last executing test programs: 3.670075009s ago: executing program 1 (id=7628): r0 = getpid() tkill(r0, 0x801d) 3.499873392s ago: executing program 1 (id=7630): add_key$user(0x0, 0x0, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389", 0x28, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d00090502"], 0x0) 3.348989346s ago: executing program 2 (id=7633): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 3.257549198s ago: executing program 3 (id=7634): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 3.050037942s ago: executing program 3 (id=7636): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x83501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x8, 0x65, &(0x7f00000004c0)={0x2, 0x3, 0x12}, 0x8, 0x0, 0x8, 0x0, 0x6, 0xfffffffe, 0x0}) 2.810140958s ago: executing program 3 (id=7639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2142fb0720c7976d}, 0x40) 2.71209799s ago: executing program 2 (id=7642): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20002e2e, 0x10040, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 2.455624936s ago: executing program 2 (id=7645): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x891f, &(0x7f0000000100)="d9ef29539679c13a") 2.398712167s ago: executing program 3 (id=7646): ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000440)={0xe9, 0x1a, &(0x7f0000000040)}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101b8298a20030478fa0203135f19010902120001000010000904846600"], 0x0) 2.227636841s ago: executing program 2 (id=7648): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 1.998698086s ago: executing program 2 (id=7651): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)={0x0, 0x10}, 0x0, 0x0}) 1.947834157s ago: executing program 1 (id=7653): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) 1.758008671s ago: executing program 1 (id=7655): r0 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000096c0)={0xe, [0x0, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200}) 1.703724013s ago: executing program 0 (id=7657): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000, 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0xffffffffffffffc0, 0x5}) 1.517105797s ago: executing program 1 (id=7658): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.510627147s ago: executing program 0 (id=7659): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x2, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x5, 0x1, [0x4, 0x3, 0x6, 0x2, 0xfffd, 0x80, 0x6, 0xf96e, 0x8, 0x8000, 0xb, 0x8, 0xb, 0x4, 0x78, 0xff], 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 1.466464908s ago: executing program 4 (id=7660): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xf2, "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"}) 1.284809732s ago: executing program 1 (id=7661): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f000000b000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xbe562c8f84d38897, 0x49) 1.284260572s ago: executing program 0 (id=7662): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 1.159833845s ago: executing program 4 (id=7663): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0xfffffffffffffffe) 1.144031355s ago: executing program 0 (id=7664): unshare(0x26020400) pidfd_send_signal(0xffffffffffffffff, 0x5, 0x0, 0x0) 1.023163778s ago: executing program 4 (id=7665): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) 893.251811ms ago: executing program 0 (id=7666): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/134, &(0x7f0000000100)=0x86) 787.719703ms ago: executing program 3 (id=7667): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 735.660274ms ago: executing program 4 (id=7668): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 652.778386ms ago: executing program 0 (id=7669): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) 492.17613ms ago: executing program 4 (id=7670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 387.568982ms ago: executing program 3 (id=7671): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018ed8, &(0x7f0000000040)={[{@nodioread_nolock}, {@noblock_validity}, {@noblock_validity}, {@debug}, {@noquota}, {@auto_da_alloc_val}, {@noauto_da_alloc}]}, 0x6, 0x62b, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGVGI1uRJduJLSvxfD4w1rw3Y7339czTvJnx0wRQWGPpj1LE/ogH55OI0ZZlI9FYOJavd/+HmxfSKYl6/aXvk0jyvOb6Sf66J08MRcTnpyL+Ul5d7tzC4qXJWr3hVsSR+cvXjswtLB6evTx5cfri9JXq0f8fOz7xTPVYdUvi3JO/nj7z4j/effO1/818UTucxIk4V3ljKtri2CpjMRYP8hBb8wci4ng60+Hv8rTZASEUWjnfHysR8bcYjXKWahiN2Xf6Wjmgp+rliDpQUIn2DwXV7Ac0z+03dh58rse9ku1z72TjBGh1/AONayMxlJ0b7b6ftJwZDWTXNvZuQflpGb/fPPBhOsVD1yF+Xt46A1tQTjdLtyPi753iT7K67c0iTeMvPVSPJCImImIwr9/zm6hD0jLfKL/Udd3bmyink8eNP63hifw1zT/1mOWPtaV7cR0KANrdPZkfyJfS1MrxL+17NPs/sar/07g31H7sehz9Pv517/81j/dD2TXyUls/LO2znO38lpX2jG/ePv1+t/Jb+3/plJbf7Atuh3u3Iw60xf9W1v1Klrd/0mH7p6ucP7GxMl748rvT3Zb1O/76nYiDHc9/Vnql6Vz7/cnhPL96rHpkZrY2PdH42bGMTz979eNu5fc7/nT77+4Sf8v2X9UhT2O/tsEyPjl753K3ZSPrxl/6djBpnG8O5jmvT87PX69GDCZn8lUaN7Ky/KNr16W5TvM90vgP/btz+39o/2878RhufmRuwLWXL93vtmxsZU/b8PZvuZn8oL7BOnSTxj+1/vZf1f7TvPeWU7fWLOOnV278s9uytfb/4U3GBgAAAAAAAEVTyu7BJqXx5flSaXy8MV72r7G7VLs6N/+fmas3rkxFHMr+H7JSat7pHm2kkzRdzf8ftpk+2pb+b0Tsi4gPysNZevzC1dpUv4MHAAAAAAAAAAAAAAAAAACAJ8SefPx/8znVP5Yb4/+BgujlA+aAJ5v2D8WVtf/uz1wFdjDHfygu7R+KS/uH4tL+obi0fygu7R+KayAq/a4C0CeO/wAAAACwI+37192vk4hYenY4m1KD+TIjgmBnc+MPiqvc7woAfbN8619nHwpnQ/3/X/MvB+x9dYA+SDplZp2D+tqN/27H3wQAAAAAAAAAAAAAeuDg/s7j/xNjg2HHM+wPimsT4/99dQA85Xz1PxSXc3xgvVH8Q90WGP8PAAAAAAAAAAAAANtmJJuS0ng+FngkSqXx8Yg/RcTeqCQzs7XpiYj4c0R8Va7sStPVflcaAAAAAAAAAAAAAAAAAAAAdpi5hcVLk7Xa9PXWmd9W5ezsmeZTULehrOfiEX8rku3/swxHxHJOJeJR69y7mV35bruZ9xmYW1hMfqlnkoileHIC3FRcWzyz7kfHYE8/mAAAAAAAAAAAAAAAAAAAoIBaxh53duCjba4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGy/lef/926m3zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+nPwIAAP//0ns6KQ==") 205.604076ms ago: executing program 4 (id=7672): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x4000001, 0x1b, 0x10, 0x200, &(0x7f00000004c0)="a2609885a1c37cfcb4bc65ff233f282359751f4c51b0fb96c310a3959c62bb506708dfcc387b1a01de888aa5210daeeb3203be283e8b6dca663f2a0d1e5a94be2d381791ad16b43c7318a1ac761c1d9f70f4107e292512bc8aee125a7c93e8d551e4af0b1522f4ef59c78dcb6c1c2ce4441abb065ca27c8db367b97036deaaa2e32d13fb14455dec2a8e5c23f9661f7f6258cc9d334a6a545a31099a408a69c9c3d76ca176c1d0f70b69a6e693c78822e400965b533f60ef7138d6cec1c48f7202eafd47b93143ed8aeda26e75e8709015633c1df835ccec5b85ebaedd4e8e26b073bbe5d06cc26f492e62cdd0bec60741040845bd353a5e05d2cca3b38e08a234289d7045dd973ec8b4bf64c9f532abf169684ca25bdda82a0d495919cc5d5e840113806660467ee9c4e9530f7ec49bd5035717812c9e98909ec3901df33add1b9bb5ac589252f5da6b9d78b500285dfe94eeb01ed66681b62eb0da2b6349306fa93597a48c5e999b2e3a439c5969373babbfdcffda3dee57df9cb7dc0e0198ba4802f0f737ad587445e4863d14c2b6b043510e986f87080674173123be937f8ad5eec03af6cdee7de98337605377812e6ddda13667e47b05c4614cc2cf37f67f6cab461ad2b2d5276f2ab995bb6abcfa763c41bca8cca89fe10596ba1908a57ec6f3350b17af318e144c86a39e6b96926c537631515ec462173e7e1128871a32b2857f1615a2696e1c61f3197300000000000004d22a003f0b2c8c951b52f8d8da5c5ec9a0cdc28c7d978716856decc7d27cee809e050000009bcd193f1a9a5ce6398df194f1570efe113ba1ebdafa48aa151ef9a5aad98825fa78b5f92c066d453b3a28c154ec9642236892e4513c8a4766a4fc4a9c4212a076044c8c0684af421b055507ec32731d9dcfc1d96aecb669af44e5a425a5e40b42a2e7b9914760ddd2947360d7533b68e76c6999751ec6a52f01d401a7e9087b08c92bd9720d1f137424a2e8ebe1e06198405e4de90e7250861994f737a6fd984724161c72d442b1115d89659e4f6c7f978043f7b0661cb9def422e880551822dcd5a9889e01f1e6acb466a289349323dbcdf114138461ebe3c96ca00345d8e404d183833eb3eecf26ca995f5715ae1c59bab3458e0ddda9461ecd12cf2f905d3c5d8f588a75328407b74c8579d02f57bba3704d67b70ba2c3d1cbba4800bcd7f443e793554247eb05f3c624b2f333a1f257d639fb4086d4a682b911863e3fa6c0e70468e7a9540c73053d8ce960d22f93b1e26827bc3007d46dfb30738aab281dc52cc06d589dd54016c69bd3d6800f6f8bd35662c6de0569312e0e8f1197d7c150a3a44534fbc5806cf02be043a1e5890962e62275fd174a217d172dd0671e755bf60e913b1d0abf0e229b6b4fd700"}) 0s ago: executing program 2 (id=7673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): (device loop1): udf_load_vrs: No VRS found [ 622.671418][T15616] UDF-fs: Scanning with blocksize 1024 failed [ 622.740552][T15616] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 622.771959][T15616] UDF-fs: Scanning with blocksize 2048 failed [ 622.783315][T15616] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 622.843209][T15616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.221376][T15628] loop1: detected capacity change from 0 to 256 [ 623.349993][T15628] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 623.419576][T15628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.733771][T15635] loop4: detected capacity change from 0 to 128 [ 623.748338][T15637] loop1: detected capacity change from 0 to 128 [ 623.799937][T15635] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 623.832594][T15635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.197363][T15641] loop1: detected capacity change from 0 to 2048 [ 624.446797][T15643] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 624.491329][T15643] UDF-fs: Scanning with blocksize 512 failed [ 624.535868][T15643] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 624.571559][T15643] UDF-fs: Scanning with blocksize 1024 failed [ 624.623228][T15643] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 624.641798][T15643] UDF-fs: Scanning with blocksize 2048 failed [ 624.699441][T15643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.673302][T15657] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 625.742902][T15657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.140300][T15661] set_capacity_and_notify: 8 callbacks suppressed [ 626.140320][T15661] loop4: detected capacity change from 0 to 512 [ 626.551460][T15665] loop4: detected capacity change from 0 to 128 [ 626.804151][T15669] loop3: detected capacity change from 0 to 128 [ 626.849352][T15668] loop1: detected capacity change from 0 to 2048 [ 627.244981][T15678] loop1: detected capacity change from 0 to 128 [ 627.334245][T15678] VFS: unable to find oldfs superblock on device loop1 [ 627.607728][T15683] loop1: detected capacity change from 0 to 1024 [ 627.708364][T15683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.063196][T15685] loop1: detected capacity change from 0 to 32768 [ 629.183448][T15685] XFS (loop1): Mounting V5 Filesystem [ 629.329588][T15685] XFS (loop1): Ending clean mount [ 629.520570][ T4273] XFS (loop1): Unmounting Filesystem [ 630.726765][T15703] loop4: detected capacity change from 0 to 2048 [ 630.847482][T15703] loop4: p1 p2 p3 [ 630.975044][T15705] loop3: detected capacity change from 0 to 256 [ 631.087068][T15697] loop1: detected capacity change from 0 to 32768 [ 631.233684][T15697] XFS (loop1): Mounting V5 Filesystem [ 631.380524][T15697] XFS (loop1): Ending clean mount [ 631.473716][ T4950] udevd[4950]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 631.492720][ T4273] XFS (loop1): Unmounting Filesystem [ 631.493452][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 631.521207][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 631.612235][ T125] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 631.624650][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 631.639197][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 631.658908][ T4950] udevd[4950]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 631.852363][ T125] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCE, skipping [ 631.886980][ T125] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 631.929102][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.961958][ T125] usb 4-1: Product: syz [ 631.966300][ T125] usb 4-1: Manufacturer: syz [ 631.994783][ T125] usb 4-1: SerialNumber: syz [ 632.253894][ T125] usb 4-1: MIDIStreaming interface descriptor not found [ 632.325971][ T125] usb 4-1: USB disconnect, device number 54 [ 633.712595][T15712] loop4: detected capacity change from 0 to 65536 [ 633.821198][T15712] XFS (loop4): Mounting V5 Filesystem [ 634.032013][T15712] XFS (loop4): Ending clean mount [ 634.199008][T15712] Process accounting resumed [ 634.258621][ T4284] XFS (loop4): Unmounting Filesystem [ 634.353337][T15721] loop1: detected capacity change from 0 to 65536 [ 634.470506][T15721] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 636.026373][T15756] loop1: detected capacity change from 0 to 16384 [ 636.078656][T15756] REISERFS warning (device loop1): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop1, block 16, size 4096) [ 636.107519][T15756] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 636.775135][T15763] loop3: detected capacity change from 0 to 256 [ 636.798656][T15752] loop4: detected capacity change from 0 to 65536 [ 636.908240][T15752] XFS (loop4): Mounting V5 Filesystem [ 637.080513][T15752] XFS (loop4): Ending clean mount [ 637.256910][ T4284] XFS (loop4): Unmounting Filesystem [ 642.684147][T13362] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 642.902963][T13362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.922484][T13362] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.975557][T13362] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.014344][T13362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.041582][T13362] usb 3-1: Product: syz [ 643.060810][T13362] usb 3-1: Manufacturer: syz [ 643.084933][T13362] usb 3-1: SerialNumber: syz [ 643.565562][T13362] usb 3-1: 0:2 : does not exist [ 643.599450][T13362] usb 3-1: USB disconnect, device number 69 [ 645.658992][T15821] device bridge1 entered promiscuous mode [ 645.686860][T15823] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 646.163321][T15831] netlink: 'syz.3.5347': attribute type 1 has an invalid length. [ 646.523673][T15815] loop1: detected capacity change from 0 to 32768 [ 646.663478][T15815] XFS (loop1): Mounting V5 Filesystem [ 646.836426][T15815] XFS (loop1): Ending clean mount [ 647.018965][ T4273] XFS (loop1): Unmounting Filesystem [ 647.726158][T15874] xt_ecn: cannot match TCP bits for non-tcp packets [ 648.044172][ T26] audit: type=1326 audit(1784157627.779:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.3.5370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff102d9de59 code=0x7ffc0000 [ 648.134675][ T26] audit: type=1326 audit(1784157627.779:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.3.5370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff102d9de59 code=0x7ffc0000 [ 648.209424][ T26] audit: type=1326 audit(1784157627.779:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.3.5370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7ff102d9de59 code=0x7ffc0000 [ 648.350701][ T26] audit: type=1326 audit(1784157627.779:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.3.5370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff102d9de59 code=0x7ffc0000 [ 648.447528][ T26] audit: type=1326 audit(1784157627.779:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.3.5370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff102d9de59 code=0x7ffc0000 [ 648.549411][ T26] audit: type=1326 audit(1784157628.157:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.4.