last executing test programs: 1.709291232s ago: executing program 1 (id=13377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x5, &(0x7f0000000040)=""/5, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.708861852s ago: executing program 2 (id=13378): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x18, 0x1, 0x24, 0x4}}], 0x18}, 0x0) 1.539591816s ago: executing program 2 (id=13381): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 1.475118768s ago: executing program 1 (id=13383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000006e5b000000020000000900010073797a300000000050000000030a01020000000000000000020000000900010073797a30000000002d0003005916920a2710ed"], 0xac}}, 0x0) 1.37883714s ago: executing program 1 (id=13385): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.37830146s ago: executing program 2 (id=13386): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) 1.253621032s ago: executing program 2 (id=13388): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f0000000280)=[{0x1d, '\x00', @st={0x4, [{0x3, @uvalue=0xfffffffe00000}, {0x2, @uvalue=0x3}, {0x1, @uvalue=0xffffffffffff9757}, {0x1, @svalue=0x80}]}, 0xb9ea}, {0x25, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}]}) 1.067108746s ago: executing program 2 (id=13391): r0 = socket$inet(0x2, 0x3, 0x5) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000e80)={0x2, 0x4e31, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x34, {[@noop, @noop]}}}], 0x18}, 0x24008004) 1.009702578s ago: executing program 2 (id=13393): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) 931.178049ms ago: executing program 0 (id=13394): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 828.432922ms ago: executing program 1 (id=13396): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0xa, 0x1, "0200000025052e8bd9e466020100000000c2370000722a01000800", 0x41564e57}) 715.148294ms ago: executing program 0 (id=13397): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1004}], 0x1, 0x239, 0x0) 696.077434ms ago: executing program 3 (id=13398): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000140)=""/4096) 678.462975ms ago: executing program 1 (id=13399): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030e000000002800000000000004000900a800b0f453bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000fb1600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 539.131708ms ago: executing program 0 (id=13400): r0 = syz_open_dev$vbi(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x101ff, 0x1ff, 0x1, {0x4, @sliced={0x1, [0x10, 0x0, 0x6, 0x0, 0x0, 0x5, 0x8, 0x7, 0x8, 0x8, 0x405c, 0x5, 0x7, 0x5, 0x6, 0x6, 0x7, 0x8, 0x4, 0x7, 0x5, 0x9, 0x9, 0x80, 0x7ff, 0x800, 0xb, 0xb9a0, 0x0, 0x3, 0x7fff, 0x88c7, 0x4, 0x2, 0x0, 0xe, 0x7, 0x7, 0x2de, 0xfffe, 0xb7b3, 0x742, 0x101, 0x81, 0x2, 0x0, 0x3, 0xe]}}, 0x7}) 517.646909ms ago: executing program 3 (id=13401): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000340)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc39}}], 0x18}, 0x80) 429.016591ms ago: executing program 0 (id=13402): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x2, 0xd, 0xfd, &(0x7f0000000440)="387ed7626d85050934cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b36a00f3194f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc97f99ca023b00b21a2fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d171f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944f060fc6cee59abb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e4c618bd9266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded99eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) 315.178683ms ago: executing program 0 (id=13403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020200f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000001040000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 315.056993ms ago: executing program 3 (id=13404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000005180)={0x0, 0x0, &(0x7f0000005140)={&(0x7f0000004fc0)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x33}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 202.059665ms ago: executing program 3 (id=13405): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) 192.796316ms ago: executing program 0 (id=13406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0) 103.051087ms ago: executing program 1 (id=13407): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) 64.386698ms ago: executing program 3 (id=13408): r0 = socket(0x1e, 0x4, 0x0) getpeername$inet(r0, 0x0, 0x0) 0s ago: executing program 3 (id=13409): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000191c0)={0x0, 0x0, 0x8}) kernel console output (not intermixed with test programs): ): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1211.130684][T29868] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1211.178717][T29868] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1211.221820][T29868] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 1211.257107][T29868] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1211.290960][T29868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.10984: bg 0: block 34: padding at end of block bitmap is not set [ 1211.333886][T29868] Quota error (device loop2): write_blk: dquota write failed [ 1211.349672][T29879] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1211.361438][T29868] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1211.380034][T29868] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.10984: Failed to acquire dquot type 1 [ 1211.393111][T29868] EXT4-fs (loop2): 1 truncate cleaned up [ 1211.408140][T29879] overlayfs: missing 'lowerdir' [ 1211.427728][T29868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1211.560957][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.567563][T29886] netlink: 'syz.0.10993': attribute type 1 has an invalid length. [ 1212.388064][T29923] netlink: 'syz.0.11009': attribute type 29 has an invalid length. [ 1214.602199][T30010] loop2: detected capacity change from 0 to 64 [ 1214.647859][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11054'. [ 1214.678112][T30010] syz.2.11051: attempt to access beyond end of device [ 1214.678112][T30010] loop2: rw=0, sector=262154, nr_sectors = 2 limit=64 [ 1214.678259][T30010] Buffer I/O error on dev loop2, logical block 131077, async page read [ 1214.679275][T30010] syz.2.11051: attempt to access beyond end of device [ 1214.679275][T30010] loop2: rw=0, sector=262154, nr_sectors = 2 limit=64 [ 1214.679304][T30010] Buffer I/O error on dev loop2, logical block 131077, async page read [ 1215.222905][T30033] net_ratelimit: 336 callbacks suppressed [ 1215.222924][T30033] netlink: zone id is out of range [ 1215.295186][T30039] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1215.432900][T30045] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11070'. [ 1215.499474][T30047] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11071'. [ 1215.589861][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1215.832461][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1215.842826][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1215.856432][ T23] usb 4-1: string descriptor 0 read error: -22 [ 1215.865302][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1215.892066][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.912531][ T23] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1215.968349][T30053] loop2: detected capacity change from 0 to 32768 [ 1215.993793][T30053] jfs_strtoUCS: char2uni returned -22. [ 1216.014711][T30053] charset = cp949, char = 0xd4 [ 1216.173118][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1216.252515][ T23] usb 4-1: USB disconnect, device number 7 [ 1216.280497][ T5766] udevd[5766]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1216.789574][T30091] trusted_key: encrypted_key: keyword 'load±|óÊ“.V§í' not recognized [ 1217.028886][T30102] loop2: detected capacity change from 0 to 16 [ 1217.052846][T30102] erofs: (device loop2): mounted with root inode @ nid 36. [ 1217.265862][T30109] IPv6: NLM_F_CREATE should be specified when creating new route [ 1217.321754][ T5830] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1217.416110][T30118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11107'. [ 1217.426600][T30115] kAFS: unparsable volume name [ 1217.502192][T30121] raw_sendmsg: syz.0.11108 forgot to set AF_INET. Fix it! [ 1217.535577][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 1217.547920][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1217.577533][ T5830] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1217.609123][ T5830] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1217.655514][ T5830] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1217.672012][ T5830] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1217.692884][ T5830] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1217.714129][ T5830] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1217.735725][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.779189][ T5830] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1218.013552][ T5830] scsi host1: usb-storage 2-1:1.0 [ 1218.129476][T30151] netlink: 'syz.3.11121': attribute type 3 has an invalid length. [ 1218.247087][T30156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11125'. [ 1218.288548][ T23] usb 2-1: USB disconnect, device number 116 [ 1218.462799][T30162] netlink: 'syz.0.11128': attribute type 16 has an invalid length. [ 1218.471511][T30162] netlink: 'syz.0.11128': attribute type 3 has an invalid length. [ 1218.479765][T30162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11128'. [ 1218.485585][T30166] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1218.842295][T30182] netlink: 'syz.2.11137': attribute type 21 has an invalid length. [ 1218.860698][T30182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11137'. [ 1219.190652][T30198] unsupported nla_type 33542 [ 1219.195459][ T27] audit: type=1326 audit(1784829748.907:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.2.11145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1219.252670][ T27] audit: type=1326 audit(1784829748.907:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.2.11145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1219.299032][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11146'. [ 1219.343651][ T27] audit: type=1326 audit(1784829748.944:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.2.11145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1219.430795][ T27] audit: type=1326 audit(1784829748.944:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.2.11145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1219.434495][T30206] loop2: detected capacity change from 0 to 2048 [ 1219.469607][ T27] audit: type=1326 audit(1784829748.944:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30194 comm="syz.2.11145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1219.531948][T30206] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 1219.601222][T30206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1219.791813][T30218] xt_limit: Overflow, try lower: 65536/2147483648 [ 1220.495028][T30245] loop2: detected capacity change from 0 to 4096 [ 1220.660046][T30245] ntfs3: loop2: mft corrupted [ 1220.962934][T30268] netlink: 'syz.2.11178': attribute type 49 has an invalid length. [ 1221.204387][T30268] ip6gretap0: entered promiscuous mode [ 1221.209999][T30268] ip6gretap0: entered allmulticast mode [ 1221.859837][T30296] binder: 30294:30296 ioctl 400c620e 200000000040 returned -22 [ 1222.250083][T30317] netlink: 'syz.2.11201': attribute type 2 has an invalid length. [ 1222.268879][T30317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11201'. [ 1222.434829][T30322] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11204'. [ 1223.157396][T30355] loop2: detected capacity change from 0 to 512 [ 1223.206986][T30355] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1223.255196][T30355] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1223.331815][T30355] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1223.349692][T30355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.477552][T30355] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1223.498753][T30334] loop1: detected capacity change from 0 to 32768 [ 1223.539595][T30366] binder: BC_ATTEMPT_ACQUIRE not supported [ 1223.549911][T30334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.11207 (30334) [ 1223.561282][T30366] binder: 30365:30366 ioctl c0306201 2000000003c0 returned -22 [ 1223.584640][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.629128][T30334] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1223.646391][T30334] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1223.674523][T30334] BTRFS info (device loop1): setting nodatasum [ 1223.699694][T30334] BTRFS info (device loop1): force zlib compression, level 3 [ 1223.713570][T30334] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1223.744842][T30334] BTRFS info (device loop1): use lzo compression, level 0 [ 1223.766486][T30334] BTRFS info (device loop1): turning on flush-on-commit [ 1223.788104][T30334] BTRFS info (device loop1): enabling auto defrag [ 1223.853713][T30334] BTRFS info (device loop1): max_inline at 4096 [ 1223.899903][T30334] BTRFS info (device loop1): using free space tree [ 1224.116956][T30334] BTRFS info (device loop1): enabling ssd optimizations [ 1224.324451][T30334] BTRFS error (device loop1: state M): unrecognized mount option '0177777777777777777777700000000000000000000' [ 1224.427749][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1225.013657][T30430] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11240'. [ 1225.837215][T30459] delete_channel: no stack [ 1225.881089][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1226.070922][T30474] loop1: detected capacity change from 0 to 128 [ 1226.138529][T30474] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1226.165281][T30474] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1226.271805][T30478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1226.475092][T30487] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11268'. [ 1226.773088][T22926] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1226.990637][T22926] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1227.009261][T22926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1227.035085][T22926] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1227.057751][T22926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.067919][T22926] usb 2-1: Product: syz [ 1227.078245][T22926] usb 2-1: Manufacturer: syz [ 1227.083851][T22926] usb 2-1: SerialNumber: syz [ 1227.091003][ T27] audit: type=1326 audit(1784829756.296:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30516 comm="syz.2.11283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1227.125903][T22926] usb 2-1: config 0 descriptor?? [ 1227.145710][T22926] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1227.166681][ T27] audit: type=1326 audit(1784829756.296:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30516 comm="syz.2.11283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1227.223683][ T27] audit: type=1326 audit(1784829756.296:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30516 comm="syz.2.11283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1227.267462][ T27] audit: type=1326 audit(1784829756.296:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30516 comm="syz.2.11283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1227.302567][ T27] audit: type=1326 audit(1784829756.296:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30516 comm="syz.2.11283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1227.406641][T30525] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11288'. [ 1227.605321][T22926] usb 2-1: USB disconnect, device number 117 [ 1227.873440][ T5830] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1228.078842][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 1228.089785][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1228.102239][ T5830] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1228.119208][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.135972][ T5830] usb 3-1: Product: syz [ 1228.140887][ T5830] usb 3-1: Manufacturer: syz [ 1228.145579][ T5830] usb 3-1: SerialNumber: syz [ 1228.155757][ T5830] usb 3-1: config 0 descriptor?? [ 1228.196506][ T5830] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1228.440292][ T5830] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1228.453821][ T5830] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1228.723164][ T5830] usb 3-1: USB disconnect, device number 115 [ 1229.022850][T30558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1229.163167][T30595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11321'. [ 1229.574702][T30612] netlink: 'syz.1.11330': attribute type 21 has an invalid length. [ 1229.604965][T30612] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11330'. [ 1229.637496][T30612] netlink: 'syz.1.11330': attribute type 4 has an invalid length. [ 1229.680186][T30612] netlink: 'syz.1.11330': attribute type 5 has an invalid length. [ 1229.689537][T30612] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11330'. [ 1230.396307][ T5830] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1230.610254][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1230.632884][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1230.661221][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41692, setting to 1024 [ 1230.688298][ T5830] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1230.707331][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.707359][ T5830] usb 3-1: Product: syz [ 1230.707375][ T5830] usb 3-1: Manufacturer: syz [ 1230.707391][ T5830] usb 3-1: SerialNumber: syz [ 1230.714654][ T5830] usb 3-1: config 0 descriptor?? [ 1230.783496][ T5830] hub 3-1:0.0: bad descriptor, ignoring hub [ 1230.789878][ T5830] hub: probe of 3-1:0.0 failed with error -5 [ 1230.835370][ T5830] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input91 [ 1231.410082][T30675] loop1: detected capacity change from 0 to 1024 [ 1231.466503][T30675] hfsplus: keylen 65060 too large [ 1231.728826][T30678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11362'. [ 1231.751274][T30678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11362'. [ 1231.784094][T30682] loop1: detected capacity change from 0 to 512 [ 1231.898704][T30682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.985972][T30682] ext4 filesystem being mounted at /2713/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.144063][T30700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11369'. [ 1232.177004][T30700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11369'. [ 1232.180633][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.371858][T30709] netlink: 'syz.1.11372': attribute type 8 has an invalid length. [ 1232.988369][T30737] binder: 30735:30737 ioctl c0046209 200000000000000 returned -22 [ 1233.365136][T30757] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1234.287054][T30803] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1234.356226][T30805] netlink: 'syz.2.11420': attribute type 8 has an invalid length. [ 1234.947473][T30834] xt_bpf: check failed: parse error [ 1235.705357][ T5830] usb 3-1: USB disconnect, device number 116 [ 1236.081050][T30844] loop1: detected capacity change from 0 to 32768 [ 1236.484838][T30896] [U] ªeÍ[è¯Â¦Ooj°4Ò¥¶1=³Ú™ªß7yoÕü|.Â2àõ-s^Š™²{ [ 1237.030566][T30921] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11464'. [ 1237.101733][T30925] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1237.493760][T30943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11474'. [ 1237.659890][T30951] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1237.688964][T30951] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1237.830414][T30959] CIFS mount error: No usable UNC path provided in device string! [ 1237.830414][T30959] [ 1237.877813][T30959] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1238.305642][T30980] netlink: 'syz.1.11493': attribute type 3 has an invalid length. [ 1238.407002][T30983] netlink: 'syz.3.11498': attribute type 21 has an invalid length. [ 1238.433531][T30983] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11498'. [ 1238.464158][T30983] netlink: 'syz.3.11498': attribute type 5 has an invalid length. [ 1238.473303][T30983] netlink: 'syz.3.11498': attribute type 6 has an invalid length. [ 1238.487112][T30983] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11498'. [ 1238.501205][T30985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11495'. [ 1238.515987][T30985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11495'. [ 1238.553245][T30985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11495'. [ 1238.567368][T30985] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11495'. [ 1238.609029][T30985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11495'. [ 1239.361364][T31028] xt_bpf: check failed: parse error [ 1239.674986][T31045] netlink: 368 bytes leftover after parsing attributes in process `syz.1.11525'. [ 1239.890128][T31053] netlink: 'syz.0.11529': attribute type 7 has an invalid length. [ 1239.898024][T31053] netlink: 'syz.0.11529': attribute type 8 has an invalid length. [ 1239.943130][T31053] netlink: 'syz.0.11529': attribute type 9 has an invalid length. [ 1240.114859][T31064] xt_nfacct: accounting object `syz1' does not exist [ 1242.408326][T31157] binder: 31156:31157 ioctl c018620c 0 returned -14 [ 1242.914951][ T2132] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1243.096849][ T5811] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1243.133855][ T2132] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1243.150144][ T2132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.167535][ T2132] usb 1-1: Product: syz [ 1243.186919][ T2132] usb 1-1: Manufacturer: syz [ 1243.191586][ T2132] usb 1-1: SerialNumber: syz [ 1243.208705][ T2132] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1243.230480][ T42] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1243.291467][ T5811] usb 3-1: config index 0 descriptor too short (expected 1316, got 36) [ 1243.310519][ T5811] usb 3-1: config 7 has an invalid interface number: 204 but max is -1 [ 1243.331913][ T5811] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 1243.340954][ T5811] usb 3-1: config 7 has no interface number 0 [ 1243.364039][ T5811] usb 3-1: config 7 interface 204 has no altsetting 0 [ 1243.375783][ T5811] usb 3-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 1243.384976][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.411414][ T5811] usb 3-1: Product: syz [ 1243.415727][ T5811] usb 3-1: Manufacturer: syz [ 1243.446224][ T5811] usb 3-1: SerialNumber: syz [ 1243.730013][ T5811] smsc95xx v2.0.0 [ 1243.733804][ T5811] smsc95xx 3-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1243.769538][ T5811] smsc95xx: probe of 3-1:7.204 failed with error -22 [ 1243.775624][T22926] usb 1-1: USB disconnect, device number 122 [ 1243.808187][ T5811] usbhid 3-1:7.204: couldn't find an input interrupt endpoint [ 1243.834689][ T5811] usb 3-1: USB disconnect, device number 117 [ 1244.241412][T31215] netlink: 'syz.3.11608': attribute type 21 has an invalid length. [ 1244.249654][T31215] __nla_validate_parse: 5 callbacks suppressed [ 1244.249670][T31215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11608'. [ 1244.268280][T31215] netlink: 'syz.3.11608': attribute type 1 has an invalid length. [ 1244.384304][ T42] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1244.412194][ T42] ath9k_htc: Failed to initialize the device [ 1244.430869][T22926] usb 1-1: ath9k_htc: USB layer deinitialized [ 1245.041771][T31247] gtp0: entered promiscuous mode [ 1245.063726][T31247] gtp0: entered allmulticast mode [ 1245.138518][T31253] xt_TCPMSS: Only works on TCP SYN packets [ 1245.444958][T31266] netlink: 'syz.2.11633': attribute type 2 has an invalid length. [ 1245.475868][T31266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11633'. [ 1245.551855][T31273] block nbd3: NBD_DISCONNECT [ 1245.700276][T31277] gtp0: entered promiscuous mode [ 1245.711053][T31277] gtp0: entered allmulticast mode [ 1246.061922][T31293] netlink: 'syz.2.11646': attribute type 10 has an invalid length. [ 1246.072033][T31293] hsr0: entered promiscuous mode [ 1246.077219][T31293] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1246.095643][T31293] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1246.107000][T31293] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1246.134318][T31293] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1246.283102][ T23] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1246.509502][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1246.520641][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 1246.551656][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.580574][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1246.601161][ T23] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1246.625465][T31315] loop1: detected capacity change from 0 to 64 [ 1246.631736][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.660953][ T23] usb 1-1: Product: syz [ 1246.665160][ T23] usb 1-1: Manufacturer: syz [ 1246.675742][ T23] usb 1-1: SerialNumber: syz [ 1246.678528][ T5830] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1246.750786][T31317] netlink: 'syz.3.11659': attribute type 19 has an invalid length. [ 1246.760020][T31317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11659'. [ 1246.856440][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11660'. [ 1246.870428][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11660'. [ 1246.902754][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1246.915371][ T5830] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1246.947051][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1246.954127][ T23] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1246.966392][ T5830] usb 3-1: Product: syz [ 1246.975685][ T5830] usb 3-1: Manufacturer: syz [ 1246.979756][ T23] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1246.991749][ T5830] usb 3-1: SerialNumber: syz [ 1247.023285][ T5830] usb 3-1: config 0 descriptor?? [ 1247.033555][ T23] usb 1-1: USB disconnect, device number 123 [ 1247.051493][ T5830] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1247.104878][ T6526] udevd[6526]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.288995][ T2132] usb 3-1: USB disconnect, device number 118 [ 1247.688631][T31347] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11673'. [ 1247.714490][T31347] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1247.982913][T31359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11679'. [ 1248.014631][T31359] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1248.188843][T31365] binder: 31364:31365 ioctl c018620c 200000000280 returned -22 [ 1248.454063][T31375] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.609800][T31379] netlink: 'syz.1.11689': attribute type 3 has an invalid length. [ 1248.644053][T31379] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11689'. [ 1248.657021][T31382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11691'. [ 1248.663234][T31383] loop2: detected capacity change from 0 to 512 [ 1248.676588][T31383] EXT4-fs: Ignoring removed nobh option [ 1248.687527][T31383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1248.751425][T31383] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1248.838852][T31383] EXT4-fs (loop2): 1 truncate cleaned up [ 1248.849580][T31383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.983179][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.003429][T31392] netlink: 180 bytes leftover after parsing attributes in process `syz.1.11694'. [ 1249.149714][T31397] loop1: detected capacity change from 0 to 16 [ 1249.201464][T31397] erofs: (device loop1): mounted with root inode @ nid 36. [ 1249.217080][T31399] netlink: 'syz.3.11698': attribute type 21 has an invalid length. [ 1249.228412][T31399] netlink: 'syz.3.11698': attribute type 20 has an invalid length. [ 1249.239693][T31397] syz.1.11697: attempt to access beyond end of device [ 1249.239693][T31397] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1249.254291][T31399] IPv6: NLM_F_CREATE should be specified when creating new route [ 1249.323633][T31397] syz.1.11697: attempt to access beyond end of device [ 1249.323633][T31397] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1249.353766][T31397] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1249.373295][ T27] audit: type=1800 audit(1784829777.137:132): pid=31397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11697" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1249.619878][T31413] __nla_validate_parse: 3 callbacks suppressed [ 1249.619896][T31413] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11704'. [ 1249.948949][ T27] audit: type=1326 audit(1784829777.670:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.0.11713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1250.032588][ T27] audit: type=1326 