last executing test programs: 3.708883387s ago: executing program 2 (id=13544): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000540)={0x9, 'syz1\x00'}) 3.57154849s ago: executing program 2 (id=13549): r0 = socket(0x2a, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)=')', 0x1}], 0x2}}], 0x1, 0x0) 3.377052236s ago: executing program 2 (id=13554): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x98, &(0x7f0000000140)={0x400, 0x1000, 0x1}}) 3.276200138s ago: executing program 0 (id=13556): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @multicast2}}) 3.171933441s ago: executing program 3 (id=13559): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) 3.171580841s ago: executing program 2 (id=13560): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.015702674s ago: executing program 3 (id=13562): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) 2.874954258s ago: executing program 3 (id=13564): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)=0x2f) 2.732927382s ago: executing program 0 (id=13565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) 2.722942822s ago: executing program 3 (id=13566): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) 2.576642355s ago: executing program 3 (id=13569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0xffffff82}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) 2.506772357s ago: executing program 0 (id=13570): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 2.115614107s ago: executing program 0 (id=13576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e22080018"], 0x2c}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) 1.973088951s ago: executing program 3 (id=13577): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f0000000180)={[{@rescan_uuid_tree}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@user_subvol_rm}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'nologreplay'}}, {@discard_async}, {@nodatacow}, {@fatal_errors_bug}, {@nodiscard}, {@enospc_debug}, {@nospace_cache}, {@notreelog}, {@space_cache}]}, 0x9, 0x559d, &(0x7f0000004040)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004440)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd2372404ea0b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e722f5d78742d622d4ccbc1a7bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8ebe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c53e8afceede4caf8850d585d4134559a6abbee463da46f316c3faeffa30fec0b35fff3f320b99e805fa2d3d179fe0d9a40e8b5a3df3d5fea5e743163c8a21eb10b84046c95b735e5c727336666c9922041490702d1e17c8b", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) 1.929079712s ago: executing program 1 (id=13578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@getsa={0x3c, 0x12, 0x1, 0x70bd28, 0x25dfdbfa, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d6, 0x2, 0x2b}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40040d0) 1.853404324s ago: executing program 0 (id=13580): syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d1c020301090224000100000000090400000221efb0000905020200000000ff09058202"], 0x0) chown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 1.710562808s ago: executing program 1 (id=13581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.710188397s ago: executing program 4 (id=13582): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0xfffff9, 0xfffffffffffffffe}]}, 0x108) 1.636098439s ago: executing program 4 (id=13583): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x43, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x12d602, 0x0) 1.556116971s ago: executing program 1 (id=13584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 1.426755484s ago: executing program 1 (id=13585): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x4, 0x1}, 0x6) 1.405112685s ago: executing program 4 (id=13586): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 1.288435628s ago: executing program 2 (id=13587): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setresgid(0x0, 0xffffffffffffffff, 0x0) 1.239368269s ago: executing program 1 (id=13588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) 1.063544354s ago: executing program 4 (id=13589): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @win={{0x7, 0x5}, 0x1, 0xfffffffe, 0x0, 0x2, 0x0}}) 1.012192835s ago: executing program 2 (id=13590): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_cont}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4428, &(0x7f000000c300)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) 874.609188ms ago: executing program 4 (id=13591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) 604.272345ms ago: executing program 4 (id=13592): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000020904000001020d0000052406000105240004000d24f90b00000000000000000006241a8000100905810300020009070904520300000d00000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 124.84µs ago: executing program 0 (id=13593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7d16e354b6f02b95}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xfffffffd}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x20000080) 0s ago: executing program 1 (id=13594): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000001c0)={0x8, 0xc11, 0x1}) kernel console output (not intermixed with test programs): t: bad extra_isize 90 (inode size 256) [ 1143.676192][T30131] EXT4-fs (loop4): Remounting filesystem read-only [ 1143.732787][T30131] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.11713: error while reading EA inode 18 err=-117 [ 1143.768647][T30131] EXT4-fs (loop4): Remounting filesystem read-only [ 1143.792263][T30131] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.11713: iget: bad extra_isize 90 (inode size 256) [ 1143.841312][T30131] EXT4-fs (loop4): Remounting filesystem read-only [ 1143.861913][T30131] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.11713: error while reading EA inode 18 err=-117 [ 1143.918507][T30131] EXT4-fs (loop4): Remounting filesystem read-only [ 1143.941031][T30131] EXT4-fs (loop4): 1 orphan inode deleted [ 1143.955230][T30131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1143.978653][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11723'. [ 1144.089412][T30131] EXT4-fs error (device loop4): __ext4_iget:5102: inode #14: block 1886221359: comm syz.4.11713: invalid block [ 1144.140127][T30131] EXT4-fs (loop4): Remounting filesystem read-only [ 1144.248404][T30164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11727'. [ 1144.337448][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1144.514810][T30178] loop4: detected capacity change from 0 to 256 [ 1146.186473][T30240] loop0: detected capacity change from 0 to 764 [ 1146.227966][T30240] Symlink component flag not implemented [ 1146.249180][T30240] Symlink component flag not implemented (122) [ 1146.485325][T30252] device ip6gre1 entered promiscuous mode [ 1146.503870][T30256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11774'. [ 1147.069427][T30278] loop0: detected capacity change from 0 to 256 [ 1147.481829][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.495027][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.526319][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.552795][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.589420][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.626288][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.668430][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.677870][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.764833][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11791'. [ 1147.788620][T30292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1147.815645][T30292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1147.847441][T30292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1148.048658][T30310] loop2: detected capacity change from 0 to 736 [ 1148.226289][T30310] tmpfs: Unknown parameter 'ö$TñaFm´éIÊ(9»ôטÁÞzñ6m›+N`1x¦†*‹40œ« Ó?·W‘ Ì„ ' [ 1148.400905][T13275] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1148.623673][T13275] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 1148.647390][T13275] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.680641][T13275] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1148.713433][T13275] usb 4-1: config 150 has no interface number 0 [ 1148.735828][T13275] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1148.766408][T13275] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1148.794938][T13275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.817239][T13275] usb 4-1: Product: syz [ 1148.830082][T13275] usb 4-1: Manufacturer: syz [ 1148.846797][T13275] usb 4-1: SerialNumber: syz [ 1149.057720][T30347] loop0: detected capacity change from 0 to 512 [ 1149.064943][T30347] EXT4-fs: Ignoring removed i_version option [ 1149.094929][T13275] xr_serial 4-1:150.204: skipping garbage [ 1149.109243][T13275] xr_serial 4-1:150.204: invalid descriptor buffer length [ 1149.142618][T13275] usb 4-1: USB disconnect, device number 17 [ 1149.159843][T30347] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1149.198172][T30351] netlink: 'syz.2.11820': attribute type 1 has an invalid length. [ 1149.311123][T30347] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1149.401463][T30347] __quota_error: 9 callbacks suppressed [ 1149.401480][T30347] Quota error (device loop0): write_blk: dquota write failed [ 1149.415059][T30347] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1149.424264][T30347] Quota error (device loop0): write_blk: dquota write failed [ 1149.432968][T30347] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1149.444842][T30347] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.11818: Failed to acquire dquot type 1 [ 1149.463859][T30347] EXT4-fs (loop0): 1 truncate cleaned up [ 1149.469898][T30347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1149.559428][T30347] Quota error (device loop0): write_blk: dquota write failed [ 1149.599199][T30347] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1149.646216][T30347] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.11818: Failed to acquire dquot type 1 [ 1149.683298][T19581] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1149.783053][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 1149.853702][T30358] loop2: detected capacity change from 0 to 32768 [ 1149.878005][T30358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11823 (30358) [ 1149.902111][T19581] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1149.915666][T19581] usb 5-1: config 0 has no interface number 0 [ 1149.947563][T19581] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1149.988816][T19581] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1150.025837][T19581] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1150.047705][T19581] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1150.097242][T19581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.111770][T19581] usb 5-1: config 0 descriptor?? [ 1150.120936][T30358] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1150.126274][T19581] cp210x 5-1:0.255: cp210x converter detected [ 1150.148990][T30358] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1150.158047][T30358] BTRFS info (device loop2): using free space tree [ 1150.426212][T30358] BTRFS info (device loop2): enabling ssd optimizations [ 1150.573172][T19581] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 1150.601411][T19581] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1150.630364][T19581] usb 5-1: USB disconnect, device number 2 [ 1150.701278][T19581] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1150.710438][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1150.745540][T19581] cp210x 5-1:0.255: device disconnected [ 1151.354939][T30421] netlink: 'syz.0.11845': attribute type 1 has an invalid length. [ 1151.392748][T30425] autofs4:pid:30425:autofs_fill_super: called with bogus options [ 1151.584879][T30432] SET target dimension over the limit! [ 1151.806356][T30439] loop2: detected capacity change from 0 to 512 [ 1151.902206][T30439] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.11854: bg 0: block 112: padding at end of block bitmap is not set [ 1151.917450][T30439] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1151.957211][T30439] EXT4-fs (loop2): 1 orphan inode deleted [ 1151.968380][T30439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1151.987972][ T57] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1152.067588][T30439] Quota error (device loop2): write_blk: dquota write failed [ 1152.075579][T30439] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1152.086306][ T57] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 1152.095510][T30439] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.11854: Failed to acquire dquot type 1 [ 1152.147600][ T4986] udevd[4986]: inotify_add_watch(7, /dev/nbd3p5, 10) failed: No such file or directory [ 1152.184898][T30453] __nla_validate_parse: 150 callbacks suppressed [ 1152.184949][T30453] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11859'. [ 1152.335584][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1152.406490][T30429] loop1: detected capacity change from 0 to 32768 [ 1152.450819][T30429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.11848 (30429) [ 1152.513451][T30429] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1152.565219][T30429] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1152.573952][T30429] BTRFS info (device loop1): using free space tree [ 1152.803444][T30411] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1152.942101][T30429] BTRFS info (device loop1): enabling ssd optimizations [ 1153.020780][T30411] usb 5-1: Using ep0 maxpacket: 16 [ 1153.042281][T30411] usb 5-1: config 0 has no interfaces? [ 1153.064358][T30411] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1153.096034][T19715] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1153.106294][T30411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.125541][T30411] usb 5-1: Product: syz [ 1153.136465][T30411] usb 5-1: Manufacturer: syz [ 1153.150038][T30411] usb 5-1: SerialNumber: syz [ 1153.177943][T30411] r8152-cfgselector 5-1: config 0 descriptor?? [ 1153.195376][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1153.301979][T19715] usb 4-1: Using ep0 maxpacket: 16 [ 1153.313463][T19715] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1153.333698][T19715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.355612][T19715] usb 4-1: Product: syz [ 1153.360481][T19715] usb 4-1: Manufacturer: syz [ 1153.365144][T19715] usb 4-1: SerialNumber: syz [ 1153.418913][T30411] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1153.426494][T19715] r8152-cfgselector 4-1: config 0 descriptor?? [ 1153.518001][T30506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11878'. [ 1153.665886][T19715] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1153.710200][T19726] usb 5-1: USB disconnect, device number 3 [ 1153.827856][T30512] loop0: detected capacity change from 0 to 2048 [ 1153.873441][T30515] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1153.904324][T30512] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1153.913710][T30508] usb 4-1: USB disconnect, device number 18 [ 1153.933858][T30512] Remounting filesystem read-only [ 1154.126079][T30521] loop1: detected capacity change from 0 to 256 [ 1154.139489][T30521] FAT-fs (loop1): Directory bread(block 1285) failed [ 1154.157330][T30521] FAT-fs (loop1): Directory bread(block 1286) failed [ 1154.182996][T30521] FAT-fs (loop1): Directory bread(block 1287) failed [ 1154.215790][T30521] FAT-fs (loop1): Directory bread(block 1288) failed [ 1154.495553][T30533] netlink: 'syz.1.11889': attribute type 2 has an invalid length. [ 1154.503457][T30533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11889'. [ 1154.631812][T30540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.953304][T30554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1155.086630][ T1080] block nbd3: Attempted send on invalid socket [ 1155.093012][ T1080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1155.186613][T30564] netlink: 'syz.2.11905': attribute type 2 has an invalid length. [ 1155.195500][T30564] netlink: 504 bytes leftover after parsing attributes in process `syz.2.11905'. [ 1155.989728][T30597] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 1156.578012][T30624] loop0: detected capacity change from 0 to 256 [ 1157.268316][T30651] device batadv0 entered promiscuous mode [ 1157.285908][T30651] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1157.555255][T30663] tmpfs: Bad value for 'mpol' [ 1157.607935][T19583] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1157.810283][T19583] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1157.818705][T19583] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.836516][T19715] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1157.860967][T19583] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1157.884320][T19583] usb 5-1: config 150 has no interface number 0 [ 1157.890991][T19583] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1157.940720][T19583] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1157.960355][T19583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.972702][T19583] usb 5-1: Product: syz [ 1157.976897][T19583] usb 5-1: Manufacturer: syz [ 1157.981637][T19583] usb 5-1: SerialNumber: syz [ 1158.036024][T19715] usb 3-1: Using ep0 maxpacket: 32 [ 1158.045062][T19715] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1158.084249][T19715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.100107][T19715] usb 3-1: Product: syz [ 1158.105214][T19715] usb 3-1: Manufacturer: syz [ 1158.109843][T19715] usb 3-1: SerialNumber: syz [ 1158.132176][T19715] usb 3-1: config 0 descriptor?? [ 1158.179374][T19715] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1158.211935][T19583] xr_serial 5-1:150.204: skipping garbage [ 1158.217770][T19583] xr_serial 5-1:150.204: invalid descriptor buffer length [ 1158.275774][T19583] usb 5-1: USB disconnect, device number 4 [ 1158.637005][T19715] gspca_topro: reg_w err -71 [ 1158.696942][T19715] gspca_topro: Sensor soi763a [ 1158.713319][T19715] usb 3-1: USB disconnect, device number 18 [ 1159.085707][T30709] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1159.116891][T30709] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1159.576670][T30703] loop0: detected capacity change from 0 to 32768 [ 1159.611912][T30703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.11973 (30703) [ 1159.629108][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11982'. [ 1159.661561][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11982'. [ 1159.671376][T30726] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11983'. [ 1159.688994][T30703] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1159.705258][T30703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1159.729349][T30703] BTRFS info (device loop0): using free space tree [ 1159.736983][T30508] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1159.862186][T30740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1159.953047][T30703] BTRFS info (device loop0): enabling ssd optimizations [ 1159.971192][T30508] usb 5-1: Using ep0 maxpacket: 8 [ 1159.979298][T30508] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1159.999372][T30508] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1160.018787][T30508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.037816][T30508] usb 5-1: Product: syz [ 1160.043343][T30508] usb 5-1: Manufacturer: syz [ 1160.047993][T30508] usb 5-1: SerialNumber: syz [ 1160.069948][T30508] usb 5-1: config 0 descriptor?? [ 1160.099690][T30508] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1160.116263][ T4276] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1160.495879][T19729] usb 5-1: USB disconnect, device number 5 [ 1160.582439][T30763] netlink: 'syz.0.11987': attribute type 13 has an invalid length. [ 1161.314694][T30785] loop2: detected capacity change from 0 to 1024 [ 1161.349247][T30787] xt_NFQUEUE: number of total queues is 0 [ 1161.460801][T30785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1161.576266][T30785] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.12001: corrupted xattr block 128 [ 1161.589738][T30771] loop1: detected capacity change from 0 to 40427 [ 1161.598095][T30771] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1161.641240][T30771] F2FS-fs (loop1): Should set mode=lfs with 16KB-sized IO [ 1161.672618][T30785] EXT4-fs (loop2): Remounting filesystem read-only [ 1161.831534][T30792] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1161.837649][T30800] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12008'. [ 1161.903991][T30792] EXT4-fs (loop2): Remounting filesystem read-only [ 1161.927583][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1162.233370][T30813] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1162.791478][T30833] x_tables: duplicate entry at hook 1 [ 1163.446501][T30850] loop2: detected capacity change from 0 to 4096 [ 1163.488485][T30850] ntfs3: Invalid value for gid. [ 1163.541935][ T4265] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1163.769030][T30865] loop0: detected capacity change from 0 to 16 [ 1163.802971][T30865] erofs: (device loop0): mounted with root inode @ nid 36. [ 1163.844845][T30865] erofs: (device loop0): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1164.135414][T19726] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1164.288452][T30886] netlink: 'syz.3.12047': attribute type 5 has an invalid length. [ 1164.344414][T19726] usb 3-1: Using ep0 maxpacket: 32 [ 1164.364545][T19726] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1164.372796][T19726] usb 3-1: config 0 has no interface number 0 [ 1164.405222][T19726] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1164.433169][T30891] cgroup: Name too long [ 1164.446064][T19726] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1164.472018][T19726] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1164.502171][T19726] usb 3-1: Product: syz [ 1164.526053][T19726] usb 3-1: Manufacturer: syz [ 1164.530696][T19726] usb 3-1: SerialNumber: syz [ 1164.570110][T19726] usb 3-1: config 0 descriptor?? [ 1164.797740][T19726] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1164.805457][T19726] ipheth: probe of 3-1:0.196 failed with error -71 [ 1164.850602][T19726] usb 3-1: USB disconnect, device number 19 [ 1166.366985][T19583] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1166.475408][T30976] netlink: 'syz.4.12087': attribute type 2 has an invalid length. [ 1166.518763][T30976] netlink: 119 bytes leftover after parsing attributes in process `syz.4.12087'. [ 1166.574868][T19583] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1166.594548][T19583] usb 3-1: config 0 has no interface number 0 [ 1166.616605][T19583] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1166.653220][T19583] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1166.711540][T19583] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1166.738592][T19583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.754556][T19583] usb 3-1: Product: syz [ 1166.759118][T19583] usb 3-1: Manufacturer: syz [ 1166.763753][T19583] usb 3-1: SerialNumber: syz [ 1166.780780][T19583] usb 3-1: config 0 descriptor?? [ 1166.811437][T30959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1166.820053][T19583] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1166.844248][T19583] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1167.319418][T19729] usb 3-1: USB disconnect, device number 20 [ 1167.348227][T19729] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1167.392899][T19729] cyberjack 3-1:0.69: device disconnected [ 1167.629173][T31012] loop4: detected capacity change from 0 to 764 [ 1167.657356][T31012] rock: directory entry would overflow storage [ 1167.674645][T31012] rock: sig=0x4654, size=5, remaining=4 [ 1167.698273][T31012] isofs: Unable to find the ".." directory for NFS. [ 1167.907271][T31023] netlink: 'syz.1.12110': attribute type 9 has an invalid length. [ 1168.273010][T31039] netlink: 'syz.2.12118': attribute type 1 has an invalid length. [ 1168.352402][T31041] loop1: detected capacity change from 0 to 2048 [ 1168.363701][T31045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12119'. [ 1168.393580][T31041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1168.479581][T19583] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1168.536142][T31049] loop2: detected capacity change from 0 to 2048 [ 1168.557717][T31049] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1168.630749][T31049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1168.639820][T19726] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1168.693664][T19583] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1168.716619][T19583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.735751][T19583] usb 1-1: Product: syz [ 1168.751003][T19583] usb 1-1: Manufacturer: syz [ 1168.772987][T19583] usb 1-1: SerialNumber: syz [ 1168.787838][T19583] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1168.826790][T19583] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1168.869610][T19726] usb 5-1: Using ep0 maxpacket: 32 [ 1168.876985][T19726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1168.913579][T19726] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1168.960760][T31055] loop2: detected capacity change from 0 to 1024 [ 1168.972473][T19726] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1169.007748][T19726] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1169.039279][T19726] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1169.077760][T31055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1169.110674][T19726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1169.165328][T19726] usb 5-1: SerialNumber: syz [ 1169.203740][T19726] usb 5-1: config 0 descriptor?? [ 1169.222606][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1169.249720][T19726] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1169.318023][T19581] usb 1-1: USB disconnect, device number 39 [ 1169.353295][T19726] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1169.481384][T13275] usb 5-1: USB disconnect, device number 6 [ 1169.517800][T31076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1169.539239][T31076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1169.985679][T19583] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1169.992876][T19583] ath9k_htc: Failed to initialize the device [ 1170.023220][T19581] usb 1-1: ath9k_htc: USB layer deinitialized [ 1170.823351][T31121] loop2: detected capacity change from 0 to 256 [ 1170.851917][T31123] netlink: 'syz.0.12158': attribute type 21 has an invalid length. [ 1170.872426][T31127] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1170.895086][T31123] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12158'. [ 1171.168806][T31135] netlink: 766 bytes leftover after parsing attributes in process `syz.2.12163'. [ 1171.599420][T31153] loop1: detected capacity change from 0 to 512 [ 1171.633267][T31153] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1171.742710][T31153] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1172.497145][T31188] netlink: 124 bytes leftover after parsing attributes in process `syz.0.12188'. [ 1172.730774][T31164] loop3: detected capacity change from 0 to 32768 [ 1172.981410][T31203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12196'. [ 1172.997344][T19581] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1173.123934][ T4986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4986) [ 1173.203111][T19581] usb 2-1: Using ep0 maxpacket: 32 [ 1173.210497][T19581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.273549][T19581] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1173.327495][T19581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.360287][T19581] usb 2-1: Product: syz [ 1173.364510][T19581] usb 2-1: Manufacturer: syz [ 1173.393072][T19581] usb 2-1: SerialNumber: syz [ 1173.422070][T19581] usb 2-1: config 0 descriptor?? [ 1173.432353][T19581] usb 2-1: bad CDC descriptors [ 1173.437580][T19581] usb 2-1: unsupported MDLM descriptors [ 1173.692841][T19581] usb 2-1: USB disconnect, device number 29 [ 1173.807579][T31230] netlink: 'syz.0.12208': attribute type 7 has an invalid length. [ 1173.882344][T31234] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1173.916546][T31234] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1174.295200][T31244] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12215'. [ 1174.867739][T31267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12226'. [ 1174.903924][T31267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12226'. [ 1174.953270][T31267] device vlan0 entered promiscuous mode [ 1175.182881][T31276] Process accounting paused [ 1175.292355][T31286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12237'. [ 1175.477246][T31294] SET target dimension over the limit! [ 1175.901855][T31310] netlink: 'syz.0.12249': attribute type 49 has an invalid length. [ 1175.942933][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12250'. [ 