last executing test programs: 2.748822461s ago: executing program 1 (id=22654): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0x38, 0x0) 2.368532519s ago: executing program 1 (id=22657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000240), &(0x7f0000000040)=@tcp6, 0x1}, 0x20) 2.170578474s ago: executing program 3 (id=22659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x1dc, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x1c8, 0x1, [@m_simple={0x1c4, 0x1, 0x0, 0x0, {{0xb}, {0x198, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x192, 0x3, ')$\x05\x00\x00\xf7\a\xccF\xd93o4\x96\x1f\xe5:\xb1X\xa539\xaf\v@\x1a\x1cE\xf5\xfa@y\xfd\x0e6o\xa3~\xd8\xd5\x1cl?\xd8\xc2R\x0f\xea\xc8\x84\xd1l\x90\xd6&bi&\xa3\xb76\x1cP\xe1&\xba\f~f\xae$\xb2J\x86\xfb\xa7\xe3g\x8c8\xf5\xca\x1f\"UK\xff\x89Q\xc4\xf0\xa5\xc7\x80jr=OW\x95\xd5`\x8bs)3\x99\xc5Id\x05\x9e0C\xc7\x0e\xa7Y\x116\x10\xeb\x89\xc19n8]\xa9\x17?H\xc9H_\xec\x8c\xd3\xa3**HrAP\xfc\xb9!\xbf\x06\x0f\xd2q\xb7n?\xc4\x1a\x91\xe1O\xb0\x05%e\xb1\x84\xee\x16\xd2]\xd2>\xd7\xc1Vl\xb2\xe3\x95\xbd\xc2]j\x9c\x04\x04\xe9M\x82\xa7\x02&N\xf6ka\x8f\x84\\ \xdc\x8eU\x0f\x1e\xbd\xfbt\x9cW\x8a&\xc3W\xcc0\xaau\xe6\x8a5u\x8e\"+\x91&\b}d\xc4\xb9\xc2\xd9\xc6,\xce\xe8}\xb1\x00\x00\x90>wD]\x85\r\xdfO\x89\x8by\xf5\x1bg\xea\xa5\xac\x01\xbb\xcb8\x9a\xe8\x06\x00\x91oh\xcbP\x8a}4.p\xe6\x04\xbb\xd7)-\xbfb[;\xf8\xe4\xa2[\xd1S\xfb\xe4\x9dX\xdc/\xc0^\xd5\xb6V\xbaRu\x04\xb2\xa1@\x18\x9eR\xe1b\xa0\x8a\xd4\x116\x1b;x\b#\xd7Xj\xa71\xf4\x17\xfbR\xba\xe4|\xd5\xcc\xcc\x8b\x80\xef\x05\xbf\bvnfN\xf3\xcaK\xd4)\xc9\x12\xb4sN\f\xae\xff\xdd\xd0{O\x01\xc8\x15lNc\xe0\xe7\x91\xf5\xc0\x17\f\x00\x00\x00\x00\x1bW\x8e\xd5\xbc\xe8^qw\xce\xd1'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1dc}}, 0x0) 2.154532894s ago: executing program 1 (id=22660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 1.956515198s ago: executing program 3 (id=22662): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.87652096s ago: executing program 1 (id=22663): ioperm(0x0, 0x62ee, 0x2000000000000006) fanotify_init(0x1200, 0x0) 1.759453152s ago: executing program 3 (id=22664): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x5}}, 0x18) 1.628638765s ago: executing program 1 (id=22666): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0xc, @sdr={0x51424752, 0x1}}}) 1.462297459s ago: executing program 3 (id=22668): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 1.40621416s ago: executing program 1 (id=22669): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000000)={[{@coherency_buffered}, {@heartbeat_none}, {@nouser_xattr}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280)=@v2={0x3, 0x2, 0x3, 0xc7a, 0x48, "6592fdb85abc7ccefdb7cc916e69f2c2c136ae473c4987024b334aa0813b9b9216ec61c580bcb21fdd2733644ddf132438b05edce1db30a17e213320ab550e6fbbcc726e667d8da2"}, 0x51, 0x0) 1.340554011s ago: executing program 2 (id=22671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x1dc, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x1c8, 0x1, [@m_simple={0x1c4, 0x1, 0x0, 0x0, {{0xb}, {0x198, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x192, 0x3, ')$\x05\x00\x00\xf7\a\xccF\xd93o4\x96\x1f\xe5:\xb1X\xa539\xaf\v@\x1a\x1cE\xf5\xfa@y\xfd\x0e6o\xa3~\xd8\xd5\x1cl?\xd8\xc2R\x0f\xea\xc8\x84\xd1l\x90\xd6&bi&\xa3\xb76\x1cP\xe1&\xba\f~f\xae$\xb2J\x86\xfb\xa7\xe3g\x8c8\xf5\xca\x1f\"UK\xff\x89Q\xc4\xf0\xa5\xc7\x80jr=OW\x95\xd5`\x8bs)3\x99\xc5Id\x05\x9e0C\xc7\x0e\xa7Y\x116\x10\xeb\x89\xc19n8]\xa9\x17?H\xc9H_\xec\x8c\xd3\xa3**HrAP\xfc\xb9!\xbf\x06\x0f\xd2q\xb7n?\xc4\x1a\x91\xe1O\xb0\x05%e\xb1\x84\xee\x16\xd2]\xd2>\xd7\xc1Vl\xb2\xe3\x95\xbd\xc2]j\x9c\x04\x04\xe9M\x82\xa7\x02&N\xf6ka\x8f\x84\\ \xdc\x8eU\x0f\x1e\xbd\xfbt\x9cW\x8a&\xc3W\xcc0\xaau\xe6\x8a5u\x8e\"+\x91&\b}d\xc4\xb9\xc2\xd9\xc6,\xce\xe8}\xb1\x00\x00\x90>wD]\x85\r\xdfO\x89\x8by\xf5\x1bg\xea\xa5\xac\x01\xbb\xcb8\x9a\xe8\x06\x00\x91oh\xcbP\x8a}4.p\xe6\x04\xbb\xd7)-\xbfb[;\xf8\xe4\xa2[\xd1S\xfb\xe4\x9dX\xdc/\xc0^\xd5\xb6V\xbaRu\x04\xb2\xa1@\x18\x9eR\xe1b\xa0\x8a\xd4\x116\x1b;x\b#\xd7Xj\xa71\xf4\x17\xfbR\xba\xe4|\xd5\xcc\xcc\x8b\x80\xef\x05\xbf\bvnfN\xf3\xcaK\xd4)\xc9\x12\xb4sN\f\xae\xff\xdd\xd0{O\x01\xc8\x15lNc\xe0\xe7\x91\xf5\xc0\x17\f\x00\x00\x00\x00\x1bW\x8e\xd5\xbc\xe8^qw\xce\xd1'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1dc}}, 0x0) 1.158791225s ago: executing program 3 (id=22673): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0xdc52d74, 0x1, 0xfffffffc, 0x8009, &(0x7f00000001c0)=[{}]}) 1.108156216s ago: executing program 0 (id=22674): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x20002, 0x2, {0x0, 0x8}, 0x6, 0x6}) 1.027151358s ago: executing program 2 (id=22675): r0 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x100, "9611ba5a0000000000000000e8f71313e9ffffffffeefff000", 0x56544943}) 878.560251ms ago: executing program 3 (id=22676): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000002700)={[{0x8, 0x4e00, "0033588a45e77108"}]}) 864.560531ms ago: executing program 0 (id=22677): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000e40)=@ethtool_per_queue_op={0x4b, 0x4a, [0x2, 0x4, 0x4, 0x3, 0x3ffc0000, 0x4, 0x5, 0x100, 0x7fffffff, 0x7, 0x87, 0x3, 0xb3, 0x7ff, 0x9, 0x3, 0xfffffffd, 0xfff, 0x1, 0x8, 0x9, 0x9, 0x0, 0x4, 0x8, 0x808, 0x3, 0x8, 0x2ce, 0x1f1c, 0x0, 0xa9f4, 0x7f, 0xfffffa60, 0x7, 0xff, 0x200, 0x1ff, 0x1, 0x80000000, 0x40e, 0x4008, 0x4005, 0x85, 0x9, 0x18, 0x801, 0x8, 0x6, 0xfffff001, 0x7, 0x5, 0x6, 0x7f4, 0x6, 0x1, 0xb, 0x7cba, 0x8, 0x2bb7, 0x6, 0xe68f, 0x4, 0xf, 0xd186, 0x3ff, 0x3ff, 0x1, 0x0, 0x3e0, 0x7, 0x400, 0x40, 0xff, 0x7, 0x7, 0x8, 0x0, 0x8, 0x2, 0x5, 0x7, 0x3, 0x3, 0x5, 0x6, 0x0, 0x1, 0x7a13fb19, 0xf, 0xc3, 0x0, 0x9, 0x64a, 0x0, 0x67e4, 0x3, 0x2, 0x9, 0xffff0000, 0x10, 0x1, 0x7ff, 0x29aa, 0x800, 0x81, 0x8, 0x20, 0x5, 0x9, 0x7fffffff, 0x8, 0x9, 0x6, 0x0, 0x9, 0x4, 0x5, 0x2, 0x80000001, 0xb92f, 0x2, 0x387, 0x5, 0x9, 0x1, 0x3, 0x1ff]}}) 790.163103ms ago: executing program 2 (id=22678): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd4, &(0x7f0000000200), &(0x7f0000000280)=0x1c) 626.116036ms ago: executing program 2 (id=22679): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0x38, 0x0) 625.327607ms ago: executing program 0 (id=22687): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x28940) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/218, 0xda}], 0x1, 0x8, 0x3) 480.360279ms ago: executing program 0 (id=22680): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000001240)='-%{]\x00', 0x5) 451.23732ms ago: executing program 2 (id=22681): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002140)={0x3c, 0x20, 0x100, 0x70bd29, 0x25dfdbff, {0x1f}, [@nested={0x4, 0xce}, @nested={0x24, 0x1a, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @ipv4=@remote}, @nested={0x18, 0x65, 0x0, 0x1, [@nested={0x14, 0x155, 0x0, 0x1, [@nested={0xe, 0xac, 0x0, 0x1, [@nested={0x4, 0x4e}, @generic="64438a2578b0"]}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c5a156a69b753a8}, 0x800) syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f5100"], 0x0) 217.577035ms ago: executing program 0 (id=22682): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}}) 217.509385ms ago: executing program 2 (id=22683): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=22684): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): cess `syz.1.21388'. [ 2019.095574][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21388'. [ 2019.264617][ T5999] blk_print_req_error: 255 callbacks suppressed [ 2019.264638][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2019.297727][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2019.319108][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2019.338045][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.356128][ T5999] buffer_io_error: 225 callbacks suppressed [ 2019.356146][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2019.362796][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.381364][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.397072][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.409435][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2019.430987][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2019.439216][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2019.439216][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.439251][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2019.440405][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.477285][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2019.490768][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2019.514344][ T5849] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2019.522603][ T5849] Buffer I/O error on dev loop2p3, logical block 12, async page read [ 2019.531048][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2019.569370][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2019.926957][ T3374] loop1: detected capacity change from 0 to 64 [ 2019.983786][ T3374] syz.1.21398: attempt to access beyond end of device [ 2019.983786][ T3374] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2019.983947][ T3374] syz.1.21398: attempt to access beyond end of device [ 2019.983947][ T3374] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2020.411968][ T3395] loop3: detected capacity change from 0 to 64 [ 2020.678067][ T3408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21406'. [ 2020.707821][ T3408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21406'. [ 2020.866356][ T3381] loop2: detected capacity change from 0 to 32768 [ 2021.047924][ T3415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2021.678649][ T3477] loop2: detected capacity change from 0 to 4096 [ 2022.066567][ T3492] veth11: entered allmulticast mode [ 2023.042734][ T3555] loop2: detected capacity change from 0 to 1024 [ 2023.070296][ T3555] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 2023.129807][ T3500] loop3: detected capacity change from 0 to 32768 [ 2023.596408][ T3580] loop3: detected capacity change from 0 to 512 [ 2023.680672][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2023.718211][ T3580] ext4 filesystem being mounted at /5313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2023.762251][ T3582] wg1 speed is unknown, defaulting to 1000 [ 2023.787075][ T3580] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.21435: corrupted xattr block 33: invalid header [ 2023.842195][ T3580] EXT4-fs (loop3): Remounting filesystem read-only [ 2024.000017][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2024.315009][T10671] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2024.403807][ T3573] loop2: detected capacity change from 0 to 32768 [ 2024.465154][ T27] audit: type=1800 audit(2000000115.851:2607): pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21434" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 2024.502623][T10671] usb 1-1: Using ep0 maxpacket: 32 [ 2024.527622][T10671] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.561468][T10671] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 2024.583384][T10671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.603275][T10671] usb 1-1: Product: syz [ 2024.607509][T10671] usb 1-1: Manufacturer: syz [ 2024.632640][T10671] usb 1-1: SerialNumber: syz [ 2024.648251][T10671] usb 1-1: config 0 descriptor?? [ 2024.905299][T10671] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2025.097184][ T3658] netlink: 'syz.3.21448': attribute type 1 has an invalid length. [ 2025.124206][ T3658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21448'. [ 2025.140717][T31617] usb 1-1: USB disconnect, device number 41 [ 2025.208621][ T3663] loop2: detected capacity change from 0 to 64 [ 2025.259822][ T3663] syz.2.21449: attempt to access beyond end of device [ 2025.259822][ T3663] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2025.274880][ T3663] buffer_io_error: 232 callbacks suppressed [ 2025.274904][ T3663] Buffer I/O error on dev loop2, logical block 512, async page read [ 2025.289644][ T3663] syz.2.21449: attempt to access beyond end of device [ 2025.289644][ T3663] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2025.330437][ T3663] Buffer I/O error on dev loop2, logical block 56576, async page read [ 2025.535639][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21451'. [ 2025.551863][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21451'. [ 2025.762832][ T5849] blk_print_req_error: 260 callbacks suppressed [ 2025.762851][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2025.765873][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2025.797304][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.818877][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2025.838894][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.839872][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2025.858354][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2025.871055][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.882907][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.899263][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2025.917925][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2025.926155][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.937114][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.946385][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2025.946469][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2025.946536][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2025.946599][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2025.946666][ T6002] Buffer I/O error on dev loop2p7, logical block 12, async page read [ 2026.291028][ T3715] netlink: 'syz.2.21459': attribute type 1 has an invalid length. [ 2026.328323][ T3715] netlink: 56 bytes leftover after parsing attributes in process `syz.2.21459'. [ 2027.666098][ T3736] loop1: detected capacity change from 0 to 32768 [ 2027.700236][ T3736] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.21464 (3736) [ 2027.766682][ T3736] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2027.817521][ T3736] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2027.836950][ T3736] BTRFS info (device loop1): enabling ssd optimizations [ 2027.865979][ T3736] BTRFS info (device loop1): not using ssd optimizations [ 2027.873112][ T3736] BTRFS info (device loop1): turning off barriers [ 2027.889632][ T3736] BTRFS info (device loop1): use no compression [ 2027.915162][ T3736] BTRFS info (device loop1): using free space tree [ 2027.949876][ T5818] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 2028.147237][ T5818] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2028.169097][ T5818] usb 1-1: config 0 has no interface number 0 [ 2028.182454][ T173] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 2028.197331][ T5818] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2028.228891][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.247445][ T5818] usb 1-1: Product: syz [ 2028.251789][ T5818] usb 1-1: Manufacturer: syz [ 2028.256437][ T5818] usb 1-1: SerialNumber: syz [ 2028.289748][ T5818] usb 1-1: config 0 descriptor?? [ 2028.374159][ T173] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2028.403339][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.439419][ T173] usb 3-1: Product: syz [ 2028.456523][ T173] usb 3-1: Manufacturer: syz [ 2028.461204][ T173] usb 3-1: SerialNumber: syz [ 2028.471003][ T5770] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2028.484456][ T173] r8152-cfgselector 3-1: config 0 descriptor?? [ 2028.718998][ T5818] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2028.736758][ T5818] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2028.753036][ T6002] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop1 scanned by udevd (6002) [ 2028.791008][ T5818] asix: probe of 1-1:0.251 failed with error -5 [ 2028.826550][ T5818] usb 1-1: USB disconnect, device number 42 [ 2028.984933][ T173] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2029.035524][ T173] r8152-cfgselector 3-1: USB disconnect, device number 42 [ 2029.415831][ T3862] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2029.769049][ T3881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21493'. [ 2029.989188][ T3898] loop3: detected capacity change from 0 to 64 [ 2030.180238][ T6002] buffer_io_error: 328 callbacks suppressed [ 2030.180256][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2030.208766][ T5849] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2030.218942][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2030.232686][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2030.246177][ T5998] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2030.257119][ T5849] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2030.261970][ T6002] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2030.287345][ T5998] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2030.295781][ T5849] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2030.316720][ T6002] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2030.422628][ T3917] CIFS: VFS: Malformed UNC in devname [ 2030.480900][ T6002] blk_print_req_error: 394 callbacks suppressed [ 2030.480918][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2030.499986][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2030.523487][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2030.533916][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.549668][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.573981][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.576455][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.591962][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.615766][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.625608][ T6002] I/O error, dev loop2, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2030.819975][T31617] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 2031.023786][T31617] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2031.055863][T31617] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 2031.088874][T31617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.127085][T31617] usb 1-1: Product: syz [ 2031.136990][T31617] usb 1-1: Manufacturer: syz [ 2031.141661][T31617] usb 1-1: SerialNumber: syz [ 2031.182645][T31617] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 2031.630097][T31617] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 2031.694451][T31617] usb 1-1: USB disconnect, device number 43 [ 2031.859822][ T3998] Cannot find del_set index 3 as target [ 2031.874714][ T3945] loop3: detected capacity change from 0 to 32768 [ 2031.900474][ T3945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.21505 (3945) [ 2031.997136][ T3945] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2032.024624][ T3945] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 2032.041311][ T3945] BTRFS info (device loop3): using free space tree [ 2032.255837][ T3945] BTRFS info (device loop3): enabling ssd optimizations [ 2032.273506][ T3945] BTRFS info (device loop3): auto enabling async discard [ 2032.677204][ T4050] ip6gre2: entered promiscuous mode [ 2032.723171][ T4050] ip6gre2: entered allmulticast mode [ 2032.871174][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2033.073995][ T4066] netlink: 'syz.1.21529': attribute type 21 has an invalid length. [ 2033.118892][ T4066] IPv6: NLM_F_CREATE should be specified when creating new route [ 2033.157711][ T4066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2033.165060][ T4066] IPv6: NLM_F_CREATE should be set when creating new route [ 2033.172434][ T4066] IPv6: NLM_F_CREATE should be set when creating new route [ 2033.179738][ T4066] IPv6: NLM_F_CREATE should be set when creating new route [ 2033.638647][ T4082] loop1: detected capacity change from 0 to 256 [ 2033.715591][ T4082] FAT-fs (loop1): Directory bread(block 64) failed [ 2033.747663][ T4082] FAT-fs (loop1): Directory bread(block 65) failed [ 2033.754385][ T4082] FAT-fs (loop1): Directory bread(block 66) failed [ 2033.762564][ T4078] loop3: detected capacity change from 0 to 4096 [ 2033.803370][ T4082] FAT-fs (loop1): Directory bread(block 67) failed [ 2033.810160][ T4082] FAT-fs (loop1): Directory bread(block 68) failed [ 2033.813394][ T4078] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 2033.827046][ T4082] FAT-fs (loop1): Directory bread(block 69) failed [ 2033.839912][ T4082] FAT-fs (loop1): Directory bread(block 70) failed [ 2033.863269][ T4082] FAT-fs (loop1): Directory bread(block 71) failed [ 2033.884951][ T4078] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 2033.892714][ T4082] FAT-fs (loop1): Directory bread(block 72) failed [ 2033.912272][ T4082] FAT-fs (loop1): Directory bread(block 73) failed [ 2034.117569][ T4078] ntfs3: loop3: ino=1f, "file2" failed to open parent directory r=5 to update [ 2034.300010][ T12] ntfs3: loop3: ino=1f, failed to open parent directory r=5 to update [ 2034.861949][ T6002] buffer_io_error: 302 callbacks suppressed [ 2034.861968][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2034.865353][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2034.886846][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2034.906362][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2034.918626][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2034.949066][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2034.961627][ T5849] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2034.982978][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2034.989245][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2035.005083][ T5849] Buffer I/O error on dev loop2p3, logical block 12, async page read [ 2035.150523][ T6002] blk_print_req_error: 355 callbacks suppressed [ 2035.150542][ T6002] I/O error, dev loop2, sector 412 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.177207][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2035.193866][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.204209][ T6002] I/O error, dev loop2, sector 413 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.217058][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.238825][ T6002] I/O error, dev loop2, sector 414 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.248702][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.267324][ T6002] I/O error, dev loop2, sector 415 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.280745][ T5999] I/O error, dev loop2, sector 611 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.343783][ T5999] I/O error, dev loop2, sector 612 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2035.396678][ T4139] netlink: 164 bytes leftover after parsing attributes in process `syz.0.21550'. [ 2035.421700][ T4135] loop2: detected capacity change from 0 to 4096 [ 2035.445620][ T4135] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 2035.471833][ T4135] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 2035.592778][ T4135] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update [ 2035.741943][T13509] ntfs3: loop2: ino=1f, failed to open parent directory r=5 to update [ 2035.762061][ T4103] loop3: detected capacity change from 0 to 32768 [ 2035.787072][ T4103] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 2035.894392][ T4155] loop1: detected capacity change from 0 to 128 [ 2036.109951][ T5849] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 2036.307615][ T4176] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 2037.055227][ T4216] netlink: 'syz.1.21571': attribute type 21 has an invalid length. [ 2037.072901][ T4216] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21571'. [ 2037.102917][ T4216] netlink: 'syz.1.21571': attribute type 5 has an invalid length. [ 2037.111221][ T4216] netlink: 'syz.1.21571': attribute type 6 has an invalid length. [ 2037.166864][ T4216] netlink: 3 bytes leftover after parsing attributes in process `syz.1.21571'. [ 2037.452264][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21576'. [ 2037.638755][ T4243] netlink: 'syz.2.21586': attribute type 1 has an invalid length. [ 2037.665371][ T4243] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21586'. [ 2037.696115][ T4250] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 2037.727074][ T4250] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 2038.206995][ T4267] loop1: detected capacity change from 0 to 4096 [ 2038.249441][ T4267] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 2038.282288][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2038.391674][ T4267] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 2038.543968][ T61] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 2038.759533][ T4260] loop2: detected capacity change from 0 to 32768 [ 2038.760281][ T4286] netlink: 'syz.3.21593': attribute type 7 has an invalid length. [ 2038.829457][ T4260] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2039.005333][ T4306] loop1: detected capacity change from 0 to 512 [ 2039.041855][ T4306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2039.069733][ T4306] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2039.130309][ T4260] XFS (loop2): Ending clean mount [ 2039.136065][ T4306] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.21597: invalid indirect mapped block 32768 (level 2) [ 2039.230135][ T4306] EXT4-fs (loop1): Remounting filesystem read-only [ 2039.248216][ T4306] EXT4-fs (loop1): 1 orphan inode deleted [ 2039.254038][ T4306] EXT4-fs (loop1): 1 truncate cleaned up [ 2039.329847][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2039.385910][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2039.624885][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2039.976727][ T5849] blk_print_req_error: 219 callbacks suppressed [ 2039.976747][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2040.007895][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2040.045672][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2040.046914][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.067416][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.083671][ T5849] buffer_io_error: 230 callbacks suppressed [ 2040.083688][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2040.105575][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.108174][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2040.137629][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.144572][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2040.169020][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.179561][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2040.197076][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.208454][ T5849] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2040.228232][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2040.236352][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2040.236464][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2040.236641][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2040.262373][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2040.270601][ T5849] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2040.607176][ T5869] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2040.784396][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 2040.812771][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.830933][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2040.885034][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2040.911961][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.934854][ T5869] usb 4-1: Product: syz [ 2040.939100][ T5869] usb 4-1: Manufacturer: syz [ 2040.970355][ T5869] usb 4-1: SerialNumber: syz [ 2041.147084][ T4401] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2041.214257][ T5869] usb 4-1: 0:2 : does not exist [ 2041.219277][ T5869] usb 4-1: unit 9 not found! [ 2041.270135][ T5869] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 2041.292639][ T5869] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 2041.341863][ T5869] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 2041.396748][ T4419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21626'. [ 2041.397333][ T5869] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 2041.406297][ T5818] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2041.442067][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21626'. [ 2041.456406][ T5869] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 2041.501886][ T5869] usb 4-1: USB disconnect, device number 43 [ 2041.604008][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 2041.616576][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2041.641652][ T5818] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 2041.669174][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.707022][ T5818] usb 1-1: Product: syz [ 2041.711266][ T5818] usb 1-1: Manufacturer: syz [ 2041.743393][ T5818] usb 1-1: SerialNumber: syz [ 2041.878238][ T4453] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.21629'. [ 2042.221358][ T5818] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2042.237376][ T5818] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 2042.329722][ T5818] usb 1-1: USB disconnect, device number 44 [ 2042.395395][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2042.501114][ T4470] loop2: detected capacity change from 0 to 4096 [ 2042.659514][ T4470] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 2042.685543][ T4470] ntfs3: loop2: Failed to load $Extend (-22). [ 2042.691713][ T4470] ntfs3: loop2: Failed to initialize $Extend. [ 2042.775521][ T4456] loop1: detected capacity change from 0 to 32768 [ 2042.798885][ T27] audit: type=1800 audit(2000000135.518:2608): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21633" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 2042.800797][ T4456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.21630 (4456) [ 2042.913440][ T4456] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2042.926322][ T4456] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2042.935918][ T4456] BTRFS info (device loop1): using free space tree [ 2043.244811][ T4456] BTRFS info (device loop1): enabling ssd optimizations [ 2043.251940][ T4456] BTRFS info (device loop1): auto enabling async discard [ 2043.721212][ T4553] netlink: 3 bytes leftover after parsing attributes in process `syz.3.21644'. [ 2043.860646][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2044.649108][ T6002] blk_print_req_error: 341 callbacks suppressed [ 