][T18459] usb 7-1: config 0 descriptor?? [ 1597.359097][ T7425] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1597.382791][T18459] hub 7-1:0.0: bad descriptor, ignoring hub [ 1597.388859][T18459] hub: probe of 7-1:0.0 failed with error -5 [ 1597.425993][T18459] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input100 [ 1597.442835][ T4320] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1597.669455][ T9425] usb 7-1: USB disconnect, device number 36 [ 1597.675571][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1597.697600][ T4320] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 1597.706470][ T4505] udevd[4505]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1597.714665][ T4320] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 1597.772150][ T4320] usb 2-1: config 0 has no interface number 0 [ 1597.809948][ T4320] usb 2-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 1597.876792][ T4320] usb 2-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1597.929072][ T4320] usb 2-1: config 0 interface 115 has no altsetting 0 [ 1597.952882][ T4320] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1597.990749][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.028368][ T4320] usb 2-1: config 0 descriptor?? [ 1598.071962][ T4320] ftdi_sio 2-1:0.115: FTDI USB Serial Device converter detected [ 1598.125513][ T4320] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1598.315740][ T4320] usb 2-1: USB disconnect, device number 16 [ 1598.322555][ T4320] ftdi_sio 2-1:0.115: device disconnected [ 1598.929814][ T7468] loop3: detected capacity change from 0 to 512 [ 1599.040003][ T7468] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1599.104540][ T7475] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15875'. [ 1599.816742][ T7494] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15883'. [ 1600.196730][ T7498] Process accounting paused [ 1600.423771][ T26] audit: type=1326 audit(1877.066:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1600.509332][ T7511] loop6: detected capacity change from 0 to 512 [ 1600.544018][ T26] audit: type=1326 audit(1877.119:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1600.593678][ T7511] EXT4-fs: Ignoring removed bh option [ 1600.714716][ T26] audit: type=1326 audit(1877.119:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1600.723898][ T7511] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1600.833926][ T7511] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1600.878197][ T7511] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1600.893771][ T26] audit: type=1326 audit(1877.119:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1600.943532][ T7511] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1601.003632][ T26] audit: type=1326 audit(1877.119:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1601.047199][ T7511] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1601.075033][ T7511] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0080] [ 1601.113491][ T26] audit: type=1326 audit(1877.119:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1601.154966][ T7511] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1601.195541][ T7511] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.15891: bg 0: block 34: padding at end of block bitmap is not set [ 1601.251500][ T26] audit: type=1326 audit(1877.119:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1601.288225][ T7511] Quota error (device loop6): write_blk: dquota write failed [ 1601.295734][ T7511] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1601.388321][ T7511] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.15891: Failed to acquire dquot type 1 [ 1601.420573][ T26] audit: type=1326 audit(1877.119:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.15892" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1601.496372][ T7511] EXT4-fs (loop6): 1 truncate cleaned up [ 1601.524703][ T7511] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1601.568639][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1601.650961][ T7535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1601.750536][T22566] EXT4-fs (loop6): unmounting filesystem. [ 1601.778919][ T7541] loop5: detected capacity change from 0 to 164 [ 1602.563359][ T7558] netlink: 798 bytes leftover after parsing attributes in process `syz.1.15915'. [ 1602.711966][ T7562] netlink: 'syz.6.15918': attribute type 1 has an invalid length. [ 1602.739896][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15918'. [ 1603.237995][ T7576] nfs: Deprecated parameter 'nointr' [ 1603.620384][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15927'. [ 1604.097009][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1604.337767][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 1604.352318][ T22] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1604.398982][ T22] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1604.429131][ T7570] loop5: detected capacity change from 0 to 32768 [ 1604.457609][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.504760][ T7600] netlink: 'syz.6.15937': attribute type 9 has an invalid length. [ 1604.505293][ T22] usb 2-1: Product: syz [ 1604.551891][ T22] usb 2-1: Manufacturer: syz [ 1604.572624][ T22] usb 2-1: SerialNumber: syz [ 1604.582847][ T7600] netlink: 'syz.6.15937': attribute type 7 has an invalid length. [ 1604.611447][ T22] r8152-cfgselector 2-1: config 0 descriptor?? [ 1604.621601][ T7600] netlink: 'syz.6.15937': attribute type 8 has an invalid length. [ 1604.653653][ T7570] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1604.684440][ T7600] netlink: 'syz.6.15937': attribute type 13 has an invalid length. [ 1604.692901][ T7570] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1604.737772][ T7570] BTRFS info (device loop5): using free space tree [ 1604.879373][ T22] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1604.888805][ T2392] usb 2-1: config 0 descriptor?? [ 1605.023867][ T7623] netlink: 'syz.3.15941': attribute type 1 has an invalid length. [ 1605.080164][T10178] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1605.085358][ T7570] BTRFS info (device loop5): enabling ssd optimizations [ 1605.104214][ T2392] usb 2-1: can't set config #0, error -71 [ 1605.120147][ T4320] usb 2-1: USB disconnect, device number 17 [ 1605.277622][T10178] usb 1-1: Using ep0 maxpacket: 8 [ 1605.284485][T10178] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1605.320860][T10178] usb 1-1: config 2 has no interface number 0 [ 1605.344196][T10178] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1605.407056][T10178] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1605.411385][T21372] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1605.446242][T10178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.489051][T10178] usb 1-1: Product: syz [ 1605.493400][T10178] usb 1-1: Manufacturer: syz [ 1605.525505][T10178] usb 1-1: SerialNumber: syz [ 1606.001682][T10178] ch9200: probe of 1-1:2.31 failed with error -22 [ 1606.038796][T10178] usb 1-1: USB disconnect, device number 112 [ 1607.059675][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1607.059692][ T26] audit: type=1326 audit(1884.037:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1607.227003][ T7671] loop5: detected capacity change from 0 to 4096 [ 1607.230299][ T26] audit: type=1326 audit(1884.037:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1607.284427][ T7671] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1607.411161][ T26] audit: type=1326 audit(1884.037:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1607.573018][ T7671] ntfs3: loop5: failed to convert "c46c" to cp775 [ 1607.611687][ T26] audit: type=1326 audit(1884.069:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1607.761542][ T26] audit: type=1326 audit(1884.069:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1607.901861][ T26] audit: type=1326 audit(1884.069:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1608.078022][ T26] audit: type=1326 audit(1884.069:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1608.212085][ T26] audit: type=1326 audit(1884.069:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1608.324433][ T26] audit: type=1326 audit(1884.069:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.15958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1609.190771][ T7716] loop3: detected capacity change from 0 to 16 [ 1609.239055][ T7716] erofs: (device loop3): mounted with root inode @ nid 36. [ 1609.276611][ T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 1609.282195][ T7716] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 1609.283223][ T26] audit: type=1800 audit(1886.368:495): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15978" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1609.583239][ T7723] IPv6: NLM_F_CREATE should be specified when creating new route [ 1609.583322][ T7723] netlink: 6 bytes leftover after parsing attributes in process `syz.1.15982'. [ 1610.154343][ T7739] loop1: detected capacity change from 0 to 256 [ 1610.279756][ T7739] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1610.424822][ T7739] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 1610.943440][ T7752] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1611.258579][ T7771] loop3: detected capacity change from 0 to 512 [ 1611.445864][ T7771] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1611.509209][ T7771] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1611.593584][ T7771] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1611.631124][ T7771] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.16004: attempt to clear invalid blocks 2 len 1 [ 1611.680705][ T7771] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.16004: invalid indirect mapped block 1819239214 (level 0) [ 1611.750250][ T7771] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.16004: invalid indirect mapped block 1819239214 (level 1) [ 1611.800058][ T7771] EXT4-fs (loop3): 1 truncate cleaned up [ 1611.825471][ T7771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1611.904318][ T7766] ceph: No mds server is up or the cluster is laggy [ 1611.963950][ T7771] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1612.059680][ T7771] EXT4-fs error (device loop3): __ext4_remount:6650: comm syz.3.16004: Abort forced by user [ 1612.148022][ T7771] EXT4-fs (loop3): Remounting filesystem read-only [ 1612.155279][ T7771] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 1612.369382][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1613.005532][ T14] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1613.083410][T18314] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1613.171838][ T7814] loop5: detected capacity change from 0 to 256 [ 1613.178359][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16022'. [ 1613.233908][ T14] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 1613.269403][ T14] usb 2-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1613.326580][ T14] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1613.345907][T18314] usb 7-1: Using ep0 maxpacket: 32 [ 1613.352775][T18314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 1613.383861][ T14] usb 2-1: config 1 has no interface number 3 [ 1613.390042][ T14] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1613.415749][T18314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 1613.481170][ T14] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1613.493677][T18314] usb 7-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1613.532240][T18314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.542875][ T14] usb 2-1: config 1 interface 2 has no altsetting 0 [ 1613.561129][T18314] usb 7-1: Product: syz [ 1613.567913][ T14] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1613.583375][T18314] usb 7-1: Manufacturer: syz [ 1613.593094][T18314] usb 7-1: SerialNumber: syz [ 1613.601035][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.628782][T18314] usb 7-1: config 0 descriptor?? [ 1613.643602][ T14] usb 2-1: Product: syz [ 1613.647838][ T14] usb 2-1: Manufacturer: syz [ 1613.669344][ T14] usb 2-1: SerialNumber: syz [ 1613.851616][T18314] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input101 [ 1613.942917][ T14] usb 2-1: Can't get UAC3 power state for id 10 [ 1613.975602][ T14] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1614.027618][ T14] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1614.053683][ T22] usb 7-1: USB disconnect, device number 37 [ 1614.080019][ T4813] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1614.280839][ T4813] usb 6-1: Using ep0 maxpacket: 8 [ 1614.290106][ T4813] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1614.318016][ T14] usb 2-1: USB disconnect, device number 18 [ 1614.335837][ T4813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.378706][ T4813] usb 6-1: config 0 has no interface number 0 [ 1614.417299][ T4813] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1614.475341][ T4813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.510542][ T4813] usb 6-1: Product: syz [ 1614.554361][ T4813] usb 6-1: Manufacturer: syz [ 1614.583670][ T4813] usb 6-1: SerialNumber: syz [ 1614.602840][ T4813] usb 6-1: config 0 descriptor?? [ 1614.640333][ T7833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16032'. [ 1614.831644][ T4813] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1614.851076][ T4813] usb 6-1: No valid video chain found. [ 1615.040181][ T14] usb 6-1: USB disconnect, device number 51 [ 1615.272594][ T7845] loop6: detected capacity change from 0 to 2048 [ 1615.322088][ T7845] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1615.390599][ T14] libceph: connect (1)127.0.0.1:6789 error -113 [ 1615.421703][ T14] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1615.461982][ T7845] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1615.480832][ T7845] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1615.500762][ T7845] UDF-fs: Scanning with blocksize 512 failed [ 1615.538249][ T7845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1615.769786][ T14] libceph: connect (1)127.0.0.1:6789 error -113 [ 1615.779873][ T7857] loop5: detected capacity change from 0 to 8 [ 1615.786414][ T14] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1616.011150][ T7860] usb usb8: usbfs: process 7860 (syz.1.16043) did not claim interface 0 before use [ 1616.033937][ T7862] netlink: 'syz.0.16045': attribute type 21 has an invalid length. [ 1616.069483][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16045'. [ 1616.111179][ T7849] ceph: No mds server is up or the cluster is laggy [ 1616.617432][ T7875] loop5: detected capacity change from 0 to 128 [ 1617.464021][ T7898] netlink: 220 bytes leftover after parsing attributes in process `syz.1.16063'. [ 1617.512542][ T7899] loop6: detected capacity change from 0 to 256 [ 1617.644439][ T7899] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1618.846259][ T7937] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 1619.061320][ T14] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1619.273972][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1619.284264][ T14] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1619.328382][ T14] usb 6-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1619.387811][ T14] usb 6-1: config 0 has no interface number 0 [ 1619.436101][ T14] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1619.477364][ T14] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1619.566254][ T14] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1619.621559][ T14] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1619.688486][ T14] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1619.727104][ T14] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1619.773007][ T14] usb 6-1: Manufacturer: syz [ 1619.810899][ T14] usb 6-1: config 0 descriptor?? [ 1619.841509][ T14] hub 6-1:0.52: bad descriptor, ignoring hub [ 1619.914170][ T14] hub: probe of 6-1:0.52 failed with error -5 [ 1619.992562][ T7962] loop3: detected capacity change from 0 to 512 [ 1620.046531][ T14] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input102 [ 1620.254052][ T14] usb 6-1: USB disconnect, device number 52 [ 1620.316166][ T7962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1620.322680][ T26] audit: type=1326 audit(1897.959:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.6.16098" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1620.438859][ T7962] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1620.488413][ T26] audit: type=1326 audit(1898.032:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.6.16098" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1620.617185][ T26] audit: type=1326 audit(1898.032:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.6.16098" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1620.752435][ T26] audit: type=1326 audit(1898.032:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.6.16098" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1620.809870][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1621.350901][ T22] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1621.547837][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 1621.556315][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.566977][T18459] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1621.601394][ T22] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1621.630605][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.679714][ T22] usb 1-1: Product: syz [ 1621.684130][ T22] usb 1-1: Manufacturer: syz [ 1621.688769][ T22] usb 1-1: SerialNumber: syz [ 1621.733969][ T22] usb 1-1: config 0 descriptor?? [ 1621.783023][ T22] usb 1-1: bad CDC descriptors [ 1621.790735][T18459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1621.811530][ T22] usb 1-1: unsupported MDLM descriptors [ 1621.817503][T18459] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1621.880655][T18459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1621.917862][T18459] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1621.946449][T18459] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1622.006336][T18459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.040007][ T22] usb 1-1: USB disconnect, device number 113 [ 1622.055461][T18459] usb 7-1: config 0 descriptor?? [ 1622.305115][T18459] hdpvr 7-1:0.0: firmware version 0xd dated [ 1622.505603][T18459] hdpvr 7-1:0.0: device init failed [ 1622.512748][T18459] hdpvr: probe of 7-1:0.0 failed with error -12 [ 1622.537448][ T8011] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1622.568106][T18459] usb 7-1: USB disconnect, device number 38 [ 1622.596690][ T7994] loop1: detected capacity change from 0 to 32768 [ 1622.758482][ T7994] XFS (loop1): Mounting V5 Filesystem [ 1623.131322][ T7994] XFS (loop1): Ending clean mount [ 1623.231560][ T7994] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 1623.404431][ T4275] XFS (loop1): Unmounting Filesystem [ 1624.149909][ T8052] SET target dimension over the limit! [ 1624.216945][ T26] audit: type=1326 audit(1902.053:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.6.16136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1624.328181][ T26] audit: type=1326 audit(1902.084:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.6.16136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1624.471136][ T26] audit: type=1326 audit(1902.084:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.6.16136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1624.584880][ T26] audit: type=1326 audit(1902.095:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.6.16136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1624.835571][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16141'. [ 1624.894352][ T8064] loop5: detected capacity change from 0 to 4096 [ 1624.933352][ T8064] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1624.976335][ T8073] loop3: detected capacity change from 0 to 256 [ 1625.050647][ T8070] netlink: set zone limit has 4 unknown bytes [ 1625.254665][ T8064] ntfs: volume version 3.1. [ 1625.421687][ T8082] loop1: detected capacity change from 0 to 64 [ 1626.121588][ T8098] netlink: 260 bytes leftover after parsing attributes in process `syz.5.16154'. [ 1627.116099][ T26] audit: type=1326 