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 648.656163][ T26] audit: type=1326 audit(1784157628.157:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.4.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 648.740214][T15910] netlink: 'syz.4.5380': attribute type 3 has an invalid length. [ 648.775942][ T26] audit: type=1326 audit(1784157628.157:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.4.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 648.866268][ T26] audit: type=1326 audit(1784157628.157:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.4.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 648.978376][ T26] audit: type=1326 audit(1784157628.157:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.4.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 649.291516][T15933] netlink: 'syz.2.5387': attribute type 16 has an invalid length. [ 649.320800][T15933] netlink: 'syz.2.5387': attribute type 17 has an invalid length. [ 649.410098][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 649.474999][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 649.512857][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.601784][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 650.289379][T15151] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 650.506065][T15151] usb 4-1: Using ep0 maxpacket: 8 [ 650.513127][T15151] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 650.544157][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5403'. [ 650.555352][T15151] usb 4-1: config 0 has no interface number 0 [ 650.577251][T15151] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 650.610045][T15151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.637558][T15151] usb 4-1: config 0 descriptor?? [ 650.809937][T15151] viperboard 4-1:0.143: version 0.00 found at bus 004 address 055 [ 650.827532][T15976] xt_limit: Overflow, try lower: 1207959552/384 [ 650.851550][T15151] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 650.885495][T15151] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 650.941095][T15151] usb 4-1: USB disconnect, device number 55 [ 651.134964][T15984] netlink: 'syz.4.5408': attribute type 16 has an invalid length. [ 651.175550][T15984] netlink: 'syz.4.5408': attribute type 17 has an invalid length. [ 651.241331][T15984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 651.264554][T15984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 651.321908][T15984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.362165][T15984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.638572][T16003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5415'. [ 651.697646][T15151] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 651.925151][T15151] usb 2-1: Using ep0 maxpacket: 16 [ 651.934314][T15151] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.947162][T15078] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 651.970880][T15151] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.000359][T15151] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.020010][T15151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.039700][T15151] usb 2-1: Product: syz [ 652.050666][T15151] usb 2-1: Manufacturer: syz [ 652.055894][T15151] usb 2-1: SerialNumber: syz [ 652.083865][T13362] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 652.196112][T15078] usb 4-1: Using ep0 maxpacket: 16 [ 652.205399][T15078] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 652.243494][T15078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.265656][T15078] usb 4-1: Product: syz [ 652.286279][T15078] usb 4-1: Manufacturer: syz [ 652.290947][T15078] usb 4-1: SerialNumber: syz [ 652.298347][T13362] usb 3-1: Using ep0 maxpacket: 8 [ 652.302422][T15151] usb 2-1: 0:2 : does not exist [ 652.317774][T13362] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 652.324802][T15151] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 652.331035][T13362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 652.345776][T13362] usb 3-1: Product: syz [ 652.353915][T13362] usb 3-1: Manufacturer: syz [ 652.362967][T13362] usb 3-1: SerialNumber: syz [ 652.375420][T15078] usb 4-1: config 0 descriptor?? [ 652.403362][T13362] usb 3-1: config 0 descriptor?? [ 652.416551][T15151] usb 2-1: USB disconnect, device number 46 [ 652.430937][T13362] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 652.463466][T16019] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5424'. [ 652.719032][ T4950] udevd[4950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.866732][T13362] gspca_sn9c2028: read1 error -71 [ 652.890048][T13362] gspca_sn9c2028: read1 error -71 [ 652.895182][T13362] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 652.934956][T13362] usb 3-1: USB disconnect, device number 70 [ 653.276634][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5434'. [ 653.318027][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5434'. [ 653.739840][T16054] netlink: 'syz.4.5442': attribute type 21 has an invalid length. [ 654.015198][T16062] netlink: 'syz.1.5446': attribute type 1 has an invalid length. [ 654.188987][T16067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 654.715778][T13362] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 654.917304][T13362] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 654.954416][T13362] usb 1-1: config 0 has no interface number 0 [ 654.975391][T13362] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 655.009583][T15078] usb 4-1: USB disconnect, device number 56 [ 655.041323][T13362] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 655.050861][T13362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.068444][T13362] usb 1-1: Product: syz [ 655.072669][T13362] usb 1-1: Manufacturer: syz [ 655.077306][T13362] usb 1-1: SerialNumber: syz [ 655.133285][T13362] usb 1-1: config 0 descriptor?? [ 655.140591][T16073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.196142][T13362] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b6:bd:d9:6a:9f:ab [ 655.257720][T16101] netlink: 'syz.4.5465': attribute type 2 has an invalid length. [ 655.480563][T15153] usb 1-1: USB disconnect, device number 71 [ 655.492717][T15153] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 655.549992][T16100] Cannot find set identified by id 0 to match [ 655.811690][T16116] netlink: 'syz.1.5471': attribute type 3 has an invalid length. [ 655.847733][T16116] netlink: 46 bytes leftover after parsing attributes in process `syz.1.5471'. [ 656.010489][T16123] Driver unsupported XDP return value 0 on prog (id 409) dev N/A, expect packet loss! [ 656.188024][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 656.188042][ T26] audit: type=1326 audit(1784157635.302:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 656.335859][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 656.341378][ T26] audit: type=1326 audit(1784157635.311:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 656.342184][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 656.539979][ T26] audit: type=1326 audit(1784157635.339:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 656.687014][ T26] audit: type=1326 audit(1784157635.339:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 656.786609][ T26] audit: type=1326 audit(1784157635.339:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 656.897416][ T26] audit: type=1326 audit(1784157635.339:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 657.060253][ T26] audit: type=1326 audit(1784157635.339:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 657.222744][ T26] audit: type=1326 audit(1784157635.339:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 657.353108][ T26] audit: type=1326 audit(1784157635.339:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.5477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 657.558711][T15078] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 657.766356][T15078] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.787667][T15078] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.838512][T15078] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 657.898857][T15078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.929240][T15078] usb 3-1: Product: syz [ 657.933472][T15078] usb 3-1: Manufacturer: syz [ 657.971936][T15078] usb 3-1: SerialNumber: syz [ 658.131875][T16185] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 658.240329][T15078] usb 3-1: unit 4 not found! [ 658.278242][T15078] usb 3-1: USB disconnect, device number 71 [ 659.107868][T15078] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 659.221521][T16224] netlink: 'syz.0.5514': attribute type 1 has an invalid length. [ 659.268384][T16224] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5514'. [ 659.313968][T15078] usb 2-1: Using ep0 maxpacket: 16 [ 659.327328][T15078] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 659.357052][T15078] usb 2-1: config 0 has no interface number 0 [ 659.402183][T15078] usb 2-1: config 0 interface 66 has no altsetting 0 [ 659.423669][T15078] usb 2-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 659.462366][T15078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.492830][T15078] usb 2-1: Product: syz [ 659.497073][T15078] usb 2-1: Manufacturer: syz [ 659.530311][T15078] usb 2-1: SerialNumber: syz [ 659.583867][T15078] usb 2-1: config 0 descriptor?? [ 659.624867][T16238] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 659.833047][T15078] usb 2-1: selecting invalid altsetting 3 [ 659.866362][T15078] comedi comedi5: could not set alternate setting 3 in high speed [ 659.874336][T15078] usbduxsigma 2-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 659.951255][T15078] usbduxsigma: probe of 2-1:0.66 failed with error -22 [ 659.985598][T15078] usb 2-1: USB disconnect, device number 47 [ 660.449528][T16260] i2c i2c-0: Invalid block read size 255 [ 661.340505][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5543'. [ 661.493466][T16289] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5544'. [ 662.155032][T16310] 9pnet: Could not find request transport: fӃciXrr26qW5IeC2%ҿq[(z8ӓ [ 662.207978][T16309] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 662.446978][T16316] device veth3 entered promiscuous mode [ 662.712678][T16327] syz.2.5563 (16327): /proc/16326/oom_adj is deprecated, please use /proc/16326/oom_score_adj instead. [ 662.921565][T15153] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 663.188449][T15153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 663.267893][T15153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 663.277797][T15153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 663.320863][T15153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 663.342901][T16351] netlink: 'syz.0.5573': attribute type 1 has an invalid length. [ 663.351448][T15153] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 663.398285][T15153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.437123][T15153] usb 2-1: config 0 descriptor?? [ 663.680669][T15153] hdpvr 2-1:0.0: firmware version 0x8 dated [ 663.906061][T15153] hdpvr 2-1:0.0: device init failed [ 663.918391][T15153] hdpvr: probe of 2-1:0.0 failed with error -12 [ 663.956597][T15153] usb 2-1: USB disconnect, device number 48 [ 664.261339][T16373] netlink: 'syz.2.5583': attribute type 28 has an invalid length. [ 666.583201][T15151] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 666.774577][T16441] Process accounting paused [ 666.802149][T15151] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 