1175.966042][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12250'. [ 1175.987796][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12250'. [ 1176.026085][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12250'. [ 1176.615809][T19726] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1176.731791][T31342] loop2: detected capacity change from 0 to 4096 [ 1176.769570][T31342] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1176.844124][T19726] usb 5-1: Using ep0 maxpacket: 8 [ 1176.853571][T19726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.856275][T31342] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1176.912548][T19726] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1176.929554][T19726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1176.941911][T19726] usb 5-1: SerialNumber: syz [ 1176.952029][T19726] usb 5-1: config 0 descriptor?? [ 1176.963770][T19726] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 1176.970732][T19726] usb 5-1: Failed to create links for entity 255 [ 1176.977357][T19726] usb 5-1: Failed to register entities (-22). [ 1176.985225][T31342] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1177.032079][T31353] loop0: detected capacity change from 0 to 4096 [ 1177.041153][T31342] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1177.061623][T31342] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1177.070797][T31342] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1177.091253][T31342] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1177.109882][T31342] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1177.130237][T31353] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1177.155463][T31342] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1177.175665][T31342] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1177.200281][T19726] usb 5-1: USB disconnect, device number 7 [ 1177.300180][T31342] ntfs: volume version 3.1. [ 1177.666635][T19729] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1177.732785][T31366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1177.877826][T19729] usb 2-1: Using ep0 maxpacket: 16 [ 1177.888892][T19729] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1177.923990][T19729] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1177.956228][T19729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.975623][T19729] usb 2-1: Product: syz [ 1177.979881][T19729] usb 2-1: Manufacturer: syz [ 1177.992582][T19729] usb 2-1: SerialNumber: syz [ 1178.020923][T19729] r8152-cfgselector 2-1: config 0 descriptor?? [ 1178.488797][T19729] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1178.521552][T19729] r8152-cfgselector 2-1: USB disconnect, device number 30 [ 1178.548526][T31396] JFS: discard option not supported on device [ 1178.574835][T31396] Mount JFS Failure: -22 [ 1178.587764][T31396] jfs_mount failed w/return code = -22 [ 1178.706711][T19581] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1178.858211][T19726] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 1178.874395][T31387] loop4: detected capacity change from 0 to 32768 [ 1178.912401][T19581] usb 1-1: Using ep0 maxpacket: 32 [ 1178.924733][T19581] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.938501][T31387] loop4: p1 p3 < > [ 1178.946408][T19581] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.975137][T19581] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1178.988883][T19581] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1178.997733][T19581] usb 1-1: Product: syz [ 1179.002714][T19581] usb 1-1: Manufacturer: syz [ 1179.012299][T19581] hub 1-1:4.0: USB hub found [ 1179.114311][T19726] usb 5-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 1179.146576][T19726] usb 5-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.192615][T19726] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1179.238640][T19581] hub 1-1:4.0: 2 ports detected [ 1179.261890][T19726] usb 5-1: string descriptor 0 read error: -22 [ 1179.268153][T19726] usb 5-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 1179.321299][T19726] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1179.370233][T19726] usbhid 5-1:1.0: fixing wrong optional hid class descriptors count [ 1179.398889][T19726] usbhid 5-1:1.0: can't add hid device: -22 [ 1179.435265][T19726] usbhid: probe of 5-1:1.0 failed with error -22 [ 1179.464439][T19581] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1179.473833][T19581] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1179.568569][T19581] usb 1-1: USB disconnect, device number 40 [ 1179.602095][T19726] usb 5-1: USB disconnect, device number 8 [ 1179.972464][T31429] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1180.341229][T31443] loop1: detected capacity change from 0 to 1024 [ 1180.395029][T31443] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1180.440445][T31443] EXT4-fs (loop1): group descriptors corrupted! [ 1180.497343][ T4986] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1180.670487][T31453] loop2: detected capacity change from 0 to 64 [ 1181.016758][T31466] openvswitch: netlink: Key type 29 is not supported [ 1181.043661][T31468] libceph: resolve '0' (ret=-3): failed [ 1181.504144][T31490] ./file0: Can't open blockdev [ 1181.685234][T31498] __nla_validate_parse: 48 callbacks suppressed [ 1181.685253][T31498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12340'. [ 1181.740287][T31498] erspan0: default FDB implementation only supports local addresses [ 1181.782510][T31502] netlink: 193 bytes leftover after parsing attributes in process `syz.3.12342'. [ 1181.812237][T31504] loop0: detected capacity change from 0 to 64 [ 1182.084856][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12347'. [ 1182.114936][T31511] loop3: detected capacity change from 0 to 2048 [ 1182.177077][T31511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1182.198959][T31512] loop4: detected capacity change from 0 to 4096 [ 1182.232892][T31512] __ntfs_warning: 17 callbacks suppressed [ 1182.232908][T31512] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1182.271103][T31519] netlink: 'syz.2.12349': attribute type 3 has an invalid length. [ 1182.436454][T31512] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1182.527702][T31512] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1182.595961][T31512] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1182.671077][T31512] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1182.724738][T31512] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1182.744967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.874340][T31512] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1182.902867][T31512] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1183.002235][T31512] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1183.025495][T31512] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1183.163880][T31512] ntfs: volume version 3.1. [ 1183.725839][T31550] loop4: detected capacity change from 0 to 2048 [ 1183.770792][T31550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.012569][T31560] loop3: detected capacity change from 0 to 736 [ 1184.417357][T31572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12367'. [ 1184.538655][T31541] loop0: detected capacity change from 0 to 32768 [ 1184.758004][T31541] XFS (loop0): Mounting V5 Filesystem [ 1184.845041][T31541] XFS (loop0): Ending clean mount [ 1185.019067][T31592] loop2: detected capacity change from 0 to 4096 [ 1185.127897][ T4276] XFS (loop0): Unmounting Filesystem [ 1185.393611][T31605] loop3: detected capacity change from 0 to 2048 [ 1185.447452][T31605] /dev/loop3: Can't open blockdev [ 1186.155750][T31630] sg_write: data in/out 8454107/16 bytes for SCSI command 0xf0-- guessing data in; [ 1186.155750][T31630] program syz.3.12390 not setting count and/or reply_len properly [ 1186.307874][T31636] loop0: detected capacity change from 0 to 4096 [ 1186.413146][T31642] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1187.797077][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 1187.797092][ T27] audit: type=1326 audit(1055939.478:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1187.878007][ T27] audit: type=1326 audit(1055939.478:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.050596][ T27] audit: type=1326 audit(1055939.478:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.171748][ T27] audit: type=1326 audit(1055939.478:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.294307][ T27] audit: type=1326 audit(1055939.496:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.318597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.421550][ T27] audit: type=1326 audit(1055939.496:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.505925][T31719] misc userio: The device must be registered before sending interrupts [ 1188.539540][T31718] netlink: 'syz.3.12425': attribute type 1 has an invalid length. [ 1188.578073][T31718] netlink: 'syz.3.12425': attribute type 3 has an invalid length. [ 1188.585656][ T27] audit: type=1326 audit(1055939.496:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.610184][T31718] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12425'. [ 1188.760236][ T27] audit: type=1326 audit(1055939.496:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1188.784187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.825464][T31726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12428'. [ 1188.899786][ T27] audit: type=1326 audit(1055939.496:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31693 comm="syz.3.12415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1189.001156][T31734] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 1189.068063][T31734] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1189.235951][T31743] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1189.431972][T19583] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1189.648394][T19583] usb 5-1: Using ep0 maxpacket: 16 [ 1189.665139][T19583] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1189.700710][T19583] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1189.748981][T19583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.765640][T19583] usb 5-1: Product: syz [ 1189.774967][T19583] usb 5-1: Manufacturer: syz [ 1189.781609][T19583] usb 5-1: SerialNumber: syz [ 1189.793749][T19583] r8152-cfgselector 5-1: config 0 descriptor?? [ 1190.283126][T19583] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1190.305325][T19583] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 1190.496427][ T27] audit: type=1326 audit(1055941.970:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31787 comm="syz.2.12453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dcd79de99 code=0x0 [ 1190.519841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.829250][T13275] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1190.998100][T19715] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1191.045910][T13275] usb 4-1: Using ep0 maxpacket: 16 [ 1191.061102][T13275] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 1191.089532][T13275] usb 4-1: config 252 has no interface number 0 [ 1191.095901][T13275] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 16384, setting to 64 [ 1191.145990][T13275] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1191.176451][T13275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.184554][T13275] usb 4-1: Product: syz [ 1191.194835][T13275] usb 4-1: Manufacturer: syz [ 1191.210468][T13275] usb 4-1: SerialNumber: syz [ 1191.234446][T19715] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1191.254681][T19715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.277294][T13275] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1191.293713][T19715] usb 3-1: Product: syz [ 1191.360086][T19715] usb 3-1: Manufacturer: syz [ 1191.402222][T19715] usb 3-1: SerialNumber: syz [ 1191.452631][T19715] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1191.483083][ T4348] usb 4-1: Failed to submit usb control message: -71 [ 1191.490910][T13275] usb 4-1: USB disconnect, device number 19 [ 1191.508662][ T4348] usb 4-1: unable to send the bmi data to the device: -71 [ 1191.529251][T19715] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1191.541375][ T4348] usb 4-1: unable to get target info from device [ 1191.558072][ T4348] usb 4-1: could not get target info (-71) [ 1191.564044][ T4348] usb 4-1: could not probe fw (-71) [ 1191.815127][T19729] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 1192.012354][T19726] usb 3-1: USB disconnect, device number 21 [ 1192.029199][T19729] usb 1-1: config 1 interface 0 altsetting 54 endpoint 0x1 is Bulk; changing to Interrupt [ 1192.043153][T19729] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1192.063973][T19729] usb 1-1: string descriptor 0 read error: -22 [ 1192.070286][T19729] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 1192.121327][T19729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.167451][T31825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1192.182339][T19729] hub 1-1:1.0: bad descriptor, ignoring hub [ 1192.199531][T19729] hub: probe of 1-1:1.0 failed with error -5 [ 1192.541113][T19581] usb 1-1: USB disconnect, device number 41 [ 1192.692807][T19715] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1192.701786][T19715] ath9k_htc: Failed to initialize the device [ 1192.725626][T19726] usb 3-1: ath9k_htc: USB layer deinitialized [ 1193.293177][T31892] delete_channel: no stack [ 1193.451032][T19726] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1193.702404][T19726] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1193.728747][T19726] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1193.782270][T19726] usb 3-1: Product: syz [ 1193.797468][T19726] usb 3-1: SerialNumber: syz [ 1193.847536][T19726] usb 3-1: config 0 descriptor?? [ 1193.960200][T31908] ALSA: mixer_oss: invalid OSS volume 'u' [ 1194.095049][T19726] hso 3-1:0.0: Failed to find BULK IN ep [ 1194.346914][T19726] usb 3-1: USB disconnect, device number 22 [ 1194.437542][T31926] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12505'. [ 1194.584277][T31930] bond0: option xmit_hash_policy: invalid value (14) [ 1194.621359][T31932] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1194.742346][T31937] loop1: detected capacity change from 0 to 256 [ 1194.814942][T31939] loop3: detected capacity change from 0 to 512 [ 1194.831145][T31939] /dev/loop3: Can't open blockdev [ 1195.060650][T31945] loop2: detected capacity change from 0 to 64 [ 1195.136803][T31883] syz.0.12489 (31883): drop_caches: 2 [ 