audit(1905.087:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1627.243469][ T8125] loop5: detected capacity change from 0 to 1024 [ 1627.267126][ T26] audit: type=1326 audit(1905.119:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1627.385510][ T26] audit: type=1326 audit(1905.119:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1627.432647][ T8128] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16168'. [ 1627.514445][ T26] audit: type=1326 audit(1905.150:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1627.606547][ T2408] hfsplus: b-tree write err: -5, ino 25 [ 1627.612501][ T2408] hfsplus: b-tree write err: -5, ino 4 [ 1627.619927][ T8132] xt_ecn: cannot match TCP bits for non-tcp packets [ 1627.633377][ T2408] hfsplus: b-tree write err: -5, ino 2 [ 1627.709601][ T26] audit: type=1326 audit(1905.150:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1627.852481][ T26] audit: type=1326 audit(1905.150:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1627.986508][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16173'. [ 1628.009876][ T26] audit: type=1326 audit(1905.150:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1628.123104][ T26] audit: type=1326 audit(1905.150:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.16166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1628.601748][ T8154] loop6: detected capacity change from 0 to 4096 [ 1628.652556][ T128] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1628.667341][ T8154] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1628.700503][ T14] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1628.852524][ T128] usb 1-1: Using ep0 maxpacket: 32 [ 1628.863960][ T128] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.894617][ T128] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.959059][ T14] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1628.995257][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.016282][ T128] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1629.035827][ T128] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1629.063557][ T14] usb 2-1: config 0 descriptor?? [ 1629.100282][ T128] usb 1-1: Product: syz [ 1629.109764][ T128] usb 1-1: Manufacturer: syz [ 1629.163031][ T128] hub 1-1:4.0: USB hub found [ 1629.356798][ T128] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 1629.461882][ T6631] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1629.473096][ T14] usb 2-1: Cannot set MAC address [ 1629.479572][ T14] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1629.528649][ T14] usb 2-1: USB disconnect, device number 19 [ 1629.681322][ T6631] usb 4-1: Using ep0 maxpacket: 8 [ 1629.689065][ T6631] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1629.691314][ T128] usb 1-1: USB disconnect, device number 114 [ 1629.726072][ T6631] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1629.775173][ T6631] usb 4-1: config 0 has no interface number 0 [ 1629.794557][ T6631] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1629.837137][ T6631] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1629.903430][ T6631] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.960539][ T6631] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1630.011299][ T6631] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1630.039751][ T6631] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1630.080858][ T6631] usb 4-1: Manufacturer: syz [ 1630.118514][ T6631] usb 4-1: config 0 descriptor?? [ 1630.136357][ T8147] Process accounting resumed [ 1630.154614][ T6631] hub 4-1:0.52: bad descriptor, ignoring hub [ 1630.202109][ T6631] hub: probe of 4-1:0.52 failed with error -5 [ 1630.243450][ T14] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1630.346001][ T6631] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input104 [ 1630.454414][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 1630.472893][ T14] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1630.516040][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.572737][ T8187] futex_wake_op: syz.1.16199 tries to shift op by 144; fix this program [ 1630.583417][ T14] usb 7-1: Product: syz [ 1630.617306][ T14] usb 7-1: Manufacturer: syz [ 1630.622672][ T14] usb 7-1: SerialNumber: syz [ 1630.627928][ T8187] futex_wake_op: syz.1.16199 tries to shift op by 144; fix this program [ 1630.668683][ T14] usb 7-1: config 0 descriptor?? [ 1630.710324][ T6631] usb 4-1: USB disconnect, device number 17 [ 1630.898702][ T14] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 1630.922396][ T14] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1631.108222][ T14] usb 7-1: USB disconnect, device number 39 [ 1631.276928][ T8202] loop5: detected capacity change from 0 to 512 [ 1631.393167][ T8202] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1631.760159][ T14] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1632.007778][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.047325][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 1632.116528][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1632.176374][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1632.249329][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.319349][ T14] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1632.371795][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.421625][ T14] usb 6-1: config 0 descriptor?? [ 1632.467308][ T8202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1632.729742][ T14] usb 6-1: USB disconnect, device number 53 [ 1632.769509][ T8241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1632.776887][ T8241] IPv6: NLM_F_CREATE should be set when creating new route [ 1632.784170][ T8241] IPv6: NLM_F_CREATE should be set when creating new route [ 1633.321060][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1633.686176][ T8262] loop1: detected capacity change from 0 to 1024 [ 1633.831167][ T8262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1634.060255][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1634.503814][ T8280] loop1: detected capacity change from 0 to 4096 [ 1634.716898][ T8280] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1635.025247][ T8298] loop6: detected capacity change from 0 to 8 [ 1636.144276][ T8286] loop3: detected capacity change from 0 to 32768 [ 1636.179846][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16261'. [ 1636.224818][ T8286] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.16243 (8286) [ 1636.247278][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16261'. [ 1636.295195][ T8286] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1636.358309][ T8286] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1636.381045][ T8324] netlink: 'syz.5.16262': attribute type 1 has an invalid length. [ 1636.422992][ T8286] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1636.429261][ T8324] netlink: 908 bytes leftover after parsing attributes in process `syz.5.16262'. [ 1636.482109][ T8286] BTRFS info (device loop3): use zstd compression, level 3 [ 1636.500185][ T8324] nbd: must specify at least one socket [ 1636.520340][ T8286] BTRFS info (device loop3): using free space tree [ 1636.982133][ T8286] BTRFS info (device loop3): enabling ssd optimizations [ 1637.127279][ T8354] loop5: detected capacity change from 0 to 512 [ 1637.187867][ T8354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1637.303842][ T8354] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.16269: inode has both inline data and extents flags [ 1637.402322][ T8354] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.16269: couldn't read orphan inode 15 (err -117) [ 1637.460919][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16271'. [ 1637.494234][ T8354] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1637.728646][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1637.857599][ T4283] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1638.400333][ T8381] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 1639.459820][ T8373] loop5: detected capacity change from 0 to 32768 [ 1639.674947][ T8373] XFS (loop5): Mounting V5 Filesystem [ 1640.102313][ T2389] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1640.274927][ T8373] XFS (loop5): Ending clean mount [ 1640.512441][T21372] XFS (loop5): Unmounting Filesystem [ 1640.577190][ T8399] loop1: detected capacity change from 0 to 32768 [ 1640.715939][ T8399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.16288 (8399) [ 1640.861216][ T8399] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1640.910624][ T8399] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1640.949059][ T8399] BTRFS info (device loop1): using free space tree [ 1641.396797][ T8399] BTRFS info (device loop1): enabling ssd optimizations [ 1641.777983][ T4275] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1642.939882][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16317'. [ 1642.996577][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16317'. [ 1643.235907][ T8498] syz.1.16321 (8498): drop_caches: 0 [ 1643.888638][ T8516] loop3: detected capacity change from 0 to 512 [ 1643.921874][ T8516] EXT4-fs: Ignoring removed nobh option [ 1643.959613][ T8516] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1643.968456][ T8516] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1644.056807][ T8516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1644.138941][ T8516] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1644.216248][ T6623] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1644.234419][ T8516] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.16330: bad orphan inode 3 [ 1644.328376][ T8516] EXT4-fs (loop3): Remounting filesystem read-only [ 1644.353558][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16335'. [ 1644.378567][ T8516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1644.427303][ T8516] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.16330: dx entry: limit 0 != root limit 125 [ 1644.464427][ T6623] usb 2-1: Using ep0 maxpacket: 32 [ 1644.471963][ T6623] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1644.500610][ T6623] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 1644.570888][ T8516] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.16330: Corrupt directory, running e2fsck is recommended [ 1644.588878][ T6623] usb 2-1: string descriptor 0 read error: -22 [ 1644.615623][ T6623] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1644.673349][ T6623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.737052][ T8535] loop6: detected capacity change from 0 to 512 [ 1644.794756][ T8535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1644.845184][ T8537] cgroup: subsys name conflicts with all [ 1644.861136][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1644.922268][ T6623] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1644.954978][ T8535] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1645.111821][ T8535] EXT4-fs error (device loop6): ext4_get_inode_usage:835: inode #12: comm syz.6.16339: corrupted xattr block 6 [ 1645.179205][ T6623] usb 2-1: USB disconnect, device number 20 [ 1645.274079][ T8535] EXT4-fs (loop6): Remounting filesystem read-only [ 1645.485669][ T8551] netlink: 'syz.0.16345': attribute type 1 has an invalid length. [ 1645.507601][ T8551] netlink: 'syz.0.16345': attribute type 2 has an invalid length. [ 1645.517915][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.550650][T22566] EXT4-fs (loop6): unmounting filesystem. [ 1645.564872][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16345'. [ 1645.827084][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1647.330837][ T8595] loop5: detected capacity change from 0 to 1024 [ 1647.552756][ T8595] hfsplus: cannot replace xattr [ 1648.274079][ T14] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1648.484582][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 1648.491855][ T14] usb 6-1: config 0 has no interfaces? [ 1648.542632][ T14] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1648.578792][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.622788][ T14] usb 6-1: Product: syz [ 1648.643670][ T14] usb 6-1: Manufacturer: syz [ 1648.678513][ T14] usb 6-1: SerialNumber: syz [ 1648.708354][ T14] r8152-cfgselector 6-1: config 0 descriptor?? [ 1648.965807][ T14] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1649.171140][ T14] usb 6-1: USB disconnect, device number 54 [ 1649.202572][ T8646] loop1: detected capacity change from 0 to 256 [ 1649.541248][ T8650] xt_TCPMSS: Only works on TCP SYN packets [ 1650.270595][ T8667] xt_hashlimit: invalid rate [ 1650.353718][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16405'. [ 1651.498967][ T8700] netlink: 72 bytes leftover after parsing attributes in process `syz.6.16419'. [ 1651.518541][ T8700] netlink: 23 bytes leftover after parsing attributes in process `syz.6.16419'. [ 1651.579038][ T8700] netlink: 23 bytes leftover after parsing attributes in process `syz.6.16419'. [ 1652.017302][ T4813] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1652.122912][ T8720] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 1652.254884][ T4813] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1652.283174][ T4813] usb 4-1: config 8 has no interface number 0 [ 1652.323344][ T4813] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1652.363086][ T8724] loop1: detected capacity change from 0 to 128 [ 1652.379319][ T4813] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1652.411944][ T4813] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1652.453324][ T4813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.474898][ T8724] FAT-fs (loop1): Directory bread(block 162) failed [ 1652.491299][ T8724] FAT-fs (loop1): Directory bread(block 163) failed [ 1652.508864][ T8724] FAT-fs (loop1): Directory bread(block 164) failed [ 1652.515508][ T8706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1652.598654][ T8724] FAT-fs (loop1): Directory bread(block 165) failed [ 1652.630951][ T8724] FAT-fs (loop1): Directory bread(block 166) failed [ 1652.670640][ T8724] FAT-fs (loop1): Directory bread(block 167) failed [ 1652.697022][ T8724] FAT-fs (loop1): Directory bread(block 168) failed [ 1652.725493][ T4813] usb 4-1: string descriptor 0 read error: -71 [ 1652.744290][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 1652.757921][ T8724] FAT-fs (loop1): Directory bread(block 169) failed [ 1652.787386][ T8724] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1652.898749][ T8724] FAT-fs (loop1): Directory bread(block 162) failed [ 1652.958780][ T8724] FAT-fs (loop1): Directory bread(block 163) failed [ 1653.016370][ T8724] syz.1.16431: attempt to access beyond end of device [ 1653.016370][ T8724] loop1: rw=3, sector=618, nr_sectors = 6 limit=128 [ 1653.084655][ T8724] syz.1.16431: attempt to access beyond end of device [ 1653.084655][ T8724] loop1: rw=2051, sector=624, nr_sectors = 2 limit=128 [ 1653.233553][ T4813] ir_toy 4-1:8.177: could not write reset command: -110 [ 1653.248611][ T4813] ir_toy: probe of 4-1:8.177 failed with error -110 [ 1653.300986][ T4813] usb 4-1: USB disconnect, device number 18 [ 1653.504759][ T26] audit: type=1326 audit(1932.803:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.1.16440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1653.638675][ T26] audit: type=1326 audit(1932.824:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.1.16440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1653.662311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1653.744395][ T8750] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16443'. [ 1653.826552][ T26] audit: type=1326 audit(1932.824:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.1.16440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1653.969919][ T26] audit: type=1326 audit(1932.824:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.1.16440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1654.351573][ T4320] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1654.577431][ T8737] loop5: detected capacity change from 0 to 40427 [ 1654.593585][ T4320] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1654.612699][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.640668][ T8766] loop1: detected capacity change from 0 to 4096 [ 1654.655638][ T4320] usb 1-1: Product: syz [ 1654.660040][ T4320] usb 1-1: Manufacturer: syz [ 1654.664698][ T4320] usb 1-1: SerialNumber: syz [ 1654.674590][ T8737] F2FS-fs (loop5): Corrupted extension count (33554469 + 1 > 64) [ 1654.692299][ T8737] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1654.700903][ T8766] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1654.713650][ T8770] x_tables: unsorted entry at hook 4 [ 1654.724457][ T4320] usb 1-1: config 0 descriptor?? [ 1654.742393][ T4320] hub 1-1:0.0: bad descriptor, ignoring hub [ 1654.760507][ T4320] hub: probe of 1-1:0.0 failed with error -5 [ 1654.768369][ T8737] F2FS-fs (loop5): invalid crc value [ 1654.795233][ T8737] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1654.843481][ T8766] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1654.875221][ T8766] ntfs3: loop1: mft corrupted [ 1654.884370][ T8766] ntfs3: loop1: Failed to load $Extend. [ 1654.959410][ T4320] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1654.992130][ T4320] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1655.039196][ T4320] dib0700: firmware download failed at 7 with -22 [ 1655.102126][ T8737] F2FS-fs (loop5): recover fsync data on readonly fs [ 1655.119132][ T4320] usb 1-1: USB disconnect, device number 115 [ 1655.185311][ T8737] F2FS-fs (loop5): Try to recover 2th superblock, ret: -30 [ 1655.231607][ T8737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1655.411787][ T8737] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 1655.524488][ T8781] netlink: 17 bytes leftover after parsing attributes in process `syz.3.16457'. [ 1656.850184][ T4320] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1657.040308][ T8777] loop6: detected capacity change from 0 to 32768 [ 1657.096903][ T4320] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.127785][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1657.141721][ T4320] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1657.175138][ T8777] ERROR: (device loop6): dbAllocAG: Corrupt dmapctl page [ 1657.175138][ T8777] [ 1657.197441][ T4320] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1657.224465][ T8777] ERROR: (device loop6): remounting filesystem as read-only [ 1657.226437][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.272534][ T8777] jfs_mkdir: dtInsert returned -EIO [ 1657.287317][ T4320] usb 1-1: Product: syz [ 1657.297818][ T8777] ERROR: (device loop6): jfs_mkdir: [ 1657.297818][ T8777] [ 1657.309688][ T4320] usb 1-1: Manufacturer: syz [ 1657.322665][ T4320] usb 1-1: SerialNumber: syz [ 1657.347866][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 1657.358787][ T4320] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1657.367287][ T14] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1657.400439][ T14] usb 2-1: config 0 has no interface number 0 [ 1657.419758][ T14] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1657.437873][ T4320] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1657.470993][ T4320] scsi host1: usb-storage 1-1:1.0 [ 1657.529428][ T14] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1657.634921][ T4320] usb 1-1: USB disconnect, device number 116 [ 1657.667688][ T14] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1657.694538][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.731453][ T14] usb 2-1: Product: syz [ 1657.771460][ T14] usb 2-1: Manufacturer: syz [ 1657.776242][ T14] usb 2-1: SerialNumber: syz [ 1657.840116][ T14] usb 2-1: config 0 descriptor?? [ 1657.886060][ T14] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1658.123888][ T14] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1658.130980][ T14] quatech2: probe of 2-1:0.51 failed with error -90 [ 1658.333444][ T22] usb 2-1: USB disconnect, device number 21 [ 1658.670690][ T8841] loop5: detected capacity change from 0 to 1024 [ 1658.761975][ T8841] hfsplus: keylen 65060 too large [ 1658.767334][ T8847] Process accounting paused [ 1658.789844][ T8841] hfsplus: xattr search failed [ 1658.821273][ T8843] loop3: detected capacity change from 0 to 2048 [ 1659.004975][ T8848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1659.054903][ T8843] syz.3.16488: attempt to access beyond end of device [ 1659.054903][ T8843] loop3: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 1659.155182][ T8843] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 1659.419906][ T8858] ieee802154 phy1 wpan1: encryption failed: -90 [ 1659.426317][ T8848] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1659.504182][ T8852] loop1: detected capacity change from 0 to 8192 [ 1659.510989][ T8848] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1659.568694][ T8848] Remounting filesystem read-only [ 1659.617384][ T8852] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1659.685435][ T8852] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1659.714565][ T8852] REISERFS (device loop1): using journaled data mode [ 1659.721317][ T8852] reiserfs: using flush barriers [ 1659.862292][ T8852] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1659.962148][ T8852] REISERFS (device loop1): checking transaction log (loop1) [ 1660.042545][ T8852] REISERFS (device loop1): Using r5 hash to sort names [ 1660.095082][ T8852] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1660.208804][ T8852] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1661.015024][ T8892] loop5: detected capacity change from 0 to 16 [ 1661.020252][ T22] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1661.057552][ T8892] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1661.295822][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.333223][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1661.408978][ T22] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1661.418097][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.473974][ T22] usb 1-1: config 0 descriptor?? [ 1661.749554][ T22] usb 1-1: USB disconnect, device number 117 [ 1661.757882][ T8906] futex_wake_op: syz.6.16517 tries to shift op by 144; fix this program [ 1661.806304][ T8906] futex_wake_op: syz.6.16517 tries to shift op by 144; fix this program [ 1661.945584][ T8912] netlink: 200 bytes leftover after parsing attributes in process `syz.1.16520'. [ 1662.190934][ T8914] ./file0: Can't open blockdev [ 1663.171221][ T4320] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1663.215634][ T8939] loop1: detected capacity change from 0 to 2048 [ 1663.320770][ T8939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1663.416189][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 1663.426096][ T4320] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 1663.493377][ T4320] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1663.539725][ T4320] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1663.581176][ T4320] usb 4-1: Product: syz [ 1663.585450][ T4320] usb 4-1: Manufacturer: syz [ 1663.651803][ T4320] r8152-cfgselector 4-1: config 0 descriptor?? [ 1663.876957][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16541'. [ 1663.946078][ T4320] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1663.964995][ T4320] r8152-cfgselector 4-1: USB disconnect, device number 19 [ 1663.985734][ T6623] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1664.188401][ T6623] usb 1-1: Using ep0 maxpacket: 16 [ 1664.197587][ T6623] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1664.220024][ T6623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.247492][ T6623] usb 1-1: Product: syz [ 1664.251780][ T6623] usb 1-1: Manufacturer: syz [ 1664.256400][ T6623] usb 1-1: SerialNumber: syz [ 1664.300995][ T6623] usb 1-1: config 0 descriptor?? [ 1664.475546][ T22] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1664.735474][ T22] usb 7-1: config 32 has an invalid interface number: 255 but max is 0 [ 1664.769257][ T22] usb 7-1: config 32 has no interface number 0 [ 1664.800136][ T22] usb 7-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1664.860619][ T22] usb 7-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1664.906418][ T22] usb 7-1: config 32 interface 255 has no altsetting 0 [ 1664.931197][ T22] usb 7-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1664.963228][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.020755][ T22] usb-storage 7-1:32.255: USB Mass Storage device detected [ 1665.075189][ T22] usb-storage 7-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 1665.097903][ T8979] netlink: 'syz.3.16553': attribute type 1 has an invalid length. [ 1665.243440][ T6623] usb 7-1: USB disconnect, device number 40 [ 1665.622506][ T8992] netlink: del zone limit has 8 unknown bytes [ 1665.909484][ T8998] loop3: detected capacity change from 0 to 256 [ 1666.468448][ T9012] netlink: 'syz.5.16568': attribute type 20 has an invalid length. [ 1666.673279][ T22] usb 1-1: USB disconnect, device number 118 [ 1666.881638][ T26] audit: type=1326 audit(1946.840:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1666.905230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.016246][ T26] audit: type=1326 audit(1946.840:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.198925][ T26] audit: type=1326 audit(1946.861:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.222562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.356672][ T26] audit: type=1326 audit(1946.861:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.380268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.498599][ T9041] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16582'. [ 1667.540157][ T26] audit: type=1326 audit(1946.871:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.671718][ T26] audit: type=1326 audit(1946.966:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.695405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.773308][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16585'. [ 1667.826329][ T26] audit: type=1326 audit(1946.966:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.858202][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16586'. [ 1667.910061][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16586'. [ 1667.952775][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16586'. [ 1667.961859][ T26] audit: type=1326 audit(1946.966:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1667.985461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.150043][ T26] audit: type=1326 audit(1946.966:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.16574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1668.173742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.006190][ T9078] netlink: 'syz.3.16601': attribute type 24 has an invalid length. [ 1669.333447][ T9087] futex_wake_op: syz.6.16605 tries to shift op by 32; fix this program [ 1670.004858][ T9108] loop5: detected capacity change from 0 to 256 [ 1670.040995][ T9112] netlink: 184 bytes leftover after parsing attributes in process `syz.0.16614'. [ 1670.152937][ T9108] FAT-fs (loop5): Directory bread(block 64) failed [ 1670.177901][ T9108] FAT-fs (loop5): Directory bread(block 65) failed [ 1670.219716][ T9108] FAT-fs (loop5): Directory bread(block 66) failed [ 1670.226314][ T9108] FAT-fs (loop5): Directory bread(block 67) failed [ 1670.324321][ T9108] FAT-fs (loop5): Directory bread(block 68) failed [ 1670.362756][ T9108] FAT-fs (loop5): Directory bread(block 69) failed [ 1670.369441][ T9108] FAT-fs (loop5): Directory bread(block 70) failed [ 1670.438821][ T9108] FAT-fs (loop5): Directory bread(block 71) failed [ 1670.477286][ T9108] FAT-fs (loop5): Directory bread(block 72) failed [ 1670.483896][ T9108] FAT-fs (loop5): Directory bread(block 73) failed [ 1670.552064][ T9125] CIFS: VFS: Unable to allocate memory for devname [ 1670.629438][ T22] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1670.666446][ T9108] syz.5.16616: attempt to access beyond end of device [ 1670.666446][ T9108] loop5: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1670.811859][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 1670.826716][ T22] usb 7-1: config 3 has an invalid interface number: 231 but max is 0 [ 1670.864344][ T22] usb 7-1: config 3 has no interface number 0 [ 1670.891878][ T22] usb 7-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1670.942556][ T22] usb 7-1: config 3 interface 231 has no altsetting 0 [ 1670.975576][ T22] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 1671.031746][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.067554][ T22] usb 7-1: Product: syz [ 1671.083590][ T22] usb 7-1: Manufacturer: syz [ 1671.102537][ T22] usb 7-1: SerialNumber: syz [ 1671.337200][ T22] kvaser_usb 7-1:3.231: Cannot get usb endpoint(s) [ 1671.382632][ T22] usb 7-1: USB disconnect, device number 41 [ 1671.410820][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16629'. [ 1672.192229][ T4320] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1672.421610][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 1672.432255][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 1672.482345][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1672.551351][ T4320] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1672.600229][ T4320] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1672.648577][ T4320] usb 2-1: Product: syz [ 1672.662786][ T4320] usb 2-1: Manufacturer: syz [ 1672.667552][ T4320] usb 2-1: SerialNumber: syz [ 1672.717316][ T4320] usb 2-1: config 0 descriptor?? [ 1672.762300][ T4320] smsusb:smsusb_probe: board id=2, interface number 0 [ 1672.810746][ T4320] smsusb:smsusb_probe: Device initialized with return code -19 [ 1673.094469][ T4320] usb 2-1: USB disconnect, device number 22 [ 1673.494530][ T9186] netlink: 'syz.0.16653': attribute type 6 has an invalid length. [ 1673.581029][ T9163] loop3: detected capacity change from 0 to 32768 [ 1673.668644][ T9163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.16641 (9163) [ 1673.751493][ T9163] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1673.791826][ T9163] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1673.843195][ T9163] BTRFS info (device loop3): using free space tree [ 1674.411972][ T9225] loop5: detected capacity change from 0 to 136 [ 1674.422110][ T9163] BTRFS info (device loop3): enabling ssd optimizations [ 1674.698166][ T4283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1674.838552][ T9233] loop6: detected capacity change from 0 to 512 [ 1675.086364][ T9233] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 1675.129542][ T9233] FAT-fs (loop6): Filesystem has been set read-only [ 1675.168172][ T9233] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000103) [ 1675.589337][ T9208] loop1: detected capacity change from 0 to 32768 [ 1676.003571][ T9250] netlink: 'syz.5.16673': attribute type 2 has an invalid length. [ 1676.054502][ T9250] netlink: 'syz.5.16673': attribute type 1 has an invalid length. [ 1676.103889][ T9250] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.16673'. [ 1676.471563][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16680'. [ 1677.716430][ T22] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1677.925611][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 1677.946564][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.002432][ T22] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1678.089612][ T22] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1678.114660][ T9312] loop3: detected capacity change from 0 to 164 [ 1678.121457][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.130428][ T9310] loop1: detected capacity change from 0 to 1024 [ 1678.183703][ T9310] EXT4-fs: Ignoring removed orlov option [ 1678.190808][ T22] usb 7-1: Product: syz [ 1678.209241][ T9310] EXT4-fs: Ignoring removed mblk_io_submit option [ 1678.228690][ T9312] Symlink component flag not implemented [ 1678.230893][ T22] usb 7-1: Manufacturer: syz [ 1678.239089][ T22] usb 7-1: SerialNumber: syz [ 1678.257847][ T9312] Symlink component flag not implemented (7) [ 1678.276519][ T9310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1678.326779][ T22] r8152-cfgselector 7-1: config 0 descriptor?? [ 1678.432645][ T9310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1678.532217][ T22] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 1678.756603][ T22] usb 7-1: USB disconnect, device number 42 [ 1678.876126][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1679.101967][ T9331] loop1: detected capacity change from 0 to 256 [ 1679.173118][ T9331] exfat: Deprecated parameter 'namecase' [ 1679.237338][ T9337] loop5: detected capacity change from 0 to 64 [ 1679.326598][ T9331] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1679.814733][ T9349] loop6: detected capacity change from 0 to 64 [ 1679.949994][ T9348] loop3: detected capacity change from 0 to 2048 [ 1680.092596][ T9348] Alternate GPT is invalid, using primary GPT. [ 1680.118364][ T9348] loop3: p1 p2 p3 [ 1680.120738][ T9353] loop1: detected capacity change from 0 to 256 [ 1680.165778][ T9353] exfat: Deprecated parameter 'utf8' [ 1680.220432][ T9353] exfat: Deprecated parameter 'namecase' [ 1680.331238][ T4505] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1680.354626][ T7645] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1680.430888][ T9353] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1680.473047][ T26] audit: type=1326 audit(1961.107:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1680.552718][ T9353] kAFS: unable to lookup cell 's@z0' [ 1680.614998][ T7645] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.631424][ T26] audit: type=1326 audit(1961.139:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1680.656404][ T7645] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1680.670102][ T9361] loop3: detected capacity change from 0 to 2048 [ 1680.677112][ T4505] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1680.722323][ T7645] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 1680.759852][ T26] audit: type=1326 audit(1961.139:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1680.783089][ T7645] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1680.809076][ T9361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1680.835933][ T7645] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1680.868745][ T7645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.877168][ T26] audit: type=1326 audit(1961.181:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4e159f947 code=0x7ffc0000 [ 1680.903770][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1680.926413][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1680.926746][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1680.953159][ T7645] usb 6-1: config 0 descriptor?? [ 1681.040202][ T26] audit: type=1326 audit(1961.181:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4e155e90e code=0x7ffc0000 [ 1681.063767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.180054][ T26] audit: type=1326 audit(1961.181:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4e155e90e code=0x7ffc0000 [ 1681.203637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.260034][ T7645] usb 6-1: USB disconnect, device number 55 [ 1681.376974][ T26] audit: type=1326 audit(1961.181:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4e155e90e code=0x7ffc0000 [ 1681.400481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.543783][ T26] audit: type=1326 audit(1961.181:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4e155e90e code=0x7ffc0000 [ 1681.685909][ T26] audit: type=1326 audit(1961.181:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4e155e90e code=0x7ffc0000 [ 1681.859168][ T26] audit: type=1326 audit(1961.181:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.16726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1682.087396][ T9377] loop1: detected capacity change from 0 to 4096 [ 1682.110125][ T9377] EXT4-fs: Ignoring removed mblk_io_submit option [ 1682.200176][ T9377] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1682.316636][ T9377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1682.453792][ T9389] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 1682.544205][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1682.737217][ T9363] loop6: detected capacity change from 0 to 32768 [ 1682.899163][ T9363] XFS (loop6): Mounting V5 Filesystem [ 1683.483162][ T9415] loop5: detected capacity change from 0 to 512 [ 1683.587630][ T9363] XFS (loop6): Ending clean mount [ 1683.685156][ T9415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1683.752958][ T9363] XFS (loop6): Quotacheck needed: Please wait. [ 1683.793066][ T6623] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1683.830540][ T9415] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.16748: invalid size [ 1683.976496][ T6623] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1684.002783][ T6623] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1684.022385][ T9363] XFS (loop6): Quotacheck: Done. [ 1684.052469][ T7645] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1684.069415][ T6623] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1684.117247][ T6623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.148646][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1684.164464][T22566] XFS (loop6): Unmounting Filesystem [ 1684.181560][ T9417] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1684.327470][ T7645] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1684.349415][ T7645] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.418623][ T7645] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1684.466962][ T7645] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.516861][ T7645] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.533920][T18459] usb 2-1: USB disconnect, device number 23 [ 1684.579689][ T7645] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1684.643402][ T7645] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1684.672614][ T7645] usb 1-1: Product: syz [ 1684.676842][ T7645] usb 1-1: Manufacturer: syz [ 1684.756585][ T7645] cdc_wdm 1-1:1.0: skipping garbage [ 1684.791170][ T7645] cdc_wdm 1-1:1.0: skipping garbage [ 1684.827700][ T7645] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1684.858730][ T7645] cdc_wdm 1-1:1.0: Unknown control protocol [ 1685.006836][ T9424] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 1685.065906][T18459] usb 1-1: USB disconnect, device number 119 [ 1685.321498][ T9444] xt_l2tp: v2 doesn't support IP mode [ 1685.692950][ T9452] netlink: 'syz.3.16765': attribute type 1 has an invalid length. [ 1685.746147][ T9452] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.16765'. [ 1687.393300][ T9495] Process accounting resumed [ 1687.521610][ T9501] netlink: 'syz.6.16788': attribute type 10 has an invalid length. [ 1687.732548][ T9501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.790136][ T9501] team0: Port device bond0 added [ 1688.249137][ T9515] sctp: [Deprecated]: syz.6.16795 (pid 9515) Use of int in maxseg socket option. [ 1688.249137][ T9515] Use struct sctp_assoc_value instead [ 1689.099235][ T9534] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1690.355388][ T9575] loop6: detected capacity change from 0 to 256 [ 1690.361897][ T9572] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1690.394156][ T9573] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1691.025553][T18459] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1691.104355][ T6623] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1691.233812][T18459] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1691.270450][T18459] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1691.317827][T18459] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 145, changing to 11 [ 1691.337593][ T6623] usb 2-1: Using ep0 maxpacket: 8 [ 1691.347088][ T6623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.394039][T18459] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1691.418385][ T6623] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1691.447207][T18459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.463758][ T6623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.480111][T18459] usb 7-1: Product: syz [ 1691.498779][ T6623] usb 2-1: Product: syz [ 1691.503051][ T6623] usb 2-1: Manufacturer: syz [ 1691.514504][T18459] usb 7-1: Manufacturer: syz [ 1691.527351][ T6623] usb 2-1: SerialNumber: syz [ 1691.532069][T18459] usb 7-1: SerialNumber: syz [ 1691.547921][ T6623] usb 2-1: config 0 descriptor?? [ 1691.582870][ T6623] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1691.600018][ T6623] usb 2-1: selecting invalid altsetting 1 [ 1691.787143][T18459] cdc_ncm 7-1:1.0: bind() failure [ 1691.813178][T18459] usbtest 7-1:1.0: Linux gadget zero [ 1691.828211][T18459] usbtest 7-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1691.896518][T18459] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1691.932725][T18459] cdc_ncm 7-1:1.1: bind() failure [ 1691.965600][T18459] usbtest 7-1:1.1: couldn't get endpoints, -71 [ 1692.011941][T18459] usbtest: probe of 7-1:1.1 failed with error -71 [ 1692.089463][ T6623] usb 2-1: USB disconnect, device number 24 [ 1692.098085][T18459] usb 7-1: USB disconnect, device number 43 [ 1692.479949][ T6631] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1692.718709][ T6631] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.745169][ T9627] netlink: 'syz.5.16846': attribute type 5 has an invalid length. [ 1692.747144][ T6631] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1692.803133][ T9627] netlink: 176 bytes leftover after parsing attributes in process `syz.5.16846'. [ 1692.817885][ T6631] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1692.892640][ T6631] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1692.924474][ T6631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.981730][ T6631] usb 4-1: Product: syz [ 1693.016290][ T6631] usb 4-1: Manufacturer: syz [ 1693.020953][ T6631] usb 4-1: SerialNumber: syz [ 1693.066917][ T6631] usb 4-1: config 0 descriptor?? [ 1693.318857][ T6631] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 1693.335163][ T6631] usb 4-1: No valid video chain found. [ 1693.364738][ T6631] usb 4-1: USB disconnect, device number 20 [ 1695.287379][ T9701] loop6: detected capacity change from 0 to 64 [ 1695.321804][ T9700] loop1: detected capacity change from 0 to 512 [ 1695.442503][ T9700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1695.498871][ T9700] __quota_error: 14 callbacks suppressed [ 1695.498889][ T9700] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1695.566348][ T9700] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1695.575806][ T9700] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.16880: Failed to acquire dquot type 1 [ 1695.642404][ T9700] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1695.757032][ T9700] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1695.852240][ T9700] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.16880: Failed to acquire dquot type 1 [ 1695.894232][ T9710] netlink: 168 bytes leftover after parsing attributes in process `syz.6.16885'. [ 1695.932705][ T9700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.16880: bg 0: block 248: padding at end of block bitmap is not set [ 1696.013611][ T9700] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1696.057952][ T9700] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1696.132695][ T9700] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1696.185602][ T9700] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.16880: Failed to acquire dquot type 1 [ 1696.283262][ T9700] EXT4-fs (loop1): 1 orphan inode deleted [ 1696.300011][ T9700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1696.386418][ T9700] EXT4-fs (loop1): unmounting filesystem. [ 1696.550275][ T9724] loop6: detected capacity change from 0 to 64 [ 1696.907885][ T9729] loop3: detected capacity change from 0 to 4096 [ 1697.144008][ T9729] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1697.176416][ T9729] ntfs3: loop3: Failed to load $Extend. [ 1697.499886][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16902'. [ 1698.288245][ T9767] loop1: detected capacity change from 0 to 16 [ 1698.328597][ T9769] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1698.356187][ T9767] erofs: (device loop1): mounted with root inode @ nid 36. [ 1698.421313][ T9767] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1698.458758][ T9735] loop5: detected capacity change from 0 to 32768 [ 1699.510261][ T6631] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1699.775677][ T6631] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.819091][ T6631] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.868129][ T6631] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1699.900062][ T6631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.938383][ T6631] usb 7-1: Product: syz [ 1699.944278][ T6631] usb 7-1: Manufacturer: syz [ 1699.957399][ T6631] usb 7-1: SerialNumber: syz [ 1700.151171][ T9803] loop1: detected capacity change from 0 to 16 [ 1700.188602][ T9803] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1700.198701][ T6631] usb 7-1: unit 4 not found! [ 1700.298850][ T6631] usb 7-1: USB disconnect, device number 44 [ 1700.378965][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1701.276104][ T9819] loop3: detected capacity change from 0 to 8192 [ 1701.350712][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16945'. [ 1701.368353][ T9819] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1701.404436][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16945'. [ 1701.547053][ T9819] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1701.549331][ T7646] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1701.588337][ T9819] ntfs3: loop3: Failed to load $Extend. [ 1701.700261][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16947'. [ 1701.842177][ T7646] usb 6-1: Using ep0 maxpacket: 8 [ 1701.873597][ T7646] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1701.895578][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16949'. [ 1701.919515][ T7646] usb 6-1: config 179 has no interface number 0 [ 1701.986735][ T7646] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1702.024060][ T7646] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1702.071994][ T7646] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1702.108494][ T9848] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16950'. [ 1702.128823][ T7646] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1702.196138][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16950'. [ 1702.197618][ T7646] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1702.252836][ T9848] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16950'. [ 1702.299531][ T9848] netlink: 100 bytes leftover after parsing attributes in process `syz.0.16950'. [ 1702.309038][ T7646] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1702.336569][ T7646] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1702.362348][ T9848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16950'. [ 1702.387688][ T7646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.501501][ T7646] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input108 [ 1702.786930][ T7646] usb 6-1: USB disconnect, device number 56 [ 1702.823603][ T7646] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1703.387605][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16962'. [ 1703.992810][ T9888] loop1: detected capacity change from 0 to 164 [ 1704.129690][ T9888] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1704.352142][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1704.394445][ T9858] loop3: detected capacity change from 0 to 40427 [ 1704.485668][ T9858] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 1704.547370][ T9858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1704.609901][ T9858] F2FS-fs (loop3): invalid crc value [ 1704.698552][ T9858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1704.902977][ T9858] F2FS-fs (loop3): recover fsync data on readonly fs [ 1705.030902][ T9858] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 1705.072201][ T9858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1705.319369][ T9858] F2FS-fs (loop3): Corrupted max_depth of 3: 255 [ 1705.372523][ T9858] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1705.587628][ T7646] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1705.816530][ T7646] usb 7-1: Using ep0 maxpacket: 32 [ 1705.825535][ T7646] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.891549][ T7646] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.965269][ T7646] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1706.005617][ T7646] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1706.066849][ T7646] usb 7-1: Product: syz [ 1706.071087][ T7646] usb 7-1: Manufacturer: syz [ 1706.136477][ T7646] hub 7-1:4.0: USB hub found [ 1706.331450][ T7646] hub 7-1:4.0: 2 ports detected [ 1706.531361][ T7646] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1706.540078][ T7646] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1706.645817][ T7646] usb 7-1: USB disconnect, device number 45 [ 1707.232559][ T9963] device gre4 entered promiscuous mode [ 1707.758209][ T7645] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 1707.824416][ T9981] __nla_validate_parse: 2 callbacks suppressed [ 1707.824436][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17012'. [ 1707.989468][ T7645] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1708.019281][ T7645] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.072671][ T7645] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1708.151022][ T7645] usb 6-1: string descriptor 0 read error: -22 [ 1708.177452][ T7645] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1708.186535][ T7645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.300532][ T9968] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1708.330886][ T7645] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 1708.365219][ T7645] usb-storage 6-1:1.1: USB Mass Storage device detected [ 1708.439942][ T9993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17021'. [ 1708.559752][ T7642] usb 6-1: USB disconnect, device number 57 [ 1708.965208][T10004] IPv6: sit4: Disabled Multicast RS [ 1709.368038][T10014] netlink: 'syz.1.17030': attribute type 11 has an invalid length. [ 1709.378977][T10011] loop6: detected capacity change from 0 to 256 [ 1709.920540][T10024] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1710.085442][T10032] netlink: 96 bytes leftover after parsing attributes in process `syz.5.17039'. [ 1710.187437][T10032] netlink: 140 bytes leftover after parsing attributes in process `syz.5.17039'. [ 1711.460141][ T26] audit: type=1326 audit(1993.642:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.17055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1711.492298][T10062] loop5: detected capacity change from 0 to 4096 [ 1711.587597][ T26] audit: type=1326 audit(1993.663:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.17055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1711.767088][T10062] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1711.783940][ T26] audit: type=1326 audit(1993.663:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.17055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1711.928265][ T26] audit: type=1326 audit(1993.663:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.17055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x7ffc0000 [ 1712.054294][ T6631] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1712.243776][T10054] loop6: detected capacity change from 0 to 32768 [ 1712.282711][ T6631] usb 2-1: Using ep0 maxpacket: 16 [ 1712.310660][ T6631] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1712.339354][ T6631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.368805][ T6631] usb 2-1: Product: syz [ 1712.373042][ T6631] usb 2-1: Manufacturer: syz [ 1712.396984][ T6631] usb 2-1: SerialNumber: syz [ 1712.432062][ T6631] r8152-cfgselector 2-1: config 0 descriptor?? [ 1712.702869][ T6631] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1712.918698][ T6631] usb 2-1: USB disconnect, device number 25 [ 1713.837415][T10102] loop6: detected capacity change from 0 to 256 [ 1713.871009][T10104] netlink: 6 bytes leftover after parsing attributes in process `syz.1.17073'. [ 1713.945889][T10102] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1714.751443][T10125] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17083'. [ 1714.820854][T10127] x_tables: unsorted underflow at hook 2 [ 1714.850388][ T26] audit: type=1326 audit(1997.201:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.1.17086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1714.961155][ T26] audit: type=1326 audit(1997.243:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.1.17086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1715.094154][ T26] audit: type=1326 audit(1997.243:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.1.17086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1715.254461][ T26] audit: type=1326 audit(1997.243:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.1.17086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1715.396622][ T26] audit: type=1326 audit(1997.243:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.1.17086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1715.435698][T10143] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1715.844042][T10157] loop5: detected capacity change from 0 to 512 [ 1715.922579][T10157] EXT4-fs: Ignoring removed i_version option [ 1715.928656][T10157] EXT4-fs: Ignoring removed nobh option [ 1716.169389][T10157] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1716.268592][T10166] Process accounting paused [ 1716.293235][T10157] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz.5.17098: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1716.334762][ T26] audit: type=1326 audit(1998.755:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.17103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1716.444650][ T26] audit: type=1326 audit(1998.797:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.17103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1716.469114][T10171] ALSA: mixer_oss: invalid OSS volume 'Ãn' [ 1716.480152][T10157] EXT4-fs (loop5): Remounting filesystem read-only [ 1716.521840][T10157] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz.5.17098: directory missing '.' [ 1716.613751][ T26] audit: type=1326 audit(1998.797:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.17103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1716.750332][ T26] audit: type=1326 audit(1998.797:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.17103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1716.780494][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1716.898874][ T26] audit: type=1326 audit(1998.797:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.17103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1716.901859][T10181] CacheFiles: Empty directory specified [ 1717.090323][T10187] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17111'. [ 1717.144388][T10187] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1717.668107][T10203] SET target dimension over the limit! [ 1718.032482][T10213] loop1: detected capacity change from 0 to 1024 [ 1718.121551][T10216] netlink: 'syz.3.17125': attribute type 1 has an invalid length. [ 1718.140755][T10216] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17125'. [ 1718.662645][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17132'. [ 1718.702562][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17132'. [ 1718.760994][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17132'. [ 1718.959922][T10231] loop5: detected capacity change from 0 to 4096 [ 1718.967523][ T6623] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1719.170775][T10238] loop6: detected capacity change from 0 to 1024 [ 1719.203956][T10231] ntfs3: loop5: ino=9, attr_set_size [ 1719.240828][ T6623] usb 2-1: Using ep0 maxpacket: 8 [ 1719.254085][ T6623] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1719.298781][ T6623] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1719.342915][ T6623] usb 2-1: Product: syz [ 1719.347157][ T6623] usb 2-1: Manufacturer: syz [ 1719.440223][ T6623] usb 2-1: SerialNumber: syz [ 1719.471141][ T6623] usb 2-1: config 0 descriptor?? [ 1719.547046][ T6623] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1719.645008][T10247] loop6: detected capacity change from 0 to 64 [ 1719.950897][ T6623] gspca_zc3xx: reg_r err -71 [ 1719.955603][ T6623] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1720.032391][ T6623] usb 2-1: USB disconnect, device number 26 [ 1720.173401][T10255] delete_channel: no stack [ 1720.851773][ T7646] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 1721.077793][ T7646] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.114062][ T7646] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1721.183763][ T7646] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1721.248502][ T7646] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1721.296778][ T7646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.379451][T10263] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1721.389439][ T7646] hub 6-1:1.0: bad descriptor, ignoring hub [ 1721.395405][ T7646] hub: probe of 6-1:1.0 failed with error -5 [ 1721.460552][ T7646] cdc_wdm 6-1:1.0: skipping garbage [ 1721.499612][ T7646] cdc_wdm 6-1:1.0: skipping garbage [ 1721.528707][ T7646] cdc_wdm 6-1:1.0: skipping garbage [ 1721.560114][ T7646] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1721.599769][ T7646] cdc_wdm 6-1:1.0: Unknown control protocol [ 1721.636640][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17163'. [ 1721.696563][ T7646] usb 6-1: USB disconnect, device number 58 [ 1723.625337][T10341] loop6: detected capacity change from 0 to 764 [ 1723.724394][T10341] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1724.561912][T10371] loop3: detected capacity change from 0 to 64 [ 1724.737144][T10371] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1725.294444][T10393] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17212'. [ 1725.347765][T10393] netlink: 'syz.5.17212': attribute type 1 has an invalid length. [ 1725.532621][T10399] netlink: 'syz.0.17215': attribute type 7 has an invalid length. [ 1725.688341][T10405] loop5: detected capacity change from 0 to 64 [ 1725.770858][T10405] MINIX-fs: deleted inode referenced: 6 [ 1725.778056][T10405] MINIX-fs: deleted inode referenced: 6 [ 1726.436304][T10411] loop3: detected capacity change from 0 to 8192 [ 1726.531617][T10411] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1726.592225][T10411] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1726.632205][T10423] x_tables: unsorted underflow at hook 2 [ 1726.645395][T10411] FAT-fs (loop3): Filesystem has been set read-only [ 1727.941430][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17240'. [ 1728.433516][T10463] netlink: 'syz.1.17246': attribute type 27 has an invalid length. [ 1728.466675][T10463] netlink: 'syz.1.17246': attribute type 3 has an invalid length. [ 1728.494070][T10463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17246'. [ 1728.745102][T10471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1729.505082][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17258'. [ 1729.532437][T10490] ALSA: mixer_oss: invalid OSS volume ' €' [ 1729.615216][T10493] loop6: detected capacity change from 0 to 736 [ 1729.911952][T10493] tmpfs: Unknown parameter 'ö$TñaFm´éIÊ(9»ôטÁÞzñ6m›+N`1x¦†*‹40œ« Ó?