666.838160][T16445] netlink: 'syz.2.5619': attribute type 1 has an invalid length. [ 666.838205][T15151] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 666.908000][T15151] usb 4-1: config 0 has no interface number 0 [ 666.931465][T15151] usb 4-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 666.965025][T15151] usb 4-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 667.054454][T15151] usb 4-1: config 0 interface 115 has no altsetting 0 [ 667.062974][T15151] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 667.068082][T16449] netlink: 'syz.0.5621': attribute type 8 has an invalid length. [ 667.075119][T15151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.100925][T16449] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5621'. [ 667.124196][T15151] usb 4-1: config 0 descriptor?? [ 667.156956][T15151] ftdi_sio 4-1:0.115: FTDI USB Serial Device converter detected [ 667.190642][T15151] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 667.361482][T16458] CIFS: VFS: Unable to allocate memory for devname [ 667.462034][T15153] usb 4-1: USB disconnect, device number 57 [ 667.468888][T15153] ftdi_sio 4-1:0.115: device disconnected [ 667.846554][T16471] netlink: 'syz.0.5632': attribute type 12 has an invalid length. [ 667.872292][T13362] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 667.891093][T16471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5632'. [ 668.082687][ T26] audit: type=1326 audit(1784157646.277:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.108654][T13362] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 668.156413][T13362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.164494][T13362] usb 2-1: Product: syz [ 668.184588][ T26] audit: type=1326 audit(1784157646.277:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.225999][T13362] usb 2-1: Manufacturer: syz [ 668.235868][T13362] usb 2-1: SerialNumber: syz [ 668.269115][T13362] usb 2-1: config 0 descriptor?? [ 668.300767][T13362] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 668.333934][ T26] audit: type=1326 audit(1784157646.277:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.392447][ T26] audit: type=1326 audit(1784157646.277:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.545170][ T26] audit: type=1326 audit(1784157646.286:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.673945][ T26] audit: type=1326 audit(1784157646.286:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.728563][T13362] usb 2-1: USB disconnect, device number 49 [ 668.793488][ T26] audit: type=1326 audit(1784157646.286:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 668.895256][ T26] audit: type=1326 audit(1784157646.286:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 669.034863][ T26] audit: type=1326 audit(1784157646.286:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.2.5635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 669.073138][T16503] netlink: 'syz.0.5649': attribute type 21 has an invalid length. [ 669.091713][T16503] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5649'. [ 669.123056][T16503] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5649'. [ 669.387450][T16514] netlink: 'syz.0.5654': attribute type 4 has an invalid length. [ 669.714879][T16526] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5658'. [ 670.521561][ T26] audit: type=1326 audit(1784157648.529:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.3.5667" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff102d9de59 code=0x7ffc0000 [ 670.595113][T16552] ./file0: Can't open blockdev [ 670.721577][T15153] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 670.932937][T15153] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 670.964997][T15153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.988707][T15153] usb 1-1: config 0 descriptor?? [ 671.237247][T15153] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 671.251807][T15153] hackrf 1-1:0.0: Could not detect board [ 671.273267][T15153] hackrf: probe of 1-1:0.0 failed with error -71 [ 671.293735][T15153] usb 1-1: USB disconnect, device number 72 [ 671.989256][T15151] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 672.029670][T16602] loop1: detected capacity change from 0 to 512 [ 672.062225][T16604] netlink: 'syz.4.5696': attribute type 32 has an invalid length. [ 672.092538][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5696'. [ 672.131245][T16604] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 672.153699][T16602] syz.1.5695: attempt to access beyond end of device [ 672.153699][T16602] loop1: rw=2051, sector=12608, nr_sectors = 16128 limit=512 [ 672.227486][T15151] usb 3-1: Using ep0 maxpacket: 8 [ 672.277135][T15151] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 672.347739][T15151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.389878][T15151] usb 3-1: Product: syz [ 672.394112][T15151] usb 3-1: Manufacturer: syz [ 672.398735][T15151] usb 3-1: SerialNumber: syz [ 672.461436][T15151] usb 3-1: config 0 descriptor?? [ 672.485215][T15151] gspca_main: sq930x-2.14.0 probing 2770:930c [ 672.941296][T15151] gspca_sq930x: ucbus_write failed -71 [ 672.954831][T15151] sq930x: probe of 3-1:0.0 failed with error -71 [ 672.994714][T15151] usb 3-1: USB disconnect, device number 72 [ 673.848566][T16655] netlink: 'syz.3.5720': attribute type 21 has an invalid length. [ 673.948682][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5720'. [ 673.997059][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5723'. [ 674.060658][T16660] netlink: 4260 bytes leftover after parsing attributes in process `syz.2.5723'. [ 674.226919][T16665] netlink: 'syz.0.5726': attribute type 27 has an invalid length. [ 675.774778][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5748'. [ 675.835289][T16712] netlink: 944 bytes leftover after parsing attributes in process `syz.4.5748'. [ 675.874555][T16712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5748'. [ 677.517589][T16772] ipt_CLUSTERIP: Please specify destination IP [ 677.586015][T13362] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 677.799975][T13362] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 677.824149][T13362] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 677.856038][T13362] usb 2-1: config 0 has no interface number 0 [ 677.869558][T16786] MPI: mpi too large (107144 bits) [ 677.879604][T16787] Unsupported ieee802154 address type: 0 [ 677.887728][T13362] usb 2-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 677.918109][T13362] usb 2-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 678.012521][T13362] usb 2-1: config 0 interface 115 has no altsetting 0 [ 678.019482][T13362] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 678.106873][T13362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.157598][T13362] usb 2-1: config 0 descriptor?? [ 678.184823][T13362] ftdi_sio 2-1:0.115: FTDI USB Serial Device converter detected [ 678.211836][T13362] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 678.473289][T15151] usb 2-1: USB disconnect, device number 50 [ 678.494565][T15151] ftdi_sio 2-1:0.115: device disconnected [ 678.765965][T16805] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.5787'. [ 678.831247][T16805] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.5787'. [ 678.864967][T16805] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.5787'. [ 679.194377][T16813] device bond1 entered promiscuous mode [ 679.269462][T16813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.024658][T16918] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.310595][T16961] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5857'. [ 683.759776][T16972] loop4: detected capacity change from 0 to 4096 [ 684.255926][T16987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.613610][T16999] tmpfs: Bad value for 'size' [ 684.757746][T17002] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 684.781739][T17004] netlink: 'syz.4.5880': attribute type 5 has an invalid length. [ 684.807867][ T52] block nbd2: Attempted send on invalid socket [ 684.814198][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 685.126361][T17010] loop3: detected capacity change from 0 to 4096 [ 685.689543][T17030] tmpfs: Unknown parameter '$TaFmI(9טz6m+N`1x*40 ?W ̄ ' [ 686.021532][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5899'. [ 686.055450][T17044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5899'. [ 687.383890][ T125] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 687.622309][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 687.629301][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.692152][ T125] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 687.752288][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.761252][ T125] usb 2-1: Product: syz [ 687.776887][ T125] usb 2-1: Manufacturer: syz [ 687.781550][ T125] usb 2-1: SerialNumber: syz [ 687.850942][ T125] usb 2-1: config 0 descriptor?? [ 687.890527][ T125] cdc_phonet 2-1:0.0: skipping garbage [ 687.925215][ T125] cdc_phonet: probe of 2-1:0.0 failed with error -22 [ 688.159728][T13362] usb 2-1: USB disconnect, device number 51 [ 688.375828][T17119] netlink: 23 bytes leftover after parsing attributes in process `syz.0.5936'. [ 688.933187][T17138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.003789][T17132] loop4: detected capacity change from 0 to 4096 [ 689.130361][T17132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 689.242913][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 689.585401][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5956'. [ 690.406405][T15151] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 690.632392][T15151] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 690.651777][T15151] usb 4-1: config 0 has no interface number 0 [ 690.673664][T15151] usb 4-1: config 0 interface 41 has no altsetting 0 [ 690.701166][T15151] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 690.731766][T15151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.750460][T15151] usb 4-1: Product: syz [ 690.763617][T15151] usb 4-1: Manufacturer: syz [ 690.773046][T15151] usb 4-1: SerialNumber: syz [ 690.817174][T15151] usb 4-1: config 0 descriptor?? [ 691.142646][T17205] loop4: detected capacity change from 0 to 256 [ 691.169744][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5977'. [ 691.301862][T15151] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 691.340592][T15151] CoreChips: probe of 4-1:0.41 failed with error -71 [ 691.391773][T15151] usb 4-1: USB disconnect, device number 58 [ 691.457015][T15078] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 691.675390][T15078] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 691.684085][T15078] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.719850][T15078] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.738995][T15078] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.760429][T15078] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.783924][T15078] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.803708][T15078] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.822773][T15078] usb 3-1: Product: syz [ 691.836398][T15078] usb 3-1: Manufacturer: syz [ 691.850285][T15078] cdc_wdm 3-1:1.0: skipping garbage [ 691.855551][T15078] cdc_wdm 3-1:1.0: skipping garbage [ 691.915371][T15078] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 691.921431][T15078] cdc_wdm 3-1:1.0: Unknown control protocol [ 692.074698][T13362] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 692.129927][T17208] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 692.171388][T15078] usb 3-1: USB disconnect, device number 73 [ 692.284797][T13362] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 692.323938][T13362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.346743][T13362] usb 1-1: Product: syz [ 692.356469][T13362] usb 1-1: Manufacturer: syz [ 692.361117][T13362] usb 1-1: SerialNumber: syz [ 692.396837][T13362] usb 1-1: config 0 descriptor?? [ 692.635849][T13362] mos7840 1-1:0.0: required endpoints missing [ 692.837263][T17256] device vxcan3 entered promiscuous mode [ 692.875859][T13362] usb 1-1: USB disconnect, device number 73 [ 693.226129][T17269] netlink: 'syz.2.6008': attribute type 3 has an invalid length. [ 693.472232][T13362] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 693.506012][T15153] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 693.667169][T15078] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 693.680212][T13362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.710389][T15153] usb 2-1: Using ep0 maxpacket: 16 [ 693.710445][T13362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 693.717865][T15153] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 693.759715][T13362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 693.782311][T13362] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.789047][T15153] usb 2-1: config 0 has no interface number 0 [ 693.812228][T13362] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 693.821769][T15153] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 693.821860][T17284] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 693.851593][T13362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.873733][T15153] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 