audit(1784829777.670:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.0.11713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1250.108013][T31435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11714'. [ 1250.129355][ T27] audit: type=1326 audit(1784829777.679:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.0.11713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1250.154445][T31435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.162470][T31435] IPv6: NLM_F_CREATE should be set when creating new route [ 1250.169822][T31435] IPv6: NLM_F_CREATE should be set when creating new route [ 1250.206631][ T27] audit: type=1326 audit(1784829777.679:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.0.11713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1250.409172][ T5830] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1250.610386][ T5830] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1250.624949][T31455] Cannot find add_set index 4 as target [ 1250.651115][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1250.676309][ T5830] usb 1-1: Product: syz [ 1250.680639][ T5830] usb 1-1: SerialNumber: syz [ 1250.707166][ T5830] usb 1-1: config 0 descriptor?? [ 1250.828154][T31460] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11728'. [ 1250.859590][T31462] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11729'. [ 1250.951014][ T5830] hso 1-1:0.0: Failed to find BULK IN ep [ 1251.065605][T31470] loop2: detected capacity change from 0 to 512 [ 1251.088047][T31470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1251.111200][T31470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 1251.124542][T31470] System zones: 1-12 [ 1251.130192][T31470] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11733: invalid indirect mapped block 8 (level 2) [ 1251.152453][T31470] EXT4-fs (loop2): 1 truncate cleaned up [ 1251.159534][T31470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.169787][ T5830] usb 1-1: USB disconnect, device number 124 [ 1251.215717][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.459953][T31480] loop2: detected capacity change from 0 to 2048 [ 1251.531776][T31480] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1251.545779][ T5765] udevd[5765]: incorrect nilfs2 checksum on /dev/loop2 [ 1251.571832][T31483] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.704256][T31486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11740'. [ 1251.778690][T31483] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1251.816619][T31477] loop1: detected capacity change from 0 to 32768 [ 1251.828946][T31477] (syz.1.11737,31477,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1251.843004][T31483] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1251.867931][T31483] Remounting filesystem read-only [ 1251.880361][T31477] (syz.1.11737,31477,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1251.881342][ T3434] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1251.900764][T31477] JBD2: Ignoring recovery information on journal [ 1251.958060][ T3434] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1251.966323][ T3434] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1251.975712][ T3434] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1251.984920][ T3434] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1251.995291][ T3434] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 1252.002383][ T3434] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 1252.009694][ T3434] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.019464][ T3434] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.021822][T31477] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1252.028680][ T3434] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.067861][ T5777] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1252.091144][ T5777] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1252.097891][ T5777] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 1252.118116][ T5777] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 1252.126980][ T5777] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1252.136052][ T5777] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1252.145822][ T5777] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1252.153092][ T5777] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1252.160506][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.194263][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.204875][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.232018][ T5777] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1252.258629][ T5777] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1252.269553][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.287005][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.300150][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.310107][ T5777] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1252.328202][ T5777] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1252.343091][ T5777] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1252.381547][ T5777] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1252.389133][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.398374][ T5777] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 1252.403322][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 1252.405490][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.424567][ T2132] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1252.439814][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.460176][ T5777] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 1252.481412][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.512178][ T5777] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 1252.531947][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.541918][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.551599][ T5777] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 1252.559592][ T5777] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1252.675842][ T2132] usb 1-1: Using ep0 maxpacket: 8 [ 1252.690944][ T2132] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1252.719104][ T2132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.727176][ T2132] usb 1-1: Product: syz [ 1252.755036][ T2132] usb 1-1: Manufacturer: syz [ 1252.759720][ T2132] usb 1-1: SerialNumber: syz [ 1252.788400][ T2132] usb 1-1: config 0 descriptor?? [ 1252.838960][ T2132] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1252.978413][T31513] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11753'. [ 1253.081162][T31518] Cannot find del_set index 3 as target [ 1253.192281][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.198736][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.268557][ T2132] gspca_m5602: Failed to find a sensor [ 1253.274236][ T2132] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 1253.291322][ T2132] usb 1-1: USB disconnect, device number 125 [ 1254.236473][T31545] hsr0: VLAN not yet supported [ 1254.411178][T31536] loop2: detected capacity change from 0 to 32768 [ 1254.563731][T31536] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1254.709687][T31536] XFS (loop2): Ending clean mount [ 1254.729026][T31536] XFS (loop2): Quotacheck needed: Please wait. [ 1254.886179][T31536] XFS (loop2): Quotacheck: Done. [ 1254.995962][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1255.572199][T31597] xt_l2tp: v2 sid > 0xffff: 65536 [ 1256.392586][T31634] ipip0: entered promiscuous mode [ 1256.408878][T31634] ipip0: entered allmulticast mode [ 1256.511172][ T27] audit: type=1326 audit(1784829783.816:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31641 comm="syz.1.11812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1256.573627][ T27] audit: type=1326 audit(1784829783.844:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31641 comm="syz.1.11812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1256.624564][T31646] loop2: detected capacity change from 0 to 256 [ 1256.673716][ T27] audit: type=1326 audit(1784829783.844:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31641 comm="syz.1.11812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1256.778339][ T27] audit: type=1326 audit(1784829783.844:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31641 comm="syz.1.11812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1256.868039][ T27] audit: type=1326 audit(1784829783.844:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31641 comm="syz.1.11812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1257.375500][T31675] netlink: 'syz.3.11828': attribute type 10 has an invalid length. [ 1257.400701][T31675] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11828'. [ 1257.410341][T31675] hsr0: entered promiscuous mode [ 1257.422544][T31675] bridge0: port 3(hsr0) entered blocking state [ 1257.431470][T31675] bridge0: port 3(hsr0) entered disabled state [ 1257.461715][T31675] hsr0: entered allmulticast mode [ 1257.472699][T31675] hsr_slave_0: entered allmulticast mode [ 1257.482669][T31675] hsr_slave_1: entered allmulticast mode [ 1257.493433][T31675] bridge0: port 3(hsr0) entered blocking state [ 1257.499830][T31675] bridge0: port 3(hsr0) entered forwarding state [ 1257.508541][T31678] netlink: 'syz.1.11829': attribute type 7 has an invalid length. [ 1257.519330][T31678] netlink: 'syz.1.11829': attribute type 8 has an invalid length. [ 1257.527188][T31678] netlink: 'syz.1.11829': attribute type 15 has an invalid length. [ 1258.114562][T31702] wg1: entered promiscuous mode [ 1258.141310][T31702] wg1: entered allmulticast mode [ 1258.368267][T31716] netlink: 372 bytes leftover after parsing attributes in process `syz.3.11848'. [ 1258.588963][T31726] bridge3: entered allmulticast mode [ 1258.678382][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11855'. [ 1258.696950][T31730] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1258.789544][T31736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11858'. [ 1258.858677][T31736] netlink: 'syz.1.11858': attribute type 1 has an invalid length. [ 1258.887217][T31736] netlink: 'syz.1.11858': attribute type 2 has an invalid length. [ 1258.895698][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11858'. [ 1259.311554][T31756] cgroup: none used incorrectly [ 1259.472537][T31761] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 1259.483059][T31761] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 1260.194527][T31783] netlink: 228 bytes leftover after parsing attributes in process `syz.2.11879'. [ 1260.338171][T31789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11882'. [ 1260.426687][ T5830] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1260.546708][T31796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11885'. [ 1260.575890][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11885'. [ 1260.584988][T31796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11885'. [ 1261.400085][ T41] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1261.405885][T31832] loop1: detected capacity change from 0 to 512 [ 1261.484773][ T5830] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1261.509309][T31832] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1261.581334][T31832] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1261.657463][T31832] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.11904: Failed to acquire dquot type 1 [ 1261.733796][T31832] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1261.773607][T31832] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1261.806235][T31832] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.11904: Failed to acquire dquot type 1 [ 1261.822437][T31832] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.11904: bg 0: block 248: padding at end of block bitmap is not set [ 1261.849851][T31832] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1261.866270][T31832] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1261.877514][T31832] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1261.905375][T31832] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.11904: Failed to acquire dquot type 1 [ 1261.932876][T31832] EXT4-fs (loop1): 1 orphan inode deleted [ 1261.949428][T31832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.963115][T31832] ext4 filesystem being mounted at /2871/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.006278][T31832] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 1262.019209][ T2132] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1262.118525][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.239106][ T2132] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1262.255176][ T2132] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1262.288481][ T2132] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 1262.297988][ T2132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.306472][ T2132] usb 4-1: Product: syz [ 1262.329054][ T2132] usb 4-1: Manufacturer: syz [ 1262.333793][ T2132] usb 4-1: SerialNumber: syz [ 1262.375923][T31849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1262.516905][ T41] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1262.538930][ T41] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1262.865790][ T2132] usbhid 4-1:1.0: can't add hid device: -71 [ 1262.871868][ T2132] usbhid: probe of 4-1:1.0 failed with error -71 [ 1262.917462][ T2132] usb 4-1: USB disconnect, device number 8 [ 1263.452333][ T5830] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1263.880440][T31935] __nla_validate_parse: 1 callbacks suppressed [ 1263.880457][T31935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11954'. [ 1263.896259][T31935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11954'. [ 1264.347056][T31949] ubi0: attaching mtd1 [ 1264.371035][T31949] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 1264.393847][T31923] loop2: detected capacity change from 0 to 32768 [ 1264.529536][T31923] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1264.691980][T31923] XFS (loop2): Ending clean mount [ 1264.805204][T31973] loop1: detected capacity change from 0 to 512 [ 1264.848541][T31973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1264.888768][T31973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 1264.906574][T31973] System zones: 0-2, 18-18, 34-34 [ 1264.946552][T31973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1265.002752][T31973] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #4: comm syz.1.11968: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1265.062013][ T5777] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1265.145596][T31973] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.11968: Bad quota inode: 4, type: 1 [ 1265.193408][T31973] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1265.269983][T31973] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1265.277987][T31973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1265.563013][T31973] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1265.577770][T31973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 1265.689031][T31973] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 1265.689031][T31973] [ 1265.829387][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.150971][T32008] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 1266.530684][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1267.007711][T32017] loop2: detected capacity change from 0 to 32768 [ 1267.775031][T32055] netlink: 'syz.0.12008': attribute type 6 has an invalid length. [ 1268.191429][T32073] ip6t_REJECT: ECHOREPLY is not supported [ 1268.534238][T32083] tmpfs: Bad value for 'size' [ 1268.832496][T32071] loop1: detected capacity change from 0 to 32768 [ 1268.898942][T32071] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1269.065979][T32071] XFS (loop1): Ending clean mount [ 1269.082218][T32071] XFS (loop1): Quotacheck needed: Please wait. [ 1269.174095][T32071] XFS (loop1): Quotacheck: Done. [ 1269.277786][T32118] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1269.307662][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1269.459766][ T6146] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1269.694969][ T6146] usb 1-1: Using ep0 maxpacket: 8 [ 1269.724203][ T6146] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 1269.759120][ T6146] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 1269.767344][ T6146] usb 1-1: config 0 has no interface number 1 [ 1269.790813][ T6146] usb 1-1: config 0 has no interface number 2 [ 1269.839509][ T6146] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1269.874264][ T6146] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1269.895753][ T6146] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1269.924276][ T6146] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1269.940788][ T6146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.967878][ T6146] usb 1-1: config 0 descriptor?? [ 1270.198095][ T6146] usb 1-1: Could not set interface, error -71 [ 1270.231571][ T6146] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 1270.278224][ T6146] usb 1-1: USB disconnect, device number 126 [ 1270.590151][T32160] xt_hashlimit: max too large, truncated to 1048576 [ 1270.597248][T32160] xt_hashlimit: overflow, try lower: 1125899906842624/0 [ 1270.635864][T22926] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1270.849695][T22926] usb 3-1: Using ep0 maxpacket: 16 [ 1270.884432][T22926] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1270.898196][T22926] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1270.912287][T22926] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1270.926277][T22926] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1270.938850][T22926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1270.952188][T22926] usb 3-1: config 0 has no interface number 0 [ 1270.961798][T22926] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1270.981772][T22926] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1271.002088][T22926] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1271.022783][T22926] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.061173][T22926] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1271.086010][T22926] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1271.098018][T22926] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1271.108049][T22926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.116115][T22926] usb 3-1: Product: syz [ 1271.131308][T22926] usb 3-1: Manufacturer: syz [ 1271.138958][ T6146] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1271.157542][T22926] usb 3-1: SerialNumber: syz [ 1271.169377][T22926] usb 3-1: config 0 descriptor?? [ 1271.196775][T22926] usb 3-1: selecting invalid altsetting 2 [ 1271.352125][ T6146] usb 1-1: Using ep0 maxpacket: 16 [ 1271.366216][ T6146] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.387534][ T6146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1271.431692][ T6146] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x50, skipping [ 1271.459011][ T6146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1271.473384][ T6146] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1271.496859][ T6146] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 1271.528221][ T6146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.548327][ T6146] usb 1-1: Product: syz [ 1271.558234][ T6146] usb 1-1: Manufacturer: syz [ 1271.570179][ T6146] usb 1-1: SerialNumber: syz [ 1271.657309][ C0] usb 3-1: async_complete: urb error -71 [ 1271.663161][ C0] usb 3-1: async_complete: urb error -71 [ 1271.668971][ C0] usb 3-1: async_complete: urb error -71 [ 1271.675097][T22926] get_1284_register: usb error -71 [ 1271.686353][T22926] usb 3-1: USB disconnect, device number 119 [ 1271.832242][ T6146] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1271.906429][ T6146] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 1271.937804][ T6146] usb 1-1: USB disconnect, device number 127 [ 1271.981294][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.988554][T32194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12071'. [ 1272.026089][ T42] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1272.242227][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 1272.259936][ T42] usb 2-1: config 0 has no interfaces? [ 1272.268856][ T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1272.287979][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.299732][ T42] usb 2-1: Product: syz [ 1272.314652][ T42] usb 2-1: Manufacturer: syz [ 1272.319549][ T42] usb 2-1: SerialNumber: syz [ 1272.328056][ T42] r8152-cfgselector 2-1: config 0 descriptor?? [ 1272.632982][ T42] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1272.651168][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12080'. [ 1272.877604][ T2132] usb 2-1: USB disconnect, device number 118 [ 1273.485347][T32247] loop2: detected capacity change from 0 to 1024 [ 1273.502775][T32247] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1273.584191][T32247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.689732][T32247] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.12097: missing EA_INODE flag [ 1273.792740][T32247] EXT4-fs (loop2): Remounting filesystem read-only [ 1273.858769][T32261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1273.882747][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.208103][T32268] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1274.483159][T32262] loop1: detected capacity change from 0 to 32768 [ 1274.543096][T32262] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1274.575458][T32262] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1274.898730][T32262] XFS (loop1): Ending clean mount [ 1275.052666][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1275.083165][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1275.744649][T32318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12126'. [ 1276.130724][T22926] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1276.344482][T22926] usb 3-1: Using ep0 maxpacket: 8 [ 1276.362734][T22926] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1276.382945][T22926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1276.406474][T22926] usb 3-1: Product: syz [ 1276.415536][T22926] usb 3-1: Manufacturer: syz [ 1276.426350][T32345] ALSA: mixer_oss: invalid OSS volume 'u' [ 1276.440204][T22926] usb 3-1: SerialNumber: syz [ 1276.461457][T32348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12142'. [ 1276.463393][T22926] usb 3-1: config 0 descriptor?? [ 1276.494928][T22926] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1276.659922][T32357] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1276.895150][T32360] loop1: detected capacity change from 0 to 4096 [ 1276.937655][T22926] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1276.955573][T22926] sq905: probe of 3-1:0.0 failed with error -71 [ 1276.970200][T22926] usb 3-1: USB disconnect, device number 120 [ 1277.089392][T32360] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1277.110886][T32360] ntfs3: loop1: Failed to load $Extend (-22). [ 1277.123841][T32360] ntfs3: loop1: Failed to initialize $Extend. [ 1277.291262][ T5773] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 1277.629521][T22926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1277.807115][ T27] audit: type=1326 audit(1784829803.730:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1277.851938][T22926] usb 1-1: Using ep0 maxpacket: 32 [ 1277.857111][ T27] audit: type=1326 audit(1784829803.730:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1277.857161][ T27] audit: type=1326 audit(1784829803.740:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1277.911869][T22926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.924524][T22926] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1277.954362][ T27] audit: type=1326 audit(1784829803.740:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1277.968464][T22926] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1278.020038][T22926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.032185][ T27] audit: type=1326 audit(1784829803.740:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1278.048804][T22926] usb 1-1: config 0 descriptor?? [ 1278.117246][ T27] audit: type=1326 audit(1784829803.740:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1278.152506][T22926] rndis_wlan 1-1:0.0: skipping garbage [ 1278.181127][T22926] rndis_wlan 1-1:0.0: invalid descriptor buffer length [ 1278.215016][T22926] usb 1-1: bad CDC descriptors [ 1278.231825][ T27] audit: type=1326 audit(1784829803.740:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1278.292307][T22926] rndis_host 1-1:0.0: skipping garbage [ 1278.348041][T22926] rndis_host 1-1:0.0: invalid descriptor buffer length [ 1278.348059][ T27] audit: type=1326 audit(1784829803.740:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32393 comm="syz.1.12164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad48b9de99 code=0x7ffc0000 [ 1278.362081][T22926] usb 1-1: bad CDC descriptors [ 1278.402651][T22926] cdc_acm 1-1:0.0: skipping garbage [ 1278.417459][T22926] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 1278.467780][T22926] usb 1-1: USB disconnect, device number 2 [ 1278.967199][T32424] loop1: detected capacity change from 0 to 1024 [ 1278.981710][T32424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1279.039904][T32424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.134000][T32424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.12176: missing EA_INODE flag [ 1279.177590][T22926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1279.207206][T32424] EXT4-fs (loop1): Remounting filesystem read-only [ 1279.275338][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.424141][T22926] usb 4-1: config 127 has an invalid interface number: 138 but max is 0 [ 1279.438855][T22926] usb 4-1: config 127 has no interface number 0 [ 1279.456329][T22926] usb 4-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 1279.479513][T22926] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 1279.489602][T22926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.497984][T22926] usb 4-1: Product: syz [ 1279.531852][T22926] usb 4-1: Manufacturer: syz [ 1279.547899][T22926] usb 4-1: SerialNumber: syz [ 1279.574941][T32416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1279.833791][T22926] usb 4-1: probing VID:PID(0424:012C) [ 1279.852579][T22926] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0F [ 1279.857717][T32460] xt_recent: hitcount (4294967288) is larger than allowed maximum (255) [ 1279.865889][T22926] usb 4-1: vub300 testing BULK OUT EndPoint(1) 09 [ 1279.893877][T22926] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1279.937687][T22926] vub300: probe of 4-1:127.138 failed with error -22 [ 1279.959501][T22926] usb 4-1: USB disconnect, device number 9 [ 1279.992881][T32462] openvswitch: netlink: Actions may not be safe on all matching packets [ 1280.124478][T32472] netlink: 23 bytes leftover after parsing attributes in process `syz.0.12198'. [ 1280.256992][T32477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12200'. [ 1280.480389][ T27] audit: type=1326 audit(1784829806.237:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.1.12206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x50000 [ 1280.525633][ T27] audit: type=1326 audit(1784829806.237:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.1.12206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b9de99 code=0x50000 [ 1280.625520][T32493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12207'. [ 1280.835245][T32503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1281.224645][T32522] loop2: detected capacity change from 0 to 16 [ 1281.280909][T32522] erofs: (device loop2): mounted with root inode @ nid 36. [ 1281.353990][T32522] syz.2.12223: attempt to access beyond end of device [ 1281.353990][T32522] loop2: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 1281.404223][T32522] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 1281.964511][T32526] loop1: detected capacity change from 0 to 32768 [ 1282.029743][T32526] (syz.1.12225,32526,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1282.090467][T32526] (syz.1.12225,32526,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1282.169312][T32526] JBD2: Ignoring recovery information on journal [ 1282.307819][T32526] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1282.815322][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 1283.026353][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1283.239886][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 1283.247051][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.271060][ T42] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1283.301464][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.336200][ T42] usb 4-1: Product: syz [ 1283.340436][ T42] usb 4-1: Manufacturer: syz [ 1283.345058][ T42] usb 4-1: SerialNumber: syz [ 1283.370355][ T42] usb 4-1: config 0 descriptor?? [ 1283.384392][ T42] usb 4-1: bad CDC descriptors [ 1283.401205][ T42] usb 4-1: unsupported MDLM descriptors [ 1283.626599][ T42] usb 4-1: USB disconnect, device number 10 [ 1283.646238][ T6146] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1283.851414][ T6146] usb 1-1: Using ep0 maxpacket: 16 [ 1283.859348][ T6146] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1283.872244][ T6146] usb 1-1: config 0 has no interface number 0 [ 1283.878382][ T6146] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1283.883141][T32624] loop1: detected capacity change from 0 to 2048 [ 1283.893257][ T6146] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 1283.933569][ T6146] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1283.934527][T32624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.946600][ T6146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.962833][ T6146] usb 1-1: Product: syz [ 1283.968890][ T6146] usb 1-1: Manufacturer: syz [ 1283.973515][ T6146] usb 1-1: SerialNumber: syz [ 1283.981417][ T6146] usb 1-1: config 0 descriptor?? [ 1283.987299][T32604] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1284.000766][ T6146] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1284.058142][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.175240][T32631] ieee802154 phy0 wpan0: encryption failed: -90 [ 1284.224605][ T6146] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1284.257330][ T6146] usb 1-1: USB disconnect, device number 3 [ 1284.283484][ T6146] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1284.296671][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12273'. [ 1284.313276][T32633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12273'. [ 1284.328562][ T6146] cypress_m8 1-1:0.35: device disconnected [ 1284.368331][T32633] ip6tnl2: entered promiscuous mode [ 1284.381394][T32633] ip6tnl2: entered allmulticast mode [ 1284.880742][T32653] ieee802154 phy0 wpan0: encryption failed: -22 [ 1285.871393][T32687] loop1: detected capacity change from 0 to 2048 [ 1285.916279][T32687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1286.200593][T32683] loop2: detected capacity change from 0 to 32768 [ 1286.765144][T32699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12307'. [ 1286.926285][T32707] netlink: 'syz.3.12310': attribute type 64 has an invalid length. [ 1286.945643][T32711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1286.952246][T32707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12310'. [ 1287.225206][T32723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12319'. [ 1287.404604][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1287.437233][T32733] xt_ecn: cannot match TCP bits for non-tcp packets [ 1287.612582][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1287.655498][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1287.677501][ T23] usb 1-1: config 8 has an invalid interface number: 61 but max is 2 [ 1287.685868][ T23] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 1287.707121][ T23] usb 1-1: config 8 has no interface number 0 [ 1287.717288][ T23] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1287.753665][ T23] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.784480][ T23] usb 1-1: config 8 interface 61 has no altsetting 0 [ 1287.822167][ T23] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 1287.838900][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.847042][ T23] usb 1-1: Product: syz [ 1287.865990][ T23] usb 1-1: Manufacturer: syz [ 1287.879593][ T23] usb 1-1: SerialNumber: syz [ 1288.146005][ T23] bfusb: probe of 1-1:8.61 failed with error -5 [ 1288.159103][ T23] usb 1-1: USB disconnect, device number 4 [ 1288.592779][ T309] tmpfs: Bad value for 'mpol' [ 1288.896430][ T321] binder: 319:321 ioctl c018620b 0 returned -14 [ 1288.981710][ T325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12353'. [ 1289.074744][ T330] netlink: 'syz.0.12355': attribute type 12 has an invalid length. [ 1289.519629][ T351] cgroup: noprefix used incorrectly [ 1289.693401][ T359] loop1: detected capacity change from 0 to 64 [ 1289.873857][ T365] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12373'. [ 1289.919432][ T365] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1289.965575][ T368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12375'. [ 1290.027408][ T371] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1290.338043][ T383] loop2: detected capacity change from 0 to 1024 [ 1290.416781][ T389] xt_bpf: check failed: parse error [ 1290.489858][ T383] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1290.497771][ T383] syz.2.12382: attempt to access beyond end of device [ 1290.497771][ T383] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1290.525511][ T391] loop1: detected capacity change from 0 to 256 [ 1290.541127][ T383] Buffer I/O error on dev loop2, logical block 458752, async page read [ 1290.581966][ T383] syz.2.12382: attempt to access beyond end of device [ 1290.581966][ T383] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1290.633962][ T383] Buffer I/O error on dev loop2, logical block 458752, async page read [ 1290.871471][ T405] loop1: detected capacity change from 0 to 256 [ 1291.090356][ T409] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1291.503845][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1291.892140][ T27] kauditd_printk_skb: 78 callbacks suppressed [ 1291.892156][ T27] audit: type=1800 audit(1784829816.910:230): pid=434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.12406" name="/" dev="sockfs" ino=87166 res=0 errno=0 [ 1293.252334][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.262296][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.810805][ T491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1293.863934][ T491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.334357][ T491] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.346047][ T491] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.361258][ T491] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.372488][ T491] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.133769][ T559] netlink: 'syz.0.12460': attribute type 1 has an invalid length. [ 1295.167506][ T559] netlink: 236 bytes leftover after parsing attributes in process `syz.0.12460'. [ 1295.504314][ T580] loop1: detected capacity change from 0 to 64 [ 1296.223700][ T611] netlink: 'syz.3.12481': attribute type 11 has an invalid length. [ 1296.293191][ T23] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1296.314632][ T2132] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1296.413681][ T620] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 1296.530997][ T2132] usb 3-1: Using ep0 maxpacket: 8 [ 1296.543582][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1296.569418][ T2132] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1296.584078][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 1296.607485][ T2132] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1296.624815][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1296.639266][ T2132] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1296.651836][ T2132] usb 3-1: Product: syz [ 1296.656374][ T2132] usb 3-1: Manufacturer: syz [ 1296.666784][ T2132] usb 3-1: SerialNumber: syz [ 1296.673481][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1296.690193][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.717071][ T23] usb 2-1: Product: syz [ 1296.721856][ T23] usb 2-1: Manufacturer: syz [ 1296.726555][ T23] usb 2-1: SerialNumber: syz [ 1296.743688][ T23] usb 2-1: config 0 descriptor?? [ 1296.767599][ T23] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress ff [ 1296.934613][ T2132] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1296.957758][ T2132] usb 3-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1296.999011][ T2132] usb 3-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1297.007735][ T2132] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1297.039440][ T23] usb 2-1: USB disconnect, device number 119 [ 1297.141030][ T2132] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1297.171127][ T2132] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1297.187914][ T2132] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1297.221375][ T2132] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1297.263155][ T2132] usb 3-1: USB disconnect, device number 121 [ 1297.304580][ T2132] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1297.373354][ T2132] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1297.406625][ T2132] visor 3-1:1.0: device disconnected [ 1297.643076][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12497'. [ 1297.661762][ T664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12497'. [ 1297.861080][ T676] netlink: 45 bytes leftover after parsing attributes in process `syz.0.12502'. [ 1298.447519][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12511'. [ 1298.469188][ T698] netlink: 440 bytes leftover after parsing attributes in process `syz.3.12511'. [ 1298.780531][ T718] loop1: detected capacity change from 0 to 512 [ 1298.817226][ T718] EXT4-fs: Ignoring removed oldalloc option [ 1298.853675][ T718] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1298.960481][ T718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.191811][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.639841][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12540'. [ 1300.067507][ T774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.365502][ T783] loop2: detected capacity change from 0 to 64 [ 1300.776477][ T27] audit: type=1326 audit(1784829825.216:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=798 comm="syz.3.12560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398ab9de99 code=0x7ffc0000 [ 1300.890119][ T27] audit: type=1326 audit(1784829825.216:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=798 comm="syz.3.12560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398ab9de99 code=0x7ffc0000 [ 1300.961783][ T27] audit: type=1326 audit(1784829825.235:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=798 comm="syz.3.12560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f398ab9de99 code=0x7ffc0000 [ 1300.999185][ T27] audit: type=1326 audit(1784829825.235:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=798 comm="syz.3.12560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398ab9de99 code=0x7ffc0000 [ 1301.093817][ T27] audit: type=1326 audit(1784829825.235:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=798 comm="syz.3.12560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398ab9de99 code=0x7ffc0000 [ 1301.571099][ T830] loop1: detected capacity change from 0 to 1764 [ 1301.622601][ T834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12577'. [ 1301.801462][ T838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12579'. [ 1302.569741][ T877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12599'. [ 1302.672609][ T879] loop1: detected capacity change from 0 to 4096 [ 1302.727143][ T885] openvswitch: netlink: Message has 4 unknown bytes. [ 1302.735488][ T879] ntfs: volume version 3.1. [ 1302.905777][ T879] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 1303.221375][ T906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12610'. [ 1303.230475][ T906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12610'. [ 1303.453966][ T919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1303.470380][ T919] netlink: 31 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1303.491115][ T919] netlink: 'syz.0.12614': attribute type 3 has an invalid length. [ 1303.512849][ T919] netlink: 'syz.0.12614': attribute type 2 has an invalid length. [ 1303.535121][ T919] netlink: 31 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1303.616364][ T2132] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1303.819541][ T2132] usb 3-1: Using ep0 maxpacket: 8 [ 1303.828797][ T2132] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1303.838733][ T2132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.873096][ T2132] usb 3-1: Product: syz [ 1303.883604][ T2132] usb 3-1: Manufacturer: syz [ 1303.890926][ T2132] usb 3-1: SerialNumber: syz [ 1303.917850][ T2132] usb 3-1: config 0 descriptor?? [ 1303.940171][ T2132] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1304.174136][ T951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12627'. [ 1304.402112][ T2132] gspca_sonixj: reg_r err -71 [ 1304.407066][ T2132] sonixj: probe of 3-1:0.0 failed with error -71 [ 1304.430049][ T2132] usb 3-1: USB disconnect, device number 122 [ 1304.654739][ T965] netlink: 'syz.1.12634': attribute type 21 has an invalid length. [ 1304.680539][ T965] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12634'. [ 1305.511697][ T1003] autofs4:pid:1003:autofs_fill_super: called with bogus options [ 1306.446052][ T1042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12661'. [ 1306.588274][ T2132] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1306.823803][ T2132] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 1306.855510][ T2132] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 1306.880150][ T2132] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1306.899007][ T2132] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1306.914727][ T2132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.930260][ T2132] usb 1-1: Product: syz [ 1306.934525][ T2132] usb 1-1: Manufacturer: syz [ 1306.950587][ T2132] usb 1-1: SerialNumber: syz [ 1306.959607][ T2132] usb 1-1: config 0 descriptor?? [ 1306.977140][ T2132] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1307.007815][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1307.032001][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1307.062222][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1307.083911][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1307.101531][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1307.109333][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1307.127603][ T2132] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1307.169559][ T1075] tmpfs: Bad value for 'mpol' [ 1307.179450][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1307.202652][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 1307.232424][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1307.242833][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1307.250620][ T2132] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1307.267938][ T2132] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1307.293241][ T2132] usb 1-1: USB disconnect, device number 5 [ 1307.308312][ T2132] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1307.362731][ T2132] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1307.406855][ T2132] keyspan 1-1:0.0: device