1195.180789][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.207330][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.216128][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.272477][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.281327][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.293152][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.293241][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.293475][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.293501][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.293527][T31937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1195.295185][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1195.295197][ T27] audit: type=1800 audit(1055946.401:286): pid=31937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12510" name="file1" dev="loop1" ino=1048655 res=0 errno=0 [ 1195.545073][T31955] netlink: 'syz.3.12521': attribute type 21 has an invalid length. [ 1195.545162][T31955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12521'. [ 1195.877467][T31967] netlink: 'syz.2.12526': attribute type 4 has an invalid length. [ 1195.918055][T31967] netlink: 220 bytes leftover after parsing attributes in process `syz.2.12526'. [ 1196.360605][T31988] netlink: 'syz.2.12536': attribute type 3 has an invalid length. [ 1196.697779][T32004] loop3: detected capacity change from 0 to 512 [ 1196.712629][T32004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1196.730425][T32004] /dev/loop3: Can't open blockdev [ 1196.783432][ T4986] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1197.282598][T19581] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1197.502995][T19581] usb 3-1: Using ep0 maxpacket: 16 [ 1197.510203][T19581] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1197.535185][T19581] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1197.567976][T19581] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1197.576233][T19581] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1197.603641][ T27] audit: type=1326 audit(1055948.533:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1197.634057][T19581] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1197.653971][T19581] usb 3-1: config 0 has no interface number 0 [ 1197.664924][T19581] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1197.701335][ T27] audit: type=1326 audit(1055948.533:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1197.719501][T19581] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1197.762904][T19581] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1197.772816][T19581] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1197.814021][ T27] audit: type=1326 audit(1055948.552:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1197.854234][T19581] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1197.881883][T19581] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1197.894994][T19581] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1197.923658][ T27] audit: type=1326 audit(1055948.552:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1197.963799][T19581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.001642][T19581] usb 3-1: Product: syz [ 1198.005304][T32049] dlm: Unknown command passed to DLM device : 8 [ 1198.005304][T32049] [ 1198.005852][T19581] usb 3-1: Manufacturer: syz [ 1198.041726][ T27] audit: type=1326 audit(1055948.561:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1198.066087][T19581] usb 3-1: SerialNumber: syz [ 1198.070695][T19581] usb 3-1: config 0 descriptor?? [ 1198.098600][T19581] usb 3-1: selecting invalid altsetting 2 [ 1198.174263][ T27] audit: type=1326 audit(1055948.561:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1198.295993][ T27] audit: type=1326 audit(1055948.561:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1198.344083][ T27] audit: type=1326 audit(1055948.570:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1198.456268][ T27] audit: type=1326 audit(1055948.570:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32038 comm="syz.4.12562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb4199de99 code=0x7ffc0000 [ 1198.548555][ C1] usb 3-1: async_complete: urb error -71 [ 1198.554372][ C1] usb 3-1: async_complete: urb error -71 [ 1198.560110][ C1] usb 3-1: async_complete: urb error -71 [ 1198.565943][T19581] get_1284_register: usb error -71 [ 1198.580959][T19581] usb 3-1: USB disconnect, device number 23 [ 1199.008902][T32085] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12584'. [ 1199.019637][T13275] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1199.228547][T13275] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1199.267677][T13275] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1199.306697][T13275] usb 4-1: Product: syz [ 1199.311063][T13275] usb 4-1: SerialNumber: syz [ 1199.324961][T13275] usb 4-1: config 0 descriptor?? [ 1199.574323][T13275] hso 4-1:0.0: Can't find BULK IN endpoint [ 1199.805480][T13275] usb 4-1: USB disconnect, device number 20 [ 1200.118631][T19581] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1200.337988][T19581] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1200.351689][T19581] usb 1-1: config 0 has no interface number 0 [ 1200.365871][T19581] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1200.415294][T19581] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1200.433553][T19581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.444174][T19581] usb 1-1: config 0 descriptor?? [ 1200.478696][T19581] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input110 [ 1200.695414][T19726] usb 1-1: USB disconnect, device number 42 [ 1200.810184][T32157] loop3: detected capacity change from 0 to 2048 [ 1200.922122][T32163] netlink: 'syz.1.12623': attribute type 1 has an invalid length. [ 1200.946191][T32163] netlink: 'syz.1.12623': attribute type 2 has an invalid length. [ 1200.980265][T32163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12623'. [ 1201.143060][T19715] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1201.353694][T19715] usb 4-1: Using ep0 maxpacket: 16 [ 1201.365930][T19715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1201.372965][T32153] loop4: detected capacity change from 0 to 32768 [ 1201.403853][T19715] usb 4-1: config 0 has no interface number 0 [ 1201.424552][T19715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xC has invalid maxpacket 37835, setting to 1024 [ 1201.508740][T19715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1201.552527][ T27] audit: type=1326 audit(1055952.170:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32184 comm="syz.0.12632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1201.579551][T32185] netlink: 'syz.1.12631': attribute type 1 has an invalid length. [ 1201.588883][T32185] netlink: 'syz.1.12631': attribute type 2 has an invalid length. [ 1201.603091][T32153] XFS (loop4): Mounting V5 Filesystem [ 1201.605583][T19715] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1201.643262][ T27] audit: type=1326 audit(1055952.170:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32184 comm="syz.0.12632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1201.668076][ T27] audit: type=1326 audit(1055952.179:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32184 comm="syz.0.12632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1201.684361][T19715] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1201.692059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.728294][T19715] usb 4-1: Product: syz [ 1201.736171][T19715] usb 4-1: SerialNumber: syz [ 1201.767986][T19715] usb 4-1: config 0 descriptor?? [ 1201.774002][T32157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1201.776297][T32153] XFS (loop4): Ending clean mount [ 1201.822740][T32191] loop1: detected capacity change from 0 to 764 [ 1201.837863][ T4282] XFS (loop4): Unmounting Filesystem [ 1201.938414][T19726] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1202.017798][T19715] usb 4-1: invalid MIDI in EP 0 [ 1202.155858][T19726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1202.168546][T19715] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 1202.180951][T19726] usb 3-1: not running at top speed; connect to a high speed hub [ 1202.204224][T19715] usb 4-1: USB disconnect, device number 21 [ 1202.212665][T19726] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 1202.257279][ T4987] udevd[4987]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1202.299887][T19726] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.311961][T19726] usb 3-1: config 5 has no interface number 0 [ 1202.318541][T19726] usb 3-1: config 5 interface 246 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1202.329867][T19726] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.368238][T19726] usb 3-1: config 5 interface 246 has no altsetting 0 [ 1202.394518][T19726] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1202.430817][T19726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.457735][T32201] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1202.462291][T19726] usb 3-1: Product: syz [ 1202.473160][T19726] usb 3-1: Manufacturer: syz [ 1202.497184][T19726] usb 3-1: SerialNumber: syz [ 1202.805485][T19726] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1202.836239][ T57] usb 3-1: Failed to submit usb control message: -71 [ 1202.847126][T19726] usb 3-1: USB disconnect, device number 24 [ 1202.888617][ T27] audit: type=1326 audit(1055953.407:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32215 comm="syz.1.12644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1202.941306][ T57] usb 3-1: unable to send the bmi data to the device: -71 [ 1202.977620][ T57] usb 3-1: unable to get target info from device [ 1202.995323][ T57] usb 3-1: could not get target info (-71) [ 1203.009868][ T57] usb 3-1: could not probe fw (-71) [ 1203.015197][ T27] audit: type=1326 audit(1055953.407:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32215 comm="syz.1.12644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1203.039420][T32219] Non-string source [ 1203.151926][ T27] audit: type=1326 audit(1055953.407:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32215 comm="syz.1.12644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1203.237426][ T27] audit: type=1326 audit(1055953.407:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32215 comm="syz.1.12644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1203.374230][ T27] audit: type=1326 audit(1055953.407:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32215 comm="syz.1.12644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1203.821921][T32250] loop2: detected capacity change from 0 to 512 [ 1203.947381][T32250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1204.066484][T32250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.12658: bg 0: bad block bitmap checksum [ 1204.103232][T32264] netlink: 'syz.1.12665': attribute type 3 has an invalid length. [ 1204.112014][T32250] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Filesystem failed CRC [ 1204.117822][T32262] loop3: detected capacity change from 0 to 4096 [ 1204.121183][T32264] netlink: 46 bytes leftover after parsing attributes in process `syz.1.12665'. [ 1204.186518][ T4986] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1204.273622][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1204.481067][T32277] IPv6: NLM_F_CREATE should be specified when creating new route [ 1204.679807][T32284] loop4: detected capacity change from 0 to 512 [ 1204.736748][T32289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12675'. [ 1204.751478][T32284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1204.775687][T32284] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1204.807340][T32284] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1204.827969][T32284] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1204.844996][T32284] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1204.861083][T32284] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000] [ 1204.869032][T32284] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1204.876859][T32284] EXT4-fs (loop4): mount failed [ 1205.040926][T32297] loop3: detected capacity change from 0 to 1024 [ 1205.056094][T32296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12677'. [ 1205.741257][T32328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12693'. [ 1205.958595][T32339] delete_channel: no stack [ 1206.271147][T32348] loop4: detected capacity change from 0 to 4096 [ 1206.316802][T32350] loop1: detected capacity change from 0 to 4096 [ 1206.317818][T32348] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1206.344309][T32350] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1206.433892][T32348] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1206.443384][T19729] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1206.492515][T32350] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 1206.576111][ T4282] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 1206.597493][ T57] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 1206.614906][ T4273] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 1206.622015][ T4282] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 1206.643120][ T4273] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1206.650857][T19729] usb 1-1: Using ep0 maxpacket: 32 [ 1206.658636][T19729] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1206.666870][T19729] usb 1-1: config 0 has no interface number 0 [ 1206.711229][ T4273] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 1206.728563][T19729] usb 1-1: config 0 interface 132 has no altsetting 0 [ 1206.755507][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 1206.764209][ T4273] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1206.777697][T19729] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1206.809363][ T4273] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 1206.826804][T19729] usb 1-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1206.852155][T19729] usb 1-1: Product: syz [ 1206.856370][T19729] usb 1-1: Manufacturer: syz [ 1206.882886][T19729] usb 1-1: SerialNumber: syz [ 1206.917644][T19729] usb 1-1: config 0 descriptor?? [ 1206.957150][T19729] ftdi_sio 1-1:0.132: FTDI USB Serial Device converter detected [ 1206.993698][T19729] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 1207.166331][T19729] usb 1-1: USB disconnect, device number 43 [ 1207.173046][T19729] ftdi_sio 1-1:0.132: device disconnected [ 1207.238789][T32375] loop3: detected capacity change from 0 to 512 [ 1207.257027][T32375] /dev/loop3: Can't open blockdev [ 1207.304820][T32379] xt_TCPMSS: Only works on TCP SYN packets [ 1207.709394][T32395] netlink: 'syz.3.12726': attribute type 1 has an invalid length. [ 1207.717344][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12726'. [ 1207.834563][T32399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1207.854844][T32399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1207.876745][T32399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1208.200315][T32386] loop1: detected capacity change from 0 to 32768 [ 1208.279562][T32386] Process accounting resumed [ 1208.618267][T19726] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1208.845709][T19726] usb 3-1: Using ep0 maxpacket: 32 [ 1208.853428][T19726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1208.872042][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12745'. [ 1208.888852][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12745'. [ 1208.900303][T19726] usb 3-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 1208.942168][T19726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.952817][T32438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12747'. [ 1208.963696][T19726] usb 3-1: Product: syz [ 1208.973052][T19726] usb 3-1: Manufacturer: syz [ 1208.986350][T32438] netlink: 'syz.1.12747': attribute type 1 has an invalid length. [ 1209.005217][T19726] usb 3-1: SerialNumber: syz [ 1209.262920][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1209.269323][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1209.291558][T19726] usb 3-1: 4:0: failed to get current value for ch 0 (-71) [ 1209.323139][T19726] usb 3-1: 4:0: failed to get current value for ch 0 (-71) [ 1209.357112][T19726] usb 3-1: unit 7 not found! [ 1209.406738][T19726] usb 3-1: USB disconnect, device number 25 [ 1209.697777][T32460] netlink: 'syz.4.12757': attribute type 1 has an invalid length. [ 1209.705741][T32460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12757'. [ 1210.936528][T13275] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1211.000325][T32529] loop4: detected capacity change from 0 to 4096 [ 1211.041870][T32529] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1211.170592][T13275] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1211.200630][T32537] loop1: detected capacity change from 0 to 256 [ 1211.205033][T13275] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1211.224979][T13275] usb 1-1: Product: syz [ 1211.249766][T32537] exfat: Deprecated parameter 'utf8' [ 1211.284604][T13275] usb 1-1: Manufacturer: syz [ 1211.289378][T13275] usb 1-1: SerialNumber: syz [ 1211.306328][T32537] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1211.333627][T13275] usb 1-1: config 0 descriptor?? [ 1211.591357][T13275] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v29 fw v73.0.0 (1 channels) [ 1211.825518][T13275] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1211.833935][T13275] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1211.972901][T13275] peak_usb: probe of 1-1:0.0 failed with error -71 [ 1212.000882][T13275] usb 1-1: USB disconnect, device number 44 [ 1212.001495][T32561] ip6t_srh: unknown srh invflags 4000 [ 1212.194577][ T27] audit: type=1326 audit(1055962.000:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32566 comm="syz.1.12790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1212.258211][ T27] audit: type=1326 audit(1055962.019:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32566 comm="syz.1.12790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1212.355546][ T27] audit: type=1326 audit(1055962.019:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32566 comm="syz.1.12790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1212.379468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.440501][ T27] audit: type=1326 audit(1055962.019:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32566 comm="syz.1.12790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1212.464562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.514081][ T27] audit: type=1326 audit(1055962.019:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32566 comm="syz.1.12790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1212.538155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.589151][T32580] netlink: 'syz.2.12795': attribute type 1 has an invalid length. [ 1212.908321][T32592] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1213.200729][T19715] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1213.459598][T19715] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1213.489004][T19715] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.514863][T19715] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1213.523962][T19715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.572873][T19715] usb 1-1: Product: syz [ 1213.577238][T19715] usb 1-1: Manufacturer: syz [ 1213.595586][T19715] usb 1-1: SerialNumber: syz [ 1213.622718][T19715] rtl8150 1-1:1.0: couldn't find required endpoints [ 1213.644066][T19715] rtl8150: probe of 1-1:1.0 failed with error -5 [ 1213.875565][T19715] usb 1-1: USB disconnect, device number 45 [ 1214.371682][T32650] loop3: detected capacity change from 0 to 512 [ 1214.436798][T32650] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1214.468084][T32650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1214.497067][T32655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12832'. [ 1214.625046][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 1214.796757][T32665] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1214.876998][T32670] loop3: detected capacity change from 0 to 1024 [ 1214.917252][T32670] /dev/loop3: Can't open blockdev [ 1215.638154][T13275] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1215.865859][T19729] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1215.867847][T13275] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1215.898340][T13275] usb 2-1: config 1 has no interface number 0 [ 1215.912392][T13275] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1215.933769][T13275] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 1215.991354][T13275] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1216.018789][T13275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.058662][T13275] usb 2-1: Product: syz [ 1216.074056][T13275] usb 2-1: Manufacturer: syz [ 1216.079014][T13275] usb 2-1: SerialNumber: syz [ 1216.118046][T32685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1216.127778][T32685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1216.138004][T19729] usb 4-1: Using ep0 maxpacket: 16 [ 1216.153725][T19729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1216.173054][T19729] usb 4-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 1216.217144][T19729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1216.249852][T19729] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1216.270315][T19729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.297520][T19729] usb 4-1: Product: syz [ 1216.320489][T19729] usb 4-1: Manufacturer: syz [ 1216.325467][T19729] usb 4-1: SerialNumber: syz [ 1216.372650][T32685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1216.408340][T32685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1216.420347][T13275] usb 2-1: No status endpoint found [ 1216.582170][T19729] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 1216.606697][T19729] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1216.658115][T13275] usb 2-1: USB disconnect, device number 31 [ 1216.685018][T19729] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1216.743699][T19729] usb 4-1: USB disconnect, device number 22 [ 1216.978624][T32747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12878'. [ 1217.000373][ T4986] udevd[4986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.442543][T32766] loop1: detected capacity change from 0 to 256 [ 1217.459185][T32766] exfat: Deprecated parameter 'utf8' [ 1217.560862][T32766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1217.962826][ T316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12896'. [ 1218.191423][ T328] autofs4:pid:328:autofs_fill_super: called with bogus options [ 1218.344732][ T334] netlink: 6 bytes leftover after parsing attributes in process `syz.2.12904'. [ 1218.444043][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1218.641312][ T26] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1218.672336][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.709898][ T26] usb 5-1: config 0 descriptor?? [ 1218.739216][ T26] cp210x 5-1:0.0: cp210x converter detected [ 1218.862663][ T27] audit: type=1326 audit(1055968.148:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=351 comm="syz.1.12914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1218.930537][ T27] audit: type=1326 audit(1055968.148:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=351 comm="syz.1.12914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1219.045172][ T27] audit: type=1326 audit(1055968.148:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=351 comm="syz.1.12914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1219.075280][ T358] cgroup: subsys name conflicts with all [ 1219.117833][ T27] audit: type=1326 audit(1055968.148:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=351 comm="syz.1.12914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1219.176718][ T26] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1219.185660][ T27] audit: type=1326 audit(1055968.148:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=351 comm="syz.1.12914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1219.209416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.210268][ T26] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1219.230303][ T26] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1219.266684][ T1080] block nbd1: Attempted send on invalid socket [ 1219.273257][ T1080] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1219.284240][ T26] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1219.289683][ T363] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 1219.298829][ T26] usb 5-1: USB disconnect, device number 10 [ 1219.307135][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1219.315592][ T26] cp210x 5-1:0.0: device disconnected [ 1219.365995][ T27] audit: type=1326 audit(1055968.203:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=353 comm="syz.0.12915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1219.391286][ T27] audit: type=1326 audit(1055968.203:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=353 comm="syz.0.12915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1219.483429][ T27] audit: type=1326 audit(1055968.213:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=353 comm="syz.0.12915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1219.538319][ T27] audit: type=1326 audit(1055968.213:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=353 comm="syz.0.12915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1219.571683][ T372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12924'. [ 1219.607688][ T27] audit: type=1326 audit(1055968.213:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=353 comm="syz.0.12915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1219.899274][ T386] device veth1 entered promiscuous mode [ 1219.918061][ T386] netlink: 'syz.1.12929': attribute type 1 has an invalid length. [ 1219.935390][ T386] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12929'. [ 1220.177398][T19726] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1220.403534][ T407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12937'. [ 1220.409069][T19726] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.448889][ T408] @0Ù: renamed from virt_wifi0 [ 1220.459090][T19726] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1220.516832][T19726] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1220.553074][T19726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.581928][ T410] ieee802154 phy0 wpan0: encryption failed: -22 [ 1220.597710][T19726] usb 5-1: Product: syz [ 1220.619593][T19726] usb 5-1: Manufacturer: syz [ 1220.632504][T19726] usb 5-1: SerialNumber: syz [ 1220.822495][ T421] netlink: 'syz.2.12945': attribute type 1 has an invalid length. [ 1220.859940][ T421] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.12945'. [ 1220.875744][T19726] usb 5-1: unit 4 not found! [ 1220.892857][ T424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12946'. [ 1220.923145][T19726] usb 5-1: USB disconnect, device number 11 [ 1221.940671][ T455] loop2: detected capacity change from 0 to 4096 [ 1222.247222][ T470] netlink: 'syz.0.12968': attribute type 1 has an invalid length. [ 1222.575684][ T450] loop3: detected capacity change from 0 to 32768 [ 1222.634774][ T479] loop4: detected capacity change from 0 to 4096 [ 1223.741968][ T516] xt_hashlimit: overflow, try lower: 6/0 [ 1224.475812][ T514] loop0: detected capacity change from 0 to 32768 [ 1224.510854][T19581] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1224.534975][ T514] (syz.0.12991,514,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1224.583832][ T514] (syz.0.12991,514,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1224.665895][ T514] JBD2: Ignoring recovery information on journal [ 1224.718679][T19581] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1224.730203][T19581] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 1224.745000][T19581] usb 5-1: string descriptor 0 read error: -22 [ 1224.751629][T19581] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1224.761393][T19581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.830147][ T514] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1224.996305][T19581] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1225.219329][T19581] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1225.304340][T19581] usb 5-1: USB disconnect, device number 12 [ 1225.430606][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 1225.518539][ T574] comedi comedi0: no devices specified [ 1225.566651][ T577] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1225.594364][ T577] overlayfs: missing 'lowerdir' [ 1225.861485][ T587] xt_SECMARK: invalid mode: 4 [ 1226.051224][ T591] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1226.864620][ T623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13044'. [ 1228.703590][T13275] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1228.769989][ T671] loop3: detected capacity change from 0 to 40427 [ 1229.138727][T13275] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1229.146829][T13275] usb 3-1: config 0 has no interface