last executing test programs: 2m12.15557507s ago: executing program 0 (id=10640): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_opts(r0, 0x29, 0x4b, 0x0, &(0x7f0000000440)) 2m12.142396301s ago: executing program 0 (id=10642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=[@exit_looper]}) 2m11.991904056s ago: executing program 0 (id=10643): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1000009, 0x80012, r0, 0x80000000) 2m11.830740063s ago: executing program 0 (id=10646): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m11.486676849s ago: executing program 0 (id=10652): symlink(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)='./file0\x00') stat(&(0x7f00000003c0)='./file0/file0/file0\x00', 0x0) 2m10.142732407s ago: executing program 0 (id=10676): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000280)=@ethtool_cmd={0x23, 0xffffffff, 0x6, 0xa00a, 0x5d, 0x8, 0x1, 0xfd, 0x1, 0xe1, 0x138d, 0xe18, 0x0, 0x7, 0x5, 0x8, [0x800, 0x9]}}) 2m9.806312822s ago: executing program 32 (id=10676): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000280)=@ethtool_cmd={0x23, 0xffffffff, 0x6, 0xa00a, 0x5d, 0x8, 0x1, 0xfd, 0x1, 0xe1, 0x138d, 0xe18, 0x0, 0x7, 0x5, 0x8, [0x800, 0x9]}}) 2.733613587s ago: executing program 5 (id=12793): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 2.231138859s ago: executing program 5 (id=12804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x44}}, 0x0) 1.830433161s ago: executing program 5 (id=12810): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd0, &(0x7f0000000040), &(0x7f0000000000)=0x4) 1.692555945s ago: executing program 5 (id=12813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 1.528083022s ago: executing program 3 (id=12817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a00)="b9ff03316844268cb89e14f08800", 0x0, 0x24, 0x60000000, 0x1, 0x0, &(0x7f0000000600)="f6", 0x0}, 0x50) 1.455602279s ago: executing program 5 (id=12818): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x6, 0x1, 0xfffffffc, 0x2}, 0x10) 1.393752336s ago: executing program 3 (id=12821): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000dc0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 1.343638051s ago: executing program 1 (id=12822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) 1.321879733s ago: executing program 5 (id=12823): syz_usb_connect(0x2, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.202020816s ago: executing program 3 (id=12826): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002ac0)={0x2020}, 0x2020) 1.194084466s ago: executing program 1 (id=12827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) 1.127303773s ago: executing program 3 (id=12829): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 1.039563962s ago: executing program 1 (id=12831): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) 1.039364802s ago: executing program 3 (id=12832): syz_mount_image$ocfs2(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x800401, &(0x7f0000000600)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x2}}, {@data_writeback}, {@heartbeat_none}, {@err_cont}, {@barrier={'barrier', 0x3d, 0x1000000}}, {@data_writeback}, {@inode64}, {@data_ordered}, {@heartbeat_none}]}, 0x8, 0x447e, &(0x7f00000006c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f00000002c0), 0x0) 983.604378ms ago: executing program 4 (id=12834): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 903.526987ms ago: executing program 1 (id=12835): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x5, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) 885.601569ms ago: executing program 4 (id=12836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 810.289546ms ago: executing program 1 (id=12837): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000340), 0x43, 0x464, &(0x7f00000006c0)="$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") mount$nfs(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000000, 0x0) 667.469211ms ago: executing program 4 (id=12839): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xff, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 641.409314ms ago: executing program 2 (id=12840): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x511, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 519.551806ms ago: executing program 2 (id=12841): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0x0, 0x4, 0x4000, 0x5, {0x77359400}, {0x5, 0x0, 0x8c, 0x2, 0x1, 0xb, "eb0bf14d"}, 0x400, 0x2, {0x0}, 0x8}) 507.755428ms ago: executing program 2 (id=12842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x890}, 0x40) 456.071822ms ago: executing program 2 (id=12843): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000540)={@private=0xa010101, @local, @remote}, 0xc) 387.97437ms ago: executing program 4 (id=12844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000208000b4000000000400004803c0001800b00010065787468647200002c000280080003400400000208000440000000220500020009000000080001400000000b08000640000000020900010073797a30"], 0xdc}}, 0x0) 356.697973ms ago: executing program 2 (id=12845): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c000, &(0x7f0000000240)={[{@part={'part', 0x3d, 0x8000}}, {@file_umask={'file_umask', 0x3d, 0x40000007}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x9, 0x37a, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2940039, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 298.148889ms ago: executing program 4 (id=12846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c) 135.546866ms ago: executing program 1 (id=12847): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000300)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9536de524cf54f892a444", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 99.58462ms ago: executing program 4 (id=12848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x70bd28, 0x25dfdbfc, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x5c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffd, 0x86, 0x1, 0x4, 0x1, 0xdb99}, {0x4, 0x3ff, 0x8, 0x100000000ebe4}, {0x20000007, 0x0, 0x5}, 0x70bd2c, 0x0, 0xa, 0x4, 0x1, 0x58}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e21, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 17.934868ms ago: executing program 3 (id=12849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) 0s ago: executing program 2 (id=12850): r0 = syz_open_dev$video4linux(&(0x7f0000002400), 0x7fff, 0x101200) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000002440)={0x2, 0x0, '\x00', {0x0, @reserved}}) kernel console output (not intermixed with test programs): nt configuration, please check. [ 984.779283][T14812] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.820122][T14812] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 984.869262][T14812] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 984.878354][T14812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.144559][T14812] rtsx_usb: probe of 6-1:1.0 failed with error -71 [ 985.175322][T14812] usb 6-1: USB disconnect, device number 2 [ 985.322869][T21772] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 985.544688][T21772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 985.564277][T21772] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 985.583739][T21772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 985.612481][T21772] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 985.635092][T21772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.648092][T21772] usb 5-1: Product: syz [ 985.654811][T21772] usb 5-1: Manufacturer: syz [ 985.662261][T21772] usb 5-1: SerialNumber: syz [ 985.672020][T21772] usb 5-1: config 0 descriptor?? [ 985.694441][T21772] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 985.813319][T29454] CIFS: Invalid mount helper version specified [ 985.938156][T21772] usb 5-1: USB disconnect, device number 3 [ 986.146602][T29471] autofs4:pid:29471:autofs_fill_super: called with bogus options [ 986.263463][T29476] loop5: detected capacity change from 0 to 8 [ 986.796448][T29502] loop2: detected capacity change from 0 to 128 [ 987.277264][T29529] loop3: detected capacity change from 0 to 128 [ 987.331195][ T6478] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 988.122826][T29557] loop2: detected capacity change from 0 to 8192 [ 988.164493][T29557] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 988.186075][T29557] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 988.226220][T29557] REISERFS (device loop2): using ordered data mode [ 988.285912][T29557] reiserfs: using flush barriers [ 988.328435][T29557] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 988.356861][T29557] REISERFS (device loop2): checking transaction log (loop2) [ 988.382269][T29577] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 988.542513][T29557] REISERFS (device loop2): Using tea hash to sort names [ 988.569887][T29557] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 989.074828][T29566] loop1: detected capacity change from 0 to 40427 [ 989.110975][T29566] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 989.135970][T29566] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 989.173117][T29566] F2FS-fs (loop1): build fault injection attr: rate: 2, type: 0x3ffff [ 989.198791][T29603] netlink: 'syz.3.11069': attribute type 5 has an invalid length. [ 989.210660][T29566] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 989.217799][T29603] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11069'. [ 989.236399][T29566] F2FS-fs (loop1): invalid crc value [ 989.267376][T29566] F2FS-fs (loop1): Found nat_bits in checkpoint [ 989.414238][T29566] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 989.430435][T29566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 989.493936][T29619] loop4: detected capacity change from 0 to 1024 [ 989.573950][T29566] F2FS-fs (loop1) : inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1a8/0x340 [ 989.708528][T29619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 990.001754][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 990.568573][T29667] xt_hashlimit: size too large, truncated to 1048576 [ 991.038398][T29695] netlink: 'syz.5.11099': attribute type 1 has an invalid length. [ 991.047927][T14812] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 991.258094][T14812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 991.288908][T14812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.308290][T14812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 991.328240][T14812] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 991.367189][T14812] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 991.402823][T14812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 991.427798][T14812] usb 3-1: Product: syz [ 991.432015][T14812] usb 3-1: Manufacturer: syz [ 991.435572][T29714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11104'. [ 991.465680][T14812] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 991.483111][T29714] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11104'. [ 991.489698][T14812] usb 3-1: No streaming interface found for terminal 2. [ 991.509233][T14812] usb 3-1: Failed to create links for entity 3 [ 991.522744][T14812] usb 3-1: Failed to register entities (-22). [ 991.537432][T29714] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11104'. [ 991.598279][T29719] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11106'. [ 991.717545][T14812] usb 3-1: USB disconnect, device number 105 [ 992.103387][T29744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11117'. [ 992.240631][T29752] loop3: detected capacity change from 0 to 16 [ 992.285937][T29752] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 992.306655][ T6478] udevd[6478]: incorrect cramfs checksum on /dev/loop3 [ 992.313815][T29752] /dev/loop3: Can't open blockdev [ 992.806634][ T4382] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 993.018316][ T4382] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 993.049136][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.067187][ T4382] usb 2-1: Product: syz [ 993.079731][ T4382] usb 2-1: Manufacturer: syz [ 993.095446][ T4382] usb 2-1: SerialNumber: syz [ 993.109035][T29798] loop5: detected capacity change from 0 to 128 [ 993.170805][T29798] FAT-fs (loop5): Directory bread(block 32) failed [ 993.200529][T29798] FAT-fs (loop5): Directory bread(block 33) failed [ 993.215861][ T4382] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 993.241074][T29798] FAT-fs (loop5): Directory bread(block 34) failed [ 993.282718][T29798] FAT-fs (loop5): Directory bread(block 35) failed [ 993.296895][T29798] FAT-fs (loop5): Directory bread(block 36) failed [ 993.327817][T29798] FAT-fs (loop5): Directory bread(block 37) failed [ 993.334776][T29798] FAT-fs (loop5): Directory bread(block 38) failed [ 993.355373][T29798] FAT-fs (loop5): Directory bread(block 39) failed [ 993.371663][T29798] FAT-fs (loop5): Directory bread(block 40) failed [ 993.388225][T29798] FAT-fs (loop5): Directory bread(block 41) failed [ 993.520026][T29814] loop3: detected capacity change from 0 to 2048 [ 993.561589][T29816] ebt_among: dst integrity fail: 100 [ 993.681739][T21772] usb 2-1: USB disconnect, device number 125 [ 993.717201][T29798] FAT-fs (loop5): Filesystem has been set read-only [ 993.974630][T29833] loop5: detected capacity change from 0 to 1764 [ 994.413472][ T4382] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 994.434845][ T4382] ath9k_htc: Failed to initialize the device [ 994.476659][T21772] usb 2-1: ath9k_htc: USB layer deinitialized [ 995.031453][T29885] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11180'. [ 995.333203][T29896] loop1: detected capacity change from 0 to 1024 [ 995.396749][T29896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 995.410075][T29896] EXT4-fs error (device loop1): ext4_get_first_dir_block:3596: inode #11: comm syz.1.11186: directory missing '.' [ 995.668562][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 996.197272][T29935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 996.430378][T29949] bridge0: port 3(erspan0) entered blocking state [ 996.442446][T29949] bridge0: port 3(erspan0) entered disabled state [ 996.460746][T29949] device erspan0 entered promiscuous mode [ 996.698751][T29962] device netdevsim0 entered promiscuous mode [ 996.722096][T29964] loop4: detected capacity change from 0 to 512 [ 996.804942][T29964] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 996.848457][T29964] ext4 filesystem being mounted at /2220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.863521][T29972] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 996.894663][T29976] netlink: 'syz.5.11220': attribute type 10 has an invalid length. [ 996.918718][T29976] team0: Device nlmon0 is of different type [ 997.021262][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 997.260591][T29991] IPv6: sit1: Disabled Multicast RS [ 997.557316][T30003] loop2: detected capacity change from 0 to 4096 [ 997.612688][T30003] ntfs3: loop2: ino=0, mi_enum_attr [ 997.634325][T30003] ntfs3: loop2: ino=0, mi_enum_attr [ 997.642545][ T6588] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 997.685547][T30003] ntfs3: loop2: ino=1a, mi_enum_attr [ 997.741847][T30014] SET target dimension over the limit! [ 997.846043][ T6588] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.864366][ T6588] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.914428][ T6588] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 997.927373][T30023] netlink: 'syz.2.11242': attribute type 2 has an invalid length. [ 997.927437][T30023] netlink: 'syz.2.11242': attribute type 1 has an invalid length. [ 997.927461][T30023] netlink: 'syz.2.11242': attribute type 1 has an invalid length. [ 998.022715][ T6588] usb 6-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice= 1.00 [ 998.065726][ T6588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.099217][ T6588] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 998.130022][ T6588] dvb-usb: bulk message failed: -8 (3/0) [ 998.143453][ T6588] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 998.166779][ T6588] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 998.191207][ T6588] usb 6-1: media controller created [ 998.236686][ T6588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.312118][ T6588] dvb-usb: bulk message failed: -8 (6/0) [ 998.353081][ T6588] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 998.378074][ T6588] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input75 [ 998.399330][ T6588] dvb-usb: schedule remote query interval to 150 msecs. [ 998.406950][ T6588] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 998.428021][ T6588] usb 6-1: USB disconnect, device number 3 [ 998.522494][ T6588] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 998.619550][T30057] device wg1 entered promiscuous mode [ 998.850738][T14812] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 998.929035][T30059] loop4: detected capacity change from 0 to 32768 [ 998.947921][T30059] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.11257 (30059) [ 998.963895][T30068] loop1: detected capacity change from 0 to 128 [ 998.966158][T30059] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 998.986424][T30068] FAT-fs (loop1): Directory bread(block 32) failed [ 998.993295][T30068] FAT-fs (loop1): Directory bread(block 33) failed [ 999.027015][T30059] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 999.036497][T30059] BTRFS info (device loop4): enabling auto defrag [ 999.046786][T30068] FAT-fs (loop1): Directory bread(block 34) failed [ 999.060775][T30068] FAT-fs (loop1): Directory bread(block 35) failed [ 999.067450][T30068] FAT-fs (loop1): Directory bread(block 36) failed [ 999.076090][T14812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.092672][T30059] BTRFS info (device loop4): force clearing of disk cache [ 999.099869][T30059] BTRFS info (device loop4): ignoring data csums [ 999.110475][T14812] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 999.126450][T14812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.135238][T30068] FAT-fs (loop1): Directory bread(block 37) failed [ 999.141943][T30059] BTRFS info (device loop4): turning on async discard [ 999.149005][T14812] usb 3-1: Product: syz [ 999.153232][T14812] usb 3-1: Manufacturer: syz [ 999.158219][T30059] BTRFS info (device loop4): setting nodatacow, compression disabled [ 999.166338][T30059] BTRFS info (device loop4): turning off async discard [ 999.166367][T30059] BTRFS info (device loop4): disabling free space tree [ 999.166677][T30068] FAT-fs (loop1): Directory bread(block 38) failed [ 999.187068][T14812] usb 3-1: SerialNumber: syz [ 999.200933][T30068] FAT-fs (loop1): Directory bread(block 39) failed [ 999.211902][T30068] FAT-fs (loop1): Directory bread(block 40) failed [ 999.218472][T30068] FAT-fs (loop1): Directory bread(block 41) failed [ 999.425931][T30068] FAT-fs (loop1): Filesystem has been set read-only [ 999.498910][ T4285] BTRFS info (device loop4: state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 999.595986][T30095] loop3: detected capacity change from 0 to 512 [ 999.625465][T30095] /dev/loop3: Can't open blockdev [ 999.668718][T14812] snd-usb-6fire 3-1:1.0: can't set first interface. [ 999.675367][T14812] snd-usb-6fire: probe of 3-1:1.0 failed with error -5 [ 999.689121][ T4393] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 999.732934][T14812] usb 3-1: USB disconnect, device number 106 [ 1000.262727][T30108] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 1000.295995][T30089] loop5: detected capacity change from 0 to 40427 [ 1000.298714][T30108] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1000.349820][T30089] F2FS-fs (loop5): invalid crc value [ 1000.387556][T30089] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1000.536963][T30089] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1000.615116][T30117] loop4: detected capacity change from 0 to 4096 [ 1000.636951][T30117] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1000.644711][T30089] syz.5.11263: attempt to access beyond end of device [ 1000.644711][T30089] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1000.784611][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1000.790904][T28590] syz-executor: attempt to access beyond end of device [ 1000.790904][T28590] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1000.799837][T30124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1000.828987][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1000.883229][T30124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1000.892324][T30124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1001.582958][ T4358] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1001.648397][T30146] device wg1 entered promiscuous mode [ 1001.664743][ T6428] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1001.785557][ T4358] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1001.806677][ T4358] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1001.827277][ T4358] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1001.848038][ T4358] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1001.868473][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.876834][ T6428] usb 5-1: Using ep0 maxpacket: 8 [ 1001.883885][ T6428] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1001.886418][T30158] loop2: detected capacity change from 0 to 64 [ 1001.914960][ T6428] usb 5-1: config 0 has no interface number 0 [ 1001.931337][T30132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1001.965826][ T6428] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1002.008577][ T6428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.017426][ T6428] usb 5-1: Product: syz [ 1002.023211][ T6428] usb 5-1: Manufacturer: syz [ 1002.027933][ T6428] usb 5-1: SerialNumber: syz [ 1002.037953][ T6428] usb 5-1: config 0 descriptor?? [ 1002.210618][ T4288] Bluetooth: hci5: unexpected event 0x05 length: 66 > 4 [ 1002.266609][ T6428] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1002.284200][ T6428] usb 5-1: Failed to initialize entity for entity 6 [ 1002.290978][ T6428] usb 5-1: Failed to register entities (-22). [ 1002.436999][T20425] Bluetooth: hci5: Reading Intel version command failed (-71) [ 1002.451512][ T6428] usb 4-1: USB disconnect, device number 80 [ 1002.497389][T14812] usb 5-1: USB disconnect, device number 4 [ 1002.549182][T30156] loop1: detected capacity change from 0 to 32768 [ 1002.571063][T30156] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.11290 (30156) [ 1002.595469][T30156] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1002.608917][T30156] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1002.624662][T30172] loop2: detected capacity change from 0 to 2048 [ 1002.631743][T30156] BTRFS info (device loop1): using free space tree [ 1002.689715][T30172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1002.747928][T30172] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz.2.11298: bad inode number: 12 [ 1002.773431][T30172] EXT4-fs (loop2): Remounting filesystem read-only [ 1002.879788][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1002.934580][T30156] BTRFS info (device loop1): enabling ssd optimizations [ 1003.088870][T30156] BTRFS warning (device loop1: state M): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 1003.119026][T30156] BTRFS info (device loop1: state M): disabling log replay at mount time [ 1003.141686][T30205] loop5: detected capacity change from 0 to 256 [ 1003.149522][T30156] BTRFS error (device loop1: state M): nologreplay must be used with ro mount option [ 1003.269756][ T4273] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1003.491086][T14812] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1003.705219][T14812] usb 5-1: Using ep0 maxpacket: 32 [ 1003.712356][T14812] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1003.741012][T14812] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1003.778561][T14812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1003.808241][T14812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1003.835381][T14812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1003.878017][T14812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1003.938911][T14812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1003.960323][T30225] loop1: detected capacity change from 0 to 512 [ 1003.970842][T14812] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1004.022348][T14812] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1004.046375][T14812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.080512][T30229] loop5: detected capacity change from 0 to 512 [ 1004.087078][T30225] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1004.109600][T14812] usb 5-1: config 0 descriptor?? [ 1004.133967][T30229] FAT-fs (loop5): Directory bread(block 199916) failed [ 1004.176183][T30202] jfs_mkdir: dtInsert returned -EIO [ 1004.194674][T30229] FAT-fs (loop5): Directory bread(block 199917) failed [ 1004.228865][T30229] FAT-fs (loop5): Directory bread(block 199918) failed [ 1004.233519][T30202] ERROR: (device loop2): jfs_mkdir: [ 1004.233519][T30202] [ 1004.283686][T30229] FAT-fs (loop5): Directory bread(block 199919) failed [ 1004.306231][T30229] FAT-fs (loop5): Directory bread(block 199920) failed [ 1004.307904][T30202] ERROR: (device loop2): remounting filesystem as read-only [ 1004.349644][T30229] FAT-fs (loop5): Directory bread(block 199921) failed [ 1004.372928][T14812] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1004.396055][T30229] FAT-fs (loop5): Directory bread(block 199922) failed [ 1004.455566][T30229] FAT-fs (loop5): Directory bread(block 199923) failed [ 1004.518527][T30229] FAT-fs (loop5): Directory bread(block 199916) failed [ 1004.559313][T30229] FAT-fs (loop5): Directory bread(block 199917) failed [ 1004.626216][ T6428] usb 5-1: USB disconnect, device number 5 [ 1004.643047][ T6428] usblp0: removed [ 1004.717937][T30235] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1005.303042][T30264] loop2: detected capacity change from 0 to 512 [ 1005.356270][T30264] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1005.530533][T30275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11335'. [ 1006.075266][T30257] loop3: detected capacity change from 0 to 32768 [ 1006.805436][T30312] PM: Enabling pm_trace changes system date and time during resume. [ 1006.805436][T30312] PM: Correct system time has to be restored manually after resume. [ 1006.869771][T30286] loop2: detected capacity change from 0 to 32768 [ 1007.001925][T30327] loop5: detected capacity change from 0 to 2048 [ 1007.056982][T30329] netlink: 'syz.1.11345': attribute type 21 has an invalid length. [ 1007.081791][T30327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.097715][T30286] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1007.165371][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11346'. [ 1007.228763][T30286] XFS (loop2): ro->rw transition prohibited on norecovery mount [ 1007.229635][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11346'. [ 1007.394006][ T4282] XFS (loop2): Unmounting Filesystem [ 1007.483410][T30347] xt_TCPMSS: Only works on TCP SYN packets [ 1007.563272][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11352'. [ 1007.633910][ T4358] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1007.725397][T30356] binfmt_misc: register: failed to install interpreter file ./file0 [ 1007.831234][ T4358] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1007.861806][ T4358] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1007.885495][ T4358] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1007.921270][ T4358] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1007.953447][ T4358] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1007.969584][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.995384][T30341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1008.013867][T30341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1008.021155][T14812] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1008.043683][ T4358] pl2303 2-1:1.0: pl2303 converter detected [ 1008.130070][T30374] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1008.187965][ T4358] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 1008.199278][ T4358] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 1008.218631][ T4358] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 1008.239866][T14812] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1008.245911][T30380] loop3: detected capacity change from 0 to 512 [ 1008.255671][ T4358] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 1008.260136][T14812] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1008.285088][ T4358] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -71 [ 1008.286079][T14812] usb 5-1: Product: syz [ 1008.304365][ T4358] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -71 [ 1008.312850][T14812] usb 5-1: SerialNumber: syz [ 1008.325452][T14812] usb 5-1: config 0 descriptor?? [ 1008.328731][ T4358] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -71 [ 1008.349502][ T4358] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -71 [ 1008.358520][T30380] /dev/loop3: Can't open blockdev [ 1008.378087][ T4358] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0000]: -71 [ 1008.408802][ T4358] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0001]: -71 [ 1008.436999][ T4358] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0002]: -71 [ 1008.459280][ T4358] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 1008.512091][ T4358] usb 2-1: USB disconnect, device number 126 [ 1008.548489][ T4358] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1008.589855][ T4358] pl2303 2-1:1.0: device disconnected [ 1008.740490][T30392] sctp: [Deprecated]: syz.5.11363 (pid 30392) Use of int in maxseg socket option. [ 1008.740490][T30392] Use struct sctp_assoc_value instead [ 1008.839288][T14812] usb 5-1: USB disconnect, device number 6 [ 1009.725451][T30433] loop4: detected capacity change from 0 to 2048 [ 1009.780637][T30433] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1009.827209][T30433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.884558][T30437] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1009.944865][T30445] sch_tbf: peakrate 2 is lower than or equals to rate 3604916063403629709 ! [ 1010.295166][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1010.295181][ T26] audit: type=1326 audit(2000000132.805:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30457 comm="syz.3.11387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b39f559 code=0x7ffc0000 [ 1010.386367][ T26] audit: type=1326 audit(2000000132.851:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30457 comm="syz.3.11387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fee4b39f559 code=0x7ffc0000 [ 1010.462463][ T26] audit: type=1326 audit(2000000132.851:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30457 comm="syz.3.11387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b39f559 code=0x7ffc0000 [ 1010.559725][ T26] audit: type=1326 audit(2000000132.851:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30457 comm="syz.3.11387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b39f559 code=0x7ffc0000 [ 1010.685459][T30476] loop2: detected capacity change from 0 to 512 [ 1010.736733][T30476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.154527][T30503] loop5: detected capacity change from 0 to 2048 [ 1011.207520][T30503] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1011.254822][T30503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1011.563211][T30523] loop5: detected capacity change from 0 to 512 [ 1011.628342][T30523] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1011.708335][T30529] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 1011.876200][T30536] loop2: detected capacity change from 0 to 16 [ 1011.905020][T30536] erofs: (device loop2): mounted with root inode @ nid 36. [ 1012.103460][T30544] loop5: detected capacity change from 0 to 512 [ 1012.155163][T30544] EXT4-fs: inline encryption not supported [ 1012.216070][T30544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1012.279762][T30544] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1012.297564][T30544] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1012.342031][T30544] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1012.394271][T30544] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1012.455866][T30544] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1012.490364][T30560] netlink: 'syz.4.11430': attribute type 3 has an invalid length. [ 1012.533347][T30544] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11423: bg 0: block 34: padding at end of block bitmap is not set [ 1012.533409][T30568] xt_hashlimit: size too large, truncated to 1048576 [ 1012.555365][T30568] xt_hashlimit: max too large, truncated to 1048576 [ 1012.583016][T30560] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11430'. [ 1012.604603][T30544] Quota error (device loop5): write_blk: dquota write failed [ 1012.612077][T30544] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1012.669122][T30544] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.11423: Failed to acquire dquot type 1 [ 1012.684868][T30571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11434'. [ 1012.731625][T30544] EXT4-fs (loop5): 1 truncate cleaned up [ 1012.754817][T30544] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1012.778010][T30577] netlink: 'syz.3.11435': attribute type 5 has an invalid length. [ 1012.802046][T30544] EXT4-fs (loop5): unmounting filesystem. [ 1013.106852][T30590] loop2: detected capacity change from 0 to 2048 [ 1013.199657][T30590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1013.461295][T30604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11445'. [ 1013.478470][T30605] netlink: 'syz.2.11444': attribute type 1 has an invalid length. [ 1013.486407][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1013.535519][T30608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11446'. [ 1013.842630][T30584] loop1: detected capacity change from 0 to 40427 [ 1013.880200][T30584] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 1013.910437][T30584] F2FS-fs (loop1): invalid crc value [ 1013.927989][ T34] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1013.953640][T30584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1014.095960][T30629] netlink: 'syz.2.11454': attribute type 30 has an invalid length. [ 1014.118403][T30584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1014.129096][ T34] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1014.151915][ T34] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1014.176329][T30633] IPv6: Can't replace route, no match found [ 1014.199336][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.220730][ T34] usb 4-1: Product: syz [ 1014.224933][ T34] usb 4-1: Manufacturer: syz [ 1014.251589][ T34] usb 4-1: SerialNumber: syz [ 1014.529098][ T34] usb 4-1: MIDIStreaming interface descriptor not found [ 1014.631854][ T34] usb 4-1: USB disconnect, device number 81 [ 1014.989709][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11469'. [ 1015.516015][T14812] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1015.692926][T30677] loop1: detected capacity change from 0 to 32768 [ 1015.740461][T30710] openvswitch: netlink: Key type 29 is not supported [ 1015.746055][T30677] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1015.759640][T14812] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1015.773247][T14812] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1015.784778][T14812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1015.797831][T14812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1015.807765][T14812] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1015.816970][T14812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.829850][T30677] XFS (loop1): ro->rw transition prohibited on norecovery mount [ 1015.834716][T30679] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1015.846072][T30679] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1015.856054][T14812] pl2303 5-1:1.0: pl2303 converter detected [ 1015.867573][T30716] loop5: detected capacity change from 0 to 16 [ 1015.881035][ T6428] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1015.896020][T30716] erofs: (device loop5): mounted with root inode @ nid 36. [ 1015.929193][ T4273] XFS (loop1): Unmounting Filesystem [ 1015.979064][T14812] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 1015.999516][T14812] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 1016.014010][T14812] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 1016.036271][T14812] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 1016.058575][T14812] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 1016.098204][ T6428] usb 3-1: Using ep0 maxpacket: 16 [ 1016.101209][T14812] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0404]: -71 [ 1016.116128][ T6428] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1016.139127][T14812] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -71 [ 1016.144817][ T6428] usb 3-1: config 0 has no interface number 0 [ 1016.167620][ T6428] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1016.169362][T14812] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8383]: -71 [ 1016.201899][ T6428] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1016.212057][T14812] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0000]: -71 [ 1016.227284][ T6428] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1016.233935][T14812] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0001]: -71 [ 1016.253058][ T6428] usb 3-1: Product: syz [ 1016.261107][ T6428] usb 3-1: SerialNumber: syz [ 1016.270160][T14812] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0002]: -71 [ 1016.288829][ T6428] usb 3-1: config 0 descriptor?? [ 1016.290674][T14812] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 1016.316493][ T6428] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 1016.345327][T14812] usb 5-1: USB disconnect, device number 7 [ 1016.350760][ T6428] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input76 [ 1016.379900][T14812] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1016.389551][T14812] pl2303 5-1:1.0: device disconnected [ 1016.486941][T30698] delete_channel: no stack [ 1016.755091][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1016.755491][T14812] usb 3-1: USB disconnect, device number 107 [ 1016.762069][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 1016.801356][T14812] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1016.825280][T30736] netlink: 'syz.3.11495': attribute type 2 has an invalid length. [ 1016.833127][T30736] netlink: 'syz.3.11495': attribute type 4 has an invalid length. [ 1016.846790][T30736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11495'. [ 1017.188873][T30754] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 1017.297050][T30762] netlink: 'syz.5.11508': attribute type 1 has an invalid length. [ 1017.401396][T30764] loop4: detected capacity change from 0 to 512 [ 1017.430710][T30764] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1017.443418][T30764] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1017.476962][T30764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 1017.486962][T30764] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1017.497916][T30764] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.11509: bad orphan inode 3 [ 1017.538211][T30764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1017.558876][T30764] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.11509: dx entry: limit 0 != root limit 125 [ 1017.572969][T30764] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.11509: Corrupt directory, running e2fsck is recommended [ 1017.618270][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 1017.758104][T14812] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1017.964355][T14812] usb 6-1: Using ep0 maxpacket: 16 [ 1017.971836][T14812] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1017.996788][T14812] usb 6-1: config 1 has no interface number 0 [ 1018.013913][T14812] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1018.045735][T14812] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1018.066018][T14812] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1018.097523][T14812] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1018.126401][T14812] usb 6-1: Product: syz [ 1018.137963][T14812] usb 6-1: Manufacturer: syz [ 1018.148231][T14812] usb 6-1: SerialNumber: syz [ 1018.306617][T30806] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1018.406728][T14812] aqc111: probe of 6-1:1.105 failed with error -22 [ 1018.633928][ T34] usb 6-1: USB disconnect, device number 4 [ 1018.676880][T14812] nvmet: connect request for invalid subsystem t! [ 1018.689764][T30810] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 1018.780285][T30823] loop4: detected capacity change from 0 to 4096 [ 1018.811443][T30823] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1018.837823][T30823] ntfs3: loop4: ino=2, mi_enum_attr [ 1018.904201][T30823] ntfs3: loop4: ino=19, mi_enum_attr [ 1018.949144][T30823] ntfs3: loop4: failed to convert "c46c" to maccroatian [ 1018.982027][T30823] ntfs3: loop4: ino=20, mi_enum_attr [ 1019.450542][ T34] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1019.573051][T30858] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[28590] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[30858] [ 1019.638906][T30860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11555'. [ 1019.659285][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11555'. [ 1019.690715][ T34] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.727060][ T34] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.757622][ T34] usb 3-1: string descriptor 0 read error: -22 [ 1019.763875][ T34] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1019.786862][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.819696][ T34] usb 3-1: 0:1 : does not exist [ 1019.824991][ T34] usb 3-1: 0:2 : does not exist [ 1019.960674][T21772] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1020.043749][T30878] netlink: 'syz.3.11564': attribute type 21 has an invalid length. [ 1020.057188][T30878] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11564'. [ 1020.066860][T30878] netlink: 'syz.3.11564': attribute type 4 has an invalid length. [ 1020.075587][T30878] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11564'. [ 1020.177695][T21772] usb 2-1: Using ep0 maxpacket: 32 [ 1020.186713][T21772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1020.199388][ T6428] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1020.208259][T21772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.234622][T21772] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1020.243809][T21772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.251852][T21772] usb 2-1: Product: syz [ 1020.257118][T21772] usb 2-1: Manufacturer: syz [ 1020.267061][T21772] usb 2-1: SerialNumber: syz [ 1020.285648][ T34] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 1020.304459][ T34] usb 3-1: USB disconnect, device number 108 [ 1020.324103][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.396067][ T6428] usb 5-1: not running at top speed; connect to a high speed hub [ 1020.419097][ T6428] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1020.430162][ T6428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.438366][ T6428] usb 5-1: Product: syz [ 1020.442575][ T6428] usb 5-1: Manufacturer: syz [ 1020.447211][ T6428] usb 5-1: SerialNumber: syz [ 1020.459018][ T6428] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1020.470978][ T6428] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1020.484777][ T6428] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1020.498337][ T6428] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1020.531306][T21772] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1020.553491][ T6428] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1020.568687][T21772] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1020.698676][T21772] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1020.733316][ T6479] udevd[6479]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.743771][T21772] usb 2-1: USB disconnect, device number 127 [ 1020.875799][T30895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11572'. [ 