disconnected [ 1307.682904][ T1095] loop2: detected capacity change from 0 to 64 [ 1307.705987][ T1095] syz.2.12685: attempt to access beyond end of device [ 1307.705987][ T1095] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1307.719685][ T1095] Buffer I/O error on dev loop2, logical block 512, async page read [ 1307.728757][ T1095] syz.2.12685: attempt to access beyond end of device [ 1307.728757][ T1095] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1307.747414][ T1095] Buffer I/O error on dev loop2, logical block 56576, async page read [ 1307.882250][ T1099] xt_SECMARK: invalid mode: 2 [ 1308.491413][ T1127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12701'. [ 1308.724559][ T1139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12708'. [ 1308.762356][ T1141] ip6t_srh: unknown srh match flags 4000 [ 1309.671408][ T1176] loop2: detected capacity change from 0 to 8192 [ 1309.722227][ T1176] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1309.780295][ T1176] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1309.820579][ T1176] REISERFS (device loop2): using ordered data mode [ 1309.827252][ T1176] reiserfs: using flush barriers [ 1309.864522][ T1170] loop1: detected capacity change from 0 to 32768 [ 1309.876034][ T1176] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1309.897465][ T1170] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.12722 (1170) [ 1309.941257][ T1176] REISERFS (device loop2): checking transaction log (loop2) [ 1309.952215][ T1170] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1309.966819][ T1170] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1309.975488][ T1170] BTRFS info (device loop1): using free space tree [ 1310.000886][ T1176] REISERFS (device loop2): Using r5 hash to sort names [ 1310.008236][ T1176] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1310.263108][ T1170] BTRFS info (device loop1): enabling ssd optimizations [ 1310.292515][ T1170] BTRFS info (device loop1): auto enabling async discard [ 1310.472105][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1310.506217][ T1219] openvswitch: netlink: EtherType 0 is less than min 600 [ 1310.725639][ T5830] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1310.742445][ T5765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5765) [ 1310.939349][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 1310.959354][ T5830] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1310.986497][ T5830] usb 3-1: config 0 has no interface number 0 [ 1310.999831][ T5830] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1311.015796][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.030339][ T5830] usb 3-1: Product: syz [ 1311.034561][ T5830] usb 3-1: Manufacturer: syz [ 1311.056348][ T5830] usb 3-1: SerialNumber: syz [ 1311.075491][ T5830] usb 3-1: config 0 descriptor?? [ 1311.100090][ T494] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1311.265174][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.273158][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.324129][ T494] usb 4-1: Using ep0 maxpacket: 16 [ 1311.331684][ T494] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1311.332841][ T5830] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1311.352141][ T494] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1311.377967][ T5830] usb 3-1: No valid video chain found. [ 1311.387405][ T494] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 1311.402198][ T5830] usb 3-1: USB disconnect, device number 123 [ 1311.411463][ T494] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1311.434809][ T494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1311.454671][ T494] usb 4-1: SerialNumber: syz [ 1311.479251][ T1227] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1311.529717][ T494] cdc_acm 4-1:1.0: skipping garbage [ 1311.542030][ T494] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 1311.788983][ T494] usb 4-1: USB disconnect, device number 11 [ 1312.021214][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.071999][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.183909][ T27] audit: type=1326 audit(1784829835.889:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.232160][ T27] audit: type=1326 audit(1784829835.889:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.264212][ T1256] loop2: detected capacity change from 0 to 64 [ 1312.271195][ T27] audit: type=1326 audit(1784829835.889:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.315226][ T27] audit: type=1326 audit(1784829835.889:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.343214][ T542] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1312.380258][ T27] audit: type=1326 audit(1784829835.889:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.410591][ T27] audit: type=1326 audit(1784829835.889:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.497731][ T27] audit: type=1326 audit(1784829835.889:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.540388][ T27] audit: type=1326 audit(1784829835.889:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.585301][ T542] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1312.587436][ T27] audit: type=1326 audit(1784829835.889:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1253 comm="syz.2.12751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1312.606034][ T542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.648425][ T542] usb 1-1: Product: syz [ 1312.687339][ T542] usb 1-1: Manufacturer: syz [ 1312.704126][ T542] usb 1-1: SerialNumber: syz [ 1312.712063][ T542] usb 1-1: config 0 descriptor?? [ 1312.867763][ T1224] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.877682][ T1224] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.887474][ T1224] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.896737][ T1224] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.943582][ T542] mos7840 1-1:0.0: required endpoints missing [ 1313.142070][ T1260] netlink: 'syz.3.12754': attribute type 6 has an invalid length. [ 1313.202180][ T494] usb 1-1: USB disconnect, device number 6 [ 1313.520767][ T1290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.529970][ T1290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.540592][ T1290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.553331][ T1290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.570903][ T1293] netlink: 'syz.1.12768': attribute type 5 has an invalid length. [ 1313.878154][ T1305] netlink: 'syz.2.12774': attribute type 1 has an invalid length. [ 1313.879980][ T1304] loop1: detected capacity change from 0 to 512 [ 1313.900602][ T1305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12774'. [ 1313.931816][ T1305] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12774'. [ 1313.932017][ T1304] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1313.990725][ T1304] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 1314.030672][ T1304] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.12773: inode #15: comm syz.1.12773: iget: illegal inode # [ 1314.098734][ T1304] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.12773: couldn't read orphan inode 15 (err -117) [ 1314.115077][ T1304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.137568][ T1304] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.12773: inode #15: comm syz.1.12773: iget: illegal inode # [ 1314.206631][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.379502][ T1328] netlink: 'syz.0.12784': attribute type 5 has an invalid length. [ 1314.433144][ T1328] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12784'. [ 1314.547910][ T1334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12787'. [ 1314.638886][ T27] audit: type=1326 audit(1784829838.181:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1337 comm="syz.0.12789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1314.916292][ T542] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1315.095028][ T1360] ip6t_srh: unknown srh invflags 4449 [ 1315.122694][ T542] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.149288][ T542] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.178783][ T542] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1315.190318][ T542] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1315.220952][ T542] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1315.241641][ T542] usb 2-1: Product: syz [ 1315.245875][ T542] usb 2-1: SerialNumber: syz [ 1315.272880][ T542] usb 2-1: selecting invalid altsetting 1 [ 1315.278664][ T542] usb 2-1: selecting invalid altsetting 0 [ 1315.322516][ T542] usb 2-1: selecting invalid altsetting 0 [ 1315.328352][ T542] cdc_ncm 2-1:1.0: bind() failure [ 1315.350040][ T542] usb 2-1: selecting invalid altsetting 0 [ 1315.383825][ T542] usbtest: probe of 2-1:1.1 failed with error -22 [ 1315.482226][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12807'. [ 1315.529064][ T542] usb 2-1: USB disconnect, device number 120 [ 1315.738066][ T1386] loop2: detected capacity change from 0 to 1764 [ 1315.750619][ T1388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12813'. [ 1315.821888][ T1386] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1316.384355][ T1414] cgroup: release_agent respecified [ 1316.523361][ T1420] xt_hashlimit: overflow, try lower: 3/0 [ 1317.136907][ T1448] loop2: detected capacity change from 0 to 16 [ 1317.165929][ T1448] erofs: (device loop2): mounted with root inode @ nid 36. [ 1317.238171][ T542] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1317.462686][ T542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1317.493482][ T542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1317.523471][ T542] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1317.566180][ T542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.591264][ T542] usb 2-1: config 0 descriptor?? [ 1317.824327][ T542] ath6kl: Failed to submit usb control message: -71 [ 1317.827246][ T1473] bond3: entered promiscuous mode [ 1317.831405][ T542] ath6kl: unable to send the bmi data to the device: -71 [ 1317.854034][ T542] ath6kl: Unable to send get target info: -71 [ 1317.858623][ T1473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1317.878625][ T542] ath6kl: Failed to init ath6kl core: -71 [ 1317.885663][ T542] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1317.914899][ T542] usb 2-1: USB disconnect, device number 121 [ 1317.916640][ T1480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12859'. [ 1318.701553][ T1503] loop2: detected capacity change from 0 to 4096 [ 1318.709739][ T1503] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1318.887144][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1318.903752][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1319.544019][ T1512] loop1: detected capacity change from 0 to 32768 [ 1319.602823][ T1512] (syz.1.12874,1512,1):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 1319.640760][ T1512] (syz.1.12874,1512,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1319.841821][ T1520] loop2: detected capacity change from 0 to 32768 [ 1319.954095][ T1520] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1320.252369][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 1320.376341][ T1542] netlink: 660 bytes leftover after parsing attributes in process `syz.2.12887'. [ 1320.732960][T16200] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1320.947862][T16200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.967103][T16200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1320.988112][T16200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1321.005124][T16200] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.029692][T16200] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1321.031403][ T542] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1321.039247][T16200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.064660][T16200] usb 2-1: config 0 descriptor?? [ 1321.269910][ T542] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1321.288451][ T542] usb 3-1: not running at top speed; connect to a high speed hub [ 1321.299826][ T542] usb 3-1: config 249 has an invalid interface number: 203 but max is 0 [ 1321.305182][T16200] usb 2-1: USB disconnect, device number 122 [ 1321.315534][ T542] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.353640][ T542] usb 3-1: config 249 has no interface number 0 [ 1321.370825][ T542] usb 3-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.386941][ T542] usb 3-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.416041][ T542] usb 3-1: config 249 interface 203 has no altsetting 0 [ 1321.425945][ T542] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1321.448364][ T542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.456428][ T542] usb 3-1: Product: syz [ 1321.470726][ T542] usb 3-1: Manufacturer: syz [ 1321.475378][ T542] usb 3-1: SerialNumber: syz [ 1321.746834][ T542] rtl8150 3-1:249.203: couldn't find required endpoints [ 1321.767019][ T542] rtl8150: probe of 3-1:249.203 failed with error -5 [ 1321.812399][ T542] usb 3-1: USB disconnect, device number 124 [ 1322.121206][ T1601] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1322.491400][ T1607] netlink: 'syz.0.12920': attribute type 46 has an invalid length. [ 1322.513674][ T1607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12920'. [ 1322.694988][ T1613] IPv6: Can't replace route, no match found [ 1322.812646][ T1619] netlink: 'syz.2.12927': attribute type 1 has an invalid length. [ 1323.034956][ T542] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1323.139074][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12931'. [ 1323.228068][ T1633] netlink: 'syz.1.12932': attribute type 1 has an invalid length. [ 1323.244550][ T542] usb 1-1: Using ep0 maxpacket: 32 [ 1323.261348][ T542] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1323.279064][ T542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.288473][ T542] usb 1-1: Product: syz [ 1323.292672][ T542] usb 1-1: Manufacturer: syz [ 1323.297296][ T542] usb 1-1: SerialNumber: syz [ 1323.315382][ T542] usb 1-1: config 0 descriptor?? [ 1323.460344][ T1641] netlink: 'syz.3.12937': attribute type 1 has an invalid length. [ 1323.567121][ T542] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 1323.596359][ T542] eb 9a 47 80 9b f8 7a f0 [ 1323.617718][ T542] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 1323.800343][T16200] usb 1-1: USB disconnect, device number 7 [ 1323.819608][ T1652] loop1: detected capacity change from 0 to 1024 [ 1323.935114][ T1652] hfsplus: catalog record size mismatch (type 4, got 20, expected 8202) [ 1323.953757][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 1323.953772][ T27] audit: type=1400 audit(1784829846.908:277): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=1656 comm="syz.3.12945" [ 1324.515804][ T1675] ipt_REJECT: ECHOREPLY no longer supported. [ 1324.687798][T16200] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1324.726525][ T1686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1324.788999][ T1690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12961'. [ 1324.884118][ T27] audit: type=1326 audit(1784829847.778:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.0.