693.883145][T13362] usb 4-1: config 0 descriptor?? [ 693.898555][T15078] usb 5-1: unable to get BOS descriptor or descriptor too short [ 693.909839][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6017'. [ 693.917924][T15153] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 693.924236][T15078] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 693.960784][T15078] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 693.966003][T15153] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 693.969767][T15078] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 693.979183][T15153] usb 2-1: Product: syz [ 693.997614][T15153] usb 2-1: SerialNumber: syz [ 694.015271][T15153] usb 2-1: config 0 descriptor?? [ 694.019735][T15078] usb 5-1: config 129 has no interface number 0 [ 694.027767][T15078] usb 5-1: config 129 has no interface number 1 [ 694.045119][T15078] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 694.048089][T15153] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 694.070011][T15078] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 694.097282][T15078] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 694.124262][T15153] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input63 [ 694.154976][T15078] usb 5-1: config 129 interface 135 has no altsetting 0 [ 694.162033][T15078] usb 5-1: config 129 interface 5 has no altsetting 0 [ 694.192264][T15153] usb 4-1: USB disconnect, device number 59 [ 694.255509][T15078] usb 5-1: string descriptor 0 read error: -22 [ 694.294900][T15078] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 694.336458][T15078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.410248][T15078] usb 5-1: MIDIStreaming interface descriptor not found [ 694.530508][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 694.739326][T15078] usb 5-1: USB disconnect, device number 64 [ 694.768352][T15153] usb 2-1: USB disconnect, device number 52 [ 694.793359][T15153] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 696.148193][T13362] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 696.364857][T13362] usb 1-1: Using ep0 maxpacket: 16 [ 696.373678][T13362] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 696.408066][T13362] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 696.439437][T13362] usb 1-1: config 1 has no interface number 1 [ 696.440588][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6049'. [ 696.463429][T13362] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 696.490171][T17355] netlink: set zone limit has 8 unknown bytes [ 696.536845][T13362] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.581273][T13362] usb 1-1: config 1 interface 105 has no altsetting 0 [ 696.603838][T13362] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 696.666689][T13362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.685861][T13362] usb 1-1: Product: syz [ 696.718709][T13362] usb 1-1: Manufacturer: syz [ 696.729559][T13362] usb 1-1: SerialNumber: syz [ 696.767757][T17336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 697.023537][T13362] aqc111: probe of 1-1:1.105 failed with error -22 [ 697.072472][T17374] SET target dimension over the limit! [ 697.099283][T17376] netlink: 'syz.1.6060': attribute type 21 has an invalid length. [ 697.118042][T17376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6060'. [ 697.251682][T15078] usb 1-1: USB disconnect, device number 74 [ 697.376129][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6063'. [ 698.020874][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6072'. [ 698.492014][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 698.492032][ T26] audit: type=1326 audit(1784157674.347:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.2.6081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 698.608007][ T26] audit: type=1326 audit(1784157674.402:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.2.6081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 698.695396][ T26] audit: type=1326 audit(1784157674.402:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.2.6081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 698.813057][ T26] audit: type=1326 audit(1784157674.402:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.2.6081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 698.918457][ T26] audit: type=1326 audit(1784157674.402:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.2.6081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769cd9de59 code=0x7ffc0000 [ 698.953923][T15078] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 699.168148][T17442] netlink: 'syz.3.6090': attribute type 3 has an invalid length. [ 699.183340][T15078] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 699.198785][T15078] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.209391][T17442] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6090'. [ 699.235553][T15078] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 699.244631][T15078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.285844][T15078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.327076][T15078] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.365588][T15078] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.380291][T15078] usb 1-1: Product: syz [ 699.384515][T15078] usb 1-1: Manufacturer: syz [ 699.422584][T15078] cdc_wdm 1-1:1.0: skipping garbage [ 699.427865][T15078] cdc_wdm 1-1:1.0: skipping garbage [ 699.480158][T15078] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 699.490514][T17450] overlayfs: conflicting options: nfs_export=on,index=off [ 699.510042][T15078] cdc_wdm 1-1:1.0: Unknown control protocol [ 699.681912][T17424] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 699.712754][T15151] usb 1-1: USB disconnect, device number 75 [ 699.926434][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6101'. [ 700.085458][T17433] Process accounting resumed [ 700.188011][T17467] netlink: 'syz.3.6104': attribute type 12 has an invalid length. [ 700.558642][T13362] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 700.778541][T13362] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 700.799244][T13362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.844096][T13362] usb 5-1: Product: syz [ 700.848420][T13362] usb 5-1: Manufacturer: syz [ 700.891127][T13362] usb 5-1: SerialNumber: syz [ 700.939561][T13362] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 701.151059][T13362] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 701.521020][T17508] netlink: 'syz.3.6124': attribute type 21 has an invalid length. [ 701.559296][T17510] netlink: 'syz.2.6126': attribute type 1 has an invalid length. [ 701.629984][T17510] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6126'. [ 701.689621][T15078] usb 5-1: USB disconnect, device number 65 [ 702.065482][T17523] netlink: 'syz.1.6132': attribute type 1 has an invalid length. [ 702.344939][T13362] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 702.353708][T13362] ath9k_htc: Failed to initialize the device [ 702.413344][T15078] usb 5-1: ath9k_htc: USB layer deinitialized [ 702.534018][T17539] netlink: 'syz.2.6140': attribute type 21 has an invalid length. [ 702.568949][T17539] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6140'. [ 702.607421][T17539] netlink: 'syz.2.6140': attribute type 4 has an invalid length. [ 702.659118][T17539] netlink: 'syz.2.6140': attribute type 5 has an invalid length. [ 702.666996][T17539] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6140'. [ 703.486269][T17571] fuse: Invalid rootmode [ 703.543315][T17577] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 704.112354][T17597] xt_HMARK: proto mask must be zero with L3 mode [ 704.306316][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.354377][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.392663][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.425563][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.435472][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.519971][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.587318][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.597827][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.618882][T17609] loop1: detected capacity change from 0 to 4096 [ 704.662353][T17609] ntfs3: Invalid value for gid. [ 705.150682][T15151] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 705.317277][T17628] loop1: detected capacity change from 0 to 2048 [ 705.378337][T15151] usb 1-1: Using ep0 maxpacket: 16 [ 705.386430][T15151] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 705.401248][T17628] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 705.418626][T15151] usb 1-1: config 0 has no interface number 0 [ 705.435381][T17628] NILFS (loop1): mounting unchecked fs [ 705.447435][T15151] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 705.498465][T15151] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 705.513786][T17628] NILFS (loop1): recovery complete [ 705.557307][T15151] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 705.560468][T17638] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 705.611896][T15151] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 705.655190][T15151] usb 1-1: Product: syz [ 705.655343][T17640] xt_limit: Overflow, try lower: 0/0 [ 705.670223][T15151] usb 1-1: SerialNumber: syz [ 705.700706][T15151] usb 1-1: config 0 descriptor?? [ 705.748305][T15151] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 705.791981][T15151] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input64 [ 706.028855][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 706.158555][T17650] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6194'. [ 706.234124][T15078] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 706.265718][T13364] usb 1-1: USB disconnect, device number 76 [ 706.288335][T13364] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 706.345801][ T4321] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 706.440044][T15078] usb 3-1: Using ep0 maxpacket: 8 [ 706.447722][T15078] usb 3-1: unable to get BOS descriptor or descriptor too short [ 706.494581][T15078] usb 3-1: string descriptor 0 read error: -22 [ 706.500910][T15078] usb 3-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 706.532707][T15078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.575218][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 706.596084][T15078] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 706.603869][ T4321] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 706.640279][ T4321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.658090][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 706.666392][ T4321] usb 4-1: SerialNumber: syz [ 706.691517][T17648] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 706.934041][T17648] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 707.038687][T15151] usb 3-1: USB disconnect, device number 74 [ 707.180795][ T4321] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 707.213760][ T4321] usb 4-1: USB disconnect, device number 60 [ 707.343689][T17674] device batadv1 entered promiscuous mode [ 708.561109][T17709] netlink: 'syz.2.6223': attribute type 1 has an invalid length. [ 709.011220][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6232'. [ 710.476497][T17762] autofs4:pid:17762:autofs_fill_super: called with bogus options [ 710.722733][T17743] loop4: detected capacity change from 0 to 32768 [ 710.821799][T17743] JBD2: Ignoring recovery information on journal [ 711.023889][T17743] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 711.160519][T17743] (syz.4.6239,17743,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 711.232244][T17743] (syz.4.6239,17743,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 711.246051][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6258'. [ 711.263377][T17743] (syz.4.6239,17743,0):ocfs2_mknod:502 ERROR: status = -117 [ 711.279531][T17743] (syz.4.6239,17743,0):ocfs2_mkdir:659 ERROR: status = -117 [ 711.331822][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6258'. [ 711.421703][T17788] netlink: 'syz.2.6260': attribute type 3 has an invalid length. [ 711.433679][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 711.474910][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6260'. [ 711.512797][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'. [ 711.613899][T17786] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6259'. [ 713.092175][ T125] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 713.297752][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 713.307915][ T125] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 713.334588][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.376419][ T125] usb 1-1: config 0 has no interface number 0 [ 713.409709][ T125] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 713.434509][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.463062][ T125] usb 1-1: Product: syz [ 713.478294][ T125] usb 1-1: Manufacturer: syz [ 713.500160][ T125] usb 1-1: SerialNumber: syz [ 713.522969][ T125] usb 1-1: config 0 descriptor?? [ 713.759459][ T125] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 713.770183][ T125] usb 1-1: No valid video chain found. [ 713.986443][ T125] usb 1-1: USB disconnect, device number 77 [ 714.234345][T17868] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 