number 0 [ 1229.176438][T13275] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1229.201133][T13275] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1229.220248][T13275] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 1229.231420][T13275] usb 3-1: config 0 interface 2 has no altsetting 0 [ 1229.257897][T13275] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1229.276445][T13275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.298036][T13275] usb 3-1: Product: syz [ 1229.315181][T13275] usb 3-1: Manufacturer: syz [ 1229.327076][T13275] usb 3-1: SerialNumber: syz [ 1229.361535][T13275] usb 3-1: config 0 descriptor?? [ 1229.409432][ T684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1229.416751][ T684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1229.749963][ T716] netlink: 196 bytes leftover after parsing attributes in process `syz.1.13090'. [ 1229.759497][ T716] netlink: 196 bytes leftover after parsing attributes in process `syz.1.13090'. [ 1229.781807][ T716] netlink: 19 bytes leftover after parsing attributes in process `syz.1.13090'. [ 1229.881700][T19726] usb 3-1: USB disconnect, device number 26 [ 1230.225222][ T728] netlink: 'syz.3.13096': attribute type 13 has an invalid length. [ 1230.244919][ T728] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13096'. [ 1230.319559][ T728] syz_tun: refused to change device tx_queue_len [ 1230.326018][ T728] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1230.405165][ T730] loop0: detected capacity change from 0 to 4096 [ 1230.507800][ T730] NILFS (loop0): the device already has a read-only mount. [ 1230.774835][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1230.774849][ T27] audit: type=1326 audit(1055979.151:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1230.892167][ T27] audit: type=1326 audit(1055979.151:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1230.915933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.005496][ T27] audit: type=1326 audit(1055979.151:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.032219][ T27] audit: type=1326 audit(1055979.151:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.108546][ T27] audit: type=1326 audit(1055979.179:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.132305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.227917][ T27] audit: type=1326 audit(1055979.179:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.297481][ T759] loop3: detected capacity change from 0 to 512 [ 1231.303852][ T27] audit: type=1326 audit(1055979.179:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.303892][ T27] audit: type=1326 audit(1055979.179:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.303924][ T27] audit: type=1326 audit(1055979.179:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=741 comm="syz.1.13102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1231.382336][ T759] /dev/loop3: Can't open blockdev [ 1231.433536][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1231.447743][ T4986] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1231.549380][T19726] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1231.736990][ T773] xt_NFQUEUE: number of total queues is 0 [ 1231.761404][T19726] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1231.791712][T19726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1231.822637][T19726] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice=f5.01 [ 1231.865811][T19726] usb 5-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 1231.897708][T19726] usb 5-1: Manufacturer: syz [ 1231.904940][T19726] usb 5-1: config 0 descriptor?? [ 1231.912477][T19726] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1232.016947][ T782] loop1: detected capacity change from 0 to 164 [ 1232.083265][ T782] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1232.087574][ T786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13121'. [ 1232.158856][ T8857] usb 5-1: USB disconnect, device number 13 [ 1232.928926][ T27] audit: type=1400 audit(1055981.145:333): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=813 comm="syz.0.13137" [ 1232.967945][ T818] loop3: detected capacity change from 0 to 256 [ 1233.305860][ T830] netlink: 'syz.4.13143': attribute type 13 has an invalid length. [ 1233.351254][ T830] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13143'. [ 1233.398887][ T830] syz_tun: refused to change device tx_queue_len [ 1233.436006][ T830] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1233.602317][ T843] netlink: 'syz.3.13149': attribute type 2 has an invalid length. [ 1233.682650][T19726] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1233.887066][T19726] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1233.906058][T19726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.915341][T19726] usb 3-1: Product: syz [ 1233.919683][T19726] usb 3-1: Manufacturer: syz [ 1233.924423][T19726] usb 3-1: SerialNumber: syz [ 1234.166851][T19726] usb 3-1: unit 5 not found! [ 1234.174095][T19726] usb 3-1: unit 102 not found! [ 1234.201509][T19726] usb 3-1: USB disconnect, device number 27 [ 1234.304846][ T850] loop0: detected capacity change from 0 to 40427 [ 1234.322610][ T850] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1234.331585][ T850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1234.341481][ T850] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1234.360374][ T850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1234.434096][ T850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1234.450032][ T850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1234.462017][ T857] loop4: detected capacity change from 0 to 32768 [ 1234.479195][ T4986] udevd[4986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1234.505281][ T857] (syz.4.13156,857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1234.576158][ T857] (syz.4.13156,857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1234.652939][ T857] JBD2: Ignoring recovery information on journal [ 1234.870003][ T857] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1235.240618][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 1235.637123][ T886] loop3: detected capacity change from 0 to 2048 [ 1235.644831][ T886] /dev/loop3: Can't open blockdev [ 1236.514719][ T934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13183'. [ 1236.717137][ T941] loop1: detected capacity change from 0 to 1764 [ 1236.764528][ T941] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1236.884126][T19726] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1237.117383][T19726] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1237.145491][T19726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.181736][T19726] usb 5-1: config 0 descriptor?? [ 1237.438868][T19726] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1237.454252][T19726] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1237.565495][ T974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13201'. [ 1237.574637][ T974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13201'. [ 1237.673976][T19726] [drm:udl_init] *ERROR* Selecting channel failed [ 1237.743494][T19726] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1237.792703][T19726] [drm] Initialized udl on minor 2 [ 1237.835656][ T984] overlayfs: conflicting options: userxattr,redirect_dir=off [ 1237.847382][T19726] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.883082][T19726] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.911143][T19726] usb 5-1: USB disconnect, device number 14 [ 1237.932799][T19729] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1237.970824][T19729] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1237.988925][T19729] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1238.039467][ T994] loop0: detected capacity change from 0 to 64 [ 1238.237037][T19729] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1238.307249][ T1000] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 1238.327339][ T1000] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 1238.460870][T19729] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1238.477566][T19729] usb 4-1: config 0 has no interface number 0 [ 1238.495906][T19729] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1238.531644][T19729] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1238.561990][T19729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.580687][T19729] usb 4-1: Product: syz [ 1238.590937][T19729] usb 4-1: Manufacturer: syz [ 1238.601761][T19729] usb 4-1: SerialNumber: syz [ 1238.617347][T19729] usb 4-1: config 0 descriptor?? [ 1238.639161][T19729] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1238.904341][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1239.136740][ T26] usb 4-1: USB disconnect, device number 23 [ 1239.160534][ T26] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1239.255411][T19729] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1239.463102][T19729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1239.490163][T19729] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1239.502967][T19729] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 145, changing to 11 [ 1239.533289][T19729] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1239.569416][T19729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.597910][T19729] usb 5-1: Product: syz [ 1239.608932][T19729] usb 5-1: Manufacturer: syz [ 1239.621955][T19729] usb 5-1: SerialNumber: syz [ 1239.764756][ T1057] can: request_module (can-proto-3) failed. [ 1239.870395][T19729] cdc_ncm 5-1:1.0: bind() failure [ 1239.886482][T19729] usbtest 5-1:1.0: Linux gadget zero [ 1239.897836][T19729] usbtest 5-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1239.913020][T19729] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1239.927792][T19729] cdc_ncm 5-1:1.1: bind() failure [ 1239.981002][T19729] usbtest 5-1:1.1: couldn't get endpoints, -71 [ 1239.991826][T19729] usbtest: probe of 5-1:1.1 failed with error -71 [ 1240.012670][T19729] usb 5-1: USB disconnect, device number 15 [ 1240.596466][ T1086] loop2: detected capacity change from 0 to 4096 [ 1240.643806][ T1086] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1240.696698][ T1094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13251'. [ 1240.705823][ T1094] netlink: 1391 bytes leftover after parsing attributes in process `syz.4.13251'. [ 1240.760396][ T1096] program syz.0.13252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1240.917015][ T1098] Process accounting paused [ 1241.142394][ T1108] loop2: detected capacity change from 0 to 2048 [ 1241.351344][ T1108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1241.472690][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1241.511450][ T1123] loop3: detected capacity change from 0 to 4096 [ 1241.969391][ T1144] netlink: 'syz.3.13274': attribute type 3 has an invalid length. [ 1242.007260][ T1144] netlink: 766 bytes leftover after parsing attributes in process `syz.3.13274'. [ 1242.061403][T19729] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1242.192436][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1242.192449][ T27] audit: type=1326 audit(1055989.692:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.1.13279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1242.222340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.294582][T19729] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1242.312130][T19729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.340882][ T27] audit: type=1326 audit(1055989.729:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.1.13279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1242.391671][T19729] usb 5-1: config 0 has no interface number 0 [ 1242.412716][T19729] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1242.430545][ T1160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13282'. [ 1242.440012][T19729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.450708][ T27] audit: type=1326 audit(1055989.729:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.1.13279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1242.478918][ T1160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13282'. [ 1242.483840][T19729] usb 5-1: Product: syz [ 1242.492569][T19729] usb 5-1: Manufacturer: syz [ 1242.505881][T19729] usb 5-1: SerialNumber: syz [ 1242.527954][T19729] usb 5-1: config 0 descriptor?? [ 1242.555591][ T27] audit: type=1326 audit(1055989.729:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.1.13279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1242.584479][ T27] audit: type=1326 audit(1055989.729:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.1.13279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00da59de99 code=0x7ffc0000 [ 1242.641552][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13285'. [ 1242.723375][ T1168] IPv6: Can't replace route, no match found [ 1242.763165][T19729] usb 5-1: USB disconnect, device number 16 [ 1242.775002][ T1171] ipt_ECN: cannot use operation on non-tcp rule [ 1243.170020][ T1186] overlayfs: empty lowerdir [ 1243.530563][ T1172] loop0: detected capacity change from 0 to 32768 [ 1243.664890][ T1172] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1243.978855][ T26] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1244.067205][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 1244.186765][ T26] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1244.206003][ T26] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1244.238258][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.264321][ T26] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1244.285015][ T26] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1244.339303][ T26] usb 2-1: Product: syz [ 1244.343541][ T26] usb 2-1: Manufacturer: syz [ 1244.372128][ T26] usb 2-1: SerialNumber: syz [ 1244.391213][ T26] usb 2-1: config 0 descriptor?? [ 1244.400683][ T26] hub 2-1:0.0: bad descriptor, ignoring hub [ 1244.413666][ T1227] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13311'. [ 1244.422162][ T26] hub: probe of 2-1:0.0 failed with error -5 [ 1244.441421][ T1227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13311'. [ 1244.457439][ T26] usb 2-1: selecting invalid altsetting 0 [ 1244.856671][T19581] usb 2-1: USB disconnect, device number 32 [ 1245.055001][ T27] audit: type=1326 audit(1055992.332:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1248 comm="syz.0.13324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1245.073537][ T26] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1245.095001][ T27] audit: type=1326 