·W‘ Ì„ ' [ 1731.856171][T10507] loop1: detected capacity change from 0 to 32768 [ 1732.094699][T10507] XFS (loop1): Mounting V5 Filesystem [ 1732.136314][T10519] loop3: detected capacity change from 0 to 32768 [ 1732.172857][T10519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.17274 (10519) [ 1732.297339][T10519] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1732.352201][T10519] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1732.392580][T10519] BTRFS info (device loop3): using free space tree [ 1732.535510][T10507] XFS (loop1): Ending clean mount [ 1732.874683][T10519] BTRFS info (device loop3): enabling ssd optimizations [ 1732.882487][ T4275] XFS (loop1): Unmounting Filesystem [ 1732.935857][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17296'. [ 1732.959822][T10587] netlink: 944 bytes leftover after parsing attributes in process `syz.5.17296'. [ 1733.000248][T10587] netlink: 64 bytes leftover after parsing attributes in process `syz.5.17296'. [ 1733.229500][ T4283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1734.285228][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17307'. [ 1734.333828][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17307'. [ 1734.494512][T10617] loop5: detected capacity change from 0 to 164 [ 1735.076643][T18457] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1735.313388][T18457] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1735.331024][T18457] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1735.401677][T10638] netlink: 'syz.6.17319': attribute type 3 has an invalid length. [ 1735.406711][T18457] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1735.409548][T10638] netlink: 232 bytes leftover after parsing attributes in process `syz.6.17319'. [ 1735.493547][T18457] usb 4-1: string descriptor 0 read error: -22 [ 1735.504873][T18457] usb 4-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1735.553275][T18457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.789234][T10644] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1736.007541][T18457] usb 4-1: Can't set UAC3 power state to 1 for id 10 [ 1736.049014][T18457] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1736.104533][T18457] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1736.124112][T10653] trusted_key: encrypted_key: master key parameter '' is invalid [ 1736.228786][T18457] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1736.266933][T18457] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1736.364284][T18457] usb 4-1: USB disconnect, device number 21 [ 1736.596090][T10630] loop1: detected capacity change from 0 to 32768 [ 1736.791113][T10630] XFS (loop1): Mounting V5 Filesystem [ 1737.325005][T10630] XFS (loop1): Ending clean mount [ 1737.367684][T10687] netlink: 88 bytes leftover after parsing attributes in process `syz.5.17336'. [ 1737.381044][T10630] XFS (loop1): Quotacheck needed: Please wait. [ 1737.432490][T10689] xt_TCPMSS: Only works on TCP SYN packets [ 1737.568602][T10630] XFS (loop1): Quotacheck: Done. [ 1738.053132][ T4275] XFS (loop1): Unmounting Filesystem [ 1738.387526][ T7645] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1738.665207][ T7645] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1738.695962][ T7645] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1738.768215][ T7645] usb 6-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 1738.809429][ T7645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.848298][ T7645] usb 6-1: Product: syz [ 1738.852557][ T7645] usb 6-1: Manufacturer: syz [ 1738.907769][ T7645] usb 6-1: SerialNumber: syz [ 1739.191102][ T7645] usb 6-1: Can't get UAC3 power state for id 10 [ 1739.246956][ T7645] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 1739.322193][ T7645] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1739.410683][ T7645] usb 6-1: USB disconnect, device number 59 [ 1739.730887][ T4509] udevd[4509]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1740.221863][ T6623] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1740.450359][ T6623] usb 4-1: Using ep0 maxpacket: 32 [ 1740.458725][ T6623] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 1740.486170][ T6623] usb 4-1: config 2 has no interface number 0 [ 1740.503041][ T6623] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1740.569151][ T6623] usb 4-1: config 2 interface 88 has no altsetting 0 [ 1740.616186][T18457] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1740.627814][ T6623] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1740.666720][ T6623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.724552][ T6623] usb 4-1: Product: syz [ 1740.738716][ T6623] usb 4-1: Manufacturer: syz [ 1740.743385][ T6623] usb 4-1: SerialNumber: syz [ 1740.788516][T10741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1740.854756][T18457] usb 2-1: Using ep0 maxpacket: 16 [ 1740.862820][T18457] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.914578][T18457] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1740.953163][T18457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.981378][T18457] usb 2-1: Product: syz [ 1740.991019][T18457] usb 2-1: Manufacturer: syz [ 1741.025004][T10741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1741.039110][T18457] usb 2-1: SerialNumber: syz [ 1741.067065][T18457] usb 2-1: config 0 descriptor?? [ 1741.087741][T18457] mcba_usb 2-1:0.0: Can't find endpoints [ 1741.245916][T10772] loop5: detected capacity change from 0 to 64 [ 1741.277280][ T6623] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1741.329328][ T6623] asix: probe of 4-1:2.88 failed with error -71 [ 1741.372623][T18457] usb 2-1: USB disconnect, device number 27 [ 1741.389104][ T6623] usb 4-1: USB disconnect, device number 22 [ 1741.570083][T10776] netlink: 'syz.6.17380': attribute type 1 has an invalid length. [ 1741.598770][T10776] netlink: 216 bytes leftover after parsing attributes in process `syz.6.17380'. [ 1741.637710][T10776] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17380'. [ 1741.867117][T10781] device vxcan3 entered promiscuous mode [ 1742.035373][T10786] loop1: detected capacity change from 0 to 24 [ 1742.134333][ T7642] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1742.383757][ T7642] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1742.408988][ T7642] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1742.470647][ T7642] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1742.520701][ T7642] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.540120][ T7642] usb 7-1: Product: syz [ 1742.564391][ T7642] usb 7-1: Manufacturer: syz [ 1742.569071][ T7642] usb 7-1: SerialNumber: syz [ 1742.606826][ T7642] rtl8150 7-1:1.0: couldn't find required endpoints [ 1742.644945][ T7642] rtl8150: probe of 7-1:1.0 failed with error -5 [ 1742.834970][ T7642] usb 7-1: USB disconnect, device number 46 [ 1744.138333][T10837] netlink: 'syz.3.17410': attribute type 1 has an invalid length. [ 1744.426923][T10841] ALSA: mixer_oss: invalid OSS volume 'u' [ 1745.228954][T10858] Process accounting resumed [ 1745.575166][T10870] netlink: 1033 bytes leftover after parsing attributes in process `syz.5.17426'. [ 1745.858664][ T7642] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1746.088420][ T7642] usb 2-1: Using ep0 maxpacket: 32 [ 1746.126514][ T7642] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1746.145443][ T7642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.153601][ T7642] usb 2-1: Product: syz [ 1746.161409][T10882] overlayfs: missing 'workdir' [ 1746.190086][ T7642] usb 2-1: Manufacturer: syz [ 1746.199593][ T7642] usb 2-1: SerialNumber: syz [ 1746.215349][ T7642] usb 2-1: config 0 descriptor?? [ 1746.437684][ T7642] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 028 [ 1746.624903][T10884] loop3: detected capacity change from 0 to 4096 [ 1746.644509][ T7642] usb 2-1: USB disconnect, device number 28 [ 1746.869376][T10884] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1746.906629][T10884] ntfs3: loop3: Failed to load $Extend. [ 1746.915169][T10884] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 1746.936694][T10884] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 1747.255232][T10898] tmpfs: Bad value for 'mpol' [ 1747.713025][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17446'. [ 1747.755965][T10912] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.17447'. [ 1748.257464][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17453'. [ 1749.369720][T10951] loop1: detected capacity change from 0 to 4096 [ 1749.614692][T10960] CIFS mount error: No usable UNC path provided in device string! [ 1749.614692][T10960] [ 1749.653975][T10960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1749.680369][T10951] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1750.207604][T10967] device batadv1 entered promiscuous mode [ 1750.415125][T10972] netlink: 'syz.1.17475': attribute type 2 has an invalid length. [ 1750.491756][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17475'. [ 1750.583577][T10972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1750.652844][T10950] loop3: detected capacity change from 0 to 32768 [ 1750.803581][T10950] read_mapping_page failed! [ 1750.840228][T10950] ERROR: (device loop3): txCommit: [ 1750.840228][T10950] [ 1750.952372][T10979] ipt_ECN: cannot use operation on non-tcp rule [ 1751.094690][ T2389] read_mapping_page failed! [ 1751.116444][ T2389] ERROR: (device loop3): txCommit: [ 1751.116444][ T2389] [ 1751.123947][ T2389] jfs_write_inode: jfs_commit_inode failed! [ 1751.165868][T10984] 9pnet: Found fid 0 not clunked [ 1751.568004][T10994] netlink: 116 bytes leftover after parsing attributes in process `syz.0.17487'. [ 1751.818852][T11003] loop3: detected capacity change from 0 to 128 [ 1751.907277][T11003] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1751.985626][T11003] hpfs: filesystem error: improperly stopped [ 1751.991706][T11003] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1752.059927][T11003] hpfs: You really don't want any checks? You are crazy... [ 1752.067226][T11003] hpfs: Code page index out of array [ 1752.145620][T11003] hpfs: code page support is disabled [ 1752.151306][T11003] hpfs: hpfs_map_4sectors(): unaligned read [ 1752.243512][T11003] hpfs: hpfs_map_4sectors(): unaligned read [ 1752.249493][T11003] hpfs: filesystem error: unable to find root dir [ 1752.341139][T11003] hpfs: hpfs_map_sector(): read error [ 1752.633721][T11021] loop1: detected capacity change from 0 to 64 [ 1753.021910][T11030] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1753.126664][ T26] audit: type=1400 audit(2037.390:563): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11034 comm="syz.3.17507" [ 1753.603677][T11047] loop3: detected capacity change from 0 to 2048 [ 1753.631129][T11047] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1753.804124][T11047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1754.939141][ T49] Bluetooth: hci0: command 0x0c20 tx timeout [ 1755.054136][T11085] loop6: detected capacity change from 0 to 2048 [ 1755.187097][T11085] hpfs: hpfs_map_sector(): read error [ 1755.286649][T11085] kAFS: unable to lookup cell ' 1±± ± [ 1755.286649][T11085] ±± ±± ±ñÜÏ ñü/ñÂ/ [ 1755.286649][T11085] ñâ/ ñÒ/ ñò¯ñʯ [ 1755.286649][T11085] ñê¯ ñÚ¯ ñúoñÆo [ 1755.286649][T11085] ñæo ñÖo ñöïñÎï [ 1755.286649][T11085] ñîï ñÞï ñþ‡†ø@ˆ†øPˆÃBâˆqdˆ„8*ÄÑ!>âc!>â!>âS!>â3!>âs!>â !¾âK!¾â+!¾âk!¾â!¾â[!¾â;!¾â{!¾â!~âG!~â'!~âg!~â!Ž ñË¿ [ 1755.286649][T11085] ñë¿ ñÛ¿ ñûñÇ [ 1755.286649][T11085] ñç ñ× ñ÷ÿqlˆ†øWˆ‡øOˆÿ†ø_ˆC"'Âq#/Âñ#œ  #œ(‰#œ$ÂI#œ,ÂÉ#œ"Â)#œ*©#œ&Âi#œ.Âé#œ!Â#œ)™#œ%ÂY#œ-ÂÙ#œ#Â9#œ+¹#œ'Ây#œ/Âù#\ Â#\(Â…#\$ÂE#\,ÂÅ#\"Â%#\*Â¥#$Âe"\6Âå"\>Â"\1•"\9ÂU"\5ÂÕ"\=Â5"\3µ"\;Âu"\7Âõ"\?Â"Ü0Â"Ü8ÂM"Ü4ÂÍ"Ü<Â-"Ü2­"Ü' [ 1755.729666][T11096] netlink: 'syz.0.17536': attribute type 21 has an invalid length. [ 1756.014156][T11104] netlink: 'syz.6.17539': attribute type 3 has an invalid length. [ 1756.069701][T11104] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.17539'. [ 1756.620227][T11118] loop1: detected capacity change from 0 to 1764 [ 1756.938780][T11130] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1757.894790][ T6623] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1758.113693][ T6623] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1758.142590][ T6623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.184384][ T6623] usb 2-1: Product: syz [ 1758.188624][ T6623] usb 2-1: Manufacturer: syz [ 1758.212652][ T6623] usb 2-1: SerialNumber: syz [ 1758.233883][ T6623] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1758.317952][T18459] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1758.550601][ C1] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 1758.780093][ T6623] usb 2-1: USB disconnect, device number 29 [ 1759.201485][T11185] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1759.356007][T18459] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1759.375999][T18459] ath9k_htc: Failed to initialize the device [ 1759.382611][ T6623] usb 2-1: ath9k_htc: USB layer deinitialized [ 1759.860623][T18457] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1759.945946][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1760.088768][T18457] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1760.117711][T18457] usb 7-1: config 0 has no interface number 0 [ 1760.123895][T18457] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1760.170832][T18457] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1760.235292][T18457] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.272425][T11210] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1760.281886][T18457] usb 7-1: config 0 descriptor?? [ 1760.382357][T18457] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input110 [ 1760.608228][ T7645] usb 7-1: USB disconnect, device number 47 [ 1762.217999][T18457] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1762.258110][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17617'. [ 1762.289652][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17617'. [ 1762.305226][T11271] netlink: 11 bytes leftover after parsing attributes in process `syz.3.17617'. [ 1762.422899][T18457] usb 7-1: Using ep0 maxpacket: 32 [ 1762.431693][T18457] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1762.494775][T18457] usb 7-1: config 0 has no interface number 0 [ 1762.527563][T18457] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1762.571380][T18457] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1762.594405][T18457] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1762.613890][T11281] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17621'. [ 1762.632312][T18457] usb 7-1: Product: syz [ 1762.652504][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17623'. [ 1762.661642][T18457] usb 7-1: Manufacturer: syz [ 1762.666286][T18457] usb 7-1: SerialNumber: syz [ 1762.710341][T18457] usb 7-1: config 0 descriptor?? [ 1762.887653][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1762.958983][T18457] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1762.966910][T18457] ipheth: probe of 7-1:0.196 failed with error -71 [ 1763.041194][T18457] usb 7-1: USB disconnect, device number 48 [ 1763.532202][T11298] loop3: detected capacity change from 0 to 4096 [ 1763.641826][T11298] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1763.717864][T11298] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1763.756259][T11298] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1763.878086][T11298] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 1764.129266][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1765.124013][T11349] loop1: detected capacity change from 0 to 16 [ 1765.176318][T11349] erofs: (device loop1): mounted with root inode @ nid 36. [ 1765.250576][T11349] syz.1.17654: attempt to access beyond end of device [ 1765.250576][T11349] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1765.474725][T11349] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 1765.951193][T11371] loop1: detected capacity change from 0 to 64 [ 1766.471034][T18459] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1766.708432][T18459] usb 4-1: Using ep0 maxpacket: 8 [ 1766.715755][T18459] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1766.765566][T18459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1766.804925][T18459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1766.861485][T18459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1766.909081][T18459] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1766.947211][T18459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1766.997793][T18459] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1767.083133][T18459] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1767.117809][T11363] loop5: detected capacity change from 0 to 32768 [ 1767.118724][T18459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.136584][T11391] loop1: detected capacity change from 0 to 256 [ 1767.181738][T18459] usb 4-1: Product: syz [ 1767.189159][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17673'. [ 1767.199776][T18459] usb 4-1: Manufacturer: syz [ 1767.223475][T18459] usb 4-1: SerialNumber: syz [ 1767.271447][T18459] usb 4-1: config 0 descriptor?? [ 1767.280733][T11375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1767.288108][T11375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1767.299228][T11363] JBD2: Ignoring recovery information on journal [ 1767.457790][T11363] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1767.766682][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1767.802033][T21372] ocfs2: Unmounting device (7,5) on (node local) [ 1767.973848][ T7646] usb 4-1: USB disconnect, device number 23 [ 1768.427490][T11417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1768.716385][T11425] xt_time: unknown flags 0xc [ 1768.946972][T11421] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1769.583190][ T7645] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1769.707237][T11456] trusted_key: encrypted_key: hex blob is missing [ 1769.801528][ T7645] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1769.834188][ T7645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.877764][ T7645] usb 6-1: Product: syz [ 1769.911332][ T7645] usb 6-1: Manufacturer: syz [ 1769.916014][ T7645] usb 6-1: SerialNumber: syz [ 1770.396964][ T7645] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1770.474308][ T7645] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1770.537962][ T7645] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1770.614394][ T7645] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1770.645499][T11476] loop1: detected capacity change from 0 to 64 [ 1770.673650][ T7645] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1770.691071][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17715'. [ 1770.749307][ T7645] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1770.791578][ T7645] usb 6-1: USB disconnect, device number 60 [ 1771.847860][T11506] netlink: 'syz.5.17730': attribute type 33 has an invalid length. [ 1771.880380][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17729'. [ 1771.906744][T11506] netlink: 152 bytes leftover after parsing attributes in process `syz.5.17730'. [ 1772.241251][T11518] netlink: 'syz.5.17734': attribute type 1 has an invalid length. [ 1772.869006][ T7645] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1773.031266][T11536] loop6: detected capacity change from 0 to 2048 [ 1773.062591][ T7645] usb 4-1: Using ep0 maxpacket: 8 [ 1773.070773][ T7645] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1773.105192][ T7645] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1773.118949][T11536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1773.157459][ T7645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.183339][ T7645] usb 4-1: Product: syz [ 1773.196941][ T7645] usb 4-1: Manufacturer: syz [ 1773.213424][ T7645] usb 4-1: SerialNumber: syz [ 1773.243260][ T7645] usb 4-1: config 0 descriptor?? [ 1773.309519][ T7645] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1773.508038][ T7645] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1773.549550][ T7645] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1773.724301][ T7646] usb 4-1: USB disconnect, device number 24 [ 1774.352740][T11561] syz.1.17756 uses old SIOCAX25GETINFO [ 1774.379761][T11563] CIFS: Attempting to mount \\127.0.0.1\share [ 1775.179089][T11563] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1775.186601][T11563] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1775.672895][T11487] Process accounting paused [ 1775.880701][T11602] netlink: 'syz.1.17772': attribute type 9 has an invalid length. [ 1776.446753][T11614] netlink: 'syz.6.17782': attribute type 10 has an invalid length. [ 1776.557131][T11614] team0: Port device macvlan1 added [ 1776.697664][T11616] loop3: detected capacity change from 0 to 4096 [ 1776.749772][T11616] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 1776.917388][T11620] loop6: detected capacity change from 0 to 64 [ 1776.977473][T11616] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1777.006944][T11616] ntfs3: loop3: Failed to load $Extend. [ 1777.492211][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1777.618487][T11606] loop5: detected capacity change from 0 to 40427 [ 1777.684629][T11606] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1777.720120][T11606] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1777.784250][T11606] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 