714.497900][T17874] netlink: 'syz.4.6303': attribute type 21 has an invalid length. [ 714.540469][T17874] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6303'. [ 714.985027][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.031942][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.041167][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.088108][T17891] loop4: detected capacity change from 0 to 1024 [ 715.096900][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.106141][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.237401][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.246547][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.283922][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.342535][T17896] xt_policy: neither incoming nor outgoing policy selected [ 715.345621][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 715.738311][T17904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 715.805592][T17904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 715.818824][T17904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 716.774422][T17940] : renamed from virt_wifi0 [ 716.781519][T13362] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 716.934437][T17944] loop1: detected capacity change from 0 to 512 [ 716.946034][ T26] audit: type=1326 audit(1784157691.377:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.0.6349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 716.979003][T17944] EXT4-fs: Ignoring removed oldalloc option [ 717.014401][T13362] usb 4-1: unable to get BOS descriptor or descriptor too short [ 717.031135][T17944] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 717.046155][T13362] usb 4-1: not running at top speed; connect to a high speed hub [ 717.058440][ T26] audit: type=1326 audit(1784157691.423:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.0.6349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 717.079784][T17944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 717.083949][T13362] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 717.102999][T17944] EXT4-fs (loop1): orphan cleanup on readonly fs [ 717.109424][T17944] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.6338: bad orphan inode 267 [ 717.214252][T17944] EXT4-fs (loop1): Remounting filesystem read-only [ 717.233832][T13362] usb 4-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.253188][ T26] audit: type=1326 audit(1784157691.423:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.0.6349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 717.279224][T17944] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 717.308030][T13362] usb 4-1: config 1 interface 0 has no altsetting 0 [ 717.334668][T13362] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 717.351874][ T26] audit: type=1326 audit(1784157691.423:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.0.6349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 717.377349][T13362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.381536][T17944] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.6338: dx entry: limit 0 != root limit 125 [ 717.393642][T13362] usb 4-1: Product: syz [ 717.402364][T13362] usb 4-1: Manufacturer: syz [ 717.407667][T13362] usb 4-1: SerialNumber: syz [ 717.431302][T17930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 717.446973][T17944] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.6338: Corrupt directory, running e2fsck is recommended [ 717.600249][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 717.674797][T13362] usbhid 4-1:1.0: can't add hid device: -71 [ 717.680872][T13362] usbhid: probe of 4-1:1.0 failed with error -71 [ 717.754614][T13362] usb 4-1: USB disconnect, device number 61 [ 719.039051][T18002] loop1: detected capacity change from 0 to 64 [ 719.131774][T18002] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 719.536751][T18017] xt_TCPMSS: Only works on TCP SYN packets [ 719.656951][T15151] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 719.891115][T15151] usb 4-1: unable to get BOS descriptor or descriptor too short [ 719.907163][T15151] usb 4-1: not running at top speed; connect to a high speed hub [ 719.946445][T15151] usb 4-1: config 249 has an invalid interface number: 203 but max is 0 [ 719.978994][T15151] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 720.025269][T15151] usb 4-1: config 249 has no interface number 0 [ 720.031680][T15151] usb 4-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.077225][T15151] usb 4-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.112104][T15151] usb 4-1: config 249 interface 203 has no altsetting 0 [ 720.125478][T18037] xt_policy: neither incoming nor outgoing policy selected [ 720.135516][T18038] comedi comedi3: board detection failed [ 720.166652][T15151] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 720.197753][T15151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.241438][T15151] usb 4-1: Product: syz [ 720.260977][T15151] usb 4-1: Manufacturer: syz [ 720.279286][T15151] usb 4-1: SerialNumber: syz [ 720.546551][T15151] rtl8150 4-1:249.203: couldn't find required endpoints [ 720.553807][T15151] rtl8150: probe of 4-1:249.203 failed with error -5 [ 720.632543][T15151] usb 4-1: USB disconnect, device number 62 [ 720.798739][T18056] __nla_validate_parse: 93 callbacks suppressed [ 720.798789][T18056] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6393'. [ 720.859620][T18056] 0X: renamed from caif0 [ 720.869172][T18056] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 720.936522][T13362] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 720.990397][T18062] lo speed is unknown, defaulting to 1000 [ 721.013974][T18062] lo speed is unknown, defaulting to 1000 [ 721.029485][T18062] lo speed is unknown, defaulting to 1000 [ 721.141097][T15152] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 721.156223][T13362] usb 1-1: not running at top speed; connect to a high speed hub [ 721.182475][T13362] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 721.222019][T13362] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.226375][ T125] lo speed is unknown, defaulting to 1000 [ 721.247831][T18062] infiniband syz2: set active [ 721.259386][T18062] infiniband syz2: added lo [ 721.260324][T13362] usb 1-1: config 1 interface 0 has no altsetting 0 [ 721.303478][T13362] usb 1-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40 [ 721.323850][T13362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.349899][T15152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.357594][T13362] usb 1-1: Product: syz [ 721.360396][T15152] usb 3-1: config 0 interface 0 has no altsetting 0 [ 721.389281][T15152] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 721.398546][T15152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.406809][T15152] usb 3-1: Product: syz [ 721.411177][T15152] usb 3-1: Manufacturer: syz [ 721.414333][T13362] usb 1-1: Manufacturer: syz [ 721.416633][T15152] usb 3-1: SerialNumber: syz [ 721.427580][T15152] usb 3-1: config 0 descriptor?? [ 721.436158][T15152] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 721.447618][T15152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.453070][T13362] usb 1-1: SerialNumber: syz [ 721.460587][T15152] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 721.474130][T18062] RDS/IB: syz2: added [ 721.478641][T15152] usb 3-1: media controller created [ 721.487588][T18052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 721.495848][T18062] smc: adding ib device syz2 with port count 1 [ 721.516005][T15152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.539570][T18062] smc: ib device syz2 port 1 has pnetid [ 721.576800][T18062] lo speed is unknown, defaulting to 1000 [ 721.603530][T15151] lo speed is unknown, defaulting to 1000 [ 721.736646][T13362] usbhid 1-1:1.0: can't add hid device: -71 [ 721.751304][T13362] usbhid: probe of 1-1:1.0 failed with error -71 [ 721.789078][T15152] DVB: Unable to find symbol tda10046_attach() [ 721.790097][T13362] usb 1-1: USB disconnect, device number 78 [ 721.801807][T15152] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 721.834657][T15152] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 722.033174][T18062] lo speed is unknown, defaulting to 1000 [ 722.085686][T15152] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 722.104325][T15152] usb 3-1: USB disconnect, device number 75 [ 722.285489][T18062] lo speed is unknown, defaulting to 1000 [ 722.633957][T18062] lo speed is unknown, defaulting to 1000 [ 722.887504][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.893910][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.104681][T18116] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 723.121296][T18062] lo speed is unknown, defaulting to 1000 [ 723.311771][T18120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6424'. [ 724.326393][T18154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6441'. [ 724.368291][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6441'. [ 724.583859][T18165] autofs4:pid:18165:autofs_fill_super: called with bogus options [ 724.988692][T18176] sctp: [Deprecated]: syz.2.6452 (pid 18176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.988692][T18176] Use struct sctp_sack_info instead [ 725.111461][T18182] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6455'. [ 725.171415][T18184] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 725.405305][T18192] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6460'. [ 725.442145][T18192] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6460'. [ 725.489639][T18192] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6460'. [ 726.253298][T18222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6476'. [ 726.863074][T18244] netlink: 'syz.2.6486': attribute type 1 has an invalid length. [ 727.028119][T18250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6488'. [ 727.055331][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6488'. [ 727.259347][T18254] netlink: 755 bytes leftover after parsing attributes in process `syz.2.6491'. [ 727.338104][T18263] netlink: 'syz.0.6494': attribute type 7 has an invalid length. [ 727.923362][ T125] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 728.042450][T18281] bond0: option all_slaves_active: invalid value (253) [ 728.129029][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 728.136310][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.162089][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.172479][ T125] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 728.204593][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.249857][ T125] usb 5-1: config 0 descriptor?? [ 728.270664][ T125] hub 5-1:0.0: USB hub found [ 728.491458][ T125] hub 5-1:0.0: 3 ports detected [ 728.708930][ T125] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 728.729483][ T125] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 728.756502][ T125] usbhid 5-1:0.0: can't add hid device: -71 [ 728.780071][ T125] usbhid: probe of 5-1:0.0 failed with error -71 [ 728.873460][ T125] usb 5-1: USB disconnect, device number 66 [ 729.332778][T18320] netlink: 'syz.0.6521': attribute type 26 has an invalid length. [ 729.734479][ T26] audit: type=1326 audit(1784157703.192:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.4.6529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 729.884249][ T26] audit: type=1326 audit(1784157703.192:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.4.6529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 729.908276][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.009028][ T26] audit: type=1326 audit(1784157703.229:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.4.6529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 730.126436][ T26] audit: type=1326 audit(1784157703.229:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.4.6529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 730.241642][ T26] audit: type=1326 audit(1784157703.229:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.4.6529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289199de59 code=0x7ffc0000 [ 731.012906][T18377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6547'. [ 731.847968][T18405] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 731.931553][T18405] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 732.224186][T15152] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 732.289004][T18425] netlink: 'syz.2.6570': attribute type 5 has an invalid length. [ 732.462393][T15152] usb 5-1: Using ep0 maxpacket: 8 [ 732.471039][T15152] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 732.516622][T15152] usb 5-1: config 0 interface 0 has no altsetting 0 [ 732.548570][T18433] netlink: 'syz.2.6574': attribute type 6 has an invalid length. [ 732.550019][T15152] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 732.580394][T18433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6574'. [ 732.585039][T15152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.617187][T13362] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 732.639863][T15152] usb 5-1: Product: syz [ 732.644097][T15152] usb 5-1: Manufacturer: syz [ 732.668366][T15152] usb 5-1: SerialNumber: syz [ 732.688154][T15152] usb 5-1: config 0 descriptor?? [ 