audit(1055992.332:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1248 comm="syz.0.13324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1245.133045][ T27] audit: type=1326 audit(1055992.332:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1248 comm="syz.0.13324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1245.157268][T19729] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1245.169473][ T27] audit: type=1326 audit(1055992.332:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1248 comm="syz.0.13324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1245.194115][ T27] audit: type=1326 audit(1055992.332:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1248 comm="syz.0.13324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999de99 code=0x7ffc0000 [ 1245.300638][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 1245.307957][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.322642][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.349172][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1245.365629][T19729] usb 5-1: Using ep0 maxpacket: 16 [ 1245.373148][T19729] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.383609][ T26] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1245.403466][T19729] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1245.416933][ T26] usb 4-1: Product: syz [ 1245.430272][T19729] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1245.441744][ T26] usb 4-1: Manufacturer: syz [ 1245.446383][ T26] usb 4-1: SerialNumber: syz [ 1245.472811][ T26] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input111 [ 1245.484801][T19729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.492825][T19729] usb 5-1: Product: syz [ 1245.517107][T19729] usb 5-1: Manufacturer: syz [ 1245.526331][T19729] usb 5-1: SerialNumber: syz [ 1245.777803][T19726] usb 4-1: USB disconnect, device number 24 [ 1245.792815][T19729] usb 5-1: 0:2 : does not exist [ 1245.813199][T19729] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1245.866590][T19729] usb 5-1: USB disconnect, device number 17 [ 1245.875653][T19726] appletouch 4-1:1.0: input: appletouch disconnected [ 1245.902047][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1245.955496][ T1269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1246.166377][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.180591][ T4986] udevd[4986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.210472][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.251723][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.285708][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.381813][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13341'. [ 1246.578633][ T1293] [U]  [ 1246.583111][ T26] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1246.801614][ T26] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1246.817417][ T26] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1246.849151][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1246.871876][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1246.914999][ T26] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1246.923470][ T26] usb 1-1: Product: syz [ 1246.947860][ T26] usb 1-1: Manufacturer: syz [ 1246.968269][ T26] usb 1-1: SerialNumber: syz [ 1246.988249][ T26] usb 1-1: config 0 descriptor?? [ 1247.006535][ T26] hub 1-1:0.0: bad descriptor, ignoring hub [ 1247.015649][ T1311] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 1247.028136][ T26] hub: probe of 1-1:0.0 failed with error -5 [ 1247.038663][ T26] usb 1-1: selecting invalid altsetting 0 [ 1247.050230][ T1311] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 1247.407165][T19729] usb 1-1: USB disconnect, device number 46 [ 1247.778052][ T1340] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1247.806759][ T1340] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1247.816942][ T1340] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1247.823697][ T1340] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1247.831157][ T1340] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.838328][ T1340] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1247.844972][ T1340] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1247.853239][ T1340] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1248.094659][ T1350] netlink: 'syz.2.13371': attribute type 3 has an invalid length. [ 1248.130100][ T1350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13371'. [ 1248.143904][ T1350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13371'. [ 1248.426423][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1248.426437][ T27] audit: type=1326 audit(1055995.443:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1248.517575][ T27] audit: type=1326 audit(1055995.443:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1248.616359][ T27] audit: type=1326 audit(1055995.470:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1248.707510][ T27] audit: type=1326 audit(1055995.470:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1248.807096][ T27] audit: type=1326 audit(1055995.470:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1248.881827][ T27] audit: type=1326 audit(1055995.470:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1248.982004][ T27] audit: type=1326 audit(1055995.470:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1249.048870][ T27] audit: type=1326 audit(1055995.470:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1249.119622][ T27] audit: type=1326 audit(1055995.470:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1360 comm="syz.3.13377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ef159de99 code=0x7ffc0000 [ 1249.189374][ T1386] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1249.228702][T19729] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1249.441743][T19729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1249.480575][T19729] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1249.514411][T19729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.538710][T19729] usb 4-1: Product: syz [ 1249.542931][T19729] usb 4-1: Manufacturer: syz [ 1249.575122][T19729] usb 4-1: SerialNumber: syz [ 1249.684428][ T1401] loop4: detected capacity change from 0 to 4096 [ 1249.705745][ T1401] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1249.804848][T19729] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1249.825805][ T1401] ntfs3: loop4: ino=5, "/" directory corrupted [ 1249.838244][T19729] usb 4-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 1249.889512][T19729] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1249.924316][T19729] usb 4-1: USB disconnect, device number 25 [ 1250.182337][ T1415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13401'. [ 1250.192593][ T4986] udevd[4986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.270816][ T1417] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1250.379259][ T1421] loop1: detected capacity change from 0 to 128 [ 1250.420004][ T1421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1250.720191][ T1432] netlink: 'syz.2.13412': attribute type 21 has an invalid length. [ 1250.887812][ T1443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1250.912226][ T1443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1250.962402][ T1444] loop1: detected capacity change from 0 to 4096 [ 1251.083548][ T1445] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.426660][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.519383][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.526918][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.646864][ T1463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1252.396159][ T1502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.417834][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.450195][ T1502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.495378][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.686997][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1252.711363][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1252.730011][ T1504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.147294][ T1526] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13454'. [ 1253.521362][ T1545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1253.522076][ T1546] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13464'. [ 1253.537937][ T26] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1253.687576][ T1554] ipt_CLUSTERIP: Please specify destination IP [ 1253.739886][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 1253.748025][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1253.762311][T19729] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1253.784084][ T26] usb 5-1: config 1 has an invalid interface number: 237 but max is 0 [ 1253.801315][ T26] usb 5-1: config 1 has no interface number 0 [ 1253.810262][ T26] usb 5-1: config 1 interface 237 has no altsetting 0 [ 1253.810828][ T1558] nftables ruleset with unbound chain [ 1253.837681][T19581] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 1253.848637][ T26] usb 5-1: string descriptor 0 read error: -22 [ 1253.855034][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 1253.880232][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.903349][ T26] ipaq 5-1:1.237: PocketPC PDA converter detected [ 1253.978154][T19729] usb 1-1: Using ep0 maxpacket: 16 [ 1253.988162][T19729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.007832][T19729] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1254.035096][T19729] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1254.051328][T19729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.066940][T19581] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.074434][T19729] usb 1-1: Product: syz [ 1254.082483][T19581] usb 3-1: config 0 has no interface number 0 [ 1254.084871][T19729] usb 1-1: Manufacturer: syz [ 1254.104588][T19729] usb 1-1: SerialNumber: syz [ 1254.108258][T19581] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1254.136813][T19581] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1254.147266][ T26] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 1254.158052][T19581] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1254.167272][T19581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.181282][T19581] usb 3-1: config 0 descriptor?? [ 1254.254911][T19581] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1254.366191][T19729] usb 1-1: 0:2 : does not exist [ 1254.380523][T19729] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1254.395730][ T8857] usb 5-1: USB disconnect, device number 18 [ 1254.410743][ T8857] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1254.428900][T19729] usb 1-1: USB disconnect, device number 47 [ 1254.438324][ T8857] ipaq 5-1:1.237: device disconnected [ 1254.457982][ T1548] iowarrior 3-1:0.1: Error -90 while submitting URB [ 1254.515317][T19581] usb 3-1: USB disconnect, device number 28 [ 1254.738344][ T4986] udevd[4986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.818555][ T1585] comedi comedi0: c6xdigio: I/O port conflict (0x3,3) [ 1254.983301][ T1591] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1255.207528][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.266915][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.299279][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.317866][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.359542][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.370764][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.398762][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.420045][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13490'. [ 1255.448122][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1255.464167][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1255.471887][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1255.682394][ T1616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.734798][ T1616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.763364][ T1616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.829679][ T1616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.979813][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.242705][ T26] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1256.407109][ T1650] xt_HMARK: spi-set and port-set can't be combined [ 1256.449821][ T26] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1256.480930][ T26] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1256.503074][ T26] usb 1-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 1256.534821][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.542872][ T26] usb 1-1: Product: syz [ 1256.558799][ T26] usb 1-1: Manufacturer: syz [ 1256.564029][ T26] usb 1-1: SerialNumber: syz [ 1256.622549][ T1631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1256.722530][ T1662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.743811][ T1662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.749374][ T1663] netlink: 'syz.3.13521': attribute type 1 has an invalid length. [ 1256.766213][ T1662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.790575][ T1662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.105153][ T26] usbhid 1-1:1.0: can't add hid device: -71 [ 1257.112819][ T26] usbhid: probe of 1-1:1.0 failed with error -71 [ 1257.156086][ T26] usb 1-1: USB disconnect, device number 48 [ 1258.266010][ T1736] loop4: detected capacity change from 0 to 8 [ 1258.421753][ T1743] loop1: detected capacity change from 0 to 16 [ 1258.461211][ T1743] erofs: (device loop1): mounted with root inode @ nid 36. [ 1258.522949][ T1743] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1258.543812][ T1743] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1258.556378][ T1747] IPv6: Can't replace route, no match found [ 1258.582599][ T1743] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1258.604553][ T1743] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1258.625064][ T1743] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-22] [ 1258.636718][ T26] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1258.658073][ T27] audit: type=1800 audit(1056004.876:364): pid=1743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13561" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1258.844094][ T26] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1258.880198][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.898123][ T26] usb 3-1: config 0 descriptor?? [ 1258.922516][ T1759] __nla_validate_parse: 78 callbacks suppressed [ 1258.922560][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1258.972824][ T1759] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1258.982764][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.011766][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.023977][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.043804][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.059888][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.069710][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.079309][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.089081][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.099557][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1259.111441][ T1759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1259.122083][ T1759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1259.137396][ T1759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1259.148541][ T26] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1259.160750][ T26] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1259.366939][ T26] [drm:udl_init] *ERROR* Selecting channel failed [ 1259.386718][ T26] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1259.406961][ T26] [drm] Initialized udl on minor 2 [ 1259.419156][ T26] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1259.439467][ T26] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1259.458106][ T26] usb 3-1: USB disconnect, device number 29 [ 1259.484798][T19581] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1259.506020][T19581] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1259.535836][T19581] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1259.936703][T19581] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1259.959143][ T1775] loop3: detected capacity change from 0 to 32768 [ 1259.986855][ T1775] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.13577 (1775) [ 1260.039731][ T1775] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1260.057618][ T1775] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1260.090288][ T1775] BTRFS info (device loop3): enabling auto defrag [ 1260.111415][ T1775] BTRFS info (device loop3): force clearing of disk cache [ 1260.144616][T19581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1260.164398][ T1775] BTRFS info (device loop3): disabling log replay at mount time [ 1260.172978][T19581] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1260.194569][ T1775] BTRFS info (device loop3): turning on async discard [ 1260.201680][T19581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1260.211864][ T1775] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1260.239949][ T1775] BTRFS info (device loop3): turning off async discard [ 1260.246929][T19581] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1260.268800][ T1775] BTRFS info (device loop3): disabling free space tree [ 1260.277891][ T1775] BTRFS info (device loop3): disabling tree log [ 1260.286530][T19581] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1260.303739][ T1775] BTRFS info (device loop3): enabling disk space caching [ 1260.311354][T19581] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 1260.340897][ T1775] BTRFS info (device loop3): disk space caching is enabled [ 1260.349619][T19581] usb 1-1: Product: syz [ 1260.353862][T19581] usb 1-1: Manufacturer: syz [ 1260.365635][T19581] usb 1-1: SerialNumber: syz [ 1260.387957][T19581] usb 1-1: config 0 descriptor?? [ 1260.411149][T19581] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1260.432209][T19581] kvaser_usb 1-1:0.0: Failed to initialize card, error -90 [ 1260.445793][T19581] kvaser_usb: probe of 1-1:0.0 failed with error -90 [ 1260.633617][ T8857] usb 1-1: USB disconnect, device number 49 [ 1260.665096][ T1775] BTRFS error (device loop3: state M): nologreplay must be used with ro mount option [ 1260.684810][ T1775] BTRFS info (device loop3: state M): left=0, need=98304, flags=5 [ 1260.716602][ T1775] BTRFS info (device loop3: state M): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 1260.728044][ T1775] BTRFS info (device loop3: state M): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 1260.742619][ T1775] BTRFS info (device loop3: state M): global_block_rsv: size 1048576 reserved 1044480 [ 1260.752933][ T1775] BTRFS info (device loop3: state M): trans_block_rsv: size 0 reserved 0 [ 1260.761526][ T1775] BTRFS info (device loop3: state M): chunk_block_rsv: size 0 reserved 0 [ 1260.770018][ T1775] BTRFS info (device loop3: state M): delayed_block_rsv: size 0 reserved 0 [ 1260.778723][ T1775] BTRFS info (device loop3: state M): delayed_refs_rsv: size 0 reserved 0 [ 1260.944309][ T1775] BTRFS error (device loop3: state M): allocation failed flags 4, wanted 4096 tree-log 0, relocation: 0 [ 1260.978790][ T1775] BTRFS info (device loop3: state M): space_info DATA+METADATA (sub-group id 0) has -1048576 free, is full [ 1260.991114][ T1775] BTRFS info (device loop3: state M): space_info total=3276800, used=53248, pinned=0, reserved=0, may_use=1048576, readonly=3223552 zone_unusable=0 [ 1261.006203][ T1775] BTRFS info (device loop3: state M): global_block_rsv: size 1048576 reserved 1044480 [ 1261.016431][ T1775] BTRFS info (device loop3: state M): trans_block_rsv: size 0 reserved 0 [ 1261.024963][ T1775] BTRFS info (device loop3: state M): chunk_block_rsv: size 0 reserved 0 [ 1261.033498][ T1775] BTRFS info (device loop3: state M): delayed_block_rsv: size 0 reserved 0 [ 1261.042200][ T1775] BTRFS info (device loop3: state M): delayed_refs_rsv: size 0 reserved 0 [ 1261.083732][ T1775] BTRFS info (device loop3: state M): block group 5242880 has 1638400 bytes, 53248 used 0 pinned 0 reserved 0 zone_unusable [readonly] [ 1261.107184][ T1813] loop2: detected capacity change from 0 to 32768 [ 1261.108209][ T1775] BTRFS info (device loop3: state M): block group has cluster?: no [ 1261.139421][ T1775] BTRFS info (device loop3: state M): 0 blocks of free space at or bigger than bytes is [ 1261.160483][ T1775] BTRFS info (device loop3: state M): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 zone_unusable [readonly] [ 1261.198788][ T1813] JBD2: Ignoring recovery information on journal [ 1261.213404][ T1775] BTRFS critical (device loop3: state M): entry offset 6881280, bytes 1638400, bitmap no [ 1261.225091][T19729] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1261.283390][ T1813] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1261.335097][ T1775] BTRFS info (device loop3: state M): block group has cluster?: no [ 1261.343093][ T1775] BTRFS info (device loop3: state M): 0 blocks of free space at or bigger than bytes is [ 1261.380531][ T1775] BTRFS warning (device loop3: state M): Skipping commit of aborted transaction. [ 1261.426091][ T1775] ------------[ cut here ]------------ [ 1261.435669][ T1813] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1261.458132][ T1775] WARNING: CPU: 1 PID: 1775 at fs/btrfs/transaction.c:2013 btrfs_commit_transaction+0x31f6/0x3a70 [ 1261.469175][ T1775] Modules linked in: [ 1261.473120][ T1775] CPU: 1 PID: 1775 Comm: syz.3.13577 Not tainted syzkaller #0 [ 1261.479275][T19729] usb 5-1: config 1 has an invalid interface number: 82 but max is 1 [ 1261.480821][ T1775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1261.499447][ T1775] RIP: 0010:btrfs_commit_transaction+0x31f6/0x3a70 [ 1261.506094][ T1775] Code: e8 9f b6 13 fe be 01 00 00 00 48 89 df e8 32 dd a6 00 e9 cf d3 ff ff e8 88 b6 13 fe 48 c7 c7 20 ae cf 8a 89 de e8 6a 4d df fd <0f> 0b e9 95 f8 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 cf ff [ 1261.525828][ T1775] RSP: 0018:ffffc9000d727800 EFLAGS: 00010246 [ 1261.531982][ T1775] RAX: a2bc6a9984b6ac00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 1261.534693][T19729] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.540031][ T1775] RDX: ffffc9000dc21000 RSI: 000000000005e85a RDI: 000000000005e85b [ 1261.540050][ T1775] RBP: ffffc9000d727b08 R08: ffffc9000d727487 R09: 1ffff92001ae4e90 [ 1261.540068][ T1775] R10: dffffc0000000000 R11: fffff52001ae4e91 R12: ffff888071d4d7e0 [ 1261.540086][ T1775] R13: ffff888078c46000 R14: dffffc0000000000 R15: 0000000000000000 [ 1261.540103][ T1775] FS: 00007f5ef247e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1261.540124][ T1775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1261.540142][ T1775] CR2: 0000557560a11450 CR3: 0000000079492000 CR4: 00000000003506e0 [ 1261.540163][ T1775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1261.540178][ T1775] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1261.540193][ T1775] Call Trace: [ 1261.540202][ T1775] [ 1261.540217][ T1775] ? btrfs_commit_transaction+0x197/0x3a70 [ 1261.588798][T19729] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1261.591539][ T1775] ? btrfs_commit_transaction_async+0x460/0x460 [ 1261.634414][T19729] usb 5-1: config 1 has no interface number 2 [ 1261.643242][ T1775] ? __lock_acquire+0x7c40/0x7c40 [ 1261.643288][ T1775] ? do_raw_spin_unlock+0x11d/0x230 [ 1261.643312][ T1775] ? _raw_spin_unlock+0x24/0x40 [ 1261.643334][ T1775] ? join_transaction+0xc14/0xdd0 [ 1261.643363][ T1775] ? btrfs_record_root_in_trans+0x8c/0x180 [ 1261.681902][ T1775] ? start_transaction+0x474/0x1190 [ 1261.687173][ T1775] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 1261.693870][ T1775] btrfs_remount+0x718/0x1530 [ 1261.698701][ T1775] ? btrfs_statfs+0x1860/0x1860 [ 1261.703668][ T1775] ? dentry_lru_isolate+0x2e0/0x2e0 [ 1261.708949][ T1775] ? bpf_lsm_sb_remount+0x5/0x10 [ 1261.714050][ T1775] reconfigure_super+0x224/0x8d0 [ 1261.719060][ T1775] path_mount+0xcce/0xfb0 [ 1261.723456][ T1775] __se_sys_mount+0x2e3/0x3d0 [ 1261.724410][T19729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.728329][ T1775] ? __x64_sys_mount+0xc0/0xc0 [ 1261.741204][ T1813] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1261.743949][ T1775] ? lockdep_hardirqs_on+0x94/0x140 [ 1261.759112][ T1775] ? __x64_sys_mount+0x1c/0xc0 [ 1261.763942][ T1775] do_syscall_64+0x4c/0xa0 [ 1261.768497][ T1775] ? clear_bhb_loop+0x60/0xb0 [ 1261.773231][ T1775] ? clear_bhb_loop+0x60/0xb0 [ 1261.777975][ T1775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1261.783965][ T1775] RIP: 0033:0x7f5ef159f10a [ 1261.788437][ T1775] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.798689][T19729] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1261.808118][ T1775] RSP: 002b:00007f5ef247de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1261.808150][ T1775] RAX: ffffffffffffffda RBX: 00007f5ef247dee0 RCX: 00007f5ef159f10a [ 1261.808168][ T1775] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1261.808185][ T1775] RBP: 0000200000000f40 R08: 00007f5ef247dee0 R09: 0000000001a5a438 [ 1261.808202][ T1775] R10: 0000000001a5a438 R11: 0000000000000246 R12: 0000200000000f00 [ 1261.808218][ T1775] R13: 00007f5ef247dea0 R14: 0000000000000000 R15: 0000200000004440 [ 1261.808252][ T1775] [ 1261.808276][ T1775] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1261.808288][ T1775] CPU: 1 PID: 1775 Comm: syz.3.13577 Not tainted syzkaller #0 [ 1261.808309][ T1775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1261.808322][ T1775] Call Trace: [ 1261.808329][ T1775] [ 1261.808338][ T1775] dump_stack_lvl+0x188/0x24e [ 1261.808449][ T1775] ? memcpy+0x3c/0x60 [ 1261.808588][ T1775] ? show_regs_print_info+0x12/0x12 [ 1261.808672][ T1775] ? load_image+0x410/0x410 [ 1261.808767][ T1775] panic+0x2d3/0x710 [ 1261.808838][ T1775] ? bpf_jit_dump+0xd0/0xd0 [ 1261.808940][ T1775] __warn+0x2f8/0x4f0 [ 1261.808984][ T1775] ? btrfs_commit_transaction+0x31f6/0x3a70 [ 1261.809068][ T1775] ? btrfs_commit_transaction+0x31f6/0x3a70 [ 1261.809142][ T1775] report_bug+0x2ba/0x4f0 [ 1261.809249][ T1775] ? btrfs_commit_transaction+0x31f6/0x3a70 [ 1261.809333][ T1775] handle_bug+0x3a/0x70 [ 1261.809408][ T1775] exc_invalid_op+0x16/0x40 [ 1261.809491][ T1775] asm_exc_invalid_op+0x16/0x20 [ 1261.809566][ T1775] RIP: 0010:btrfs_commit_transaction+0x31f6/0x3a70 [ 1261.809638][ T1775] Code: e8 9f b6 13 fe be 01 00 00 00 48 89 df e8 32 dd a6 00 e9 cf d3 ff ff e8 88 b6 13 fe 48 c7 c7 20 ae cf 8a 89 de e8 6a 4d df fd <0f> 0b e9 95 f8 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 cf ff [ 1261.809700][ T1775] RSP: 0018:ffffc9000d727800 EFLAGS: 00010246 [ 1261.809749][ T1775] RAX: a2bc6a9984b6ac00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 1261.809783][ T1775] RDX: ffffc9000dc21000 RSI: 000000000005e85a RDI: 000000000005e85b [ 1261.809835][ T1775] RBP: ffffc9000d727b08 R08: ffffc9000d727487 R09: 1ffff92001ae4e90 [ 1261.809888][ T1775] R10: dffffc0000000000 R11: fffff52001ae4e91 R12: ffff888071d4d7e0 [ 1261.809943][ T1775] R13: ffff888078c46000 R14: dffffc0000000000 R15: 0000000000000000 [ 1261.810031][ T1775] ? btrfs_commit_transaction+0x197/0x3a70 [ 1261.810156][ T1775] ? btrfs_commit_transaction_async+0x460/0x460 [ 1261.810228][ T1775] ? __lock_acquire+0x7c40/0x7c40 [ 1261.810316][ T1775] ? do_raw_spin_unlock+0x11d/0x230 [ 1261.810378][ T1775] ? _raw_spin_unlock+0x24/0x40 [ 1261.810431][ T1775] ? join_transaction+0xc14/0xdd0 [ 1261.810514][ T1775] ? btrfs_record_root_in_trans+0x8c/0x180 [ 1261.810581][ T1775] ? start_transaction+0x474/0x1190 [ 1261.810675][ T1775] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 1261.810760][ T1775] btrfs_remount+0x718/0x1530 [ 1261.810874][ T1775] ? btrfs_statfs+0x1860/0x1860 [ 1261.810933][ T1775] ? dentry_lru_isolate+0x2e0/0x2e0 [ 1261.810999][ T1775] ? bpf_lsm_sb_remount+0x5/0x10 [ 1261.811076][ T1775] reconfigure_super+0x224/0x8d0 [ 1261.811148][ T1775] path_mount+0xcce/0xfb0 [ 1261.811232][ T1775] __se_sys_mount+0x2e3/0x3d0 [ 1261.811323][ T1775] ? __x64_sys_mount+0xc0/0xc0 [ 1261.811388][ T1775] ? lockdep_hardirqs_on+0x94/0x140 [ 1261.811429][ T1775] ? __x64_sys_mount+0x1c/0xc0 [ 1261.811492][ T1775] do_syscall_64+0x4c/0xa0 [ 1261.811545][ T1775] ? clear_bhb_loop+0x60/0xb0 [ 1261.811609][ T1775] ? clear_bhb_loop+0x60/0xb0 [ 1261.811680][ T1775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1261.811739][ T1775] RIP: 0033:0x7f5ef159f10a [ 1261.811786][ T1775] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.811824][ T1775] RSP: 002b:00007f5ef247de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1261.811871][ T1775] RAX: ffffffffffffffda RBX: 00007f5ef247dee0 RCX: 00007f5ef159f10a [ 1261.811908][ T1775] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1261.811944][ T1775] RBP: 0000200000000f40 R08: 00007f5ef247dee0 R09: 0000000001a5a438 [ 1261.811975][ T1775] R10: 0000000001a5a438 R11: 0000000000000246 R12: 0000200000000f00 [ 1261.812006][ T1775] R13: 00007f5ef247dea0 R14: 0000000000000000 R15: 0000200000004440 [ 1261.812081][ T1775] [ 1261.818626][ T1775] Kernel Offset: disabled [ 1262.235749][ T1775] Rebooting in 86400 seconds..