1777.875960][T11606] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1778.116057][T11606] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1778.138111][T11606] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1779.749010][T11664] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1780.227666][T11672] netlink: 'syz.6.17809': attribute type 32 has an invalid length. [ 1780.905574][T11691] netlink: 'syz.0.17816': attribute type 1 has an invalid length. [ 1780.939971][T11690] netlink: 'syz.5.17818': attribute type 5 has an invalid length. [ 1780.968835][T11691] netlink: 228 bytes leftover after parsing attributes in process `syz.0.17816'. [ 1781.492682][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17825'. [ 1781.501851][T11706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1781.509161][T11706] IPv6: NLM_F_CREATE should be set when creating new route [ 1781.516495][T11706] IPv6: NLM_F_CREATE should be set when creating new route [ 1782.010335][T11722] netlink: 766 bytes leftover after parsing attributes in process `syz.3.17833'. [ 1782.235818][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17836'. [ 1783.073405][ T26] audit: type=1326 audit(2068.823:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.6.17847" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1783.138219][T11757] loop5: detected capacity change from 0 to 256 [ 1783.203467][ T26] audit: type=1326 audit(2068.854:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.6.17847" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1783.309506][T11757] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 1783.397063][ T26] audit: type=1326 audit(2068.854:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.6.17847" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1783.507398][ T26] audit: type=1326 audit(2068.854:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.6.17847" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1783.734757][T11768] loop5: detected capacity change from 0 to 256 [ 1785.024371][T11811] sctp: [Deprecated]: syz.3.17875 (pid 11811) Use of int in maxseg socket option. [ 1785.024371][T11811] Use struct sctp_assoc_value instead [ 1786.598100][T11859] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1786.674105][T11861] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1787.579301][T18457] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1787.808219][T18457] usb 2-1: Using ep0 maxpacket: 32 [ 1787.815397][T18457] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1787.864263][T18457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.903418][T18457] usb 2-1: config 0 descriptor?? [ 1787.942270][T18457] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1788.329149][T18457] gspca_vc032x: reg_w err -71 [ 1788.334474][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.339804][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.426684][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.451763][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.483619][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.489008][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.540289][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.555560][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.575074][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.597965][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.654914][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.660389][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.683697][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.689059][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.760715][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.766088][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.799771][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.845926][T18457] gspca_vc032x: I2c Bus Busy Wait 00 [ 1788.851300][T18457] gspca_vc032x: Unknown sensor... [ 1788.887161][T18457] vc032x: probe of 2-1:0.0 failed with error -22 [ 1788.926363][T11910] device sit0 entered promiscuous mode [ 1788.939984][T18457] usb 2-1: USB disconnect, device number 30 [ 1789.500568][T11924] loop5: detected capacity change from 0 to 1024 [ 1789.543585][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17932'. [ 1789.646342][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17932'. [ 1789.752779][T11926] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1789.863875][T11926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1790.232741][T11939] loop1: detected capacity change from 0 to 512 [ 1790.323013][T11939] EXT4-fs: inline encryption not supported [ 1790.364531][T11939] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1790.447054][T11939] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.17938: corrupted in-inode xattr [ 1790.496453][T11939] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.17938: couldn't read orphan inode 15 (err -117) [ 1790.556306][T11939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1790.624974][ T7646] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1790.703705][ T7645] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1790.868470][ T7646] usb 7-1: Using ep0 maxpacket: 8 [ 1790.887241][ T7646] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1790.934057][ T7646] usb 7-1: config 0 has no interface number 0 [ 1790.940226][ T7646] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1790.960131][ T7645] usb 4-1: Using ep0 maxpacket: 8 [ 1790.970013][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1790.970897][ T7645] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1791.012015][ T7645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1791.034290][ T7646] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1791.064785][ T7646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.072861][ T7646] usb 7-1: Product: syz [ 1791.097363][ T7645] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1791.133992][ T7646] usb 7-1: Manufacturer: syz [ 1791.138663][ T7646] usb 7-1: SerialNumber: syz [ 1791.143366][ T7645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.179968][ T7645] usb 4-1: Product: syz [ 1791.184208][ T7645] usb 4-1: Manufacturer: syz [ 1791.188880][ T7645] usb 4-1: SerialNumber: syz [ 1791.194478][ T7646] usb 7-1: config 0 descriptor?? [ 1791.248536][ T7645] usb 4-1: config 0 descriptor?? [ 1791.297435][ T7645] powermate: probe of 4-1:0.0 failed with error -5 [ 1791.422864][ T7646] i2c-cp2615: probe of 7-1:0.1 failed with error -22 [ 1791.479342][T18457] usb 4-1: USB disconnect, device number 25 [ 1791.515477][T11943] loop5: detected capacity change from 0 to 32768 [ 1791.587521][T11943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.17940 (11943) [ 1791.643608][ T7646] usb 7-1: USB disconnect, device number 49 [ 1791.671716][T11943] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1791.722308][T11943] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1791.761003][T11943] BTRFS info (device loop5): using free space tree [ 1792.036405][T11943] BTRFS info (device loop5): enabling ssd optimizations [ 1792.239281][T11986] xt_l2tp: invalid flags combination: 4 [ 1792.322928][T21372] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1792.864337][T18457] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1793.104024][T18457] usb 4-1: Using ep0 maxpacket: 16 [ 1793.111129][T18457] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1793.168411][T18457] usb 4-1: config 0 has no interface number 0 [ 1793.190606][T18457] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1793.265263][T18457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.322702][T18457] usb 4-1: Product: syz [ 1793.327027][T18457] usb 4-1: Manufacturer: syz [ 1793.331671][T18457] usb 4-1: SerialNumber: syz [ 1793.382369][T12010] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1793.410493][T18457] usb 4-1: config 0 descriptor?? [ 1793.442129][T18457] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1793.596119][T12013] netlink: 200 bytes leftover after parsing attributes in process `syz.1.17966'. [ 1793.660648][T12016] loop5: detected capacity change from 0 to 8 [ 1793.713927][T12016] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1793.741048][ T4373] udevd[4373]: incorrect cramfs checksum on /dev/loop5 [ 1793.821888][T18457] gspca_spca1528: reg_w err -71 [ 1793.856115][T18457] spca1528: probe of 4-1:0.1 failed with error -71 [ 1793.892951][T18457] usb 4-1: USB disconnect, device number 26 [ 1793.937761][ T4373] udevd[4373]: incorrect cramfs checksum on /dev/loop5 [ 1794.970099][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17982'. [ 1795.032935][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17982'. [ 1795.090878][ T9240] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1795.360736][ T9240] usb 2-1: Using ep0 maxpacket: 8 [ 1795.442274][ T9240] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1795.517881][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17988'. [ 1795.675787][ T9240] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1795.692673][ T9240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.732543][ T9240] usb 2-1: Product: syz [ 1795.736790][ T9240] usb 2-1: Manufacturer: syz [ 1795.741425][ T9240] usb 2-1: SerialNumber: syz [ 1796.335489][ T9240] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1796.351463][ T9240] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1796.431298][T12080] x_tables: duplicate entry at hook 1 [ 1796.479145][ T9240] usb 2-1: USB disconnect, device number 31 [ 1796.763313][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1796.858813][T12086] netlink: 'syz.0.17997': attribute type 29 has an invalid length. [ 1796.894637][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17997'. [ 1797.761372][T12077] loop3: detected capacity change from 0 to 32768 [ 1797.845482][T12077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.17993 (12077) [ 1797.917714][T12077] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1797.981628][T12077] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1798.027740][T12077] BTRFS info (device loop3): using free space tree [ 1798.628564][T12077] BTRFS info (device loop3): enabling ssd optimizations [ 1798.695950][ T26] audit: type=1326 audit(2085.232:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.5.18018" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1798.818227][ T26] audit: type=1326 audit(2085.253:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.5.18018" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1798.963479][ T26] audit: type=1326 audit(2085.274:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.5.18018" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc219e0d9 code=0x7ffc0000 [ 1799.008243][ T4283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1800.040779][T18459] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 1800.258933][T18459] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1800.301877][T18459] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.342856][T18459] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.404970][T18459] usb 7-1: string descriptor 0 read error: -22 [ 1800.440875][T18459] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1800.494644][T18459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.019260][T18457] usb 7-1: USB disconnect, device number 50 [ 1801.371869][T18459] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1801.590134][T18459] usb 2-1: Using ep0 maxpacket: 32 [ 1801.607049][T18459] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 1801.838478][T18459] usb 2-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 1801.857370][T18459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.865409][T18459] usb 2-1: Product: syz [ 1801.939248][T18459] usb 2-1: Manufacturer: syz [ 1801.961698][T18459] usb 2-1: SerialNumber: syz [ 1802.017057][T12186] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1802.035684][T12209] xt_hashlimit: max too large, truncated to 1048576 [ 1802.124035][T12209] xt_hashlimit: overflow, try lower: 2/0 [ 1802.450719][T12219] sg_write: data in/out 8454107/16 bytes for SCSI command 0xf0-- guessing data in; [ 1802.450719][T12219] program syz.5.18053 not setting count and/or reply_len properly [ 1802.523856][T18459] usb 2-1: USB disconnect, device number 32 [ 1802.939916][T12221] loop6: detected capacity change from 0 to 8192 [ 1803.161944][T12221] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1803.170652][T12221] FAT-fs (loop6): Filesystem has been set read-only [ 1803.460092][T12237] netlink: 'syz.3.18062': attribute type 10 has an invalid length. [ 1803.610419][T12237] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1803.674331][T12237] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1803.724357][T12237] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1803.800374][T12237] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1804.320925][T12257] Process accounting resumed [ 1804.446182][ T7638] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1804.638677][T12266] netlink: 'syz.5.18076': attribute type 21 has an invalid length. [ 1804.676143][T12266] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18076'. [ 1804.707173][ T7638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1804.743329][ T7638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1804.801738][ T7638] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1804.859900][ T7638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.911418][ T7638] usb 4-1: Product: syz [ 1804.941192][ T7638] usb 4-1: Manufacturer: syz [ 1804.952718][ T7638] usb 4-1: SerialNumber: syz [ 1805.001312][ T7638] usb 4-1: config 0 descriptor?? [ 1805.029420][ T7638] hub 4-1:0.0: bad descriptor, ignoring hub [ 1805.035394][ T7638] hub: probe of 4-1:0.0 failed with error -5 [ 1805.044869][T12276] netlink: 'syz.5.18081': attribute type 10 has an invalid length. [ 1805.115714][ T7638] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input111 [ 1805.179678][T12276] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1805.248210][T12276] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1805.296029][T12276] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1805.362726][T12276] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1806.496054][T18459] usb 4-1: USB disconnect, device number 27 [ 1806.610392][T12306] sctp: [Deprecated]: syz.5.18096 (pid 12306) Use of int in max_burst socket option. [ 1806.610392][T12306] Use struct sctp_assoc_value instead [ 1806.998761][T12312] loop5: detected capacity change from 0 to 764 [ 1807.025021][T12270] loop1: detected capacity change from 0 to 32768 [ 1807.070575][T12270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.18077 (12270) [ 1807.177551][T12270] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1807.228987][T12270] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1807.246130][T12270] BTRFS info (device loop1): using free space tree [ 1807.593646][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18114'. [ 1807.609858][T12270] BTRFS error (device loop1): open_ctree failed: -12 [ 1807.891562][T18459] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 1808.002113][ T4505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4505) [ 1808.151856][T18459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1808.181841][T18459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1808.258671][T18459] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1808.305592][T18459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.371918][T18459] usb 7-1: Product: syz [ 1808.396036][T18459] usb 7-1: Manufacturer: syz [ 1808.424922][T18459] usb 7-1: SerialNumber: syz [ 1808.474162][T18459] usb 7-1: config 0 descriptor?? [ 1808.500978][T18459] hub 7-1:0.0: bad descriptor, ignoring hub [ 1808.559199][T18459] hub: probe of 7-1:0.0 failed with error -5 [ 1808.619845][T18459] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input112 [ 1809.816319][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18127'. [ 1810.775493][T12374] loop5: detected capacity change from 0 to 32768 [ 1812.131125][T12440] loop1: detected capacity change from 0 to 2048 [ 1812.265047][T12445] loop5: detected capacity change from 0 to 64 [ 1812.288077][T12440] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1812.418229][T12440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1813.510277][T12471] loop1: detected capacity change from 0 to 256 [ 1813.593166][T12471] exfat: Deprecated parameter 'utf8' [ 1813.708567][T12471] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1813.753018][ T7652] usb 7-1: USB disconnect, device number 51 [ 1813.802319][ T4503] udevd[4503]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1814.626960][T12499] loop6: detected capacity change from 0 to 512 [ 1814.674245][T12501] device bridge5 entered promiscuous mode [ 1814.696442][T12499] EXT4-fs: Ignoring removed bh option [ 1814.955229][T12499] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1815.137368][T22566] EXT4-fs (loop6): unmounting filesystem. [ 1815.303582][ T7652] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1815.535512][ T7652] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1815.575021][ T7652] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1815.629329][ T7652] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1815.667151][T12526] netlink: 'syz.1.18194': attribute type 1 has an invalid length. [ 1815.675216][ T7652] usb 6-1: Manufacturer: syz [ 1815.704611][ T7652] usb 6-1: SerialNumber: syz [ 1815.972065][T12536] loop6: detected capacity change from 0 to 512 [ 1815.981979][ T7652] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1816.010864][ T7652] usb 6-1: USB disconnect, device number 61 [ 1816.035970][T12531] loop3: detected capacity change from 0 to 4096 [ 1816.094125][T12531] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 1816.161603][T12536] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.18198: bg 0: block 112: padding at end of block bitmap is not set [ 1816.227071][T12536] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1816.294238][T12531] ntfs3: loop3: ino=5, "/" directory corrupted [ 1816.324260][T12536] EXT4-fs (loop6): 1 orphan inode deleted [ 1816.340061][T12536] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1816.399378][T21464] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1816.462487][T21464] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 1816.464986][T12536] Quota error (device loop6): write_blk: dquota write failed [ 1816.612131][T12536] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1816.729641][T12536] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.18198: Failed to acquire dquot type 1 [ 1816.802144][T12545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1816.856600][T12549] IPv6: NLM_F_CREATE should be specified when creating new route [ 1817.088733][T22566] EXT4-fs (loop6): unmounting filesystem. [ 1817.196809][T12556] netlink: 'syz.1.18207': attribute type 2 has an invalid length. [ 1817.397299][T12564] xt_TCPMSS: Only works on TCP SYN packets [ 1817.946789][T12580] netlink: 'syz.1.18218': attribute type 1 has an invalid length. [ 1818.003775][T12580] netlink: 192 bytes leftover after parsing attributes in process `syz.1.18218'. [ 1818.097167][ T6631] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1818.174431][ T7652] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1818.287695][ T6631] usb 7-1: Using ep0 maxpacket: 32 [ 1818.299086][ T6631] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1818.327721][ T6631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.386597][ T6631] usb 7-1: config 0 descriptor?? [ 1818.408465][ T7652] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.431152][ T6631] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1818.458406][ T7652] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1818.524088][ T7652] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1818.564382][ T7652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.572447][ T7652] usb 6-1: Product: syz [ 1818.615495][ T7652] usb 6-1: Manufacturer: syz [ 1818.625336][ T7652] usb 6-1: SerialNumber: syz [ 1818.649048][T12594] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1818.779702][ T6631] gspca_nw80x: reg_r err -71 [ 1818.784545][ T6631] nw80x: probe of 7-1:0.0 failed with error -71 [ 1818.834650][ T6631] usb 7-1: USB disconnect, device number 52 [ 1818.892103][ T7652] usb 6-1: 0:2 : does not exist [ 1818.897243][ T7652] usb 6-1: unit 9 not found! [ 1818.938088][ T7652] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1818.982600][ T7652] usb 6-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1819.067967][ T7652] usb 6-1: USB disconnect, device number 62 [ 1819.498484][ T26] audit: type=1326 audit(2107.069:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.6.18231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1819.640141][ T26] audit: type=1326 audit(2107.100:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.6.18231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1819.767750][ T26] audit: type=1326 audit(2107.100:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.6.18231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1819.852541][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.6.18235'. [ 1819.889160][ T26] audit: type=1326 audit(2107.100:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.6.18231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963d59e0d9 code=0x7ffc0000 [ 1820.172491][T12620] trusted_key: encrypted_key: keylen parameter is missing [ 1820.231662][T12593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.805094][T12638] netlink: 'syz.6.18246': attribute type 1 has an invalid length. [ 1821.327584][T12644] dlm: Unknown command passed to DLM device : 8 [ 1821.327584][T12644] [ 1821.389510][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1822.720056][T12593] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.735958][T12593] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.764157][T12593] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.858029][T12630] netlink: 'syz.1.18241': attribute type 21 has an invalid length. [ 1823.886794][T12630] IPv6: NLM_F_CREATE should be specified when creating new route [ 1823.917178][T12630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1823.924451][T12630] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.931813][T12630] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.939143][T12630] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.968851][ T6631] wg1 speed is unknown, defaulting to 1000 [ 1824.559763][T12670] netlink: 'syz.6.18259': attribute type 30 has an invalid length. [ 1825.185258][T12684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18266'. [ 1825.350111][T12690] loop1: detected capacity change from 0 to 512 [ 1825.432483][T12690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1825.489036][T12690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1825.530148][T12693] loop5: detected capacity change from 0 to 64 [ 1825.617791][T12690] EXT4-fs (loop1): 1 truncate cleaned up [ 1825.653504][T12690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1825.662963][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18272'. [ 1825.916184][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1826.064035][T12704] loop6: detected capacity change from 0 to 256 [ 1827.729737][T12748] SET target dimension over the limit! [ 1827.892354][T12752] sctp: [Deprecated]: syz.3.18298 (pid 12752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1827.892354][T12752] Use struct sctp_sack_info instead [ 1828.548704][T12774] netlink: 'syz.3.18308': attribute type 10 has an invalid length. [ 1828.626913][T12774] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.675615][T12774] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.717766][T12774] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.784696][T12774] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.851301][T12774] device geneve0 entered promiscuous mode [ 1828.911994][T12774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.975351][T12774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.984142][T12774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.041448][T12774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.091811][T12774] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1829.568668][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18320'. [ 1829.851905][T12806] loop3: detected capacity change from 0 to 8 [ 1829.963955][T12806] SQUASHFS error: Unable to read inode 0xe3 [ 1830.038719][T12811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1830.845215][T12826] loop1: detected capacity change from 0 to 4096 [ 1831.025548][T12826] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1831.025548][T12826] [ 1831.735492][ T53] block nbd1: Attempted send on invalid socket [ 1831.741780][ T53] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1831.791084][ T94] block nbd1: Attempted send on invalid socket [ 1831.797412][ T94] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1831.806538][ T94] Buffer I/O error on dev nbd1p5, logical block 1, async page read [ 1832.117375][ T4373] udevd[4373]: inotify_add_watch(7, /dev/nbd1p5, 10) failed: No such file or directory [ 1832.157453][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.196906][T12852] Process accounting paused [ 1833.879521][T12862] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1834.122709][T12866] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1835.138703][T12822] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.147733][T12822] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.156637][T12822] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.194634][T12822] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.590863][T12864] device geneve1 entered promiscuous mode [ 1837.121906][ T9240] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1837.227416][T12888] loop1: detected capacity change from 0 to 764 [ 1837.347950][ T9240] usb 7-1: Using ep0 maxpacket: 32 [ 1837.367212][ T9240] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1837.376825][T12888] rock: directory entry would overflow storage [ 1837.398849][T12888] rock: sig=0x4f50, size=4, remaining=3 [ 1837.421232][ T9240] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1837.435176][T12888] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1837.468693][T12892] netlink: 144 bytes leftover after parsing attributes in process `syz.5.18367'. [ 1837.498056][ T9240] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1837.557043][ T9240] usb 7-1: config 0 interface 0 has no altsetting 1 [ 1837.614304][ T9240] usb 7-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1837.654206][ T9240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1837.695295][ T9240] usb 7-1: SerialNumber: syz [ 1837.725567][ T9240] usb 7-1: config 0 descriptor?? [ 1837.754927][ T9240] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1837.786547][ T9240] usb-storage 7-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1838.005203][ T7636] usb 7-1: USB disconnect, device number 53 [ 1838.766705][T18459] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 1839.011510][T18459] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1839.059766][T18459] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1839.088703][T18459] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1839.147567][T18459] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1839.194774][T18459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1839.233464][T18459] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1839.295408][T18459] usb 2-1: string descriptor 0 read error: -22 [ 1839.319451][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18387'. [ 1839.338108][T18459] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1839.383302][T18459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.434274][T18459] usb 2-1: config 0 descriptor?? [ 1839.455629][T12918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1839.483526][T18459] hub 2-1:0.0: bad descriptor, ignoring hub [ 1839.489513][T18459] hub: probe of 2-1:0.0 failed with error -5 [ 1839.546876][T18459] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input113 [ 1839.801747][T18457] usb 2-1: USB disconnect, device number 33 [ 1839.919534][T12945] netlink: 76 bytes leftover after parsing attributes in process `syz.5.18391'. [ 1840.376111][T12953] loop6: detected capacity change from 0 to 256 [ 1840.443971][T12953] exfat: Deprecated parameter 'namecase' [ 1840.472027][T12955] netlink: 'syz.0.18397': attribute type 16 has an invalid length. [ 1840.528403][T12953] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1840.535152][T12955] netlink: 'syz.0.18397': attribute type 3 has an invalid length. [ 1840.588636][ T7636] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1840.624585][T12955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18397'. [ 1840.852632][ T7636] usb 6-1: Using ep0 maxpacket: 16 [ 1840.860358][ T7636] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1840.879353][ T7636] usb 6-1: config 1 has no interface number 0 [ 1840.928992][ T7636] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1840.991965][ T7636] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1841.040738][ T7636] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1841.078922][ T7636] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1841.116690][ T7636] usb 6-1: Product: syz [ 1841.127134][ T7636] usb 6-1: Manufacturer: syz [ 1841.149115][ T7636] usb 6-1: SerialNumber: syz [ 1841.407131][ T7636] aqc111: probe of 6-1:1.105 failed with error -22 [ 1841.620443][ T9240] usb 6-1: USB disconnect, device number 63 [ 1841.661611][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18409'. [ 1842.985453][T12976] loop3: detected capacity change from 0 to 32768 [ 1843.366643][T12976] JBD2: Ignoring recovery information on journal [ 1843.512033][T12976] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1843.621833][T13028] netlink: 'syz.1.18431': attribute type 4 has an invalid length. [ 1843.695855][T13028] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.18431'. [ 1843.714136][T12976] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 1843.814922][T12976] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1843.839764][T12976] OCFS2: File system is now read-only. [ 1843.881602][T12976] (syz.3.18407,12976,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 1843.940798][T12976] (syz.3.18407,12976,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 1843.987000][T12976] (syz.3.18407,12976,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 1843.995718][T12976] (syz.3.18407,12976,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1844.078579][T12976] (syz.3.18407,12976,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 1844.100730][T12976] (syz.3.18407,12976,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 1844.153175][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18438'. [ 1844.168395][T12976] (syz.3.18407,12976,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1844.176388][T12976] (syz.3.18407,12976,0):ocfs2_symlink:1941 ERROR: status = -30 [ 1844.297159][T12976] (syz.3.18407,12976,0):ocfs2_symlink:2065 ERROR: status = -30 [ 1844.379140][T13045] loop6: detected capacity change from 0 to 64 [ 1844.567943][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 1844.682564][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18443'. [ 1844.750343][T13050] netlink: zone id is out of range [ 1844.791888][T13050] netlink: zone id is out of range [ 1844.806158][T13050] netlink: zone id is out of range [ 1844.840968][T13050] netlink: zone id is out of range [ 1844.868350][T13050] netlink: zone id is out of range [ 1844.910679][T13050] netlink: zone id is out of range [ 1844.938869][T13050] netlink: zone id is out of range [ 1844.958413][T13050] netlink: zone id is out of range [ 1844.985464][T13050] netlink: zone id is out of range [ 1845.027306][T13050] netlink: zone id is out of range [ 1845.310441][ T7636] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1845.545821][ T7636] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1845.574651][ T7636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.623295][ T7636] usb 2-1: config 0 descriptor?? [ 1846.052137][ T7636] ath6kl: Failed to submit usb control message: -71 [ 1846.058902][ T7636] ath6kl: unable to send the bmi data to the device: -71 [ 1846.110377][ T7636] ath6kl: Unable to send get target info: -71 [ 1846.146069][ T7636] ath6kl: Failed to init ath6kl core: -71 [ 1846.388492][ T7636] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1846.425234][ T7636] usb 2-1: USB disconnect, device number 34 [ 1846.598131][T13100] netlink: 'syz.3.18467': attribute type 3 has an invalid length. [ 1846.624015][T13100] netlink: 3 bytes leftover after parsing attributes in process `syz.3.18467'. [ 1846.785143][T13102] syz.6.18468 (13102): /proc/13101/oom_adj is deprecated, please use /proc/13101/oom_score_adj instead. [ 1846.928402][ T26] audit: type=1326 audit(2135.856:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.18469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1847.104891][ T26] audit: type=1326 audit(2135.898:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.18469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1847.248014][ T26] audit: type=1326 audit(2135.898:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.18469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1847.318177][T13112] loop5: detected capacity change from 0 to 2048 [ 1847.403296][T13112] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1847.424964][ T26] audit: type=1326 audit(2135.898:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.18469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1847.486652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1847.487882][T13121] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1847.673234][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1847.739506][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1847.875386][T13112] Remounting filesystem read-only [ 1847.882537][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1847.957748][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.028808][T13133] netlink: 'syz.1.18483': attribute type 10 has an invalid length. [ 1848.073758][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.084682][T13133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18483'. [ 1848.094325][T13136] PKCS8: Unsupported PKCS#8 version [ 1848.119758][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.139506][T13133] device team0 entered promiscuous mode [ 1848.156757][T13133] device team_slave_0 entered promiscuous mode [ 1848.197074][T13133] device team_slave_1 entered promiscuous mode [ 1848.225586][T13133] device vlan0 entered promiscuous mode [ 1848.241251][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.263813][T13133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1848.287268][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.334491][T13133] bridge0: port 3(team0) entered blocking state [ 1848.348832][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.383913][T13133] bridge0: port 3(team0) entered disabled state [ 1848.416032][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.428414][T13133] bridge0: port 3(team0) entered blocking state [ 1848.434837][T13133] bridge0: port 3(team0) entered forwarding state [ 1848.459897][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.490155][T13133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1848.497743][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.555111][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.594558][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.652986][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.682875][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.758857][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.835115][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1848.921144][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1848.977772][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.027561][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1849.070272][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.079790][T18457] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1849.144579][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1849.200803][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.244188][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1849.294304][T18457] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1849.311022][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.315655][T18457] usb 2-1: not running at top speed; connect to a high speed hub [ 1849.376404][T18457] usb 2-1: config 88 has an invalid interface number: 235 but max is 0 [ 1849.384053][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1849.405114][T18457] usb 2-1: config 88 has no interface number 0 [ 1849.405163][T18457] usb 2-1: config 88 interface 235 has no altsetting 0 [ 1849.415034][T18457] usb 2-1: string descriptor 0 read error: -22 [ 1849.415124][T18457] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=31.e6 [ 1849.415158][T18457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.437751][T18457] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1849.467416][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.479035][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1849.479098][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.479385][T13112] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1849.479431][T13112] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1849.482715][ T26] audit: type=1800 audit(2138.533:579): pid=13112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.18473" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1849.824194][T18457] gspca_sn9c20x: Write register 1001 failed -71 [ 1849.824218][T18457] gspca_sn9c20x: Device initialization failed [ 1849.824269][T18457] gspca_sn9c20x: probe of 2-1:88.235 failed with error -71 [ 1849.838432][T18457] usb 2-1: USB disconnect, device number 35 [ 1853.428294][T13164] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.447007][T13164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.463888][T13164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.492223][T13164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.569786][T13200] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.18516'. [ 1854.829697][T13204] netlink: 'syz.3.18518': attribute type 1 has an invalid length. [ 1854.950199][T13204] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.18518'. [ 1855.167202][T13213] net_ratelimit: 42 callbacks suppressed [ 1855.167250][T13213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1855.750541][T13230] netlink: 7 bytes leftover after parsing attributes in process `syz.3.18530'. [ 1856.001706][T13234] loop1: detected capacity change from 0 to 256 [ 1856.664173][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18540'. [ 1857.050804][T13226] loop5: detected capacity change from 0 to 32768 [ 1857.156250][T13226] (syz.5.18529,13226,0):ocfs2_verify_userspace_stack:854 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 1857.225065][T13226] (syz.5.18529,13226,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1857.665770][T13274] netlink: 'syz.6.18552': attribute type 10 has an invalid length. [ 1857.721669][T13274] netlink: 40 bytes leftover after parsing attributes in process `syz.6.18552'. [ 1857.779086][T13274] device team0 entered promiscuous mode [ 1857.814434][T13274] device team_slave_0 entered promiscuous mode [ 1857.867041][T13274] device team_slave_1 entered promiscuous mode [ 1857.903276][T13274] device bond0 entered promiscuous mode [ 1857.908943][T13274] device bond_slave_0 entered promiscuous mode [ 1858.042131][T13274] device bond_slave_1 entered promiscuous mode [ 1858.141034][T13274] device macvlan1 entered promiscuous mode [ 1858.159190][T13274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.209660][T13274] bridge0: port 1(team0) entered blocking state [ 1858.264519][T13274] bridge0: port 1(team0) entered disabled state [ 1858.428106][T13285] loop5: detected capacity change from 0 to 8 [ 1858.498856][T13285] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1858.521923][T13285] SQUASHFS error: Failed to read block 0x9b: -5 [ 1858.569565][T13285] SQUASHFS error: Unable to read metadata cache entry [99] [ 1858.626933][T13285] SQUASHFS error: Unable to read inode 0x127 [ 