2044.649128][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2044.700228][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2044.719763][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2044.736807][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.763863][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.793328][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.803155][ T5998] buffer_io_error: 302 callbacks suppressed [ 2044.803172][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2044.825491][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2044.857122][ T6002] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.866792][ T5849] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2044.874934][ T5849] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.894776][ T5998] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.923534][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2044.931776][ T5998] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2044.954097][ T6002] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.968883][ T5849] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2044.977099][ T5998] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2045.002515][ T5849] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2045.013228][ T6002] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2045.021633][ T5998] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2045.916796][ T4664] xt_hashlimit: overflow, try lower: 3/0 [ 2046.339550][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21682'. [ 2046.489947][ T4689] loop2: detected capacity change from 0 to 16 [ 2046.581867][ T4689] erofs: (device loop2): mounted with root inode @ nid 36. [ 2046.750877][ T4689] syz.2.21685: attempt to access beyond end of device [ 2046.750877][ T4689] loop2: rw=524288, sector=74, nr_sectors = 2200 limit=16 [ 2046.819976][ T4689] syz.2.21685: attempt to access beyond end of device [ 2046.819976][ T4689] loop2: rw=524288, sector=2274, nr_sectors = 360 limit=16 [ 2047.700114][ T4753] netlink: 'syz.0.21701': attribute type 1 has an invalid length. [ 2048.293960][ T4783] bridge14: entered promiscuous mode [ 2048.331292][ T4783] bridge14: entered allmulticast mode [ 2048.353004][ T4789] loop3: detected capacity change from 0 to 8 [ 2048.437156][ T4789] SQUASHFS error: zlib decompression failed, data probably corrupt [ 2048.458259][ T4789] SQUASHFS error: Failed to read block 0x13e: -5 [ 2048.473180][ T4789] SQUASHFS error: Unable to read metadata cache entry [13c] [ 2048.500388][ T4789] SQUASHFS error: Unable to read directory block [13c:26] [ 2048.914045][ T4822] loop3: detected capacity change from 0 to 128 [ 2049.483989][ T6002] blk_print_req_error: 368 callbacks suppressed [ 2049.484009][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2049.505434][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.516033][ T6002] buffer_io_error: 326 callbacks suppressed [ 2049.516050][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2049.530539][ T6002] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.542052][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2049.564507][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2049.592378][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.601935][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2049.620131][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.636666][ T6002] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.656524][ T5849] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2049.664972][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2049.702854][ T5998] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.707329][ T6002] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2049.720743][ T5849] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2049.749732][ T5849] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2049.757450][ T5998] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2049.758058][ T5849] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2049.778072][ T6002] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2049.805140][ T5998] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2049.834574][ T4865] TCP: TCP_TX_DELAY enabled [ 2050.598532][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21743'. [ 2050.603619][ T4907] bridge7: entered promiscuous mode [ 2050.621435][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2050.642598][ T4907] bridge7: entered allmulticast mode [ 2051.321398][ T4955] tmpfs: Bad value for 'mpol' [ 2053.241710][ T5004] loop3: detected capacity change from 0 to 32768 [ 2053.326744][ T5004] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2053.573059][ T5004] XFS (loop3): Ending clean mount [ 2053.736782][ T5041] loop1: detected capacity change from 0 to 32768 [ 2053.785196][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2053.801344][ T5041] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 2053.847477][ T5041] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2054.034591][ T5041] XFS (loop1): Ending clean mount [ 2054.066661][ T5041] XFS (loop1): Quotacheck needed: Please wait. [ 2054.213641][ T5849] blk_print_req_error: 503 callbacks suppressed [ 2054.213659][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2054.230901][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2054.253422][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2054.275429][ T5041] XFS (loop1): Quotacheck: Done. [ 2054.292237][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.302462][ T5849] buffer_io_error: 446 callbacks suppressed [ 2054.302479][ T5849] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2054.316679][ T5849] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.326071][ T5849] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2054.334470][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.337359][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.384584][ T5849] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.401313][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2054.409483][ T6002] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.437016][ T5849] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2054.445518][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2054.453973][ T5849] I/O error, dev loop2, sector 611 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2054.465758][ T5998] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2054.494558][ T5998] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2054.502773][ T5849] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2054.513194][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2054.521366][ T6002] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2054.675519][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2054.858297][ T970] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2055.036111][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.053708][ T970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2055.071881][ T970] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2055.092211][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2055.111720][ T970] usb 1-1: SerialNumber: syz [ 2055.343701][ T970] usb 1-1: 0:2 : does not exist [ 2055.405528][ T5176] loop2: detected capacity change from 0 to 256 [ 2055.413522][ T970] usb 1-1: USB disconnect, device number 45 [ 2055.431646][ T5176] exfat: Deprecated parameter 'namecase' [ 2055.470052][ T5176] exfat: Deprecated parameter 'namecase' [ 2055.503363][ T5176] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 2055.552251][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2056.214927][ T5226] loop3: detected capacity change from 0 to 64 [ 2056.247259][ T5228] netlink: 52 bytes leftover after parsing attributes in process `syz.0.21809'. [ 2056.672787][ T5254] ceph: No source [ 2056.943727][ T5270] netlink: 'syz.3.21820': attribute type 21 has an invalid length. [ 2057.316030][ T5295] netlink: 256 bytes leftover after parsing attributes in process `syz.1.21827'. [ 2057.803451][T31617] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2057.961949][T10671] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2058.020732][T31617] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2058.039895][T31617] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2058.056930][T31617] usb 3-1: Product: syz [ 2058.067618][T31617] usb 3-1: SerialNumber: syz [ 2058.084232][T31617] usb 3-1: config 0 descriptor?? [ 2058.139344][T10671] usb 4-1: Using ep0 maxpacket: 8 [ 2058.149639][T10671] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2058.181304][T10671] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2058.203488][T10671] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2058.216566][T10671] usb 4-1: Product: syz [ 2058.220844][T10671] usb 4-1: Manufacturer: syz [ 2058.220869][T10671] usb 4-1: SerialNumber: syz [ 2058.296321][T31617] hso 3-1:0.0: Failed to find INT IN ep [ 2058.466915][T10671] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 2058.481758][T10671] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 2058.490572][T10671] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2058.504026][T10671] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2058.530306][T31617] usb 3-1: USB disconnect, device number 43 [ 2058.657458][T10671] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 2058.680754][T10671] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 2058.704184][T10671] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2058.740322][T10671] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2058.771504][T10671] usb 4-1: USB disconnect, device number 44 [ 2058.789188][T10671] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2058.811587][T10671] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2058.828270][T10671] visor 4-1:1.0: device disconnected [ 2059.059036][ T5403] loop1: detected capacity change from 0 to 1024 [ 2059.096812][ T5403] hfsplus: extend alloc file! (16384,256,150995124) [ 2059.116542][ T5403] hfsplus: failed to extend attributes file [ 2059.260538][ T5998] blk_print_req_error: 368 callbacks suppressed [ 2059.260557][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2059.287487][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2059.336248][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2059.339604][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.351068][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.397133][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.410826][ T6002] buffer_io_error: 326 callbacks suppressed [ 2059.410842][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2059.435564][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2059.462132][ T5849] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2059.470286][ T5849] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.480176][ T6002] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.509186][ T5998] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.526805][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2059.542530][ T5998] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2059.554755][ T5849] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2059.563141][ T6002] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2059.581469][ T5998] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2059.590123][ T5849] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2059.603229][ T5998] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2059.614155][ T5998] Buffer I/O error on dev loop2p7, logical block 12, async page read [ 2060.241729][ T27] audit: type=1400 audit(2000000154.229:2609): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5465 comm="syz.3.21867" [ 2060.524810][ T5483] netlink: 'syz.3.21872': attribute type 27 has an invalid length. [ 2060.788158][ T5503] netlink: 'syz.0.21876': attribute type 3 has an invalid length. [ 2060.963288][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21879'. [ 2061.039773][ T5521] usb usb9: usbfs: process 5521 (syz.1.21880) did not claim interface 0 before use [ 2061.132227][ T27] audit: type=1326 audit(2000000155.194:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.0.21882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2061.199127][ T5532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21883'. [ 2061.214382][ T27] audit: type=1326 audit(2000000155.194:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.0.21882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2061.238849][ T5818] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2061.296443][ T27] audit: type=1326 audit(2000000155.227:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.0.21882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2061.370709][ T27] audit: type=1326 audit(2000000155.237:2613): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.0.21882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2061.425254][ T5818] usb 4-1: config index 0 descriptor too short (expected 65230, got 72) [ 2061.447391][ T5818] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2061.456897][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.464941][ T5818] usb 4-1: Product: syz [ 2061.485099][ T5818] usb 4-1: Manufacturer: syz [ 2061.489879][ T5818] usb 4-1: SerialNumber: syz [ 2061.507129][ T5818] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2061.599073][T31617] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2061.929587][ C1] usb 4-1: ath9k_htc: invalid pkt_len (fe77) [ 2062.050307][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21892'. [ 2062.137183][ T5869] usb 4-1: USB disconnect, device number 45 [ 2062.631398][T31617] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2062.669162][T31617] ath9k_htc: Failed to initialize the device [ 2062.694604][ T5869] usb 4-1: ath9k_htc: USB layer deinitialized [ 2062.754369][ T5623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2062.921728][ T5636] netlink: 'syz.1.21906': attribute type 21 has an invalid length. [ 2063.208332][ T5654] [U]  [ 2063.377561][T31617] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2063.572445][T31617] usb 2-1: Using ep0 maxpacket: 32 [ 2063.592431][T31617] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2063.611416][T31617] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2063.638031][ T5681] loop2: detected capacity change from 0 to 1024 [ 2063.660389][T31617] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.695036][T31617] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2063.734093][T31617] usb 2-1: config 1 has no interface number 0 [ 2063.760252][T31617] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2063.787081][T31617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.847441][T31617] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2063.872139][ T5695] netlink: 100 bytes leftover after parsing attributes in process `syz.3.21920'. [ 2064.057014][T31617] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 2064.080657][T31617] snd_usb_pod 2-1:1.1: invalid control EP [ 2064.089490][ T6002] blk_print_req_error: 491 callbacks suppressed [ 2064.089507][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2064.104309][T31617] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 