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1324.945927][T16200] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1324.956633][T16200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.959268][ T27] audit: type=1326 audit(1784829847.778:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.0.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1324.964654][T16200] usb 3-1: Product: syz [ 1325.050876][T16200] usb 3-1: Manufacturer: syz [ 1325.066399][T16200] usb 3-1: SerialNumber: syz [ 1325.079253][ T27] audit: type=1326 audit(1784829847.797:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.0.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1325.105240][T16200] r8152-cfgselector 3-1: config 0 descriptor?? [ 1325.143896][ T27] audit: type=1326 audit(1784829847.797:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.0.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1325.175224][ T27] audit: type=1326 audit(1784829847.797:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.0.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1325.571884][T16200] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1325.601436][T16200] r8152-cfgselector 3-1: USB disconnect, device number 125 [ 1325.668801][ T1718] netlink: 'syz.3.12974': attribute type 10 has an invalid length. [ 1325.713831][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1325.721086][ T1718] team0: Device vxcan1 is of different type [ 1325.919122][ T1724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12977'. [ 1326.205629][ T541] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1326.411471][ T541] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1326.432109][ T541] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.456540][ T541] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1326.479069][ T541] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1326.490055][ T541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.498189][ T541] usb 1-1: Product: syz [ 1326.502598][ T541] usb 1-1: Manufacturer: syz [ 1326.507530][ T541] usb 1-1: SerialNumber: syz [ 1326.515526][ T542] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1326.536134][ T541] usb 1-1: selecting invalid altsetting 1 [ 1326.547717][ T541] usb 1-1: unit 6 not found! [ 1326.570429][ T541] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1326.613803][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1326.708202][T16200] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1326.720672][ T542] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1326.729990][ T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.733095][ T1740] loop1: detected capacity change from 0 to 4096 [ 1326.745839][ T542] usb 3-1: config 0 descriptor?? [ 1326.774665][ T542] cp210x 3-1:0.0: cp210x converter detected [ 1326.788286][ T541] usb 1-1: USB disconnect, device number 8 [ 1326.843719][ T1740] ntfs3: loop1: ino=b, Correct links count -> 1. [ 1326.853356][ T1740] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1326.904516][T16200] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1326.914299][T16200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.929118][T16200] usb 4-1: Product: syz [ 1326.936953][T16200] usb 4-1: Manufacturer: syz [ 1326.942765][T16200] usb 4-1: SerialNumber: syz [ 1326.951615][T16200] usb 4-1: config 0 descriptor?? [ 1326.970756][T16200] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1327.124222][ T1744] loop1: detected capacity change from 0 to 256 [ 1327.213334][ T542] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1327.224428][ T542] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1327.247671][ T542] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1327.281694][ T542] usb 3-1: USB disconnect, device number 126 [ 1327.300209][ T542] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1327.312097][ T542] cp210x 3-1:0.0: device disconnected [ 1327.412914][ T494] usb 4-1: USB disconnect, device number 12 [ 1327.554766][ T1756] syz.1.12993 (1756): /proc/1755/oom_adj is deprecated, please use /proc/1755/oom_score_adj instead. [ 1327.924026][ T27] audit: type=1326 audit(1784829850.613:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1773 comm="syz.2.13002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1327.968788][ T27] audit: type=1326 audit(1784829850.613:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1773 comm="syz.2.13002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1328.001329][ T27] audit: type=1326 audit(1784829850.613:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1773 comm="syz.2.13002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1328.085545][ T27] audit: type=1326 audit(1784829850.613:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1773 comm="syz.2.13002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fd1f459de99 code=0x7ffc0000 [ 1328.339975][ T1791] netlink: 'syz.3.13010': attribute type 1 has an invalid length. [ 1328.365521][ T1791] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13010'. [ 1328.846280][ T1789] loop1: detected capacity change from 0 to 32768 [ 1328.867843][ T1809] virtiofs: Unknown parameter 'always' [ 1328.873567][ T1789] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.13009 (1789) [ 1328.938829][ T1789] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1328.968708][ T1789] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1328.996841][ T1789] BTRFS info (device loop1): enabling ssd optimizations [ 1329.003925][ T1789] BTRFS info (device loop1): not using ssd optimizations [ 1329.038478][ T1789] BTRFS info (device loop1): turning off barriers [ 1329.044968][ T1789] BTRFS info (device loop1): using free space tree [ 1329.368753][ T5773] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1329.415456][ T1839] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1329.569382][ T5765] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (5765) [ 1331.055790][ T1895] netlink: 'syz.0.13053': attribute type 49 has an invalid length. [ 1331.066419][ T1884] loop1: detected capacity change from 0 to 4096 [ 1331.103251][ T1884] __ntfs_error: 9 callbacks suppressed [ 1331.103268][ T1884] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1331.196398][ T1884] ntfs: volume version 3.1. [ 1331.302825][ T1884] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 1331.321378][ T1884] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 1331.461422][ T61] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1331.895169][ T1925] netlink: 5 bytes leftover after parsing attributes in process `syz.2.13067'. [ 1331.935376][ T1925] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1331.954831][ T1929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13069'. [ 1331.989316][ T542] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1332.214247][ T542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1332.235223][ T542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1332.265713][ T542] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1332.281271][ T542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.302982][ T542] usb 4-1: Product: syz [ 1332.307219][ T542] usb 4-1: Manufacturer: syz [ 1332.323805][ T542] usb 4-1: SerialNumber: syz [ 1332.330871][ T542] usb 4-1: config 0 descriptor?? [ 1332.379402][ T542] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 1332.390162][ T542] usb 4-1: No valid video chain found. [ 1332.599951][ T542] usb 4-1: USB disconnect, device number 13 [ 1332.883966][ T1958] loop1: detected capacity change from 0 to 1764 [ 1332.950213][ T1960] macvtap0: entered allmulticast mode [ 1332.962137][ T1960] veth0_macvtap: entered allmulticast mode [ 1333.357582][ T542] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1333.521010][ T1983] netlink: 'syz.0.13096': attribute type 1 has an invalid length. [ 1333.595821][ T542] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.615940][ T542] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.637719][ T542] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1333.648506][ T542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1333.656655][ T542] usb 2-1: SerialNumber: syz [ 1333.947006][ T542] usb 2-1: 0:2 : does not exist [ 1334.006661][ T542] usb 2-1: USB disconnect, device number 123 [ 1334.057589][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.316927][ T2005] tipc: Can't bind to reserved service type 1 [ 1334.496615][ T2009] loop2: detected capacity change from 0 to 4096 [ 1334.509470][ T2009] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1334.593777][ T2013] netlink: 260 bytes leftover after parsing attributes in process `syz.0.13111'. [ 1335.060971][ T2025] IPv6: sit3: Disabled Multicast RS [ 1335.253753][ T2036] netlink: 'syz.2.13121': attribute type 21 has an invalid length. [ 1335.264473][ T2036] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13121'. [ 1335.621770][ T2053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13130'. [ 1336.097672][ T2076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13144'. [ 1336.571054][ T27] audit: type=1400 audit(1784829858.704:296): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=2095 comm="syz.3.13152" [ 1336.718661][ T2100] bond4: entered promiscuous mode [ 1336.759701][ T2103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13155'. [ 1336.823668][ T2103] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13155'. [ 1337.352516][ T2123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13165'. [ 1337.494946][ T27] audit: type=1400 audit(1784829859.574:297): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=2128 comm="syz.2.13167" [ 1337.940721][ T2151] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13178'. [ 1338.072047][ T5830] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1338.265499][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 1338.276377][ T5830] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1338.292553][ T5830] usb 4-1: config 0 has no interface number 0 [ 1338.305922][ T5830] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1338.317006][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13187'. [ 1338.330968][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.352358][ T5830] usb 4-1: Product: syz [ 1338.362514][ T5830] usb 4-1: Manufacturer: syz [ 1338.373957][ T5830] usb 4-1: SerialNumber: syz [ 1338.395207][ T5830] usb 4-1: config 0 descriptor?? [ 1338.502606][ T2175] loop1: detected capacity change from 0 to 1024 [ 1338.551732][ T2175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1338.635207][ T5830] usb 4-1: selecting invalid altsetting 1 [ 1338.645373][ T5830] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1338.662880][ T5830] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1338.670031][ T5830] speedtch: probe of 4-1:0.1 failed with error -22 [ 1338.679822][ T5830] usb 4-1: USB disconnect, device number 14 [ 1338.938094][ T541] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1339.135432][ T541] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1339.144751][ T541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.155267][ T541] usb 1-1: Product: syz [ 1339.159464][ T541] usb 1-1: Manufacturer: syz [ 1339.164180][ T541] usb 1-1: SerialNumber: syz [ 1339.171445][ T541] usb 1-1: config 0 descriptor?? [ 1339.176570][ T542] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1339.189157][ T541] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1339.383083][ T542] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.410366][ T542] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.449403][ T542] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1339.459239][ T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1339.468543][ T542] usb 3-1: SerialNumber: syz [ 1339.505536][ T542] usb 3-1: bad CDC descriptors [ 1339.510904][ T542] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1339.563131][ T542] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1339.658890][ T2204] xt_recent: Unsupported userspace flags (000000de) [ 1339.699829][ T542] usb 1-1: USB disconnect, device number 9 [ 1340.198542][T16200] usb 3-1: USB disconnect, device number 127 [ 1340.711653][ T2242] netlink: 'syz.0.13222': attribute type 4 has an invalid length. [ 1340.722815][ T2242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13222'. [ 1340.757427][ T2242] syz1: rxe_set_mtu: Set mtu to 256 [ 1340.764956][ T2242] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1341.100124][ T2250] loop1: detected capacity change from 0 to 2048 [ 1341.113652][ T2253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13227'. [ 1341.291053][ T27] audit: type=1326 audit(1784829863.110:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.340465][ T2260] libceph: resolve '400' (ret=-3): failed [ 1341.347719][ T27] audit: type=1326 audit(1784829863.156:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.388334][ T27] audit: type=1326 audit(1784829863.156:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.470723][ T27] audit: type=1326 audit(1784829863.156:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.557425][ T27] audit: type=1326 audit(1784829863.156:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.628291][ T27] audit: type=1326 audit(1784829863.156:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.693297][ T27] audit: type=1326 audit(1784829863.156:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.781962][ T27] audit: type=1326 audit(1784829863.156:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2261 comm="syz.0.13230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e6419de99 code=0x7ffc0000 [ 1341.888690][ T2281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13241'. [ 1342.337953][ T2302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13250'. [ 1342.482795][ T2309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13255'. [ 1342.512226][ T2313] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1342.605187][ T541] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1342.646509][ T2319] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1342.822419][ T541] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1342.841630][ T541] usb 2-1: config 8 has no interface number 0 [ 1342.847795][ T541] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1342.867806][ T541] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1342.878831][ T541] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1342.883282][T16200] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1342.885742][ T541] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1342.924134][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.947284][ T2303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1343.016985][ T2336] i2c i2c-0: Invalid block write size 252 [ 1343.139497][T16200] usb 4-1: Using ep0 maxpacket: 32 [ 1343.148318][T16200] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1343.174790][ T541] usb 2-1: string descriptor 0 read error: -71 [ 1343.178016][T16200] usb 4-1: config 0 has no interface number 0 [ 1343.183824][ T541] ir_toy 2-1:8.177: required endpoints not found [ 1343.213081][T16200] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1343.227117][ T541] usb 2-1: USB disconnect, device number 124 [ 1343.233174][T16200] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1343.251762][ T2346] netlink: 'syz.0.13273': attribute type 8 has an invalid length. [ 1343.263952][T16200] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1343.275008][ T2346] bridge3: entered promiscuous mode [ 1343.284559][T16200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.305711][T16200] usb 4-1: Product: syz [ 1343.310019][T16200] usb 4-1: Manufacturer: syz [ 1343.335434][T16200] usb 4-1: SerialNumber: syz [ 1343.349251][T16200] usb 4-1: config 0 descriptor?? [ 1343.362248][T16200] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1343.538260][ T2356] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1343.621148][T16200] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 1343.636705][T16200] quatech2: probe of 4-1:0.51 failed with error -90 [ 1343.698008][ T2363] tmpfs: Bad value for 'mpol' [ 1343.900951][T16200] usb 4-1: USB disconnect, device number 15 [ 1344.315536][ T494] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1344.531902][ T494] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1344.550588][ T494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.560747][ T494] usb 2-1: config 0 has no interface number 0 [ 1344.576664][ T2387] loop2: detected capacity change from 0 to 32768 [ 1344.589786][ T494] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1344.603182][ T494] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.622020][ T494] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1344.633333][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.661779][ T2387] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1344.686471][ T494] usb 2-1: Product: syz [ 1344.695810][ T2416] libceph: resolve '400' (ret=-3): failed [ 1344.702961][ T494] usb 2-1: Manufacturer: syz [ 1344.707603][ T494] usb 2-1: SerialNumber: syz [ 1344.760433][ T494] usb 2-1: config 0 descriptor?? [ 1344.863367][ T2428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13302'. [ 1344.935238][ T2387] XFS (loop2): Ending clean mount [ 1345.018207][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1345.112812][ T542] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1345.217377][ T541] usb 2-1: USB disconnect, device number 125 [ 1345.344329][ T542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1345.363280][ T542] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1345.395883][ T542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1345.422021][ T542] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1345.449077][ T542] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1345.467156][ T542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.492559][ T542] usb 1-1: config 0 descriptor?? [ 1345.507382][ T2442] loop2: detected capacity change from 0 to 512 [ 1345.562414][ T2445] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 1345.577411][ T2442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1345.593373][ T2442] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1345.603334][ T2442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1345.612273][ T2442] System zones: 0-1, 15-15, 18-18, 34-34 [ 1345.618652][ T2442] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1345.625860][ T2442] __quota_error: 1 callbacks suppressed [ 1345.625876][ T2442] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1345.642225][ T2442] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1345.657270][ T2442] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1345.668574][ T2442] EXT4-fs (loop2): 1 truncate cleaned up [ 1345.676227][ T2442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1345.733409][ T542] hdpvr 1-1:0.0: firmware version 0x1e dated [ 1345.744860][ T2442] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 1345.754462][ T2448] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 1345.778990][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.949074][ T542] hdpvr 1-1:0.0: device init failed [ 1345.960499][ T542] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1345.990119][ T542] usb 1-1: USB disconnect, device number 10 [ 1346.823179][ T2507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13333'. [ 1346.898894][ T2505] loop2: detected capacity change from 0 to 4096 [ 1346.959895][ T2505] ntfs: volume version 3.1. [ 1347.290713][ T2526] netlink: 'syz.0.13341': attribute type 8 has an invalid length. [ 1347.298866][ T2526] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13341'. [ 1347.883016][ T2559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13353'. [ 1349.083710][ T2626] netlink: 'syz.0.13380': attribute type 5 has an invalid length. [ 1349.364329][ T2644] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13385'. [ 1349.480619][ T2644] bond0 (unregistering): (slave 30): Releasing backup interface [ 1349.520814][ T2644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.533109][ T2644] bond0 (unregistering): Released all slaves [ 1350.351008][ T2659] loop2: detected capacity change from 0 to 32768 [ 1350.462808][ T2659] JBD2: Ignoring recovery information on journal [ 1350.532343][ T2659] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1350.630279][ T2659] [ 1350.632682][ T2659] ====================================================== [ 1350.639744][ T2659] WARNING: possible circular locking dependency detected [ 1350.646799][ T2659] syzkaller #0 Not tainted [ 1350.651228][ T2659] ------------------------------------------------------ [ 1350.658268][ T2659] syz.2.13393/2659 is trying to acquire lock: [ 1350.664352][ T2659] ffff88805a446608 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_setattr+0xc84/0x1bf0 [ 1350.673412][ T2659] [ 1350.673412][ T2659] but task is already holding lock: [ 1350.680794][ T2659] ffff88805b5d4da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xc77/0x1bf0 [ 1350.691101][ T2659] [ 1350.691101][ T2659] which lock already depends on the new lock. [ 1350.691101][ T2659] [ 1350.701529][ T2659] [ 1350.701529][ T2659] the existing dependency chain (in reverse order) is: [ 1350.710566][ T2659] [ 1350.710566][ T2659] -> #3 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1350.719386][ T2659] down_write+0x97/0x200 [ 1350.724286][ T2659] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1350.730822][ T2659] ocfs2_xattr_set+0x63a/0x13a0 [ 1350.736235][ T2659] ocfs2_set_acl+0x4d4/0x580 [ 1350.741413][ T2659] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1350.746913][ T2659] vfs_set_acl+0x80f/0xa70 [ 1350.751881][ T2659] path_setxattr+0x362/0x590 [ 1350.757041][ T2659] __x64_sys_setxattr+0xbb/0xd0 [ 1350.762450][ T2659] do_syscall_64+0x55/0xb0 [ 1350.767434][ T2659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.773897][ T2659] [ 1350.773897][ T2659] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1350.781756][ T2659] down_read+0x46/0x2e0 [ 1350.786481][ T2659] ocfs2_init_acl+0x30a/0x770 [ 1350.791717][ T2659] ocfs2_mknod+0x1427/0x2310 [ 1350.796860][ T2659] ocfs2_create+0x196/0x430 [ 1350.801915][ T2659] path_openat+0x1705/0x3270 [ 1350.807023][ T2659] do_filp_open+0x1f2/0x430 [ 1350.812075][ T2659] do_sys_openat2+0x134/0x1d0 [ 1350.817280][ T2659] __x64_sys_creat+0x90/0xb0 [ 1350.822389][ T2659] do_syscall_64+0x55/0xb0 [ 1350.827330][ T2659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.833744][ T2659] [ 1350.833744][ T2659] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1350.842418][ T2659] down_read+0x46/0x2e0 [ 1350.847091][ T2659] ocfs2_start_trans+0x3a8/0x6f0 [ 1350.852544][ T2659] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 1350.858779][ T2659] ocfs2_dismount_volume+0x1e5/0x890 [ 1350.864577][ T2659] generic_shutdown_super+0x134/0x2b0 [ 1350.870470][ T2659] kill_block_super+0x44/0x90 [ 1350.875658][ T2659] deactivate_locked_super+0x97/0x100 [ 1350.881535][ T2659] cleanup_mnt+0x3d7/0x460 [ 1350.886465][ T2659] task_work_run+0x1d4/0x260 [ 1350.891567][ T2659] exit_to_user_mode_loop+0xe6/0x110 [ 1350.897361][ T2659] exit_to_user_mode_prepare+0xee/0x180 [ 1350.903430][ T2659] syscall_exit_to_user_mode+0x1a/0x50 [ 1350.909417][ T2659] do_syscall_64+0x61/0xb0 [ 1350.914353][ T2659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.920761][ T2659] [ 1350.920761][ T2659] -> #0 (sb_internal#5){.+.+}-{0:0}: [ 1350.928219][ T2659] __lock_acquire+0x37ef/0x7d80 [ 1350.933583][ T2659] lock_acquire+0x19e/0x420 [ 1350.938593][ T2659] ocfs2_start_trans+0x2a9/0x6f0 [ 1350.944040][ T2659] ocfs2_setattr+0xc84/0x1bf0 [ 1350.949224][ T2659] notify_change+0xb05/0xde0 [ 1350.954328][ T2659] chown_common+0x3f3/0x5b0 [ 1350.959365][ T2659] do_fchownat+0x14b/0x240 [ 1350.964303][ T2659] __x64_sys_chown+0x82/0x90 [ 1350.969417][ T2659] do_syscall_64+0x55/0xb0 [ 1350.974378][ T2659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.980790][ T2659] [ 1350.980790][ T2659] other info that might help us debug this: [ 1350.980790][ T2659] [ 1350.990998][ T2659] Chain exists of: [ 1350.990998][ T2659] sb_internal#5 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 1350.990998][ T2659] [ 1351.005144][ T2659] Possible unsafe locking scenario: [ 1351.005144][ T2659] [ 1351.012588][ T2659] CPU0 CPU1 [ 1351.017938][ T2659] ---- ---- [ 1351.023285][ T2659] lock(&ocfs2_file_ip_alloc_sem_key); [ 1351.028815][ T2659] lock(&oi->ip_xattr_sem); [ 1351.035906][ T2659] lock(&ocfs2_file_ip_alloc_sem_key); [ 1351.043955][ T2659] rlock(sb_internal#5); [ 1351.048273][ T2659] [ 1351.048273][ T2659] *** DEADLOCK *** [ 1351.048273][ T2659] [ 1351.056400][ T2659] 3 locks held by syz.2.13393/2659: [ 1351.061593][ T2659] #0: ffff88805a446418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1351.070861][ T2659] #1: ffff88805b5d5118 (&type->i_mutex_dir_key#26){+.+.}-{3:3}, at: chown_common+0x310/0x5b0 [ 1351.081149][ T2659] #2: ffff88805b5d4da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xc77/0x1bf0 [ 1351.091839][ T2659] [ 1351.091839][ T2659] stack backtrace: [ 1351.097717][ T2659] CPU: 0 PID: 2659 Comm: syz.2.13393 Not tainted syzkaller #0 [ 1351.105165][ T2659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1351.115222][ T2659] Call Trace: [ 1351.118504][ T2659] [ 1351.121425][ T2659] dump_stack_lvl+0x18c/0x250 [ 1351.126109][ T2659] ? load_image+0x420/0x420 [ 1351.130642][ T2659] ? show_regs_print_info+0x20/0x20 [ 1351.135845][ T2659] ? print_circular_bug+0x12b/0x1a0 [ 1351.141055][ T2659] check_noncircular+0x2fc/0x400 [ 1351.145991][ T2659] ? look_up_lock_class+0x75/0x140 [ 1351.151101][ T2659] ? print_deadlock_bug+0x5d0/0x5d0 [ 1351.156297][ T2659] ? lockdep_lock+0xf5/0x230 [ 1351.160882][ T2659] ? _find_first_zero_bit+0xd6/0x100 [ 1351.166206][ T2659] __lock_acquire+0x37ef/0x7d80 [ 1351.171058][ T2659] ? verify_lock_unused+0x140/0x140 [ 1351.176259][ T2659] ? verify_lock_unused+0x140/0x140 [ 1351.181468][ T2659] ? verify_lock_unused+0x140/0x140 [ 1351.186678][ T2659] lock_acquire+0x19e/0x420 [ 1351.191245][ T2659] ? ocfs2_setattr+0xc84/0x1bf0 [ 1351.196114][ T2659] ? __might_sleep+0xe0/0xe0 [ 1351.200695][ T2659] ? do_raw_spin_lock+0x11f/0x2b0 [ 1351.205716][ T2659] ? read_lock_is_recursive+0x20/0x20 [ 1351.211087][ T2659] ? __rwlock_init+0x150/0x150 [ 1351.215849][ T2659] ? do_raw_spin_unlock+0x121/0x230 [ 1351.221041][ T2659] ocfs2_start_trans+0x2a9/0x6f0 [ 1351.225970][ T2659] ? ocfs2_setattr+0xc84/0x1bf0 [ 1351.230810][ T2659] ? ocfs2_recovery_exit+0x50/0x50 [ 1351.235907][ T2659] ? setattr_prepare+0x1e5/0xac0 [ 1351.240829][ T2659] ocfs2_setattr+0xc84/0x1bf0 [ 1351.245493][ T2659] ? ocfs2_extend_allocation+0x1830/0x1830 [ 1351.251294][ T2659] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 1351.257088][ T2659] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1351.263329][ T2659] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 1351.269227][ T2659] ? current_time+0x196/0x290 [ 1351.273889][ T2659] ? inode_set_ctime_current+0x2e0/0x2e0 [ 1351.279511][ T2659] ? apparmor_path_chown+0x231/0x2c0 [ 1351.284814][ T2659] ? evm_inode_setattr+0x10a/0x6c0 [ 1351.289911][ T2659] ? security_inode_setattr+0xdc/0x140 [ 1351.295352][ T2659] ? try_break_deleg+0x79/0x120 [ 1351.300187][ T2659] ? ocfs2_extend_allocation+0x1830/0x1830 [ 1351.305978][ T2659] notify_change+0xb05/0xde0 [ 1351.310561][ T2659] chown_common+0x3f3/0x5b0 [ 1351.315054][ T2659] ? __ia32_sys_chmod+0x70/0x70 [ 1351.319917][ T2659] ? rcu_read_lock_any_held+0xb4/0x140 [ 1351.325360][ T2659] ? __mnt_want_write+0x223/0x2a0 [ 1351.330377][ T2659] do_fchownat+0x14b/0x240 [ 1351.334780][ T2659] ? chown_common+0x5b0/0x5b0 [ 1351.339441][ T2659] __x64_sys_chown+0x82/0x90 [ 1351.344018][ T2659] do_syscall_64+0x55/0xb0 [ 1351.348431][ T2659] ? clear_bhb_loop+0x40/0x90 [ 1351.353110][ T2659] ? clear_bhb_loop+0x40/0x90 [ 1351.357796][ T2659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.363688][ T2659] RIP: 0033:0x7fd1f459de99 [ 1351.368097][ T2659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.387691][ T2659] RSP: 002b:00007fd1f5519028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1351.396101][ T2659] RAX: ffffffffffffffda RBX: 00007fd1f4825fa0 RCX: 00007fd1f459de99 [ 1351.404076][ T2659] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 1351.412031][ T2659] RBP: 00007fd1f4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1351.419986][ T2659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.427944][ T2659] R13: 00007fd1f4826038 R14: 00007fd1f4825fa0 R15: 00007ffdabc08448 [ 1351.435922][ T2659] [ 1351.464214][ T5777] ocfs2: Unmounting device (7,2) on (node local)