1859.238466][T13310] loop5: detected capacity change from 0 to 64 [ 1859.362652][ T26] audit: type=1800 audit(2148.916:580): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.18569" name=2E02 dev="loop5" ino=21 res=0 errno=0 [ 1859.740257][T13322] netlink: 212 bytes leftover after parsing attributes in process `syz.5.18574'. [ 1860.168956][ T26] audit: type=1326 audit(2149.756:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1860.274196][ T26] audit: type=1326 audit(2149.756:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1860.428443][ T26] audit: type=1326 audit(2149.809:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1860.573803][ T26] audit: type=1326 audit(2149.809:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1860.686001][ T26] audit: type=1326 audit(2149.809:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1860.836403][ T26] audit: type=1326 audit(2149.809:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1860.917142][T13354] netlink: 320 bytes leftover after parsing attributes in process `syz.6.18590'. [ 1860.989102][ T26] audit: type=1326 audit(2149.809:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1861.121970][ T26] audit: type=1326 audit(2149.850:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1861.152165][T13360] xt_TCPMSS: Only works on TCP SYN packets [ 1861.264872][ T26] audit: type=1326 audit(2149.850:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13337 comm="syz.1.18581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa19199e0d9 code=0x7ffc0000 [ 1861.767617][T13373] tmpfs: Bad value for 'mpol' [ 1861.840832][T13376] cgroup: none used incorrectly [ 1861.932732][T13373] Process accounting resumed [ 1862.022150][T13346] loop3: detected capacity change from 0 to 32768 [ 1862.127428][T13346] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1862.189027][T13346] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1862.197755][T13346] BTRFS info (device loop3): using free space tree [ 1862.801943][T13346] BTRFS info (device loop3): enabling ssd optimizations [ 1862.925034][T13346] BTRFS error (device loop3): balance: invalid convert system profile single [ 1863.189775][ T4283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1864.632253][T13455] loop3: detected capacity change from 0 to 2048 [ 1865.768132][T13449] loop6: detected capacity change from 0 to 32768 [ 1865.814238][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18640'. [ 1865.856619][T13449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.18628 (13449) [ 1865.961669][T13449] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1866.037140][T13449] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1866.045893][T13449] BTRFS info (device loop6): using free space tree [ 1866.445753][T13449] BTRFS info (device loop6): enabling ssd optimizations [ 1866.510949][T13509] 9pnet_fd: p9_fd_create_tcp (13509): problem binding to privport [ 1866.560781][T13449] BTRFS error (device loop6): balance: invalid convert system profile single [ 1866.790656][T22566] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1867.045762][T13520] device bond5 entered promiscuous mode [ 1867.063607][T13520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1867.418297][T13529] sctp: [Deprecated]: syz.3.18659 (pid 13529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1867.418297][T13529] Use struct sctp_sack_info instead [ 1867.543862][T13535] loop1: detected capacity change from 0 to 256 [ 1867.974163][T13541] autofs4:pid:13541:autofs_fill_super: called with bogus options [ 1868.567782][T13555] wg1 speed is unknown, defaulting to 1000 [ 1869.128470][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18677'. [ 1869.601630][T13582] x_tables: unsorted entry at hook 1 [ 1869.744459][ T26] audit: type=1326 audit(2159.814:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.0.18687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x0 [ 1870.297789][T13602] loop5: detected capacity change from 0 to 256 [ 1870.929396][T13619] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1871.074262][T13623] loop5: detected capacity change from 0 to 64 [ 1871.554549][T13635] x_tables: duplicate underflow at hook 3 [ 1871.790252][T13641] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1872.171240][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18721'. [ 1872.228385][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18721'. [ 1872.885197][T13674] netlink: 'syz.3.18730': attribute type 1 has an invalid length. [ 1872.943227][T13674] netlink: 1 bytes leftover after parsing attributes in process `syz.3.18730'. [ 1873.580249][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18740'. [ 1873.665362][T13692] loop3: detected capacity change from 0 to 4096 [ 1874.443251][T13716] netlink: 'syz.3.18750': attribute type 27 has an invalid length. [ 1874.533536][T13716] C: renamed from team_slave_0 [ 1874.555907][T13718] netlink: 'syz.1.18751': attribute type 3 has an invalid length. [ 1874.598313][ T26] audit: type=1400 audit(2164.905:591): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3AFC pid=13719 comm="syz.6.18752" [ 1874.777927][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18754'. [ 1874.912817][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18755'. [ 1875.003195][T13731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18758'. [ 1875.274079][ T9240] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1875.347136][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18761'. [ 1875.533616][ T9240] usb 2-1: Using ep0 maxpacket: 8 [ 1875.540897][ T9240] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1875.613442][ T9240] usb 2-1: config 6 has an invalid interface number: 212 but max is 1 [ 1875.648070][ T9240] usb 2-1: config 6 has an invalid interface number: 188 but max is 1 [ 1875.685980][ T9240] usb 2-1: config 6 has no interface number 0 [ 1875.714542][ T9240] usb 2-1: config 6 has no interface number 1 [ 1875.720719][ T9240] usb 2-1: config 6 interface 212 has no altsetting 0 [ 1875.786012][ T9240] usb 2-1: config 6 interface 188 has no altsetting 0 [ 1875.817311][ T9240] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51 [ 1875.859466][ T9240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.927812][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18768'. [ 1875.940052][ T9240] usb 2-1: Product: syz [ 1875.962242][ T9240] usb 2-1: Manufacturer: syz [ 1875.982764][ T9240] usb 2-1: SerialNumber: syz [ 1876.047929][T13754] binder: 13753:13754 ioctl c00c6211 0 returned -14 [ 1876.226028][ T9240] usb 2-1: USB disconnect, device number 36 [ 1876.639017][ T7636] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1876.867818][ T7636] usb 7-1: Using ep0 maxpacket: 16 [ 1876.875909][ T7636] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1876.917762][ T7636] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1876.962709][ T7636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.000644][ T7636] usb 7-1: Product: syz [ 1877.004890][ T7636] usb 7-1: Manufacturer: syz [ 1877.009516][ T7636] usb 7-1: SerialNumber: syz [ 1877.072704][ T7636] r8152-cfgselector 7-1: config 0 descriptor?? [ 1877.322368][ T7636] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 1877.525022][ T7636] usb 7-1: USB disconnect, device number 54 [ 1877.896294][T13794] loop3: detected capacity change from 0 to 2048 [ 1878.793894][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18802'. [ 1878.852429][T13826] loop5: detected capacity change from 0 to 16 [ 1878.885337][T13826] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1879.822692][T13852] loop3: detected capacity change from 0 to 2048 [ 1879.917319][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1880.064359][T13852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1880.152289][T13852] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 1880.369822][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1880.381050][T13871] loop1: detected capacity change from 0 to 1024 [ 1880.460598][T13871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1880.515661][T13871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1880.716955][T13871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1881.061798][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 1881.146277][T13892] loop6: detected capacity change from 0 to 64 [ 1881.313904][T13892] Trying to free block not in datazone [ 1881.329617][T13892] Trying to free block not in datazone [ 1881.380604][T13892] Trying to free block not in datazone [ 1881.423672][T13892] Trying to free block not in datazone [ 1881.458159][T13892] minix_free_block (loop6:6): bit already cleared [ 1881.480434][T13892] Trying to free block not in datazone [ 1881.515309][T13892] Trying to free block not in datazone [ 1882.312520][ T4260] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1882.474273][T13927] 0xfffffffffffffffd-0x000000020000 : "" [ 1882.515650][T13927] mtd: partition "" is out of reach -- disabled [ 1882.535635][ T4260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1882.574278][ T4260] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1882.626232][ T4260] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1882.690986][ T4260] usb 7-1: string descriptor 0 read error: -22 [ 1882.707560][T13927] ftl_cs: FTL header not found. [ 1882.728037][ T4260] usb 7-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 1882.776803][ T4260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.836682][ T4260] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 1882.884122][ T4260] gspca_stv06xx: st6422 sensor detected [ 1883.373476][ T4260] STV06xx: probe of 7-1:1.0 failed with error -71 [ 1883.441946][ T4260] usb 7-1: USB disconnect, device number 55 [ 1883.707030][T13954] loop5: detected capacity change from 0 to 1024 [ 1883.834221][T13954] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1883.950843][T13954] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 623: comm syz.5.18862: Attempting to read directory block (623) that is past i_size (638464) [ 1884.177993][T21372] EXT4-fs (loop5): unmounting filesystem. [ 1884.552422][T13971] loop5: detected capacity change from 0 to 4096 [ 1884.644005][T13971] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 1884.678293][T13971] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1884.757230][T13971] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1884.878067][T13971] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1884.964221][T13971] ntfs: volume version 3.1. [ 1885.076186][T13986] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 1885.158593][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18875'. [ 1885.426327][T13990] loop1: detected capacity change from 0 to 4096 [ 1885.475341][T13990] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1886.448392][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18891'. [ 1886.842700][T14023] loop5: detected capacity change from 0 to 4096 [ 1887.110330][T14023] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1887.444237][T14041] loop6: detected capacity change from 0 to 256 [ 1888.582617][T14067] loop6: detected capacity change from 0 to 64 [ 1888.634799][T14067] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1888.926159][T14075] netlink: 'syz.5.18918': attribute type 3 has an invalid length. [ 1889.010172][T14080] netlink: 'syz.3.18921': attribute type 6 has an invalid length. [ 1889.101128][T14080] netlink: 168 bytes leftover after parsing attributes in process `syz.3.18921'. [ 1889.227535][T14086] overlayfs: conflicting options: nfs_export=on,index=off [ 1889.294560][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18923'. [ 1889.335550][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18923'. [ 1889.383246][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18923'. [ 1889.823352][T14102] loop6: detected capacity change from 0 to 512 [ 1889.950352][T14102] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1890.110844][T14102] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.18931: bad orphan inode 83886093 [ 1890.207161][T14102] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1890.324022][T14102] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 2 [ 1890.411805][T14102] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 1890.438306][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18937'. [ 1890.450186][T14102] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.18931: Failed to acquire dquot type 1 [ 1890.516593][T14116] tc_dump_action: action bad kind [ 1890.739276][T22566] EXT4-fs (loop6): unmounting filesystem. [ 1891.262547][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18944'. [ 1891.336448][T14132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18945'. [ 1892.027789][T14094] Process accounting paused [ 1892.372424][T14153] netlink: 14 bytes leftover after parsing attributes in process `syz.5.18955'. [ 1892.617607][T14160] loop1: detected capacity change from 0 to 64 [ 1892.818509][T14164] loop3: detected capacity change from 0 to 512 [ 1893.191452][T14168] loop6: detected capacity change from 0 to 4096 [ 1893.231444][T14164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1893.365044][T14168] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1893.422878][T14164] EXT4-fs error (device loop3): ext4_xattr_block_find:1828: inode #12: comm syz.3.18960: corrupted xattr block 6 [ 1893.548659][T14164] EXT4-fs (loop3): Remounting filesystem read-only [ 1893.681438][T22566] EXT4-fs (loop6): unmounting filesystem. [ 1893.753245][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1893.994391][ T26] audit: type=1326 audit(2185.283:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.0.18971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4e159e0d9 code=0x0 [ 1894.409228][ T9240] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1894.668298][ T9240] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.727042][ T9240] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1894.765387][ T9240] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1894.774496][ T9240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.884781][ T9240] usb 4-1: config 0 descriptor?? [ 1894.926667][T14207] netlink: 'syz.0.18980': attribute type 13 has an invalid length. [ 1894.935389][T14207] gretap0: refused to change device tx_queue_len [ 1895.014687][T14174] loop5: detected capacity change from 0 to 40427 [ 1895.041067][T14207] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1895.097029][T14174] F2FS-fs (loop5): invalid crc value [ 1895.140546][T14174] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1895.324302][ T9240] Bluetooth: Can't get version to change to load ram patch err [ 1895.346061][ T9240] Bluetooth: Loading patch file failed [ 1895.351610][ T9240] ath3k: probe of 4-1:0.0 failed with error -71 [ 1895.437447][ T9240] usb 4-1: USB disconnect, device number 28 [ 1895.445134][T14174] F2FS-fs (loop5): Start checkpoint disabled! [ 1895.610146][T14174] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1895.777063][T14174] F2FS-fs (loop5): switch discard_unit option is not allowed [ 1895.854368][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18988'. [ 1896.925173][T14248] JFS: discard option not supported on device [ 1896.976593][T14248] Mount JFS Failure: -22 [ 1896.994012][T14248] jfs_mount failed w/return code = -22 [ 1897.402538][T14257] misc userio: Invalid payload size [ 1898.113327][T14276] loop6: detected capacity change from 0 to 16 [ 1898.119942][T14277] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1898.175879][T14276] erofs: (device loop6): mounted with root inode @ nid 36. [ 1898.984856][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19024'. [ 1899.323927][T14306] loop6: detected capacity change from 0 to 1024 [ 1899.361869][T14307] loop3: detected capacity change from 0 to 2048 [ 1899.415016][T14313] netlink: 'syz.1.19030': attribute type 10 has an invalid length. [ 1899.458503][T14313] netlink: 55 bytes leftover after parsing attributes in process `syz.1.19030'. [ 1899.486589][T14307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1899.587878][T14306] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1900.508844][T14333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1900.744640][T14337] netlink: 'syz.3.19042': attribute type 10 has an invalid length. [ 1900.802784][T14337] team0: Cannot enslave team device to itself [ 1901.130289][T14353] xt_connbytes: Forcing CT accounting to be enabled [ 1901.184800][T14353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1901.381610][ T9240] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1901.596863][ T9240] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1901.616690][ T9240] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1901.672637][ T9240] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1901.723665][ T9240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.783365][ T9240] pl2303 2-1:1.0: required endpoints missing [ 1901.837022][ T9240] pl2303 2-1:1.1: pl2303 converter detected [ 1901.896251][ T9240] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 1902.435280][T14385] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1902.822837][T14388] loop5: detected capacity change from 0 to 4096 [ 1902.900422][T14388] ntfs3: loop5: ino=3, Correct links count -> 2. [ 1902.988991][ T9240] usb 2-1: USB disconnect, device number 37 [ 1903.026575][ T9240] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1903.086452][ T9240] pl2303 2-1:1.1: device disconnected [ 1903.713015][T14415] netlink: 'syz.3.19074': attribute type 21 has an invalid length. [ 1903.766123][T14415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19074'. [ 1903.852319][T14417] openvswitch: netlink: IP tunnel dst address not specified [ 1904.447005][ T26] audit: type=1326 audit(2196.244:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.3.19083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1904.470687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1904.575692][ T26] audit: type=1326 audit(2196.286:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.3.19083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1904.706801][ T26] audit: type=1326 audit(2196.286:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.3.19083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1904.842250][ T26] audit: type=1326 audit(2196.286:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.3.19083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5e79e0d9 code=0x7ffc0000 [ 1904.865975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1905.077180][T14452] loop3: detected capacity change from 0 to 1024 [ 1905.220093][T14452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1905.261751][T14457] netlink: 224 bytes leftover after parsing attributes in process `syz.6.19093'. [ 1905.389052][T14452] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.19092: empty directory 'file1' has too many links (111) [ 1905.620750][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1905.909663][ T9240] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1906.135755][ T9240] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1906.153988][ T9240] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 1906.201077][ T9240] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 1906.231825][ T9240] usb 6-1: language id specifier not provided by device, defaulting to English [ 1906.254725][ T9240] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1906.280597][ T9240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.715067][ T9240] usb 6-1: low speed audio streaming not supported [ 1906.738107][ T9240] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 1906.776311][ T9240] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1906.843384][ T9240] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1906.884396][ T9240] usb 6-1: USB disconnect, device number 64 [ 1907.144664][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1938.430289][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1943.306003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1996.953065][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2055.474925][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2113.997117][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2172.519726][ T1279] ieee802154 phy1 wpan1: encryption failed: -22