1020.893651][ T34] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1020.981164][ T6428] usb 5-1: USB disconnect, device number 8 [ 1020.998367][ T6428] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1021.024355][ T6428] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1021.049634][ T6428] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1021.083232][ T6428] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1021.110317][ T34] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1021.113801][ T6428] keyspan 5-1:1.0: device disconnected [ 1021.124193][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.140527][ T34] usb 4-1: Product: syz [ 1021.145220][ T34] usb 4-1: Manufacturer: syz [ 1021.149917][ T34] usb 4-1: SerialNumber: syz [ 1021.357092][T30914] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 1021.371127][T21772] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1021.392845][T30215] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1021.571645][T21772] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1021.587906][T21772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.596731][T30922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11585'. [ 1021.606745][ T34] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1021.611317][T21772] usb 6-1: Product: syz [ 1021.624264][T30922] unsupported nlmsg_type 40 [ 1021.629813][ T34] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1021.634375][T21772] usb 6-1: Manufacturer: syz [ 1021.657138][T21772] usb 6-1: SerialNumber: syz [ 1021.671458][ T34] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1021.684254][T30215] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1021.707262][T30215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.722904][ T34] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1021.732225][T30215] usb 3-1: Product: syz [ 1021.736405][T30215] usb 3-1: Manufacturer: syz [ 1021.742243][ T34] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1021.751033][T30215] usb 3-1: SerialNumber: syz [ 1021.759335][T30215] usb 3-1: config 0 descriptor?? [ 1021.777138][T30215] hub 3-1:0.0: bad descriptor, ignoring hub [ 1021.784213][ T34] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1021.795662][T30215] hub: probe of 3-1:0.0 failed with error -5 [ 1021.805062][ T34] usb 4-1: USB disconnect, device number 82 [ 1021.813019][T30215] f81232 3-1:0.0: f81534a converter detected [ 1021.839596][T21772] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 1021.999567][T30215] usb 3-1: f81534a converter now attached to ttyUSB0 [ 1022.070232][T21772] usb 6-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1022.086964][T21772] usb 6-1: firmware API: 1.9.6 2012-07-07 [ 1022.375288][ C0] usb 6-1: received invalid command response:got -4, instead of 0 [ 1022.383191][ C0] usb 6-1: restart device (9) [ 1022.395773][T30215] usb 3-1: USB disconnect, device number 109 [ 1022.411664][T30215] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1022.424144][T30215] f81232 3-1:0.0: device disconnected [ 1022.611175][T30215] usb 6-1: USB disconnect, device number 5 [ 1022.863646][T30940] __vm_enough_memory: pid: 30940, comm: syz.3.11594, no enough memory for the allocation [ 1023.058906][T30948] sctp: [Deprecated]: syz.3.11599 (pid 30948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1023.058906][T30948] Use struct sctp_sack_info instead [ 1023.237058][T21772] usb 6-1: firmware upload failed (-110). [ 1023.244430][T30959] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11603'. [ 1023.332877][T30961] loop5: detected capacity change from 0 to 2048 [ 1023.376580][T30961] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1023.413742][T30965] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1023.443183][T30966] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1023.536647][T30970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11608'. [ 1023.820652][T30978] loop3: detected capacity change from 0 to 16 [ 1023.851333][T30978] erofs: (device loop3): mounted with root inode @ nid 36. [ 1023.885235][T30978] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 1023.920372][T30978] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1024.072639][T30987] netlink: 'syz.5.11616': attribute type 2 has an invalid length. [ 1024.180329][T30990] loop3: detected capacity change from 0 to 764 [ 1024.223879][T30990] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1024.250680][T30998] dns_resolver: Unsupported content type (34) [ 1024.344028][T31000] netlink: 'syz.2.11623': attribute type 1 has an invalid length. [ 1024.381517][T31003] loop1: detected capacity change from 0 to 164 [ 1024.885875][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1024.913459][T31008] loop3: detected capacity change from 0 to 32768 [ 1024.918567][T21772] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1024.921736][T31008] /dev/loop3: Can't open blockdev [ 1025.081137][T31033] xt_CONNSECMARK: invalid mode: 66 [ 1025.104776][ T34] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1025.135612][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.150256][T21772] usb 6-1: Using ep0 maxpacket: 16 [ 1025.150408][ T34] usb 5-1: config 0 descriptor?? [ 1025.162099][T21772] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.207932][ T34] cp210x 5-1:0.0: cp210x converter detected [ 1025.213310][T21772] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1025.257150][T21772] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1025.281509][T21772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.311753][T21772] usb 6-1: Product: syz [ 1025.320159][T21772] usb 6-1: Manufacturer: syz [ 1025.330962][T21772] usb 6-1: SerialNumber: syz [ 1025.342724][T31041] loop1: detected capacity change from 0 to 2048 [ 1025.388800][T31041] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1025.468482][T31045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11645'. [ 1025.482388][T31046] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1025.577037][T21772] usb 6-1: 0:2 : does not exist [ 1025.598493][T21772] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1025.631169][T21772] usb 6-1: USB disconnect, device number 6 [ 1025.643441][ T34] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1025.664111][ T34] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1025.702464][ T34] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1025.742647][ T34] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1025.773075][ T34] usb 5-1: USB disconnect, device number 9 [ 1025.782575][ T34] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1025.814215][ T34] cp210x 5-1:0.0: device disconnected [ 1025.891905][T31058] device netdevsim0 entered promiscuous mode [ 1025.902136][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.918370][T31058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1026.034570][T31066] loop1: detected capacity change from 0 to 64 [ 1026.616597][T31099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11671'. [ 1026.858914][T31108] netlink: 'syz.3.11676': attribute type 1 has an invalid length. [ 1026.929304][ T26] audit: type=1326 audit(2000000148.133:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1026.997146][ T26] audit: type=1326 audit(2000000148.133:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.054298][ T26] audit: type=1326 audit(2000000148.133:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.111833][ T26] audit: type=1326 audit(2000000148.160:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.159847][T31096] loop2: detected capacity change from 0 to 32768 [ 1027.190988][ T26] audit: type=1326 audit(2000000148.160:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.270135][T31096] XFS (loop2): Mounting V5 Filesystem [ 1027.352287][ T26] audit: type=1326 audit(2000000148.160:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.354499][T31096] XFS (loop2): Ending clean mount [ 1027.446266][ T26] audit: type=1326 audit(2000000148.160:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.462205][T31096] XFS (loop2): Quotacheck needed: Please wait. [ 1027.529893][T31100] loop5: detected capacity change from 0 to 40427 [ 1027.544148][ T26] audit: type=1326 audit(2000000148.160:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31109 comm="syz.4.11677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1027.631085][T31096] XFS (loop2): Quotacheck: Done. [ 1027.658488][T31100] F2FS-fs (loop5): invalid crc value [ 1027.687976][T31100] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1027.832361][T31100] F2FS-fs (loop5): Start checkpoint disabled! [ 1027.843912][ T4282] XFS (loop2): Unmounting Filesystem [ 1027.881278][T31100] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1028.215491][T31136] loop4: detected capacity change from 0 to 2048 [ 1028.290481][T31136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1028.495101][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11689'. [ 1028.611143][T31151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11692'. [ 1028.627303][T31151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11692'. [ 1028.637926][T31152] xt_CONNSECMARK: invalid mode: 66 [ 1028.643533][T31151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11692'. [ 1028.698428][T31154] netlink: 'syz.4.11693': attribute type 1 has an invalid length. [ 1028.730565][T31154] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.11693'. [ 1028.798268][T31160] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1029.202170][T31186] netlink: 'syz.5.11709': attribute type 2 has an invalid length. [ 1029.364569][T31197] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1029.419254][T31200] loop4: detected capacity change from 0 to 2048 [ 1029.465969][T31200] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1029.514038][T31200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1029.837545][T31216] affs: No valid root block on device nbd4 [ 1029.991944][T31201] loop5: detected capacity change from 0 to 32768 [ 1030.036673][T31201] read_mapping_page failed! [ 1030.054584][T31201] ERROR: (device loop5): txCommit: [ 1030.054584][T31201] [ 1030.285694][ T11] read_mapping_page failed! [ 1030.320616][ T11] ERROR: (device loop5): txCommit: [ 1030.320616][ T11] [ 1030.348032][ T11] jfs_write_inode: jfs_commit_inode failed! [ 1030.753430][T31243] loop2: detected capacity change from 0 to 512 [ 1030.781920][T31243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1030.825561][T31243] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.11736: inode has both inline data and extents flags [ 1030.853279][T31243] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.11736: couldn't read orphan inode 15 (err -117) [ 1030.889690][T31243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1030.894933][T31251] loop3: detected capacity change from 0 to 64 [ 1031.271288][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1031.321797][T31268] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1031.575661][T31278] netlink: 'syz.3.11751': attribute type 41 has an invalid length. [ 1031.604090][T31278] netlink: 'syz.3.11751': attribute type 41 has an invalid length. [ 1032.164858][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1032.212246][T31316] loop1: detected capacity change from 0 to 2048 [ 1032.246343][T31316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1032.381600][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 1032.388678][ T34] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1032.414378][ T34] usb 6-1: config 0 has no interface number 0 [ 1032.431512][ T34] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1032.473872][ T34] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1032.494048][ T34] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1032.526017][ T34] usb 6-1: Product: syz [ 1032.541315][ T34] usb 6-1: SerialNumber: syz [ 1032.562703][ T34] usb 6-1: config 0 descriptor?? [ 1032.583787][ T34] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1032.611535][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input77 [ 1032.631110][T14812] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1032.848019][T14812] usb 4-1: Using ep0 maxpacket: 32 [ 1032.856278][T14812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1032.877265][T14812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.901618][T14812] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1032.922020][T14812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.940239][T14812] usb 4-1: Product: syz [ 1032.953603][T14812] usb 4-1: Manufacturer: syz [ 1032.967336][T14812] usb 4-1: SerialNumber: syz [ 1033.047294][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1033.054617][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.061809][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.069377][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.076863][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.083486][T31345] loop4: detected capacity change from 0 to 256 [ 1033.084126][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.098027][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.111807][ T34] usb 6-1: USB disconnect, device number 7 [ 1033.119151][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.126115][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1033.139028][ T34] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1033.158838][T31345] exfat: Deprecated parameter 'utf8' [ 1033.180413][T31345] exfat: Deprecated parameter 'utf8' [ 1033.208890][T31345] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 1033.238100][T14812] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1033.266489][T31330] loop2: detected capacity change from 0 to 32768 [ 1033.274973][T14812] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1033.308070][T31345] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1033.336604][T14812] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 1033.344983][T31330] XFS (loop2): Mounting V5 Filesystem [ 1033.379879][T14812] usb 4-1: USB disconnect, device number 83 [ 1033.404491][ T6479] udevd[6479]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.500456][T31330] XFS (loop2): Ending clean mount [ 1033.591117][T31340] loop1: detected capacity change from 0 to 32768 [ 1033.609412][ T4282] XFS (loop2): Unmounting Filesystem [ 1033.798895][T31340] XFS (loop1): Mounting V5 Filesystem [ 1033.879475][T31340] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1033.927887][T31340] XFS (loop1): Starting recovery (logdev: internal) [ 1033.948452][T31340] XFS (loop1): Ending recovery (logdev: internal) [ 1034.007522][T31340] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1034.060952][T31340] XFS (loop1): Failed to initialize disk quotas. [ 1034.103866][T31366] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1034.233047][ T4273] XFS (loop1): Unmounting Filesystem [ 