732.713631][T15152] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 732.850564][T13362] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 732.881806][T13362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.908375][T13362] usb 4-1: config 0 descriptor?? [ 732.943591][T15152] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 732.946978][T13362] pwc: Creative Labs Webcam 5 detected. [ 732.961947][T15152] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 733.262754][T15151] usb 5-1: USB disconnect, device number 67 [ 733.371018][T13362] pwc: send_video_command error -71 [ 733.377141][T13362] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 733.387840][T13362] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 733.413869][T13362] usb 4-1: USB disconnect, device number 63 [ 733.921639][T18409] Process accounting paused [ 734.321550][T18477] IPv6: sit1: Disabled Multicast RS [ 735.295615][T18514] loop4: detected capacity change from 0 to 2048 [ 735.356917][T18514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.427588][T18514] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 735.500673][T18514] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 737.257263][T18575] netlink: 'syz.1.6642': attribute type 10 has an invalid length. [ 737.267574][T18578] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 737.528053][T18578] overlayfs: missing 'lowerdir' [ 738.436099][T18605] device wlan0 entered promiscuous mode [ 739.306605][T18638] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6674'. [ 739.493497][T18633] xt_CT: No such helper "syz0" [ 739.684724][T18613] loop1: detected capacity change from 0 to 32768 [ 739.733288][T18613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6662 (18613) [ 739.854499][T18613] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 739.904422][T18613] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 739.942229][T18613] BTRFS info (device loop1): using free space tree [ 740.190265][T18613] BTRFS info (device loop1): enabling ssd optimizations [ 740.512272][T18685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6689'. [ 740.544476][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 741.123533][T18700] overlayfs: failed to resolve './file0': -2 [ 741.646598][T18714] netlink: 'syz.0.6703': attribute type 4 has an invalid length. [ 741.859043][T18720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6706'. [ 741.910599][T18720] unsupported nlmsg_type 40 [ 741.996795][T18728] netlink: 'syz.0.6709': attribute type 1 has an invalid length. [ 742.374150][T18738] usb usb1: usbfs: process 18738 (syz.0.6715) did not claim interface 0 before use [ 742.514500][T18742] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6717'. [ 742.725855][T18750] xt_NFQUEUE: number of total queues is 0 [ 743.625143][T18775] device wlan0 entered promiscuous mode [ 744.625623][T18810] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 744.661401][T18812] netlink: 'syz.4.6751': attribute type 10 has an invalid length. [ 744.713424][T18812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6751'. [ 744.757555][T18812] device macvlan1 entered promiscuous mode [ 744.790110][T18812] batman_adv: batadv0: Adding interface: macvlan1 [ 744.822834][T18812] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.941771][T18812] batman_adv: batadv0: Interface activated: macvlan1 [ 745.599663][T18842] device wlan0 entered promiscuous mode [ 747.309395][T18894] loop4: detected capacity change from 0 to 256 [ 747.411076][ T26] audit: type=1400 audit(1784157719.503:79): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=18897 comm="syz.2.6794" [ 748.215682][T18922] netlink: 'syz.0.6806': attribute type 1 has an invalid length. [ 748.333866][T18926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.897099][T15152] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 749.126842][T15152] usb 3-1: unable to get BOS descriptor or descriptor too short [ 749.136015][T15152] usb 3-1: not running at top speed; connect to a high speed hub [ 749.157623][T15152] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.189158][T15152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.241408][T15152] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 749.251925][T15152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.260380][T15152] usb 3-1: Product: syz [ 749.264581][T15152] usb 3-1: Manufacturer: syz [ 749.270605][T15152] usb 3-1: SerialNumber: syz [ 749.279562][ T4321] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 749.373570][T13362] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 749.484233][ T4321] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 749.492307][ T4321] usb 1-1: config 0 has no interface number 0 [ 749.532737][T15152] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 749.540292][ T4321] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 749.557468][ T4321] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 749.559653][T15152] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 749.573579][ T4321] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 749.585302][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.602596][T13362] usb 5-1: Using ep0 maxpacket: 32 [ 749.606204][T15152] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 749.617606][T13362] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.638096][T15152] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 749.647686][ T4321] usb 1-1: config 0 descriptor?? [ 749.666492][T15152] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 749.682236][T13362] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 749.694782][T13362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.703361][ T4321] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 749.726718][T13362] usb 5-1: Product: syz [ 749.739363][T13362] usb 5-1: Manufacturer: syz [ 749.745154][T13362] usb 5-1: SerialNumber: syz [ 749.751890][T13362] usb 5-1: config 0 descriptor?? [ 749.765783][T13362] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 749.785359][T15152] usb 3-1: USB disconnect, device number 76 [ 749.890071][T18949] iowarrior 1-1:0.1: Error -90 while submitting URB [ 749.910971][T15153] usb 1-1: USB disconnect, device number 79 [ 750.001463][T13362] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 750.018174][T13362] quatech2: probe of 5-1:0.0 failed with error -8 [ 750.241496][T15153] usb 5-1: USB disconnect, device number 68 [ 750.429612][T18984] loop3: detected capacity change from 0 to 4096 [ 751.046634][T19000] netlink: 'syz.4.6844': attribute type 2 has an invalid length. [ 751.093995][T19000] netlink: 'syz.4.6844': attribute type 11 has an invalid length. [ 751.140059][T19000] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6844'. [ 751.144724][T19007] ipt_REJECT: TCP_RESET invalid for non-tcp [ 751.484043][T19015] Cannot find add_set index 0 as target [ 751.637771][T15153] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 751.867381][T15153] usb 5-1: Using ep0 maxpacket: 32 [ 751.878800][T15153] usb 5-1: unable to get BOS descriptor or descriptor too short [ 751.910846][T15153] usb 5-1: config index 0 descriptor too short (expected 63924, got 2228) [ 751.930508][T15153] usb 5-1: config 156 has too many interfaces: 218, using maximum allowed: 32 [ 751.951318][T15153] usb 5-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 751.979532][T19028] ALSA: mixer_oss: invalid OSS volume 'u' [ 752.003288][T15153] usb 5-1: config 156 has 1 interface, different from the descriptor's value: 218 [ 752.047041][T15153] usb 5-1: config 156 has no interface number 0 [ 752.058001][T15153] usb 5-1: config 156 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 752.113076][T15153] usb 5-1: config 156 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.169256][T15153] usb 5-1: config 156 interface 127 has no altsetting 0 [ 752.216289][T15153] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 752.218659][T19035] loop3: detected capacity change from 0 to 64 [ 752.247538][T15153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.280174][T15153] usb 5-1: Product: syz [ 752.288649][T15153] usb 5-1: Manufacturer: syz [ 752.328037][T15153] usb 5-1: SerialNumber: syz [ 752.354023][T19035] Trying to free block not in datazone [ 752.367562][T19035] Trying to free block not in datazone [ 752.373115][T19035] Trying to free block not in datazone [ 752.446948][T19035] Trying to free block not in datazone [ 752.461245][T19035] minix_free_block (loop3:6): bit already cleared [ 752.545184][T19035] Trying to free block not in datazone [ 752.564348][T19035] Trying to free block not in datazone [ 752.632242][T19045] netlink: 'syz.0.6865': attribute type 1 has an invalid length. [ 752.679146][T19045] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6865'. [ 752.688271][T19045] NCSI netlink: No device for ifindex 0 [ 752.696456][T15153] usb 5-1: USB disconnect, device number 69 [ 752.959332][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:156.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.818459][T19077] tmpfs: Bad value for 'mpol' [ 754.064650][T19084] comedi comedi0: rti802: I/O port conflict (0x3,4) [ 754.670140][T19111] netlink: 'syz.0.6895': attribute type 3 has an invalid length. [ 754.855421][T15078] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 755.087031][T15078] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 755.115467][T15078] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 755.123527][T15078] usb 2-1: Product: syz [ 755.156527][T15078] usb 2-1: SerialNumber: syz [ 755.177625][T15078] usb 2-1: config 0 descriptor?? [ 755.422862][T15078] hso 2-1:0.0: Can't find BULK IN endpoint [ 755.675048][T15078] usb 2-1: USB disconnect, device number 53 [ 756.209378][T19157] loop4: detected capacity change from 0 to 2048 [ 756.244862][T19157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.365187][ T26] audit: type=1800 audit(1784157727.773:80): pid=19157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6918" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 756.440909][T19159] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.044679][T19213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 758.692192][T19239] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6961'. [ 758.710721][T19238] loop1: detected capacity change from 0 to 1024 [ 758.723074][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6961'. [ 759.501493][T19261] delete_channel: no stack [ 759.722957][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6976'. [ 759.773861][T19269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6976'. [ 759.805945][T19269] netlink: 23 bytes leftover after parsing attributes in process `syz.1.6976'. [ 759.843494][T19269] netlink: 23 bytes leftover after parsing attributes in process `syz.1.6976'. [ 760.532473][T19297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6990'. [ 760.620140][T19303] netlink: 'syz.2.6992': attribute type 1 has an invalid length. [ 761.155914][T19318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7001'. [ 761.851953][T19345] netlink: 'syz.0.7014': attribute type 21 has an invalid length. [ 762.002613][T19349] netlink: 'syz.3.7016': attribute type 32 has an invalid length. [ 762.157284][T15153] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 762.177412][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7018'. [ 762.193688][T19355] tmpfs: Bad value for 'mpol' [ 762.385913][T15153] usb 2-1: Using ep0 maxpacket: 16 [ 762.393701][T15153] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 762.438966][T15153] usb 2-1: config 0 has no interface number 0 [ 762.471667][T15153] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 762.513532][T15153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.536479][T15153] usb 2-1: Product: syz [ 762.540709][T15153] usb 2-1: Manufacturer: syz [ 762.577341][T15153] usb 2-1: SerialNumber: syz [ 762.599999][T15153] usb 2-1: config 0 descriptor?? [ 762.846757][T15153] usb 2-1: selecting invalid altsetting 1 [ 762.859922][T15153] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 762.910836][T15153] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 762.944037][T15153] speedtch: probe of 2-1:0.1 failed with error -22 [ 762.989947][T15153] usb 2-1: USB disconnect, device number 54 [ 763.349932][T19391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 763.735800][T19404] netlink: 'syz.4.7043': attribute type 3 has an invalid length. [ 763.963908][T19411] netlink: 'syz.1.7047': attribute type 2 has an invalid length. [ 764.033138][T19411] netlink: 'syz.1.7047': attribute type 8 has an invalid length. [ 764.064652][T19411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7047'. [ 764.149875][T19419] netlink: 'syz.4.7050': attribute type 1 has an invalid length. [ 764.183422][T19419] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7050'. [ 765.255655][T15153] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 765.521359][T15153] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 765.542279][T15153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.552522][T19463] netlink: 'syz.2.7072': attribute type 21 has an invalid length. [ 765.580558][T15153] usb 2-1: Product: syz [ 765.584816][T15153] usb 2-1: Manufacturer: syz [ 765.622277][T15153] usb 2-1: SerialNumber: syz [ 765.662735][T15153] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 