2064.112344][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2064.121863][T31617] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2064.129703][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2064.149389][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.159016][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.164364][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.170622][T31617] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 2064.197315][ T5999] buffer_io_error: 436 callbacks suppressed [ 2064.197333][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2064.204789][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2064.230044][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2064.254691][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.280827][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2064.281841][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.298587][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.315529][ T5849] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2064.325030][T10671] usb 2-1: USB disconnect, device number 37 [ 2064.363057][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2064.368327][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2064.387121][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2064.400170][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2064.408489][ T5849] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2064.417141][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2064.439525][ T27] audit: type=1400 audit(2000000158.735:2614): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 2064.524915][ T5727] loop3: detected capacity change from 0 to 16 [ 2064.616152][ C1] vkms_vblank_simulate: vblank timer overrun [ 2064.759520][ T5727] erofs: (device loop3): mounted with root inode @ nid 36. [ 2064.802864][ T5727] erofs: (device loop3): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 2065.009121][ T5745] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2065.350532][ T5775] loop3: detected capacity change from 0 to 256 [ 2065.381640][ T5775] exfat: Deprecated parameter 'utf8' [ 2065.387174][ T5775] exfat: Deprecated parameter 'utf8' [ 2065.421250][ T5775] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 2065.723090][ T27] audit: type=1326 audit(2000000160.108:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.3.21940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2065.819847][ T27] audit: type=1326 audit(2000000160.108:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.3.21940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2065.886874][ T27] audit: type=1326 audit(2000000160.151:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.3.21940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2065.928543][ T27] audit: type=1326 audit(2000000160.151:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.3.21940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2065.962257][ C1] vkms_vblank_simulate: vblank timer overrun [ 2066.493270][ T5787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21938'. [ 2066.503656][ T5817] netlink: 'syz.1.21941': attribute type 11 has an invalid length. [ 2067.720574][T10671] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2067.944018][T10671] usb 4-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 2067.975851][T10671] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 64 [ 2067.997135][T10671] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2068.019563][ T5956] loop2: detected capacity change from 0 to 512 [ 2068.061750][T10671] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 2068.081337][T10671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.102808][T10671] usb 4-1: Product: syz [ 2068.109520][T10671] usb 4-1: Manufacturer: syz [ 2068.115437][T10671] usb 4-1: SerialNumber: syz [ 2068.124620][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2068.140986][ T5956] ext4 filesystem being mounted at /5492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2068.184203][T10671] cdc_subset: probe of 4-1:1.0 failed with error -22 [ 2068.222481][T10671] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 2068.270891][T10671] cdc_ncm 4-1:1.0: bind() failure [ 2068.292926][ T5974] xt_ecn: cannot match TCP bits for non-tcp packets [ 2068.321042][T10671] cdc_subset: probe of 4-1:1.1 failed with error -22 [ 2068.376297][T10671] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2068.403967][T10671] cdc_ncm 4-1:1.1: bind() failure [ 2068.432785][T10671] usb 4-1: USB disconnect, device number 46 [ 2068.459461][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2068.834877][ T5999] blk_print_req_error: 323 callbacks suppressed [ 2068.834896][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2068.870151][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2068.881171][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2068.893685][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2068.896030][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2068.904713][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2068.929625][ T5849] buffer_io_error: 286 callbacks suppressed [ 2068.929641][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2068.959498][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2068.969577][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2068.997629][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2068.997635][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2068.997667][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2069.025359][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2069.043969][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2069.052180][ T5849] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2069.073119][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2069.090597][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2069.100218][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2069.108448][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2069.109172][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2069.231197][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21980'. [ 2069.260224][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21980'. [ 2069.694471][ T6029] loop1: detected capacity change from 0 to 4096 [ 2069.868581][ T6029] ntfs3: loop1: mft corrupted [ 2069.993545][ T6049] ip6gre4: entered promiscuous mode [ 2070.246561][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21989'. [ 2070.292899][T10671] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2070.385151][ T27] audit: type=1326 audit(2000000165.119:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.450957][ T27] audit: type=1326 audit(2000000165.119:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.491859][ T6040] loop2: detected capacity change from 0 to 32768 [ 2070.498561][ T27] audit: type=1326 audit(2000000165.151:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.543706][T10671] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 2070.561319][T10671] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 1024 [ 2070.574428][ T27] audit: type=1326 audit(2000000165.151:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.605090][T10671] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2070.616193][T10671] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2070.629573][ T27] audit: type=1326 audit(2000000165.151:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.629628][ T27] audit: type=1326 audit(2000000165.151:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.629715][ T27] audit: type=1326 audit(2000000165.151:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.661725][T10671] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 2070.712207][T10671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.720271][T10671] usb 2-1: Product: syz [ 2070.724657][T10671] usb 2-1: Manufacturer: syz [ 2070.729308][T10671] usb 2-1: SerialNumber: syz [ 2070.735707][ T6040] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2070.753845][T10671] cdc_subset: probe of 2-1:1.0 failed with error -22 [ 2070.762431][T10671] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 2070.771862][T10671] cdc_ncm 2-1:1.0: bind() failure [ 2070.783470][T10671] cdc_subset: probe of 2-1:1.1 failed with error -22 [ 2070.791022][T10671] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2070.798228][T10671] cdc_ncm 2-1:1.1: bind() failure [ 2070.852859][ T27] audit: type=1326 audit(2000000165.151:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.928186][ T27] audit: type=1326 audit(2000000165.151:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.21998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2070.997313][ T6040] XFS (loop2): Ending clean mount [ 2071.061257][T31617] usb 2-1: USB disconnect, device number 38 [ 2071.093741][ T6091] netlink: 'syz.3.21992': attribute type 2 has an invalid length. [ 2071.122065][ T6091] netlink: 119 bytes leftover after parsing attributes in process `syz.3.21992'. [ 2071.212767][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2071.487103][ T6105] loop3: detected capacity change from 0 to 2048 [ 2071.578847][ T27] audit: type=1326 audit(2000000166.396:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.0.21997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2071.615376][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2071.696273][ T27] audit: type=1326 audit(2000000166.396:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.0.21997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108e19de99 code=0x7ffc0000 [ 2071.873974][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2071.897874][ T6126] loop1: detected capacity change from 0 to 256 [ 2072.450721][ T6157] netlink: 'syz.3.22006': attribute type 1 has an invalid length. [ 2072.488950][ T6157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.22006'. [ 2073.061174][ T970] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2073.265688][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 2073.273509][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.291557][ T6210] netlink: 'syz.3.22021': attribute type 1 has an invalid length. [ 2073.307780][ T6210] netlink: 'syz.3.22021': attribute type 2 has an invalid length. [ 2073.325079][ T970] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2073.351286][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.364225][ T970] usb 1-1: Product: syz [ 2073.376139][ T970] usb 1-1: Manufacturer: syz [ 2073.387143][ T970] usb 1-1: SerialNumber: syz [ 2073.405027][ T970] usb 1-1: config 0 descriptor?? [ 2073.438361][ T970] usb 1-1: bad CDC descriptors [ 2073.445060][ T970] usb 1-1: unsupported MDLM descriptors [ 2073.731421][ T970] usb 1-1: USB disconnect, device number 46 [ 2073.794080][ T5999] blk_print_req_error: 258 callbacks suppressed [ 2073.794098][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2073.858798][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2073.877660][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2073.919038][ T5999] buffer_io_error: 229 callbacks suppressed [ 2073.919058][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2073.944145][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2073.954487][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2073.964220][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2073.964260][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2073.964341][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2073.964374][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2073.968844][ T5999] I/O error, dev loop2, sector 611 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2074.010190][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2074.043921][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2074.054050][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2074.086180][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2074.108144][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2074.121835][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2074.124641][ T5849] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2074.143982][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2074.152167][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2074.304549][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.22030'. [ 2074.431919][ T6263] loop3: detected capacity change from 0 to 1764 [ 2074.510378][ T6263] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2074.613852][ T6275] loop2: detected capacity change from 0 to 1024 [ 2074.702718][ T6275] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 2074.749534][ T6284] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 2074.868233][ T6293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2074.875582][ T6293] IPv6: NLM_F_CREATE should be set when creating new route [ 2074.882903][ T6293] IPv6: NLM_F_CREATE should be set when creating new route [ 2075.373455][ T6316] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.22045'. [ 2075.540029][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22047'. [ 2076.161010][ T6305] loop1: detected capacity change from 0 to 32768 [ 2076.200079][ T6305] jfs_strtoUCS: char2uni returned -22. [ 2076.254626][ T6305] charset = euc-jp, char = 0xd4 [ 2076.320744][ T6364] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2076.659258][ T970] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2076.680723][ T6389] loop2: detected capacity change from 0 to 512 [ 2076.705900][ T6384] loop1: detected capacity change from 0 to 4096 [ 2076.716797][ T6384] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 2076.733781][ T6389] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.22063: inode has both inline data and extents flags [ 2076.797630][ T6389] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.22063: couldn't read orphan inode 15 (err -117) [ 2076.804365][ T6384] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 2076.842068][ T6389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2076.863659][T31617] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 2076.904789][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2076.914118][ T970] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2076.914152][ T970] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2076.914177][ T970] usb 4-1: Product: syz [ 2076.914196][ T970] usb 4-1: SerialNumber: syz [ 2077.016845][ T970] usb 4-1: config 0 descriptor?? [ 2077.151052][T31617] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 2077.182710][T31617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.244451][ T6413] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2077.245727][T31617] usb 1-1: Product: syz [ 2077.259294][ T970] hso 4-1:0.0: Failed to find BULK IN ep [ 2077.291310][T31617] usb 1-1: Manufacturer: syz [ 2077.302195][T31617] usb 1-1: SerialNumber: syz [ 2077.312103][T31617] usb 1-1: config 0 descriptor?? [ 2077.330996][T31617] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached [ 2077.504730][ T173] usb 4-1: USB disconnect, device number 47 [ 2077.630511][T31617] usb 1-1: USB disconnect, device number 47 [ 2077.637159][T31617] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected [ 2078.165698][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22071'. [ 2078.576142][ T6491] loop2: detected capacity change from 0 to 64 [ 2078.856383][ T6502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2078.863774][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 2078.871171][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 2078.878476][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 2079.091922][ T5999] blk_print_req_error: 456 callbacks suppressed [ 2079.091942][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2079.140089][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.170959][ T5999] buffer_io_error: 406 callbacks suppressed [ 2079.170977][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2079.218807][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.253417][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2079.300984][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.327007][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2079.359153][ T5999] I/O error, dev loop2, sector 611 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.399635][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2079.435783][ T5999] I/O error, dev loop2, sector 612 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.461057][ T5999] Buffer I/O error on dev loop2p2, logical block 12, async page read [ 2079.483172][ T5999] I/O error, dev loop2, sector 613 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.513605][ T5999] Buffer I/O error on dev loop2p2, logical block 13, async page read [ 2079.566827][ T5999] I/O error, dev loop2, sector 614 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.588093][ T5999] Buffer I/O error on dev loop2p2, logical block 14, async page read [ 2079.623803][ T5999] I/O error, dev loop2, sector 615 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2079.682632][ T5999] Buffer I/O error on dev loop2p2, logical block 15, async page read [ 2079.791298][ T5849] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2079.813566][ T5999] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2079.828329][ T6557] netlink: 'syz.1.22095': attribute type 10 has an invalid length. [ 2079.837308][ T5849] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2079.876507][ T6557] `: Cannot enslave team device to itself [ 2080.355690][ T6585] netlink: 'syz.1.22104': attribute type 6 has an invalid length. [ 2080.919192][ T173] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2081.089361][ T6627] loop3: detected capacity change from 0 to 1024 [ 2081.104884][ T173] usb 2-1: Using ep0 maxpacket: 16 [ 2081.136206][ T173] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2081.176260][ T173] usb 2-1: config 0 has no interface number 0 [ 2081.206829][ T173] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 2081.244227][ T173] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 2081.281798][ T173] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2081.305557][ T173] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2081.339592][ T173] usb 2-1: Product: syz [ 2081.343839][ T173] usb 2-1: SerialNumber: syz [ 2081.401027][ T173] usb 2-1: config 0 descriptor?? [ 2081.429713][ T173] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 2081.457749][ T173] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input111 [ 2081.924640][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2081.931952][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.939463][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.946712][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.954135][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.961373][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.968582][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.975924][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.983164][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2081.987492][ T6668] loop2: detected capacity change from 0 to 2048 [ 2081.990898][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2082.003918][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2082.036839][T10671] usb 2-1: USB disconnect, device number 39 [ 2082.042864][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2082.081592][T10671] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2082.115371][ T6679] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2082.916327][ T6722] loop3: detected capacity change from 0 to 4096 [ 2082.978438][ T6734] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2083.243264][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22140'. [ 2083.470250][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22145'. [ 2083.484885][ T6759] loop2: detected capacity change from 0 to 128 [ 2083.523981][ T6759] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2083.621444][ T6759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2083.960938][ T5998] blk_print_req_error: 422 callbacks suppressed [ 2083.960957][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2083.982681][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2083.988225][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2084.021956][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.040731][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.066659][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.077851][ T6002] buffer_io_error: 374 callbacks suppressed [ 2084.077867][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2084.087825][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2084.092732][ T6002] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.110498][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2084.118705][ T6002] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.128297][ T6002] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2084.129170][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2084.136652][ T6002] I/O error, dev loop2, sector 211 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.161763][ T5998] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.199078][ T5998] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2084.205439][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2084.207309][ T5998] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2084.232488][ T6002] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 2084.248084][ T6002] Buffer I/O error on dev loop2p3, logical block 12, async page read [ 2084.419099][ T6794] loop3: detected capacity change from 0 to 512 [ 2084.513449][ T6794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2084.562738][ T6794] ext4 filesystem being mounted at /5487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2084.691747][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2085.054047][ T6833] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 2085.634345][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22172'. [ 2086.685512][ T6921] loop3: detected capacity change from 0 to 256 [ 2086.709183][ T6921] exfat: Deprecated parameter 'utf8' [ 2086.714718][ T6921] exfat: Deprecated parameter 'namecase' [ 2086.760930][ T6921] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 2088.236479][ T7006] ip6gre4: entered promiscuous mode [ 2088.248805][ T7006] ip6gre4: entered allmulticast mode [ 2088.300535][ T7011] netlink: 300 bytes leftover after parsing attributes in process `syz.2.22209'. [ 2088.430992][ T7015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22210'. [ 2088.458991][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22210'. [ 2088.497987][ T7020] netlink: 'syz.2.22213': attribute type 30 has an invalid length. [ 2088.630447][ T6002] blk_print_req_error: 386 callbacks suppressed [ 2088.630466][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2088.673423][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.719623][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.749771][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22216'. [ 2088.766094][ T6002] buffer_io_error: 343 callbacks suppressed [ 2088.766110][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2088.793918][ T6002] I/O error, dev loop2, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.803300][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2088.865828][ T6002] I/O error, dev loop2, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.892622][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2088.917986][ T6002] I/O error, dev loop2, sector 412 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.955518][ T6002] Buffer I/O error on dev loop2p7, logical block 12, async page read [ 2088.964216][ T6002] I/O error, dev loop2, sector 413 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.975512][ T6002] Buffer I/O error on dev loop2p7, logical block 13, async page read [ 2088.984078][ T6002] I/O error, dev loop2, sector 414 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2088.993771][ T6002] Buffer I/O error on dev loop2p7, logical block 14, async page read [ 2089.002293][ T6002] I/O error, dev loop2, sector 415 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2089.012053][ T6002] Buffer I/O error on dev loop2p7, logical block 15, async page read [ 2089.069811][ T7046] loop2: detected capacity change from 0 to 1024 [ 2089.218925][T31705] hfsplus: b-tree write err: -5, ino 25 [ 2089.246604][T31705] hfsplus: b-tree write err: -5, ino 4 [ 2089.264578][T31705] hfsplus: b-tree write err: -5, ino 2 [ 2089.534255][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2089.560582][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2089.564632][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2089.597453][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2089.978231][T10671] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2090.123954][ T7111] loop3: detected capacity change from 0 to 1024 [ 2090.173677][T10671] usb 1-1: Using ep0 maxpacket: 32 [ 2090.182724][ T28] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2090.196741][T10671] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2090.213562][ T7111] hfsplus: xattr searching failed [ 2090.221450][T10671] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2090.243378][T10671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.285171][T10671] usb 1-1: Product: syz [ 2090.289420][T10671] usb 1-1: Manufacturer: syz [ 2090.313486][T10671] usb 1-1: SerialNumber: syz [ 2090.331860][T10671] usb 1-1: config 0 descriptor?? [ 2090.352941][T10671] usb 1-1: bad CDC descriptors [ 2090.358503][T10671] usb 1-1: unsupported MDLM descriptors [ 2090.376454][ T28] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 2090.415289][ T28] usb 2-1: config 0 has no interface number 0 [ 2090.442971][ T28] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2090.472406][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.480482][ T28] usb 2-1: Product: syz [ 2090.540224][ T28] usb 2-1: Manufacturer: syz [ 2090.574246][ T28] usb 2-1: SerialNumber: syz [ 2090.593068][ T28] usb 2-1: config 0 descriptor?? [ 2090.611563][T31617] usb 1-1: USB disconnect, device number 48 [ 2090.652674][ T7139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22239'. [ 2090.675470][ T7139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22239'. [ 2090.823306][ T28] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 2090.849323][ T28] usb 2-1: No valid video chain found. [ 2090.885437][ T28] usb 2-1: USB disconnect, device number 40 [ 2091.202380][ T7177] netlink: 'syz.3.22246': attribute type 26 has an invalid length. [ 2091.516049][ T173] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2091.693007][ T173] usb 3-1: Using ep0 maxpacket: 8 [ 2091.701249][ T173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2091.720696][ T173] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2091.748263][ T173] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2091.757399][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.786240][ T173] usb 3-1: Product: syz [ 2091.790487][ T173] usb 3-1: Manufacturer: syz [ 2091.795132][ T173] usb 3-1: SerialNumber: syz [ 2091.831787][ T173] usb 3-1: config 0 descriptor?? [ 2091.869242][ T7213] loop3: detected capacity change from 0 to 1024 [ 2092.280338][ T173] usb 3-1: USB disconnect, device number 44 [ 2092.643625][ T7256] netlink: 'syz.0.22266': attribute type 26 has an invalid length. [ 2092.742184][ T7265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22268'. [ 2092.757722][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22268'. [ 2093.213973][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22276'. [ 2093.425891][ T5999] blk_print_req_error: 323 callbacks suppressed [ 2093.425911][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2093.448202][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2093.451623][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2093.500844][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.501787][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.529157][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.544903][ T5999] buffer_io_error: 285 callbacks suppressed [ 2093.544919][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2093.560668][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2093.568816][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2093.596977][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.603728][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.627748][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.642957][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2093.643008][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2093.659434][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2093.667554][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.686027][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2093.705104][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2093.716619][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2093.729640][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2094.145154][ T7285] loop1: detected capacity change from 0 to 32768 [ 2094.177718][ T7285] (syz.1.22273,7285,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2094.208462][ T7285] (syz.1.22273,7285,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2094.274357][ T7285] JBD2: Ignoring recovery information on journal [ 2094.402981][ T7285] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2095.049348][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 2095.139875][ T7380] loop3: detected capacity change from 0 to 256 [ 2095.684844][ T7404] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22306'. [ 2095.968811][ T7423] trusted_key: encrypted_key: keylen parameter is missing [ 2096.192834][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22322'. [ 2096.277010][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 2096.277028][ T27] audit: type=1326 audit(2000000192.896:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.341133][ T27] audit: type=1326 audit(2000000192.896:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.395906][ T7446] xt_ecn: cannot match TCP bits for non-tcp packets [ 2096.405552][ T27] audit: type=1326 audit(2000000192.896:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.481198][ T27] audit: type=1326 audit(2000000192.918:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.579868][ T27] audit: type=1326 audit(2000000192.918:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.628240][ T7459] loop3: detected capacity change from 0 to 256 [ 2096.704419][ T27] audit: type=1326 audit(2000000192.918:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.784535][ T27] audit: type=1326 audit(2000000192.918:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.849856][ T27] audit: type=1326 audit(2000000192.918:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2096.891147][ T27] audit: type=1326 audit(2000000192.928:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.2.22316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa620b9de99 code=0x7ffc0000 [ 2097.125755][ T7480] loop2: detected capacity change from 0 to 4096 [ 2097.137476][ T173] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2097.310129][ T7480] ntfs3: loop2: mft corrupted [ 2097.331165][ T173] usb 1-1: Using ep0 maxpacket: 32 [ 2097.338959][ T173] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 2097.370625][ T173] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2097.380732][ T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.391603][ T173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2097.420138][ T173] usb 1-1: config 1 has no interface number 0 [ 2097.426811][ T173] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2097.455003][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.512260][ T173] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2097.702902][ T173] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 2097.712402][ T173] snd_usb_pod 1-1:1.1: invalid control EP [ 2097.728948][ T173] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 2097.736409][ T173] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 2097.754360][ T173] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 2097.854092][ T28] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2097.934793][ T173] usb 1-1: USB disconnect, device number 49 [ 2098.064489][ T28] usb 3-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 2098.095655][ T28] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 64 [ 2098.114932][ T28] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2098.132147][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 2098.148885][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.160510][ T28] usb 3-1: Product: syz [ 2098.188583][ T28] usb 3-1: Manufacturer: syz [ 2098.198137][ T28] usb 3-1: SerialNumber: syz [ 2098.219286][ T28] cdc_subset: probe of 3-1:1.0 failed with error -22 [ 2098.249432][ T28] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 2098.272727][ T28] cdc_ncm 3-1:1.0: bind() failure [ 2098.301865][ T28] cdc_subset: probe of 3-1:1.1 failed with error -22 [ 2098.311376][ T28] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2098.318247][ T28] cdc_ncm 3-1:1.1: bind() failure [ 2098.420310][ T7563] loop1: detected capacity change from 0 to 2048 [ 2098.473586][ T28] usb 3-1: USB disconnect, device number 45 [ 2098.484548][ T7563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2098.694815][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2099.172777][ T5849] blk_print_req_error: 367 callbacks suppressed [ 2099.172795][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2099.185319][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2099.206599][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2099.236064][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.247011][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.260703][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.270072][ T5849] buffer_io_error: 326 callbacks suppressed [ 2099.270086][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2099.285579][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2099.293916][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2099.308058][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.317701][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.348097][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.357444][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2099.357542][ T6002] I/O error, dev loop2, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2099.357572][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2099.357641][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2099.357708][ T6002] Buffer I/O error on dev loop2p7, logical block 12, async page read [ 2099.357774][ T6002] Buffer I/O error on dev loop2p7, logical block 13, async page read [ 2099.357839][ T6002] Buffer I/O error on dev loop2p7, logical block 14, async page read [ 2099.357905][ T6002] Buffer I/O error on dev loop2p7, logical block 15, async page read [ 2100.001870][ T7595] loop3: detected capacity change from 0 to 32768 [ 2100.046976][ T7595] (syz.3.22343,7595,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2100.069055][ T7595] (syz.3.22343,7595,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2100.167880][ T7595] JBD2: Ignoring recovery information on journal [ 2100.342984][ T7595] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2100.637926][T31617] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2100.708226][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 2100.844224][T31617] usb 2-1: config 128 interface 0 has no altsetting 0 [ 2100.844272][T31617] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2100.844298][T31617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.880705][ T7681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22361'. [ 2101.057035][T31617] comedi comedi5: could not set alternate setting 3 in high speed [ 2101.088384][T31617] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2101.115678][T31617] usbduxsigma: probe of 2-1:128.0 failed with error -71 [ 2101.151471][T31617] usb 2-1: USB disconnect, device number 41 [ 2101.441053][ T7717] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 2101.616009][ T7726] loop2: detected capacity change from 0 to 256 [ 2101.645582][ T7726] exfat: Deprecated parameter 'utf8' [ 2101.693833][ T7726] exfat: Deprecated parameter 'namecase' [ 2101.719836][ T7726] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 2101.813392][ T7739] loop1: detected capacity change from 0 to 256 [ 2102.163736][ T27] audit: type=1326 audit(2000000199.216:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.280815][ T27] audit: type=1326 audit(2000000199.216:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.353988][ T27] audit: type=1326 audit(2000000199.248:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.446527][ T27] audit: type=1326 audit(2000000199.258:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.551356][ T27] audit: type=1326 audit(2000000199.258:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.598992][ T7780] binfmt_misc: register: failed to install interpreter file ./file2 [ 2102.634958][ T27] audit: type=1326 audit(2000000199.258:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.714156][ T7783] loop1: detected capacity change from 0 to 256 [ 2102.731302][ T27] audit: type=1326 audit(2000000199.258:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2102.786858][ T7783] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2102.793602][ T27] audit: type=1326 audit(2000000199.258:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.22376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2103.430587][ T7818] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2103.626202][ T7781] loop3: detected capacity change from 0 to 32768 [ 2103.680781][ T7781] jfs_strtoUCS: char2uni returned -22. [ 2103.698178][ T7781] charset = euc-jp, char = 0xd4 [ 2103.850823][ T5998] blk_print_req_error: 475 callbacks suppressed [ 2103.850842][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2103.879379][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2103.904788][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2103.908995][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22397'. [ 2103.931229][ T6002] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2103.941258][ T5998] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2103.973460][ T5849] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2103.988537][ T5998] buffer_io_error: 422 callbacks suppressed [ 2103.988553][ T5998] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2104.003424][ T6002] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2104.020661][ T5849] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2104.024491][ T6002] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2104.051566][ T5998] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2104.061046][ T5849] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2104.061083][ T5849] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2104.061151][ T5849] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2104.061179][ T5849] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2104.061245][ T5849] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2104.061312][ T5849] Buffer I/O error on dev loop2p2, logical block 12, async page read [ 2104.061378][ T5849] Buffer I/O error on dev loop2p2, logical block 13, async page read [ 2104.061481][ T5849] Buffer I/O error on dev loop2p2, logical block 14, async page read [ 2104.111771][ T6002] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2105.682656][ T27] audit: type=1400 audit(2000000202.981:2654): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7918 comm="syz.0.22425" [ 2105.733446][ T7881] loop2: detected capacity change from 0 to 32768 [ 2105.822457][ T7881] jfs_strtoUCS: char2uni returned -22. [ 2105.857741][ T7881] charset = euc-jp, char = 0xd4 [ 2105.863615][ T7928] loop3: detected capacity change from 0 to 64 [ 2106.289064][ T7951] netlink: 252 bytes leftover after parsing attributes in process `syz.0.22433'. [ 2106.464595][ T27] audit: type=1326 audit(2000000203.829:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.1.22436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00eb39de99 code=0x7ffc0000 [ 2106.542678][ T7964] loop3: detected capacity change from 0 to 16 [ 2106.562251][ T7964] erofs: (device loop3): mounted with root inode @ nid 36. [ 2106.652595][ T7964] syz.3.22435: attempt to access beyond end of device [ 2106.652595][ T7964] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2106.734437][ T7964] syz.3.22435: attempt to access beyond end of device [ 2106.734437][ T7964] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2106.765205][ T7964] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2108.245804][T31195] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2108.355738][ T8068] netlink: 'syz.3.22464': attribute type 5 has an invalid length. [ 2108.432205][T31195] usb 1-1: Using ep0 maxpacket: 16 [ 2108.450903][T31195] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 2108.469653][T31195] usb 1-1: config 0 has no interface number 0 [ 2108.476010][T31195] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 2108.515305][T31195] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 2108.577370][ T6002] blk_print_req_error: 341 callbacks suppressed [ 2108.577389][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2108.582057][T31195] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2108.604924][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2108.630651][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2108.634106][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.657622][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.675390][T31195] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2108.697866][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.700773][ T6002] buffer_io_error: 302 callbacks suppressed [ 2108.700828][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2108.711748][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2108.723919][T31195] usb 1-1: Product: syz [ 2108.745834][ T8081] loop1: detected capacity change from 0 to 64 [ 2108.748866][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2108.767670][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.770879][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.788346][T31195] usb 1-1: SerialNumber: syz [ 2108.798338][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.808214][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2108.824527][T31195] usb 1-1: config 0 descriptor?? [ 2108.831706][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2108.842579][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2108.846378][T31195] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 2108.858575][ T5849] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2108.879298][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2108.880640][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2108.895930][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2108.912929][T31195] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input114 [ 2108.927081][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2109.123779][ T8100] loop3: detected capacity change from 0 to 128 [ 2109.162248][ T8100] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2109.234611][ T8100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2109.411579][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2109.418873][ C0] cm109_urb_ctl_callback: 138 callbacks suppressed [ 2109.418895][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.432855][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.440884][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.448272][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.455479][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.462768][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.469960][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.477163][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.484366][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.491741][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2109.500227][T31195] usb 1-1: USB disconnect, device number 50 [ 2109.506259][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2109.539680][T31195] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2110.005580][ T8145] netlink: 252 bytes leftover after parsing attributes in process `syz.1.22475'. [ 2110.084608][ T8153] loop3: detected capacity change from 0 to 128 [ 2110.109527][ T8153] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2110.160864][ T8153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2110.207086][ T8162] loop1: detected capacity change from 0 to 128 [ 2110.267204][ T8162] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 2110.318018][ T8162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2111.028069][ T8204] loop2: detected capacity change from 0 to 512 [ 2111.035679][ T8206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22491'. [ 2111.051538][ T8204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2111.110030][ T8206] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 2111.139166][ T8204] EXT4-fs (loop2): 1 truncate cleaned up [ 2111.177499][ T8204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2111.228863][ T8206] bridge10: entered promiscuous mode [ 2111.397138][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2111.717843][ T8236] loop2: detected capacity change from 0 to 512 [ 2111.778232][ T8236] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2111.845759][ T8236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 2111.872013][ T8236] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2111.893242][ T8242] loop1: detected capacity change from 0 to 4096 [ 2111.903210][ T8236] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.22502: bad orphan inode 3 [ 2111.938108][ T8236] EXT4-fs (loop2): Remounting filesystem read-only [ 2111.951316][ T8236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2111.992936][ T8252] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2112.037934][ T8236] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.22502: dx entry: limit 0 != root limit 125 [ 2112.131634][ T8236] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.22502: Corrupt directory, running e2fsck is recommended [ 2112.283541][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2112.393919][ T8267] netlink: 'syz.0.22501': attribute type 4 has an invalid length. [ 2112.454153][ T8269] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2112.655450][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2112.777266][ T8284] ALSA: mixer_oss: invalid OSS volume 'u' [ 2113.149252][ T8314] netlink: 'syz.2.22515': attribute type 4 has an invalid length. [ 2113.265402][ T6002] blk_print_req_error: 332 callbacks suppressed [ 2113.265422][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2113.293387][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2113.309423][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2113.313985][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.352626][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.362715][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.372086][ T6002] buffer_io_error: 294 callbacks suppressed [ 2113.372102][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2113.383864][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2113.397485][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2113.421072][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.456322][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.463783][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2113.488284][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.489248][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2113.505824][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.505859][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2113.543368][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2113.547233][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2113.586735][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2113.594957][ T5999] Buffer I/O error on dev loop2p2, logical block 12, async page read [ 2113.850798][ T8344] netlink: 'syz.1.22526': attribute type 1 has an invalid length. [ 2113.885020][ T8344] netlink: 244 bytes leftover after parsing attributes in process `syz.1.22526'. [ 2114.011623][ T8355] loop3: detected capacity change from 0 to 512 [ 2114.076313][ T8355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2114.145721][ T8355] EXT4-fs (loop3): 1 truncate cleaned up [ 2114.194420][ T8355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2114.404063][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2114.706916][ T8396] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2114.751103][ T8398] netlink: 'syz.0.22538': attribute type 1 has an invalid length. [ 2114.772315][ T8398] netlink: 244 bytes leftover after parsing attributes in process `syz.0.22538'. [ 2115.357583][ T7479] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 2115.413763][ T5818] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2115.488133][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22553'. [ 2115.557917][ T7479] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 2115.586307][ T7479] usb 1-1: config 8 has no interface number 0 [ 2115.610753][ T5818] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 2115.616313][ T7479] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2115.637280][ T5818] usb 2-1: config 0 has no interface number 1 [ 2115.646615][ T5818] usb 2-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 2115.657204][ T7479] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2115.683198][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2115.694652][ T7479] usb 1-1: config 8 interface 177 has no altsetting 0 [ 2115.711061][ T7479] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2115.735038][ T5818] usb 2-1: config 0 interface 199 has no altsetting 0 [ 2115.749184][ T7479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.756840][ T5818] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2115.781048][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2115.795156][ T5818] usb 2-1: SerialNumber: syz [ 2115.810659][ T5818] usb 2-1: config 0 descriptor?? [ 2115.826769][ T8417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2115.843015][ T8417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2115.857063][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 2115.937050][ T8468] openvswitch: netlink: Actions may not be safe on all matching packets [ 2116.065632][ T5818] usb 2-1: Found UVC 0.00 device (0002:0000) [ 2116.096483][ T5818] usb 2-1: No valid video chain found. [ 2116.120009][ T5818] usb 2-1: USB disconnect, device number 42 [ 2116.346385][ T7479] ir_toy 1-1:8.177: could not write reset command: -110 [ 2116.373754][ T7479] ir_toy: probe of 1-1:8.177 failed with error -110 [ 2116.400980][ T7479] usb 1-1: USB disconnect, device number 51 [ 2116.825524][ T8533] loop1: detected capacity change from 0 to 512 [ 2116.865151][ T8533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2116.884672][ T8533] ext4 filesystem being mounted at /5688/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2116.999529][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2117.227946][ T8558] loop3: detected capacity change from 0 to 16 [ 2117.252704][ T8558] erofs: (device loop3): mounted with root inode @ nid 36. [ 2117.640857][ T173] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2117.715388][ T5818] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2117.828338][ T173] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 2117.846441][ T173] usb 1-1: config 0 has no interface number 1 [ 2117.852637][ T173] usb 1-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 2117.872140][ T173] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2117.889851][ T173] usb 1-1: config 0 interface 199 has no altsetting 0 [ 2117.922196][ T173] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2117.923250][ T5818] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 2117.946104][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2117.947490][ T5818] usb 4-1: config 8 has no interface number 0 [ 2117.967352][ T5818] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2117.979081][ T5818] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2117.986419][ T173] usb 1-1: SerialNumber: syz [ 2117.994972][ T5818] usb 4-1: config 8 interface 177 has no altsetting 0 [ 2118.002207][ T5818] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2118.016109][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.024941][ T173] usb 1-1: config 0 descriptor?? [ 2118.070033][ T8575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2118.085491][ T8575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2118.100782][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 2118.244717][ T173] usb 1-1: Found UVC 0.00 device (0002:0000) [ 2118.256373][ T173] usb 1-1: No valid video chain found. [ 2118.272732][ T173] usb 1-1: USB disconnect, device number 52 [ 2118.379739][ T8612] loop2: detected capacity change from 0 to 2048 [ 2118.428612][ T8612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2118.575107][ T5818] ir_toy 4-1:8.177: could not write reset command: -110 [ 2118.601042][ T5818] ir_toy: probe of 4-1:8.177 failed with error -110 [ 2118.618622][ T5818] usb 4-1: USB disconnect, device number 48 [ 2118.812380][ T5849] blk_print_req_error: 474 callbacks suppressed [ 2118.812399][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2118.817421][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2118.855638][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2118.871669][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2118.899537][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2118.901735][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2118.909847][ T5849] buffer_io_error: 420 callbacks suppressed [ 2118.909889][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2118.961248][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2118.973984][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2118.988742][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.002141][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.011148][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.048473][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2119.056593][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2119.066655][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2119.074812][ T5849] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.086217][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2119.094436][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2119.103006][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2119.127078][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2119.233946][ T8660] loop2: detected capacity change from 0 to 512 [ 2119.265943][ T8660] EXT4-fs: Ignoring removed bh option [ 2119.288253][ T8660] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 2119.351100][ T8660] EXT4-fs (loop2): 1 truncate cleaned up [ 2119.360476][ T8660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2119.544285][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2119.768257][ T8693] loop1: detected capacity change from 0 to 16 [ 2119.802643][ T8693] erofs: (device loop1): mounted with root inode @ nid 36. [ 2120.188568][ T8711] ./file0: Can't lookup blockdev [ 2120.602520][ T8684] loop3: detected capacity change from 0 to 32768 [ 2120.668440][ T8684] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 2120.684121][ T8684] JBD2: Ignoring recovery information on journal [ 2120.877420][ T8684] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2121.098996][ T8684] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 2121.116627][ T8684] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2121.127291][ T8684] OCFS2: File system is now read-only. [ 2121.132837][ T8684] (syz.3.22602,8684,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 2121.146623][ T8684] (syz.3.22602,8684,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 2121.154619][ T8684] (syz.3.22602,8684,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 2121.192103][ T8684] (syz.3.22602,8684,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 2121.200699][ T8684] (syz.3.22602,8684,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 2121.210965][ T8684] (syz.3.22602,8684,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 2121.219309][ T8684] (syz.3.22602,8684,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 2121.229174][ T8684] (syz.3.22602,8684,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 2121.238020][ T8684] (syz.3.22602,8684,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 2121.286292][ T8684] (syz.3.22602,8684,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 2121.340741][ T8684] (syz.3.22602,8684,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 2121.369544][ T8684] (syz.3.22602,8684,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 2121.392967][ T8684] (syz.3.22602,8684,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 2121.443781][ T8684] (syz.3.22602,8684,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 2121.485486][ T8684] (syz.3.22602,8684,1):ocfs2_expand_inline_dir:2858 ERROR: status = -30 [ 2121.527982][ T8684] (syz.3.22602,8684,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 2121.535800][ T8684] (syz.3.22602,8684,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 2121.595202][ T8684] (syz.3.22602,8684,1):ocfs2_mknod:298 ERROR: status = -30 [ 2121.638025][ T8684] (syz.3.22602,8684,1):ocfs2_mknod:502 ERROR: status = -30 [ 2121.656105][ T8684] (syz.3.22602,8684,1):ocfs2_mkdir:659 ERROR: status = -30 [ 2121.871102][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 2122.516902][ T8814] loop1: detected capacity change from 0 to 764 [ 2122.578571][ T8814] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 2122.648775][ T8814] Symlink component flag not implemented [ 2122.654569][ T8814] Symlink component flag not implemented (7) [ 2123.678923][ T5999] blk_print_req_error: 340 callbacks suppressed [ 2123.678942][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2123.705199][ T8869] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2123.729455][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2123.739986][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2123.749088][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2123.774309][ T8869] overlayfs: conflicting options: metacopy=off,verity=on [ 2123.776254][ T5999] buffer_io_error: 302 callbacks suppressed [ 2123.776296][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2123.805582][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2123.821023][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2123.838975][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2123.864615][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2123.864643][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2123.895190][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2123.925704][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2123.943540][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2123.966956][ T5849] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2123.969566][ T5999] I/O error, dev loop2, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2124.001180][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2124.016267][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2124.025307][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2124.035468][ T5999] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 2124.043689][ T5999] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 2124.653046][ T8909] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 2124.865080][ T8923] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 2125.219964][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 2125.219981][ T27] audit: type=1326 audit(2000000223.957:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.3.22668" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2125.304427][ T27] audit: type=1326 audit(2000000223.957:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.3.22668" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2125.358781][ T27] audit: type=1326 audit(2000000223.989:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.3.22668" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2125.424623][ T27] audit: type=1326 audit(2000000223.989:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.3.22668" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7862f9de99 code=0x7ffc0000 [ 2125.936434][ T173] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2126.085308][ T8941] loop1: detected capacity change from 0 to 32768 [ 2126.109228][ T8941] (syz.1.22669,8941,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2126.127642][ T173] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2126.133297][ T8941] (syz.1.22669,8941,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2126.155437][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.184068][ T8941] JBD2: Ignoring recovery information on journal [ 2126.196992][ T173] usb 4-1: Product: syz [ 2126.230758][ T173] usb 4-1: Manufacturer: syz [ 2126.270817][ T173] usb 4-1: SerialNumber: syz [ 2126.317010][ T173] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2126.334621][ T8941] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2126.356736][T31195] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2126.621662][ T8941] [ 2126.624075][ T8941] ====================================================== [ 2126.631127][ T8941] WARNING: possible circular locking dependency detected [ 2126.638199][ T8941] syzkaller #0 Not tainted [ 2126.642649][ T8941] ------------------------------------------------------ [ 2126.649704][ T8941] syz.1.22669/8941 is trying to acquire lock: [ 2126.655807][ T8941] ffff88805b8109d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 2126.669151][ T8941] [ 2126.669151][ T8941] but task is already holding lock: [ 2126.676583][ T8941] ffff888076febff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 2126.686136][ T8941] [ 2126.686136][ T8941] which lock already depends on the new lock. [ 2126.686136][ T8941] [ 2126.696578][ T8941] [ 2126.696578][ T8941] the existing dependency chain (in reverse order) is: [ 2126.705643][ T8941] [ 2126.705643][ T8941] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 2126.713526][ T8941] down_read+0x46/0x2e0 [ 2126.718268][ T8941] ocfs2_init_acl+0x30a/0x770 [ 2126.723553][ T8941] ocfs2_mknod+0x1427/0x2310 [ 2126.728716][ T8941] ocfs2_create+0x196/0x430 [ 2126.735549][ T8941] path_openat+0x1705/0x3270 [ 2126.740725][ T8941] do_filp_open+0x1f2/0x430 [ 2126.745820][ T8941] do_sys_openat2+0x134/0x1d0 [ 2126.751076][ T8941] __x64_sys_creat+0x90/0xb0 [ 2126.756241][ T8941] do_syscall_64+0x55/0xb0 [ 2126.758623][ T28] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2126.761310][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2126.775320][ T8941] [ 2126.775320][ T8941] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 2126.783884][ T8941] down_read+0x46/0x2e0 [ 2126.788604][ T8941] ocfs2_start_trans+0x3a8/0x6f0 [ 2126.794096][ T8941] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 2126.800370][ T8941] ocfs2_dismount_volume+0x1e5/0x890 [ 2126.806223][ T8941] generic_shutdown_super+0x134/0x2b0 [ 2126.812174][ T8941] kill_block_super+0x44/0x90 [ 2126.817411][ T8941] deactivate_locked_super+0x97/0x100 [ 2126.823339][ T8941] cleanup_mnt+0x3d7/0x460 [ 2126.828315][ T8941] task_work_run+0x1d4/0x260 [ 2126.833467][ T8941] exit_to_user_mode_loop+0xe6/0x110 [ 2126.839308][ T8941] exit_to_user_mode_prepare+0xee/0x180 [ 2126.845402][ T8941] syscall_exit_to_user_mode+0x1a/0x50 [ 2126.851414][ T8941] do_syscall_64+0x61/0xb0 [ 2126.856395][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2126.862841][ T8941] [ 2126.862841][ T8941] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 2126.870357][ T8941] ocfs2_start_trans+0x2a9/0x6f0 [ 2126.875853][ T8941] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 2126.882125][ T8941] ocfs2_dismount_volume+0x1e5/0x890 [ 2126.887967][ T8941] generic_shutdown_super+0x134/0x2b0 [ 2126.893884][ T8941] kill_block_super+0x44/0x90 [ 2126.899104][ T8941] deactivate_locked_super+0x97/0x100 [ 2126.905033][ T8941] cleanup_mnt+0x3d7/0x460 [ 2126.909999][ T8941] task_work_run+0x1d4/0x260 [ 2126.915146][ T8941] exit_to_user_mode_loop+0xe6/0x110 [ 2126.920980][ T8941] exit_to_user_mode_prepare+0xee/0x180 [ 2126.927070][ T8941] syscall_exit_to_user_mode+0x1a/0x50 [ 2126.933087][ T8941] do_syscall_64+0x61/0xb0 [ 2126.938059][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2126.944508][ T8941] [ 2126.944508][ T8941] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 2126.955052][ T8941] down_write+0x97/0x200 [ 2126.959844][ T8941] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 2126.966282][ T8941] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 2126.973161][ T8941] ocfs2_mknod+0xed1/0x2310 [ 2126.978217][ T8941] ocfs2_create+0x196/0x430 [ 2126.983311][ T8941] path_openat+0x1705/0x3270 [ 2126.988461][ T8941] do_filp_open+0x1f2/0x430 [ 2126.993524][ T8941] do_sys_openat2+0x134/0x1d0 [ 2126.998763][ T8941] __x64_sys_openat+0x139/0x160 [ 2127.004169][ T8941] do_syscall_64+0x55/0xb0 [ 2127.009158][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2127.015625][ T8941] [ 2127.015625][ T8941] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 2127.026184][ T8941] __lock_acquire+0x37ef/0x7d80 [ 2127.031593][ T8941] lock_acquire+0x19e/0x420 [ 2127.036645][ T8941] down_write+0x97/0x200 [ 2127.041443][ T8941] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 2127.047888][ T8941] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 2127.054767][ T8941] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 2127.060953][ T8941] ocfs2_xattr_set+0xc75/0x13a0 [ 2127.066353][ T8941] __vfs_setxattr+0x437/0x470 [ 2127.071581][ T8941] __vfs_setxattr_noperm+0x12a/0x5e0 [ 2127.077419][ T8941] vfs_setxattr+0x16b/0x2f0 [ 2127.082476][ T8941] path_setxattr+0x33a/0x590 [ 2127.087618][ T8941] __x64_sys_setxattr+0xbb/0xd0 [ 2127.093014][ T8941] do_syscall_64+0x55/0xb0 [ 2127.097991][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2127.104449][ T8941] [ 2127.104449][ T8941] other info that might help us debug this: [ 2127.104449][ T8941] [ 2127.114692][ T8941] Chain exists of: [ 2127.114692][ T8941] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 2127.114692][ T8941] [ 2127.131672][ T8941] Possible unsafe locking scenario: [ 2127.131672][ T8941] [ 2127.139852][ T8941] CPU0 CPU1 [ 2127.145240][ T8941] ---- ---- [ 2127.150640][ T8941] lock(&oi->ip_xattr_sem); [ 2127.155358][ T8941] lock(&journal->j_trans_barrier); [ 2127.163208][ T8941] lock(&oi->ip_xattr_sem); [ 2127.170363][ T8941] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 2127.177689][ T8941] [ 2127.177689][ T8941] *** DEADLOCK *** [ 2127.177689][ T8941] [ 2127.185860][ T8941] 3 locks held by syz.1.22669/8941: [ 2127.191089][ T8941] #0: ffff888057026418 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2127.200410][ T8941] #1: ffff888076fec2d8 (&type->i_mutex_dir_key#25){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 2127.210725][ T8941] #2: ffff888076febff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 2127.220672][ T8941] [ 2127.220672][ T8941] stack backtrace: [ 2127.226577][ T8941] CPU: 0 PID: 8941 Comm: syz.1.22669 Not tainted syzkaller #0 [ 2127.234161][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2127.244270][ T8941] Call Trace: [ 2127.247586][ T8941] [ 2127.250546][ T8941] dump_stack_lvl+0x18c/0x250 [ 2127.255267][ T8941] ? load_image+0x420/0x420 [ 2127.259803][ T8941] ? show_regs_print_info+0x20/0x20 [ 2127.265044][ T8941] ? print_circular_bug+0x12b/0x1a0 [ 2127.270296][ T8941] check_noncircular+0x2fc/0x400 [ 2127.275263][ T8941] ? look_up_lock_class+0x75/0x140 [ 2127.280403][ T8941] ? print_deadlock_bug+0x5d0/0x5d0 [ 2127.285628][ T8941] ? lockdep_lock+0xf5/0x230 [ 2127.290248][ T8941] ? _find_first_zero_bit+0xd6/0x100 [ 2127.295568][ T8941] __lock_acquire+0x37ef/0x7d80 [ 2127.300445][ T8941] ? verify_lock_unused+0x140/0x140 [ 2127.305678][ T8941] ? __lock_acquire+0x7d80/0x7d80 [ 2127.310728][ T8941] ? verify_lock_unused+0x140/0x140 [ 2127.315959][ T8941] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2127.321622][ T8941] ? do_raw_spin_lock+0x11f/0x2b0 [ 2127.326675][ T8941] ? mutex_unlock+0x10/0x10 [ 2127.331202][ T8941] lock_acquire+0x19e/0x420 [ 2127.335728][ T8941] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 2127.341835][ T8941] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 2127.347873][ T8941] ? __might_sleep+0xe0/0xe0 [ 2127.352500][ T8941] ? read_lock_is_recursive+0x20/0x20 [ 2127.357907][ T8941] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 2127.364125][ T8941] ? verify_lock_unused+0x140/0x140 [ 2127.369363][ T8941] ? check_noncircular+0x18a/0x400 [ 2127.374511][ T8941] down_write+0x97/0x200 [ 2127.378784][ T8941] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 2127.384883][ T8941] ? down_read_killable+0x340/0x340 [ 2127.390116][ T8941] ? mark_lock+0x94/0x320 [ 2127.394476][ T8941] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 2127.400398][ T8941] ? lock_chain_count+0x20/0x20 [ 2127.405279][ T8941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2127.411468][ T8941] ? lockdep_hardirqs_on+0x98/0x150 [ 2127.416695][ T8941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2127.422885][ T8941] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 2127.428814][ T8941] ? ocfs2_block_group_search+0x470/0x470 [ 2127.434568][ T8941] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2127.440491][ T8941] ? _raw_spin_unlock+0x40/0x40 [ 2127.445377][ T8941] ? stack_trace_save+0xaa/0x100 [ 2127.450340][ T8941] ? stack_trace_snprint+0xf0/0xf0 [ 2127.455473][ T8941] ? __stack_depot_save+0x575/0x660 [ 2127.460746][ T8941] ? kasan_set_track+0x5f/0x70 [ 2127.465535][ T8941] ? kasan_set_track+0x4e/0x70 [ 2127.470325][ T8941] ? __kasan_kmalloc+0x8f/0xa0 [ 2127.475113][ T8941] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 2127.481638][ T8941] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 2127.487554][ T8941] ? ocfs2_xattr_set+0xc75/0x13a0 [ 2127.492604][ T8941] ? __vfs_setxattr+0x437/0x470 [ 2127.497495][ T8941] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 2127.502992][ T8941] ? vfs_setxattr+0x16b/0x2f0 [ 2127.507700][ T8941] ? path_setxattr+0x33a/0x590 [ 2127.512492][ T8941] ? __x64_sys_setxattr+0xbb/0xd0 [ 2127.517539][ T8941] ? do_syscall_64+0x55/0xb0 [ 2127.522159][ T8941] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2127.528273][ T8941] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 2127.534634][ T8941] ? ocfs2_init_steal_slots+0x160/0x160 [ 2127.540204][ T8941] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 2127.545863][ T8941] ? lock_acquire+0x208/0x420 [ 2127.550581][ T8941] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 2127.556245][ T8941] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 2127.562338][ T8941] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 2127.568599][ T8941] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 2127.574510][ T8941] ? down_write+0x16e/0x200 [ 2127.579042][ T8941] ? down_read_killable+0x340/0x340 [ 2127.584267][ T8941] ? up_write+0x1be/0x410 [ 2127.588617][ T8941] ocfs2_xattr_set+0xc75/0x13a0 [ 2127.593500][ T8941] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 2127.599260][ T8941] ? lock_chain_count+0x20/0x20 [ 2127.604134][ T8941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2127.610323][ T8941] ? lockdep_hardirqs_on+0x98/0x150 [ 2127.615544][ T8941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2127.621731][ T8941] ? ocfs2_xattr_security_get+0x40/0x40 [ 2127.627301][ T8941] ? ocfs2_xattr_security_set+0x23/0x50 [ 2127.632868][ T8941] ? ocfs2_xattr_security_get+0x40/0x40 [ 2127.638462][ T8941] __vfs_setxattr+0x437/0x470 [ 2127.643268][ T8941] __vfs_setxattr_noperm+0x12a/0x5e0 [ 2127.648590][ T8941] vfs_setxattr+0x16b/0x2f0 [ 2127.653134][ T8941] ? xattr_permission+0x460/0x460 [ 2127.658186][ T8941] ? __mnt_want_write+0x223/0x2a0 [ 2127.663243][ T8941] ? path_setxattr+0x2ec/0x590 [ 2127.668040][ T8941] path_setxattr+0x33a/0x590 [ 2127.672662][ T8941] ? simple_xattrs_free+0x150/0x150 [ 2127.677901][ T8941] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2127.683922][ T8941] ? lock_chain_count+0x20/0x20 [ 2127.688814][ T8941] __x64_sys_setxattr+0xbb/0xd0 [ 2127.693714][ T8941] do_syscall_64+0x55/0xb0 [ 2127.698166][ T8941] ? clear_bhb_loop+0x40/0x90 [ 2127.702880][ T8941] ? clear_bhb_loop+0x40/0x90 [ 2127.707590][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2127.713516][ T8941] RIP: 0033:0x7f00eb39de99 [ 2127.717962][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2127.737604][ T8941] RSP: 002b:00007f00ec2e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2127.746054][ T8941] RAX: ffffffffffffffda RBX: 00007f00eb625fa0 RCX: 00007f00eb39de99 [ 2127.754051][ T8941] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000200000000100 [ 2127.762043][ T8941] RBP: 00007f00eb433eaf R08: 0000000000000000 R09: 0000000000000000 [ 2127.770058][ T8941] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000 [ 2127.778051][ T8941] R13: 00007f00eb626038 R14: 00007f00eb625fa0 R15: 00007ffe082fa598 [ 2127.786072][ T8941] [ 2127.822356][T31195] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2127.830519][T31195] ath9k_htc: Failed to initialize the device [ 2127.860434][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 2127.899977][T31195] usb 4-1: ath9k_htc: USB layer deinitialized [ 2127.912525][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 2127.926405][ T28] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 2127.953420][ T28] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2127.970288][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.978394][ T28] usb 3-1: Product: syz [ 2127.982666][ T28] usb 3-1: Manufacturer: syz [ 2127.990132][ T28] usb 3-1: SerialNumber: syz [ 2128.004795][ T7479] usb 4-1: USB disconnect, device number 49 [ 2128.012324][ T28] r8152-cfgselector 3-1: config 0 descriptor?? [ 2128.416316][ T28] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2128.430639][ T28] r8152-cfgselector 3-1: USB disconnect, device number 46 [ 2128.945612][ T5999] blk_print_req_error: 341 callbacks suppressed [ 2128.945631][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2128.947356][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2128.959467][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2128.982360][ T5999] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2128.986454][ T6002] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2128.995383][ T5999] buffer_io_error: 302 callbacks suppressed [ 2128.995418][ T5999] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 2129.007000][ T6002] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 2129.007203][ T6002] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2129.016393][ T5849] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2129.030748][ T6002] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 2129.033388][ T5999] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2129.048871][ T6002] I/O error, dev loop2, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2129.052396][ T5849] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 2129.065621][ T6002] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 2129.070909][ T5999] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 2129.078172][ T6002] I/O error, dev loop2, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2129.102276][ T5849] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 2129.102409][ T5849] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 2129.118154][ T6002] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 2129.127171][ T6002] Buffer I/O error on dev loop2p7, logical block 12, async page read