1034.398609][T31386] loop2: detected capacity change from 0 to 64 [ 1034.665500][T31394] loop2: detected capacity change from 0 to 2048 [ 1034.709404][T31394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1034.731725][T31397] device team0 entered promiscuous mode [ 1034.757233][T31397] device team_slave_0 entered promiscuous mode [ 1034.763716][T31397] device team_slave_1 entered promiscuous mode [ 1034.822364][T31397] device bridge0 entered promiscuous mode [ 1034.844967][T31397] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1035.162942][T31414] netlink: 'syz.1.11809': attribute type 1 has an invalid length. [ 1035.163526][T31392] loop3: detected capacity change from 0 to 32768 [ 1035.192308][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11809'. [ 1035.202739][T31392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11798 (31392) [ 1035.257143][T31392] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1035.300265][T31392] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1035.308972][T31392] BTRFS info (device loop3): using free space tree [ 1035.363451][T31421] xt_TCPMSS: Only works on TCP SYN packets [ 1035.584723][T31392] BTRFS info (device loop3): enabling ssd optimizations [ 1035.641925][T31450] loop2: detected capacity change from 0 to 64 [ 1035.717219][ T4280] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1036.257011][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1036.263348][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1036.328483][T31476] netlink: 'syz.1.11829': attribute type 2 has an invalid length. [ 1036.382080][T31476] netlink: 119 bytes leftover after parsing attributes in process `syz.1.11829'. [ 1036.742149][T31494] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11840'. [ 1036.753032][T31495] loop4: detected capacity change from 0 to 512 [ 1036.785341][T31467] loop2: detected capacity change from 0 to 32768 [ 1036.805848][T31495] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1036.827707][T31467] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.11822 (31467) [ 1036.867314][T31495] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.11839: inode has both inline data and extents flags [ 1036.884785][T31495] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.11839: couldn't read orphan inode 15 (err -117) [ 1036.909865][T31495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1036.917800][T31467] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1036.965539][T31467] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1036.975202][T31467] BTRFS info (device loop2): force zlib compression, level 3 [ 1036.987235][T31467] BTRFS info (device loop2): allowing degraded mounts [ 1036.994537][T31467] BTRFS info (device loop2): setting nodatasum [ 1037.000912][T31467] BTRFS info (device loop2): allowing degraded mounts [ 1037.008069][T31467] BTRFS info (device loop2): using free space tree [ 1037.245505][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 1037.324469][T31530] loop5: detected capacity change from 0 to 512 [ 1037.444745][T31530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1037.457052][T31537] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11850'. [ 1037.473207][T31530] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.544970][ T4282] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1037.624511][T31530] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-6 [ 1037.686634][T31540] bridge0: port 4(batadv0) entered blocking state [ 1037.694544][T31530] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1037.714792][T31540] bridge0: port 4(batadv0) entered disabled state [ 1037.734983][T31530] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.11849: Failed to acquire dquot type 0 [ 1037.759293][T31540] device batadv0 entered promiscuous mode [ 1037.980659][T31529] loop1: detected capacity change from 0 to 40427 [ 1038.016204][T31529] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 1038.035006][T28590] EXT4-fs (loop5): unmounting filesystem. [ 1038.061096][T31529] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1038.114536][T31529] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 1038.154207][T31529] F2FS-fs (loop1): invalid crc value [ 1038.166164][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1038.176281][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1038.209546][T31529] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1038.352165][T31559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11858'. [ 1038.365964][T31529] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1038.375200][T31529] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1038.649293][T31568] loop3: detected capacity change from 0 to 512 [ 1038.733164][T31568] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1038.786099][T31568] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1038.811500][T31568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1039.098314][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 1039.316764][T31592] ERROR: device name not specified. [ 1039.437522][T31598] netlink: 'syz.4.11877': attribute type 27 has an invalid length. [ 1039.454307][T31598] C: renamed from team_slave_0 [ 1039.558389][T31608] loop3: detected capacity change from 0 to 256 [ 1039.772618][T31619] bridge0: port 3(batadv0) entered blocking state [ 1039.801219][T31619] bridge0: port 3(batadv0) entered disabled state [ 1039.819846][T31619] device batadv0 entered promiscuous mode [ 1039.834239][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1039.843529][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1040.167643][T31638] xt_hashlimit: size too large, truncated to 1048576 [ 1040.221825][T31638] xt_hashlimit: invalid rate [ 1040.389305][T31614] loop4: detected capacity change from 0 to 32768 [ 1040.418500][T31614] XFS: ikeep mount option is deprecated. [ 1040.447559][ T26] audit: type=1400 audit(2000000160.597:232): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=31641 comm="syz.3.11899" [ 1040.525406][T31614] XFS (loop4): Mounting V5 Filesystem [ 1040.717839][T31614] XFS (loop4): Ending clean mount [ 1040.775608][T31636] loop1: detected capacity change from 0 to 32768 [ 1040.815077][T31636] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.11896 (31636) [ 1040.848324][ T4285] XFS (loop4): Unmounting Filesystem [ 1040.866619][T31636] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1040.928431][T31636] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1040.971837][T31636] BTRFS info (device loop1): force zlib compression, level 3 [ 1040.979267][T31636] BTRFS info (device loop1): allowing degraded mounts [ 1041.000591][T31636] BTRFS info (device loop1): setting nodatasum [ 1041.011577][T31636] BTRFS info (device loop1): allowing degraded mounts [ 1041.069627][T31636] BTRFS info (device loop1): using free space tree [ 1041.110245][T31666] netlink: 'syz.3.11906': attribute type 1 has an invalid length. [ 1041.156348][T31666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11906'. [ 1041.470923][ T4273] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1041.573939][T31661] loop2: detected capacity change from 0 to 32768 [ 1041.597806][T31661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11903 (31661) [ 1041.821554][ T34] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1041.862491][ T6478] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (6478) [ 1041.881632][T31661] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1041.943674][T31661] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1041.985854][T31661] BTRFS info (device loop2): using free space tree [ 1042.050730][ T34] usb 4-1: Using ep0 maxpacket: 16 [ 1042.065181][ T34] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1042.110384][ T34] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.175942][ T34] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 1042.242449][ T34] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 1042.259821][ T34] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1042.273245][ T34] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1042.311786][ T34] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1042.379899][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.406244][ T34] usb 4-1: Product: syz [ 1042.411100][ T34] usb 4-1: Manufacturer: syz [ 1042.419170][ T34] usb 4-1: SerialNumber: syz [ 1042.473655][T31661] BTRFS info (device loop2): enabling ssd optimizations [ 1042.664516][ T34] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1042.697897][T31735] loop1: detected capacity change from 0 to 8 [ 1042.707653][ T4282] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1042.772222][ T34] usb 4-1: USB disconnect, device number 84 [ 1042.918378][T31735] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1042.968942][T31735] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1043.051363][T31742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11925'. [ 1043.098380][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.364740][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11929'. [ 1043.442973][T31747] loop1: detected capacity change from 0 to 4096 [ 1043.487481][T31747] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1043.572575][T31747] ntfs3: loop1: ino=1e, mi_enum_attr [ 1043.591956][T31760] loop5: detected capacity change from 0 to 1024 [ 1043.961352][T31776] mmap: syz.3.11941 (31776): VmData 37457920 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 1044.475553][T31772] loop4: detected capacity change from 0 to 32768 [ 1044.490342][T31803] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 1044.567872][T31772] XFS (loop4): Mounting V5 Filesystem [ 1044.689486][T31772] XFS (loop4): Ending clean mount [ 1044.926090][ T4285] XFS (loop4): Unmounting Filesystem [ 1045.036258][T31834] loop5: detected capacity change from 0 to 16 [ 1045.075844][T31834] erofs: (device loop5): mounted with root inode @ nid 36. [ 1045.107434][T31834] syz.5.11968: attempt to access beyond end of device [ 1045.107434][T31834] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1045.169897][T31834] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -21 in[55, 4041] out[4096] [ 1045.210856][ T26] audit: type=1800 audit(2000000164.986:233): pid=31834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11968" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1045.371655][T31846] loop1: detected capacity change from 0 to 1764 [ 1045.481457][T31852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11976'. [ 1045.618703][T31859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11967'. [ 1045.635786][T31859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11967'. [ 1045.644963][T31859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11967'. [ 1045.715923][T31864] loop3: detected capacity change from 0 to 64 [ 1045.732754][ T6127] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1045.812798][T31866] loop1: detected capacity change from 0 to 64 [ 1045.900083][T31868] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1045.911293][T31868] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1045.926034][T31868] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.11983: Failed to acquire dquot type 0 [ 1045.940411][T31868] EXT4-fs (loop5): 1 truncate cleaned up [ 1045.951971][ T6127] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 1045.967434][T31868] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1045.999670][ T6127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.120595][T31868] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1046.177800][T31868] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1046.187316][T31868] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.11983: Failed to acquire dquot type 0 [ 1046.273688][ T6127] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 8e:e5:ec:81:2c:ab [ 1046.346971][T28590] EXT4-fs (loop5): unmounting filesystem. [ 1046.379988][T31886] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1046.498666][ T4353] usb 3-1: USB disconnect, device number 110 [ 1046.511298][ T4353] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 1046.643796][ T6127] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1046.846587][ T6127] usb 5-1: Using ep0 maxpacket: 8 [ 1046.858604][ T6127] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1046.891279][ T6127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1046.923392][ T6127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1046.945618][ T6127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1046.962093][ T6127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.985276][ T6127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1047.001783][ T6127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.220265][T31902] set_capacity_and_notify: 1 callbacks suppressed [ 1047.220282][T31902] loop5: detected capacity change from 0 to 32768 [ 1047.247774][ T6127] usb 5-1: usb_control_msg returned -71 [ 1047.262521][ T6127] usbtmc 5-1:16.0: can't read capabilities [ 1047.332790][ T6127] usb 5-1: USB disconnect, device number 10 [ 1047.347606][T31902] read_mapping_page failed! [ 1047.389823][T31902] ERROR: (device loop5): txCommit: [ 1047.389823][T31902] [ 1047.419744][T31902] ERROR: (device loop5): remounting filesystem as read-only [ 1047.444729][T31933] exfat: Deprecated parameter 'debug' [ 1047.495995][T31933] exFAT-fs (nullb0): invalid boot record signature [ 1047.516539][T31933] exFAT-fs (nullb0): failed to read boot sector [ 1047.543953][T31933] exFAT-fs (nullb0): failed to recognize exfat type [ 1048.034197][T31960] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12017'. [ 1048.075212][T31960] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12017'. [ 1048.175663][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12020'. [ 1048.289738][T31965] netlink: set zone limit has 4 unknown bytes [ 1048.323287][T31973] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1048.422379][T31980] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.12026'. [ 1048.531637][T31986] netlink: 'syz.4.12029': attribute type 16 has an invalid length. [ 1048.561516][T31986] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12029'. [ 1048.807911][T32003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12036'. [ 1048.839136][T32003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12036'. [ 1048.945136][T32011] loop1: detected capacity change from 0 to 128 [ 1048.977920][T32013] netlink: 'syz.2.12040': attribute type 32 has an invalid length. [ 1049.103933][T32018] loop3: detected capacity change from 0 to 1024 [ 1049.183405][T32018] /dev/loop3: Can't open blockdev [ 1049.735627][T32015] loop5: detected capacity change from 0 to 32768 [ 1049.785834][T32015] (syz.5.12041,32015,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1049.826774][T32015] (syz.5.12041,32015,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1049.874397][T32015] (syz.5.12041,32015,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 