765.684273][T19459] loop3: detected capacity change from 0 to 8192 [ 765.720060][T15153] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 765.782541][T19459] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 765.918962][T19459] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 765.965131][ C1] usb 2-1: ath9k_htc: invalid pkt_len (ff20) [ 765.972773][T19459] REISERFS (device loop3): using ordered data mode [ 765.979403][T19459] reiserfs: using flush barriers [ 765.987006][T19459] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 766.004331][T19459] REISERFS (device loop3): checking transaction log (loop3) [ 766.217750][ T125] usb 2-1: USB disconnect, device number 55 [ 766.326774][T19459] REISERFS (device loop3): Using tea hash to sort names [ 766.595042][T19459] reiserfs: enabling write barrier flush mode [ 766.639365][T19459] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 766.667544][T19486] Process accounting resumed [ 766.859104][T19492] netlink: 'syz.4.7086': attribute type 21 has an invalid length. [ 766.913501][T15153] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 766.920603][T15153] ath9k_htc: Failed to initialize the device [ 766.938376][ T125] usb 2-1: ath9k_htc: USB layer deinitialized [ 767.014455][T19496] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 767.064997][T15152] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 767.270699][T15152] usb 1-1: Using ep0 maxpacket: 8 [ 767.277679][T15152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.326656][T15152] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 767.368721][T15152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.393723][T15152] usb 1-1: Product: syz [ 767.397983][T15152] usb 1-1: Manufacturer: syz [ 767.424875][T15152] usb 1-1: SerialNumber: syz [ 767.456587][T15152] usb 1-1: config 0 descriptor?? [ 767.486653][T15152] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 767.516499][T15152] usb 1-1: selecting invalid altsetting 1 [ 767.526946][T19509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7094'. [ 767.554727][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7094'. [ 767.718234][T15152] gspca_stk014: init reg: 0x00 [ 767.723805][T15152] stk014: probe of 1-1:0.0 failed with error -5 [ 767.784339][T19518] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 767.851895][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7099'. [ 768.029506][T15152] usb 1-1: USB disconnect, device number 80 [ 768.396537][T19539] loop3: detected capacity change from 0 to 256 [ 768.420981][T19539] exfat: Deprecated parameter 'namecase' [ 768.455883][T19539] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 769.004211][T15078] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 769.132179][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7122'. [ 769.209919][T15078] usb 3-1: Using ep0 maxpacket: 32 [ 769.224719][T15078] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 769.248855][T15078] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.262588][T15078] usb 3-1: config 0 has no interface number 0 [ 769.281587][T15078] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.308544][T15078] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 769.324669][T15078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.337050][T19574] xt_connbytes: Forcing CT accounting to be enabled [ 769.344282][T15078] usb 3-1: Product: syz [ 769.348748][T15078] usb 3-1: Manufacturer: syz [ 769.353950][T19574] xt_NFQUEUE: number of total queues is 0 [ 769.359982][T15078] usb 3-1: SerialNumber: syz [ 769.394446][T15078] usb 3-1: config 0 descriptor?? [ 769.428169][T15078] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input70 [ 769.655109][T15078] usb 3-1: USB disconnect, device number 77 [ 769.874306][T19590] netlink: 'syz.1.7134': attribute type 7 has an invalid length. [ 770.155629][T19600] loop3: detected capacity change from 0 to 512 [ 770.211651][T19600] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 770.229711][T19600] EXT4-fs (loop3): orphan cleanup on readonly fs [ 770.289546][T19600] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 770.341344][T19600] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 770.401788][T19600] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.7139: Failed to acquire dquot type 1 [ 770.464689][T19600] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7139: bg 0: block 40: padding at end of block bitmap is not set [ 770.581393][T19600] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 770.623674][T19600] EXT4-fs (loop3): 1 truncate cleaned up [ 770.656851][T19600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 770.722392][T19619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7148'. [ 770.739572][T19600] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.7139: bad symlink. [ 770.926020][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 771.316183][T19635] netlink: 'syz.4.7156': attribute type 8 has an invalid length. [ 771.355005][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7156'. [ 772.135395][T15152] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 772.323258][T19671] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 772.364570][T15152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.384070][T15152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 772.440307][T15152] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 772.472530][T15152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 772.506666][T15152] usb 2-1: SerialNumber: syz [ 772.751200][T15152] usb 2-1: 0:2 : does not exist [ 772.772197][T15152] usb 2-1: unit 48 not found! [ 772.844795][T15152] usb 2-1: USB disconnect, device number 56 [ 773.011028][T19691] netlink: 'syz.2.7184': attribute type 1 has an invalid length. [ 773.132504][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.167112][T19695] xt_hashlimit: size too large, truncated to 1048576 [ 773.281882][T19699] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 773.947290][T19710] xt_CT: No such helper "pptp" [ 774.279735][T19730] openvswitch: netlink: Missing key (keys=40, expected=80) [ 774.444719][T19734] Cannot find set identified by id 0 to match [ 774.995733][T19756] ieee802154 phy0 wpan0: encryption failed: -90 [ 775.211741][ T4321] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 775.419444][ T4321] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 775.427891][ T4321] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 775.488346][ T4321] usb 4-1: config 0 has no interface number 0 [ 775.525879][ T4321] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 775.564533][ T4321] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 775.618116][ T4321] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 775.655966][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.696673][ T4321] usb 4-1: config 0 descriptor?? [ 776.161655][ T4321] usb 4-1: USB disconnect, device number 64 [ 777.926331][T19848] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7261'. [ 777.975421][ T26] audit: type=1326 audit(736.847:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.0.7263" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 778.068423][ T26] audit: type=1326 audit(736.866:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.0.7263" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 778.091910][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.212717][ T26] audit: type=1326 audit(736.866:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.0.7263" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 778.236130][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.277601][ T26] audit: type=1326 audit(736.866:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.0.7263" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 778.404447][T19857] loop4: detected capacity change from 0 to 2048 [ 778.505930][T19857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 778.582132][T19836] loop3: detected capacity change from 0 to 32768 [ 778.604019][T19864] libceph: resolve 'cϐ' (ret=-3): failed [ 778.849977][T19869] capability: warning: `syz.1.7271' uses 32-bit capabilities (legacy support in use) [ 778.871289][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 779.020374][T15153] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 779.252833][T15153] usb 3-1: Using ep0 maxpacket: 16 [ 779.262199][T15153] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 779.300471][T15153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.350442][T15153] usb 3-1: Product: syz [ 779.354770][T15153] usb 3-1: Manufacturer: syz [ 779.383110][T15153] usb 3-1: SerialNumber: syz [ 779.419759][T15153] r8152-cfgselector 3-1: config 0 descriptor?? [ 779.672160][T15153] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 779.895287][T15149] usb 3-1: USB disconnect, device number 78 [ 780.529974][T19920] device ip6tnl4 entered promiscuous mode [ 781.139455][T19943] delete_channel: no stack [ 781.813632][ T26] audit: type=1326 audit(740.382:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.7319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 781.874427][ T26] audit: type=1326 audit(740.382:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.7319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 782.013078][ T26] audit: type=1326 audit(740.382:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.7319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 782.115863][ T26] audit: type=1326 audit(740.382:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.7319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 782.243613][ T26] audit: type=1326 audit(740.382:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.7319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 782.340364][ T26] audit: type=1326 audit(740.382:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.7319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 782.528022][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7330'. [ 782.585773][T19993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7330'. [ 782.617451][T19993] netlink: 'syz.1.7330': attribute type 1 has an invalid length. [ 782.860552][T15153] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 782.878481][T20005] syz.0.7337: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 782.969143][T20005] CPU: 0 PID: 20005 Comm: syz.0.7337 Not tainted syzkaller #0 [ 782.976692][T20005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 782.986875][T20005] Call Trace: [ 782.990182][T20005] [ 782.993137][T20005] dump_stack_lvl+0x188/0x24e [ 782.997951][T20005] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 783.004439][T20005] ? show_regs_print_info+0x12/0x12 [ 783.009695][T20005] ? load_image+0x410/0x410 [ 783.014255][T20005] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 783.020728][T20005] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 783.027298][T20005] warn_alloc+0x242/0x330 [ 783.031744][T20005] ? _end+0x683da14a/0x0 [ 783.036143][T20005] ? zone_watermark_ok_safe+0x270/0x270 [ 783.041777][T20005] __vmalloc_node_range+0x11e/0x1380 [ 783.047125][T20005] ? __mutex_trylock_common+0x15c/0x260 [ 783.052722][T20005] ? _end+0x683da14a/0x0 [ 783.057008][T20005] ? trace_raw_output_contention_end+0xd0/0xd0 [ 783.063207][T20005] ? rcu_is_watching+0x11/0xa0 [ 783.068107][T20005] ? trace_contention_end+0x5f/0x170 [ 783.073438][T20005] ? __mutex_lock+0x1ab/0xae0 [ 783.078226][T20005] ? tomoyo_path_number_perm+0x5a4/0x650 [ 783.083951][T20005] ? free_vm_area+0x50/0x50 [ 783.088502][T20005] ? dvb_demux_do_ioctl+0x313/0x530 [ 783.093779][T20005] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 783.099255][T20005] ? mutex_lock_nested+0x10/0x10 [ 783.104213][T20005] ? _end+0x683da14a/0x0 [ 783.108465][T20005] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 783.114288][T20005] vmalloc+0x75/0x80 [ 783.118197][T20005] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 783.124015][T20005] ? _end+0x683da14a/0x0 [ 783.128290][T20005] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 783.134026][T20005] dvb_demux_do_ioctl+0x450/0x530 [ 783.139069][T20005] ? _end+0x683da14a/0x0 [ 783.143327][T20005] ? _end+0x683da14a/0x0 [ 783.147582][T20005] dvb_usercopy+0x191/0x2b0 [ 783.152095][T20005] ? _end+0x683da14a/0x0 [ 783.156348][T20005] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 783.161907][T20005] ? dvb_generic_ioctl+0xb0/0xb0 [ 783.166870][T20005] ? _end+0x683da14a/0x0 [ 783.171124][T20005] ? _end+0x683da14a/0x0 [ 783.175374][T20005] ? dvb_demux_poll+0x210/0x210 [ 783.180234][T20005] ? _end+0x683da14a/0x0 [ 783.184484][T20005] dvb_demux_ioctl+0x25/0x30 [ 783.189090][T20005] __se_sys_ioctl+0xfa/0x170 [ 783.193736][T20005] do_syscall_64+0x4c/0xa0 [ 783.198190][T20005] ? clear_bhb_loop+0x60/0xb0 [ 783.202879][T20005] ? clear_bhb_loop+0x60/0xb0 [ 783.207570][T20005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.213472][T20005] RIP: 0033:0x7fcff659de59 [ 783.217907][T20005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.237710][T20005] RSP: 002b:00007fcff739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.246225][T20005] RAX: ffffffffffffffda RBX: 00007fcff6825fa0 RCX: 00007fcff659de59 [ 783.254212][T20005] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 783.262190][T20005] RBP: 00007fcff6633e6f R08: 0000000000000000 