1049.905167][T32009] loop4: detected capacity change from 0 to 40427 [ 1049.951985][T32015] JBD2: Ignoring recovery information on journal [ 1050.004184][T32009] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1050.047660][T32015] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1050.057913][T32009] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1050.066822][T32009] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 1050.075857][T32009] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1050.105387][T32009] F2FS-fs (loop4): invalid crc value [ 1050.165240][T32009] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1050.255021][ T6127] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1050.301117][T28590] ocfs2: Unmounting device (7,5) on (node local) [ 1050.353325][T32009] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1050.370394][T32009] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1050.404893][T32057] loop3: detected capacity change from 0 to 256 [ 1050.463012][ T6127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.475899][T32039] loop1: detected capacity change from 0 to 32768 [ 1050.483513][ T6127] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1050.515778][ T4285] syz-executor: attempt to access beyond end of device [ 1050.515778][ T4285] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1050.532983][ T6127] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1050.560356][ T6127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.573076][ T4393] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1050.597339][T32039] XFS (loop1): Mounting V5 Filesystem [ 1050.701463][T32039] XFS (loop1): Ending clean mount [ 1050.719328][T32039] XFS (loop1): Quotacheck needed: Please wait. [ 1050.743616][ T4353] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1050.884296][T32039] XFS (loop1): Quotacheck: Done. [ 1050.962023][ T4353] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 1050.977985][ T4353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.004246][ T4273] XFS (loop1): Unmounting Filesystem [ 1051.221975][ T4353] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, 12:5a:9e:0e:e2:50 [ 1051.377729][ T6127] rtsx_usb: probe of 3-1:1.0 failed with error -110 [ 1051.408683][ T6127] usb 3-1: USB disconnect, device number 111 [ 1051.455596][ T4353] usb 6-1: USB disconnect, device number 8 [ 1051.466742][ T4353] net1080 6-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 1052.181461][T32122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12080'. [ 1052.228049][T32122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12080'. [ 1052.659987][ T26] audit: type=1326 audit(2000000171.856:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1052.701682][T32151] loop1: detected capacity change from 0 to 8 [ 1052.749013][ T26] audit: type=1326 audit(2000000171.856:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1052.786659][T32151] SQUASHFS error: Failed to read block 0x81: -5 [ 1052.834070][T32151] SQUASHFS error: Failed to read block 0x81: -5 [ 1052.858198][ T26] audit: type=1326 audit(2000000171.856:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1052.938672][ T26] audit: type=1326 audit(2000000171.856:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1052.962841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1052.979270][T32160] loop2: detected capacity change from 0 to 256 [ 1053.058087][ T26] audit: type=1326 audit(2000000171.856:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1053.085317][T32163] netlink: 212 bytes leftover after parsing attributes in process `syz.1.12100'. [ 1053.127449][ T26] audit: type=1326 audit(2000000171.856:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1053.258578][ T26] audit: type=1326 audit(2000000171.856:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1053.351058][ T26] audit: type=1326 audit(2000000171.856:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.2.12093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1053.375332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.475889][ T26] audit: type=1800 audit(2000000172.032:242): pid=32151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12094" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1053.562762][ T26] audit: type=1800 audit(2000000172.428:243): pid=32160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12097" name="file1" dev="loop2" ino=1048693 res=0 errno=0 [ 1053.941727][T14812] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1054.132671][T32223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12124'. [ 1054.149543][T14812] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1054.170603][T14812] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1054.217720][T14812] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice= 1.00 [ 1054.237560][T14812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.274459][T32193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1054.291320][T32193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1054.315843][T14812] ems_usb 5-1:1.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -71 [ 1054.343135][T14812] ems_usb: probe of 5-1:1.0 failed with error -71 [ 1054.575308][ T22] usb 5-1: USB disconnect, device number 11 [ 1054.667381][T32250] loop1: detected capacity change from 0 to 512 [ 1054.718611][T32250] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.12137: bg 0: block 5: invalid block bitmap [ 1054.764874][T32250] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 1054.794218][T32250] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.12137: invalid indirect mapped block 3 (level 2) [ 1054.815368][T32250] EXT4-fs (loop1): 1 orphan inode deleted [ 1054.822276][T32250] EXT4-fs (loop1): 1 truncate cleaned up [ 1054.828757][T32250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1054.840801][T14812] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1054.930807][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 1055.049660][T14812] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1055.067808][T14812] usb 4-1: config 0 has no interface number 0 [ 1055.085323][T14812] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1055.108956][T14812] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1055.132584][T14812] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1055.156154][T14812] usb 4-1: Manufacturer: syz [ 1055.171864][T14812] usb 4-1: SerialNumber: syz [ 1055.191544][T14812] usb 4-1: config 0 descriptor?? [ 1055.325445][T32284] loop5: detected capacity change from 0 to 512 [ 1055.371798][T32284] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1055.416224][T32286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12155'. [ 1055.418453][T32284] EXT4-fs (loop5): 1 truncate cleaned up [ 1055.443011][T32284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1055.621286][T28590] EXT4-fs (loop5): unmounting filesystem. [ 1055.647880][T32297] netlink: 'syz.1.12161': attribute type 1 has an invalid length. [ 1055.676388][T14812] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 1055.703539][T14812] usb 4-1: USB disconnect, device number 85 [ 1056.119732][T32321] program syz.4.12170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.414025][T32333] netlink: 'syz.3.12177': attribute type 1 has an invalid length. [ 1056.472212][T32337] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12179'. [ 1056.503688][T32337] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1056.768330][T32325] loop2: detected capacity change from 0 to 40427 [ 1056.816425][T32325] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1056.823694][T32325] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1056.823787][T32323] loop1: detected capacity change from 0 to 32768 [ 1056.880146][T32325] F2FS-fs (loop2): invalid crc value [ 1056.938546][T32325] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1057.026537][T32323] XFS (loop1): Mounting V5 Filesystem [ 1057.103626][T32360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12186'. [ 1057.154178][T32323] XFS (loop1): Ending clean mount [ 1057.175318][T32325] F2FS-fs (loop2): recover fsync data on readonly fs [ 1057.198303][T32358] loop3: detected capacity change from 0 to 2048 [ 1057.229955][T32325] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1057.279867][T32325] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 1057.291074][T32335] loop4: detected capacity change from 0 to 32768 [ 1057.320517][T32325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1057.370738][T32335] ERROR: (device loop4): diAllocBit: iag inconsistent [ 1057.370738][T32335] [ 1057.388438][ T4273] XFS (loop1): Unmounting Filesystem [ 1057.419073][T32335] ialloc: diAlloc returned -5! [ 1057.463368][T32366] netlink: 'syz.3.12189': attribute type 4 has an invalid length. [ 1057.714532][T32372] CIFS: Attempting to mount \\::1\share [ 1057.753119][T32372] CIFS: VFS: No username specified [ 1058.277402][T32390] loop1: detected capacity change from 0 to 512 [ 1058.334008][T32390] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1058.393952][T32390] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1058.414126][T32390] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12202: bg 0: block 248: padding at end of block bitmap is not set [ 1058.431669][T32390] __quota_error: 5 callbacks suppressed [ 1058.431683][T32390] Quota error (device loop1): write_blk: dquota write failed [ 1058.496047][T32390] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1058.506192][T32390] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.12202: Failed to acquire dquot type 1 [ 1058.534638][T32390] EXT4-fs (loop1): 1 truncate cleaned up [ 1058.561966][T32390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1058.622887][T32390] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 1058.628244][T32411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12210'. [ 1058.663849][T32390] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 1058.691136][T32390] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.12202: Failed to acquire dquot type 1 [ 1058.802644][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 1058.907775][T32423] netlink: 'syz.1.12216': attribute type 8 has an invalid length. [ 1059.363577][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1059.574360][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.607159][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1059.637140][ T22] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1059.665532][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.700802][ T22] usb 5-1: config 0 descriptor?? [ 1059.960283][ T22] usb 5-1: USB disconnect, device number 12 [ 1060.001868][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.242461][ T26] audit: type=1326 audit(2000000178.856:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32500 comm="syz.2.12255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1060.284518][ T26] audit: type=1326 audit(2000000178.884:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32500 comm="syz.2.12255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1060.326192][ T26] audit: type=1326 audit(2000000178.884:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32500 comm="syz.2.12255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1060.400001][ T26] audit: type=1326 audit(2000000178.884:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32500 comm="syz.2.12255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1060.438891][T32507] netlink: 'syz.3.12258': attribute type 41 has an invalid length. [ 1060.446523][ T26] audit: type=1326 audit(2000000178.884:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32500 comm="syz.2.12255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1060.534351][ T26] audit: type=1326 audit(2000000178.884:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32500 comm="syz.2.12255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1060.709067][T32525] netlink: 80 bytes leftover after parsing attributes in process `syz.5.12267'. [ 1060.883612][T32533] loop5: detected capacity change from 0 to 512 [ 1060.896479][T32535] loop1: detected capacity change from 0 to 764 [ 1060.925463][T32533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1060.972743][T32533] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1061.015419][T32533] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1061.022651][T32533] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1061.032900][T32533] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1061.055590][T32533] EXT4-fs (loop5): 1 truncate cleaned up [ 1061.062099][T32533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1061.083708][T32533] EXT4-fs (loop5): unmounting filesystem. [ 1061.084154][T32542] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 1061.098429][T32542] syz.4.12276: attempt to access beyond end of device [ 1061.098429][T32542] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1061.144681][T32544] loop2: detected capacity change from 0 to 64 [ 1061.303217][T32546] netlink: 'syz.1.12277': attribute type 32 has an invalid length. [ 1061.566583][T32554] loop5: detected capacity change from 0 to 64 [ 1061.734558][T32539] loop3: detected capacity change from 0 to 32768 [ 1061.780978][T32539] /dev/loop3: Can't open blockdev [ 1062.158499][T32550] loop4: detected capacity change from 0 to 32768 [ 1062.176483][T32572] loop3: detected capacity change from 0 to 512 [ 1062.239710][T32550] [ 1062.239710][T32550] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1062.239710][T32550] [ 1062.446844][ T4285] [ 1062.446844][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1062.446844][ T4285] [ 1062.483768][ T4285] [ 1062.483768][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1062.483768][ T4285] [ 1063.236766][T32596] netlink: 'syz.2.12302': attribute type 10 has an invalid length. [ 1063.259883][T32580] loop1: detected capacity change from 0 to 32768 [ 1063.285626][T32596] device macvlan0 entered promiscuous mode [ 1063.327334][T32580] XFS (loop1): Mounting V5 Filesystem [ 1063.349142][T32586] loop3: detected capacity change from 0 to 32768 [ 1063.384923][T32596] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1063.479767][T32580] XFS (loop1): Ending clean mount [ 1063.508268][T32580] XFS (loop1): Quotacheck needed: Please wait. [ 1063.637881][T32580] XFS (loop1): Quotacheck: Done. [ 1063.644190][T32580] XFS (loop1): Unmounting Filesystem [ 1063.780760][ T4393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4393) [ 1063.808794][ T6127] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1064.028193][ T6127] usb 4-1: config index 0 descriptor too short (expected 45, got 39) [ 1064.044155][ T6127] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1064.076652][ T6127] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.121901][ T6127] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice= 0.00 [ 1064.147019][ T6127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.188230][ T6127] usb 4-1: Product: syz [ 1064.192493][ T6127] usb 4-1: Manufacturer: syz [ 1064.197112][ T6127] usb 4-1: SerialNumber: syz [ 1064.225786][ T6127] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 1064.259622][ T6127] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1064.377330][T32631] loop4: detected capacity change from 0 to 4096 [ 1064.438801][T32631] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1064.447478][ T6127] usb 4-1: USB disconnect, device number 86 [ 1064.472896][ T6127] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1064.506851][ T6127] qcserial 4-1:1.0: device disconnected [ 1064.614297][T32631] ntfs3: loop4: ino=5, "/" directory corrupted [ 1064.643011][T32631] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1064.673907][T32631] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1064.812764][ T32] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1064.838225][ T4285] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 1065.296700][T32673] netlink: 'syz.1.12336': attribute type 29 has an invalid length. [ 1065.333406][T32673] netlink: 'syz.1.12336': attribute type 29 has an invalid length. [ 1065.544787][T32690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12344'. [ 1065.695403][T32694] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1066.502384][T32701] loop1: detected capacity change from 0 to 32768 [ 1066.545648][T32701] ERROR: (device loop1): diAllocBit: iag inconsistent [ 1066.545648][T32701] [ 1066.588529][T32701] ialloc: diAlloc returned -5! [ 1066.936569][T32745] netlink: 'syz.5.12370': attribute type 12 has an invalid length. [ 1066.955894][T32745] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12370'. [ 1067.106800][T21772] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1067.238127][T32758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12376'. [ 1067.303948][T32761] loop3: detected capacity change from 0 to 8 [ 1067.313446][T21772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.334298][T21772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.354795][T32761] /dev/loop3: Can't open blockdev [ 1067.373065][T21772] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.425732][T21772] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1067.463740][T21772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.503968][T21772] usb 2-1: config 0 descriptor?? [ 1067.527150][T32739] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1067.656327][T32747] loop4: detected capacity change from 0 to 32768 [ 1067.761661][T21772] usb 2-1: string descriptor 0 read error: -71 [ 1067.799654][T21772] usb 2-1: USB disconnect, device number 2 [ 1067.881278][ T22] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1068.105750][ T22] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1068.121357][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1068.147820][ T22] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1068.166551][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.188850][ T22] usb 4-1: Product: syz [ 1068.193128][ T22] usb 4-1: Manufacturer: syz [ 1068.197732][ T22] usb 4-1: SerialNumber: syz [ 1068.221724][ T22] usb 4-1: config 0 descriptor?? [ 1068.242358][ T22] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1068.441104][ T332] loop5: detected capacity change from 0 to 764 [ 1068.499087][ T332] rock: directory entry would overflow storage [ 1068.528550][ T332] rock: sig=0x4654, size=5, remaining=4 [ 1068.679770][T21772] usb 4-1: USB disconnect, device number 87 [ 1068.693533][ T318] loop4: detected capacity change from 0 to 32768 [ 1068.703326][ T341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12393'. [ 1068.760518][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1068.760533][ T26] audit: type=1326 audit(2000000186.705:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=342 comm="syz.5.12394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7e39f559 code=0x7ffc0000 [ 1068.798322][ T318] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.833440][ T318] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1068.860964][ T318] BTRFS info (device loop4): using free space tree [ 1068.878945][ T26] audit: type=1326 audit(2000000186.761:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=342 comm="syz.5.12394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5d7e39f559 code=0x7ffc0000 [ 1068.917553][ T26] audit: type=1326 audit(2000000186.825:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=342 comm="syz.5.12394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7e39f559 code=0x7ffc0000 [ 1069.045988][ T26] audit: type=1326 audit(2000000186.825:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=342 comm="syz.5.12394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7e39f559 code=0x7ffc0000 [ 1069.170395][ T318] BTRFS info (device loop4): enabling ssd optimizations [ 1069.293873][ T4285] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1069.326949][ T339] loop1: detected capacity change from 0 to 32768 [ 1069.397505][ T339] [ 1069.397505][ T339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1069.397505][ T339] [ 1069.430374][ T372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12399'. [ 1069.843269][ T4273] [ 1069.843269][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1069.843269][ T4273] [ 1069.888715][ T4273] [ 1069.888715][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1069.888715][ T4273] [ 1069.914294][ T364] loop2: detected capacity change from 0 to 32768 [ 1069.952478][ T364] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.12397 (364) [ 1070.036248][ T364] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1070.081615][ T364] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1070.108545][ T364] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1070.139819][T20425] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1070.140485][ T364] BTRFS info (device loop2): use lzo compression, level 0 [ 1070.215275][ T364] BTRFS info (device loop2): using free space tree [ 1070.399307][ T417] netlink: 'syz.4.12415': attribute type 2 has an invalid length. [ 1070.422319][ T364] BTRFS info (device loop2): enabling ssd optimizations [ 1070.609711][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12418'. [ 1070.852514][ T4282] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1071.122542][ T6478] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (6478) [ 1071.284397][ T455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12430'. [ 1072.008493][ T487] device wlan0 entered promiscuous mode [ 1072.027311][ T487] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1072.235923][ T497] loop3: detected capacity change from 0 to 2048 [ 1072.300057][ T6478] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1072.372047][ T470] loop5: detected capacity change from 0 to 40427 [ 1072.408519][ T470] F2FS-fs (loop5): invalid crc value [ 1072.458610][ T508] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 1072.487928][ T470] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1072.538672][ T511] netlink: 'syz.4.12455': attribute type 7 has an invalid length. [ 1072.554959][ T512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12454'. [ 1072.600946][ T514] program syz.3.12456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.601028][ T512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.626684][ T470] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1073.202664][ T535] loop4: detected capacity change from 0 to 256 [ 1074.115165][ T579] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12488'. [ 1074.226610][ T583] ebt_among: dst integrity fail: 101 [ 1074.550222][ T592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.590803][ T571] loop2: detected capacity change from 0 to 32768 [ 1074.656812][ T571] XFS (loop2): Mounting V5 Filesystem [ 1074.773575][ T571] XFS (loop2): Ending clean mount [ 1074.783842][ T571] XFS (loop2): Quotacheck needed: Please wait. [ 1074.873426][ T610] loop5: detected capacity change from 0 to 256 [ 1074.880607][ T571] XFS (loop2): Quotacheck: Done. [ 1074.897823][ T571] XFS (loop2): Unmounting Filesystem [ 1075.788401][ T619] loop1: detected capacity change from 0 to 32768 [ 1075.797105][ T619] (syz.1.12501,619,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1075.811450][ T619] (syz.1.12501,619,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1075.854938][ T619] JBD2: Ignoring recovery information on journal [ 1075.914136][ T619] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1075.961863][ T619] ocfs2: Unmounting device (7,1) on (node local) [ 1076.468401][ T652] loop2: detected capacity change from 0 to 1024 [ 1076.520161][ T652] hfsplus: invalid length 32517 has been corrected to 255 [ 1076.594820][ T657] device geneve1 entered promiscuous mode [ 1076.746178][ T662] loop4: detected capacity change from 0 to 1024 [ 1077.194427][ T26] audit: type=1326 audit(2000000194.490:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.12534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1077.241511][ T26] audit: type=1326 audit(2000000194.527:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.12534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1077.265521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.338121][ T26] audit: type=1326 audit(2000000194.527:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.12534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1077.393535][ T26] audit: type=1326 audit(2000000194.527:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.12534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1077.450815][ T26] audit: type=1326 audit(2000000194.527:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=686 comm="syz.4.12534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0af9f559 code=0x7ffc0000 [ 1077.799551][ T709] loop1: detected capacity change from 0 to 4096 [ 1077.825391][ T709] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1077.901953][ T709] ntfs3: loop1: ino=19, mi_enum_attr [ 1077.919127][ T709] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1078.059929][ T721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12551'. [ 1078.494053][ T735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12558'. [ 1078.538063][ T735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12558'. [ 1078.629716][ T742] loop3: detected capacity change from 0 to 256 [ 1078.660664][ T744] xt_cgroup: path and classid specified [ 1078.716745][ T746] loop2: detected capacity change from 0 to 512 [ 1078.782288][ T746] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1078.829215][ T746] EXT4-fs (loop2): invalid journal inode [ 1078.858272][ T746] EXT4-fs (loop2): can't get journal size [ 1078.878551][ T746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 1078.890258][ T746] System zones: 1-12, 13-13 [ 1078.928357][ T746] EXT4-fs (loop2): 1 truncate cleaned up [ 1078.937182][ T746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1078.973973][ T746] EXT4-fs error (device loop2) in ext4_setattr:5728: error 28 [ 1079.111302][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1079.205821][ T26] audit: type=1326 audit(2000000196.344:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.2.12571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1079.252020][ T26] audit: type=1326 audit(2000000196.363:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.2.12571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1079.276005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1079.344158][ T26] audit: type=1326 audit(2000000196.363:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.2.12571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1079.434008][ T26] audit: type=1326 audit(2000000196.363:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.2.12571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1079.523959][ T26] audit: type=1326 audit(2000000196.381:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.2.12571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ff9f559 code=0x7ffc0000 [ 1079.540487][T20425] Bluetooth: hci1: command 0x0407 tx timeout [ 1080.455521][ T824] loop4: detected capacity change from 0 to 1024 [ 1080.511031][ T827] usb usb9: usbfs: process 827 (syz.2.12601) did not claim interface 0 before use [ 1080.548685][ T824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1080.632107][ T835] loop3: detected capacity change from 0 to 4096 [ 1080.644004][ T835] /dev/loop3: Can't open blockdev [ 1080.649638][ T824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1080.772592][ T824] EXT4-fs (loop4): Remounting filesystem read-only [ 1080.892536][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 1081.097525][ T844] loop3: detected capacity change from 0 to 8192 [ 1081.976791][ T886] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12627'. [ 1082.069182][ T895] loop1: detected capacity change from 0 to 512 [ 1082.119678][ T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1082.138478][ T895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1082.195660][ T909] netlink: 'syz.2.12633': attribute type 1 has an invalid length. [ 1082.212638][ T895] ext4 filesystem being mounted at /2553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.325837][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 1082.334159][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 1082.336008][ T22] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1082.370528][ T22] usb 6-1: config 0 has no interface number 0 [ 1082.383890][ T22] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1082.423238][ T22] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1082.446808][ T22] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1082.468734][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.476777][ T22] usb 6-1: Product: syz [ 1082.491593][ T22] usb 6-1: Manufacturer: syz [ 1082.496785][ T22] usb 6-1: SerialNumber: syz [ 1082.515446][ T22] usb 6-1: config 0 descriptor?? [ 1082.634017][ T934] netlink: 'syz.4.12642': attribute type 11 has an invalid length. [ 1082.764726][ T22] radio-si470x 6-1:0.35: this is not a si470x device. [ 1082.895985][ T948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12650'. [ 1082.910280][ T946] loop2: detected capacity change from 0 to 4096 [ 1082.937252][ T946] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1082.984269][ T946] ntfs3: loop2: ino=19, mi_enum_attr [ 1082.991185][ T22] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1083.009331][ T946] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1083.028601][ T22] usb 6-1: USB disconnect, device number 9 [ 1084.127807][ T1002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12673'. [ 1084.154830][ T1002] netlink: 43 bytes leftover after parsing attributes in process `syz.1.12673'. [ 1084.164595][ T1002] netlink: 'syz.1.12673': attribute type 6 has an invalid length. [ 1084.172882][ T1002] netlink: 'syz.1.12673': attribute type 5 has an invalid length. [ 1084.181211][ T1002] netlink: 43 bytes leftover after parsing attributes in process `syz.1.12673'. [ 1084.349695][ T1012] ieee802154 phy0 wpan0: encryption failed: -90 [ 1084.439540][ T22] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1084.507757][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1084.507774][ T26] audit: type=1400 audit(2000000201.233:278): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=1015 comm="syz.1.12680" [ 1084.660669][ T22] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1084.677924][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.707837][ T22] usb 5-1: Product: syz [ 1084.712325][ T22] usb 5-1: Manufacturer: syz [ 1084.732139][ T22] usb 5-1: SerialNumber: syz [ 1084.754558][ T22] usb 5-1: config 0 descriptor?? [ 1084.989718][ T22] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 1085.018979][ T22] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1085.047539][ T22] usb 5-1: USB disconnect, device number 13 [ 1085.437506][ T1042] loop1: detected capacity change from 0 to 32768 [ 1085.731354][ T1071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12704'. [ 1085.756533][ T1071] netlink: 4260 bytes leftover after parsing attributes in process `syz.3.12704'. [ 1086.290210][ T1102] loop2: detected capacity change from 0 to 256 [ 1086.306421][ T1102] exfat: Deprecated parameter 'namecase' [ 1086.324147][ T1102] exfat: Deprecated parameter 'namecase' [ 1086.357793][ T1102] exfat: Deprecated parameter 'utf8' [ 1086.426268][ T1102] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1086.729564][ T1120] loop3: detected capacity change from 0 to 256 [ 1086.815656][ T6478] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1086.844887][ T1122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12728'. [ 1087.384946][ T1147] loop2: detected capacity change from 0 to 512 [ 1087.447412][ T1147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1087.536003][ T1153] binder: 1151:1153 ioctl 400c620e 0 returned -14 [ 1087.541332][ T1147] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1087.566171][ T1147] EXT4-fs error (device loop2): ext4_iget_extra_inode:4766: inode #15: comm syz.2.12739: corrupted in-inode xattr [ 1087.617160][ T1147] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.12739: couldn't read orphan inode 15 (err -117) [ 1087.676026][ T1136] loop3: detected capacity change from 0 to 32768 [ 1087.692372][ T1136] /dev/loop3: Can't open blockdev [ 1087.712544][ T1147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1087.846155][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1087.955392][ T1167] ip6t_REJECT: ECHOREPLY is not supported [ 1088.140978][ T1176] loop5: detected capacity change from 0 to 16 [ 1088.172542][ T1178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12755'. [ 1088.188527][ T1178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12755'. [ 1088.198038][ T1176] erofs: (device loop5): mounted with root inode @ nid 36. [ 1088.219679][ T1178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12755'. [ 1088.235420][T20425] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -42 in[46, 4050] out[9000] [ 1088.271128][ T1176] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -42 in[46, 4050] out[9000] [ 1088.299293][ T26] audit: type=1800 audit(2000000204.739:279): pid=1176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.12753" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1088.407122][T30215] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1088.612909][T30215] usb 4-1: Using ep0 maxpacket: 16 [ 1088.619703][T30215] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1088.650029][T30215] usb 4-1: config 0 has no interface number 0 [ 1088.676314][T30215] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1088.702862][T30215] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1088.732638][T30215] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1088.763968][T30215] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1088.774904][T30215] usb 4-1: Product: syz [ 1088.780607][ T1179] loop1: detected capacity change from 0 to 32768 [ 1088.787447][T30215] usb 4-1: SerialNumber: syz [ 1088.804205][T30215] usb 4-1: config 0 descriptor?? [ 1088.812432][ T1179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.12754 (1179) [ 1088.836677][T30215] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1088.860627][T30215] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input81 [ 1088.898771][ T1179] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1088.938168][ T1202] overlayfs: empty lowerdir [ 1088.956961][ T1179] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1089.003345][ T1179] BTRFS info (device loop1): use zlib compression, level 3 [ 1089.010668][ T1179] BTRFS info (device loop1): using free space tree [ 1089.094670][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1089.222956][ T1224] loop5: detected capacity change from 0 to 64 [ 1089.326472][ T4353] usb 4-1: USB disconnect, device number 88 [ 1089.355138][ T4353] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1089.365465][ T1179] BTRFS info (device loop1): enabling ssd optimizations [ 1089.617877][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1089.853896][ T1251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12782'. [ 1089.874848][ T1254] 9p: Unknown access argument 18446744073709551615: -34 [ 1089.885099][ T1251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12782'. [ 1089.905542][ T1251] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12782'. [ 1090.042679][ T1259] ip6t_srh: unknown srh match flags 4000 [ 1090.235798][ T1272] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 1090.364904][ T1280] loop5: detected capacity change from 0 to 512 [ 1090.406233][ T1285] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1090.433042][ T1285] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1090.455484][ T1280] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1090.464571][ T1285] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1090.515745][ T1280] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.554702][ T1293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1090.609483][ T1293] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1090.633261][ T1280] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.12793: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1090.638626][ T1293] netlink: 'syz.1.12799': attribute type 3 has an invalid length. [ 1090.679462][ T1293] netlink: 'syz.1.12799': attribute type 2 has an invalid length. [ 1090.690824][ T1293] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1090.754492][T28590] EXT4-fs (loop5): unmounting filesystem. [ 1090.878154][ T1306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1090.909333][ T1306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1090.928274][ T1306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1091.048341][ T1308] loop1: detected capacity change from 0 to 4096 [ 1091.091234][ T1308] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1091.094821][ T1311] nvme_fabrics: missing parameter 'host_traddr=%s' [ 1091.216135][ T1308] ntfs3: loop1: ino=1b, mi_enum_attr [ 1091.232586][ T1308] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1091.666897][ T1343] device ip6erspan0 entered promiscuous mode [ 1091.969100][ T1361] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1091.975244][ T1361] [U] J"—e:ÀÆ" [ 1092.016709][ T4353] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1092.170766][ T1371] netlink: 388 bytes leftover after parsing attributes in process `syz.4.12836'. [ 1092.231189][ T1373] loop1: detected capacity change from 0 to 512 [ 1092.240908][ T4353] usb 6-1: not running at top speed; connect to a high speed hub [ 1092.263760][ T1373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1092.285128][ T4353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1092.318985][ T4353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1092.342140][ T1373] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.12837: invalid indirect mapped block 32768 (level 2) [ 1092.413203][ T4353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1092.446855][ T1373] EXT4-fs (loop1): 1 orphan inode deleted [ 1092.468256][ T1373] EXT4-fs (loop1): 1 truncate cleaned up [ 1092.480655][ T4353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1092.512554][ T1373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1092.543654][ T4353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1092.563107][ T1373] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #12: block 7: comm syz.1.12837: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1092.602056][ T4353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1092.614889][ T4353] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1092.627879][ T4353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.642020][ T4353] usb 6-1: Product: syz [ 1092.649875][ T4353] usb 6-1: Manufacturer: syz [ 1092.657929][ T4353] usb 6-1: SerialNumber: syz [ 1092.672328][ T1345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1092.686280][ T1363] loop3: detected capacity change from 0 to 32768 [ 1092.693304][ T1345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1092.694388][ T1390] loop2: detected capacity change from 0 to 64 [ 1092.701912][ T1345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1092.746966][ T1345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1092.775849][ T1345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1092.784298][ T1363] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1092.803731][ T1390] hfs: unable to locate alternate MDB [ 1092.804269][ T4353] usb 6-1: USB2VGA dongle found at address 10 [ 1092.813623][ T1390] hfs: continuing without an alternate MDB [ 1092.819616][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 1092.844238][ T1363] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 1092.858269][ T4353] usb 6-1: Allocated 8 output buffers [ 1092.901382][ T4353] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 1092.993728][ T4280] INFO: trying to register non-static key. [ 1092.999570][ T4280] The code is fine but needs lockdep annotation, or maybe [ 1093.006678][ T4280] you didn't initialize this object before use? [ 1093.013003][ T4280] turning off the locking correctness validator. [ 1093.019327][ T4280] CPU: 1 PID: 4280 Comm: syz-executor Not tainted syzkaller #0 [ 1093.026878][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1093.036941][ T4280] Call Trace: [ 1093.040261][ T4280] [ 1093.043200][ T4280] dump_stack_lvl+0x188/0x24e [ 1093.047898][ T4280] ? show_regs_print_info+0x12/0x12 [ 1093.053098][ T4280] ? load_image+0x410/0x410 [ 1093.057594][ T4280] ? _find_next_bit+0x11e/0x130 [ 1093.062536][ T4280] ? __is_module_percpu_address+0x279/0x3b0 [ 1093.068458][ T4280] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1093.074214][ T4280] assign_lock_key+0x201/0x230 [ 1093.078975][ T4280] ? SOFTIRQ_verbose+0x10/0x10 [ 1093.083732][ T4280] ? __lock_acquire+0x7ea0/0x7ea0 [ 1093.088752][ T4280] ? mark_lock+0x94/0x320 [ 1093.093176][ T4280] register_lock_class+0x21d/0x870 [ 1093.098294][ T4280] ? mark_lock+0x94/0x320 [ 1093.102622][ T4280] ? is_dynamic_key+0x260/0x260 [ 1093.107498][ T4280] ? __lock_acquire+0x142d/0x7ea0 [ 1093.112521][ T4280] __lock_acquire+0x277/0x7ea0 [ 1093.117285][ T4280] ? kernel_text_address+0x9c/0xd0 [ 1093.122390][ T4280] ? __kernel_text_address+0x9/0x30 [ 1093.127587][ T4280] ? verify_lock_unused+0x140/0x140 [ 1093.132865][ T4280] ? stack_trace_save+0xa6/0xf0 [ 1093.137788][ T4280] ? __stack_depot_save+0x35/0x480 [ 1093.142936][ T4280] lock_acquire+0x1bc/0x4a0 [ 1093.147435][ T4280] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1093.153386][ T4280] ? read_lock_is_recursive+0x10/0x10 [ 1093.158749][ T4280] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1093.165024][ T4280] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.170220][ T4280] _raw_spin_lock_irqsave+0xb0/0x100 [ 1093.175496][ T4280] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1093.181380][ T4280] ? _raw_spin_lock+0x40/0x40 [ 1093.186044][ T4280] ? ktime_get+0x247/0x270 [ 1093.190454][ T4280] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1093.196168][ T4280] ? ocfs2_dlm_shutdown+0x230/0x230 [ 1093.201358][ T4280] ? slab_free_freelist_hook+0x133/0x1b0 [ 1093.207046][ T4280] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 1093.212621][ T4280] ? ocfs2_journal_init+0xd40/0xd40 [ 1093.217807][ T4280] ocfs2_dlm_shutdown+0x33/0x230 [ 1093.222736][ T4280] ocfs2_dismount_volume+0x479/0x940 [ 1093.228046][ T4280] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 1093.233439][ T4280] ? clear_inode+0x140/0x140 [ 1093.238026][ T4280] ? dput+0x37/0x1d0 [ 1093.241911][ T4280] ? ocfs2_free_inode+0x20/0x20 [ 1093.246749][ T4280] generic_shutdown_super+0x130/0x340 [ 1093.252112][ T4280] kill_block_super+0x7c/0xe0 [ 1093.256787][ T4280] deactivate_locked_super+0x93/0xf0 [ 1093.262063][ T4280] cleanup_mnt+0x471/0x4f0 [ 1093.266472][ T4280] task_work_run+0x1d0/0x260 [ 1093.271055][ T4280] ? task_work_cancel+0x220/0x220 [ 1093.276074][ T4280] ? exit_to_user_mode_loop+0x3b/0x110 [ 1093.281595][ T4280] exit_to_user_mode_loop+0xe6/0x110 [ 1093.286875][ T4280] exit_to_user_mode_prepare+0xee/0x180 [ 1093.292487][ T4280] syscall_exit_to_user_mode+0x16/0x40 [ 1093.297955][ T4280] do_syscall_64+0x58/0xa0 [ 1093.302371][ T4280] ? clear_bhb_loop+0x60/0xb0 [ 1093.307044][ T4280] ? clear_bhb_loop+0x60/0xb0 [ 1093.311715][ T4280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.317601][ T4280] RIP: 0033:0x7fee4b3a0797 [ 1093.322010][ T4280] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1093.341603][ T4280] RSP: 002b:00007ffc5d287be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1093.350011][ T4280] RAX: 0000000000000000 RBX: 00007fee4b435f63 RCX: 00007fee4b3a0797 [ 1093.357975][ T4280] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5d287ca0 [ 1093.365937][ T4280] RBP: 00007ffc5d287ca0 R08: 00007ffc5d288ca0 R09: 00000000ffffffff [ 1093.373895][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5d288d30 [ 1093.381852][ T4280] R13: 00007fee4b435f63 R14: 00000000000ff24a R15: 00007ffc5d288d70 [ 1093.389819][ T4280] [ 1093.480974][ T1345] usb 6-1: Device not attached to USB 2.0 hub [ 1093.501707][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 1093.516063][ T6587] usb 6-1: USB disconnect, device number 10 [ 1102.867937][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.874254][ T1283] ieee802154 phy1 wpan1: encryption failed: -22