R09: 0000000000000000 [ 783.270310][T20005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.278311][T20005] R13: 00007fcff6826038 R14: 00007fcff6825fa0 R15: 00007ffd866dd8e8 [ 783.287008][T20005] ? _end+0x683da14a/0x0 [ 783.291286][T20005] [ 783.320804][T20005] Mem-Info: [ 783.331427][T20005] active_anon:8387 inactive_anon:29 isolated_anon:0 [ 783.331427][T20005] active_file:11157 inactive_file:40743 isolated_file:0 [ 783.331427][T20005] unevictable:768 dirty:380 writeback:0 [ 783.331427][T20005] slab_reclaimable:21960 slab_unreclaimable:99279 [ 783.331427][T20005] mapped:30607 shmem:2386 pagetables:743 [ 783.331427][T20005] sec_pagetables:0 bounce:0 [ 783.331427][T20005] kernel_misc_reclaimable:0 [ 783.331427][T20005] free:1315573 free_pcp:6950 free_cma:0 [ 783.378541][T15153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.407572][T15153] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 783.434817][T15153] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 783.456620][T15153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.476264][T15153] usb 4-1: config 0 descriptor?? [ 783.488161][T20005] Node 0 active_anon:33448kB inactive_anon:116kB active_file:44628kB inactive_file:162776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122428kB dirty:1516kB writeback:0kB shmem:8008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11208kB pagetables:3072kB sec_pagetables:0kB all_unreclaimable? no [ 783.524265][T20005] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 783.607863][T20005] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.670610][T20005] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 783.678011][T20005] Node 0 DMA32 free:1342676kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:33516kB inactive_anon:116kB active_file:44628kB inactive_file:162784kB unevictable:1536kB writepending:1524kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:12056kB local_pcp:2780kB free_cma:0kB [ 783.683682][T15078] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 783.724443][T20005] lowmem_reserve[]: 0 0 1 1 1 [ 783.733078][T20005] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 783.867883][T20005] lowmem_reserve[]: 0 0 0 0 0 [ 783.943708][T15153] Bluetooth: Can't get state to change to load configuration err [ 783.960927][T15153] Bluetooth: Loading sysconfig file failed [ 783.967310][T15153] ath3k: probe of 4-1:0.0 failed with error -16 [ 783.981319][T15078] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 783.981877][T15153] usb 4-1: USB disconnect, device number 65 [ 783.998491][T15078] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 784.019808][T15078] usb 3-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 784.040338][T15078] usb 3-1: config 0 has no interface number 0 [ 784.056442][T20005] Node 1 Normal free:3904012kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15468kB local_pcp:4672kB free_cma:0kB [ 784.087688][T20005] lowmem_reserve[]: 0 0 0 0 0 [ 784.094341][T20005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 784.108280][T20005] Node 0 DMA32: [ 784.108563][T15078] usb 3-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 784.128214][T20005] 687*4kB (UME) 1173*8kB (UME) 511*16kB (UME) 528*32kB (UME) 1058*64kB (UME) 381*128kB (UM) 119*256kB (UME) 59*512kB (UME) 35*1024kB (UME) 11*2048kB (UME) 261*4096kB (UM) = 1341780kB [ 784.147486][T15078] usb 3-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 784.182021][T15078] usb 3-1: Product: syz [ 784.186250][T15078] usb 3-1: Manufacturer: syz [ 784.216230][T15078] usb 3-1: SerialNumber: syz [ 784.222019][T20005] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 784.241794][T15078] usb 3-1: config 0 descriptor?? [ 784.247578][T20005] Node 1 Normal: 141*4kB (UME) 67*8kB (UE) 18*16kB (UME) 133*32kB (UME) 44*64kB (UME) 22*128kB (UME) 10*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 949*4096kB (M) = 3904012kB [ 784.268897][T15078] usb 3-1: Found UVC 0.00 device syz (006d:0800) [ 784.275326][T15078] usb 3-1: No valid video chain found. [ 784.283820][T20005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.293683][T20005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.303233][T20005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.313188][T20005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.322594][T20005] 53897 total pagecache pages [ 784.339426][T20005] 29 pages in swap cache [ 784.349129][T20005] Free swap = 124216kB [ 784.353345][T20005] Total swap = 124996kB [ 784.361747][T20005] 2097051 pages RAM [ 784.365646][T20005] 0 pages HighMem/MovableOnly [ 784.373960][T20005] 415222 pages reserved [ 784.385699][T20005] 0 pages cma reserved [ 784.532583][T15078] usb 3-1: USB disconnect, device number 79 [ 784.735234][T20047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 785.633888][T20081] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 785.886450][T20089] device ip6tnl1 entered promiscuous mode [ 787.551639][T20148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7408'. [ 787.911919][T20157] delete_channel: no stack [ 788.237096][T20167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.828087][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7430'. [ 789.025032][T20195] netlink: 'syz.0.7433': attribute type 2 has an invalid length. [ 789.449285][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.455661][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 789.525630][T20213] Cannot find set identified by id 0 to match [ 789.918730][T20219] loop4: detected capacity change from 0 to 8192 [ 789.939021][T20227] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 789.966850][T20219] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 790.086401][ T4321] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 790.294013][ T4321] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 790.324613][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.368138][ T4321] usb 2-1: config 0 descriptor?? [ 790.817432][ T4321] usb 2-1: Cannot set MAC address [ 790.827653][ T4321] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 790.864077][ T4321] usb 2-1: USB disconnect, device number 57 [ 790.905026][T20252] xt_TCPMSS: Only works on TCP SYN packets [ 791.237516][T20261] loop4: detected capacity change from 0 to 2048 [ 791.262662][T20261] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 791.358087][T20261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.458896][T20261] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 791.885578][T20281] overlayfs: './file0' not a directory [ 791.938869][ T4321] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 792.144746][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 792.154798][ T4321] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 792.200846][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.237465][ T4321] usb 2-1: Product: syz [ 792.257771][ T4321] usb 2-1: Manufacturer: syz [ 792.280251][ T4321] usb 2-1: SerialNumber: syz [ 792.306704][ T4321] r8152-cfgselector 2-1: config 0 descriptor?? [ 792.509984][T20300] netlink: 'syz.2.7485': attribute type 30 has an invalid length. [ 792.584088][ T4321] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 792.829584][T15149] usb 2-1: USB disconnect, device number 58 [ 793.171246][T20319] lo speed is unknown, defaulting to 1000 [ 793.192916][T20319] lo speed is unknown, defaulting to 1000 [ 793.199040][T15152] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 793.224376][T20319] lo speed is unknown, defaulting to 1000 [ 793.401329][T15152] usb 3-1: Using ep0 maxpacket: 8 [ 793.408447][T15152] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 793.445031][T15152] usb 3-1: config 179 has no interface number 0 [ 793.464120][T15152] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 793.511283][T15152] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 793.564175][T15152] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 793.594472][T20319] infiniband syz1: set active [ 793.599409][T15152] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 793.612156][T20332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7500'. [ 793.617999][T20319] infiniband syz1: added lo [ 793.642142][T15152] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 793.644440][T20332] tc_dump_action: action bad kind [ 793.672495][T20333] netlink: 'syz.4.7501': attribute type 2 has an invalid length. [ 793.694500][T15152] usb 3-1: config 179 interface 65 has no altsetting 0 [ 793.708760][T15152] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 793.718253][T15152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.727185][T15153] lo speed is unknown, defaulting to 1000 [ 793.752780][T15152] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input72 [ 793.805803][T20319] RDS/IB: syz1: added [ 793.847669][T20319] smc: adding ib device syz1 with port count 1 [ 793.853973][T20319] smc: ib device syz1 port 1 has pnetid [ 793.856028][ T4321] lo speed is unknown, defaulting to 1000 [ 793.888585][T20319] lo speed is unknown, defaulting to 1000 [ 794.295329][T15153] usb 3-1: USB disconnect, device number 80 [ 794.301439][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 794.323478][T15153] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 794.403700][T20319] lo speed is unknown, defaulting to 1000 [ 794.704025][T20319] lo speed is unknown, defaulting to 1000 [ 794.971011][T20319] lo speed is unknown, defaulting to 1000 [ 794.972259][ T5801] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 794.994021][T20362] overlayfs: unrecognized mount option "obj_type=@}\{" or missing value [ 795.212430][ T5801] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 795.213247][T20319] lo speed is unknown, defaulting to 1000 [ 795.244349][ T5801] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 795.272970][ T5801] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 795.334631][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.346550][T20368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7518'. [ 795.370311][ T5801] usb 2-1: Product: syz [ 795.374850][ T5801] usb 2-1: Manufacturer: syz [ 795.386086][ T5801] usb 2-1: SerialNumber: syz [ 795.403864][ T5801] usb 2-1: config 0 descriptor?? [ 795.422795][ T5801] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 795.787865][T20376] loop3: detected capacity change from 0 to 256 [ 795.872980][ T5801] gspca_sunplus: reg_r err -71 [ 795.877858][ T5801] sunplus: probe of 2-1:0.0 failed with error -71 [ 795.927605][T20376] FAT-fs (loop3): Directory bread(block 64) failed [ 795.945249][ T5801] usb 2-1: USB disconnect, device number 59 [ 795.990622][T20376] FAT-fs (loop3): Directory bread(block 65) failed [ 796.016045][T20376] FAT-fs (loop3): Directory bread(block 66) failed [ 796.022667][T20376] FAT-fs (loop3): Directory bread(block 67) failed [ 796.066475][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 796.066493][ T26] audit: type=1326 audit(753.536:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20381 comm="syz.0.7525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 796.097269][T20376] FAT-fs (loop3): Directory bread(block 68) failed [ 796.108148][T20376] FAT-fs (loop3): Directory bread(block 69) failed [ 796.132740][T20376] FAT-fs (loop3): Directory bread(block 70) failed [ 796.136055][ T26] audit: type=1326 audit(753.545:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20381 comm="syz.0.7525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 796.163042][T20376] FAT-fs (loop3): Directory bread(block 71) failed [ 796.163229][T20376] FAT-fs (loop3): Directory bread(block 72) failed [ 796.178776][ T26] audit: type=1326 audit(753.545:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20381 comm="syz.0.7525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 796.204999][T20376] FAT-fs (loop3): Directory bread(block 73) failed [ 796.228430][ T26] audit: type=1326 audit(753.545:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20381 comm="syz.0.7525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff659de59 code=0x7ffc0000 [ 796.413101][ T4321] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 796.635809][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 796.643221][ T4321] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 796.681523][ T4321] usb 5-1: config 0 has no interface number 0 [ 796.702871][T20398] libceph: resolve '0' (ret=-3): failed [ 796.723603][ T4321] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 796.759447][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.788886][ T4321] usb 5-1: Product: syz [ 796.803379][ T4321] usb 5-1: Manufacturer: syz [ 796.808044][ T4321] usb 5-1: SerialNumber: syz [ 796.847406][ T4321] usb 5-1: config 0 descriptor?? [ 796.880769][ T4321] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 796.910028][ T4321] usb 5-1: selecting invalid altsetting 1 [ 796.947101][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 796.976701][ T4321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 797.019876][ T4321] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 797.029002][ T4321] usb 5-1: media controller created [ 797.105137][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.457592][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 797.587838][ T4321] usb 5-1: USB disconnect, device number 70 [ 798.714009][T20455] netlink: 'syz.2.7561': attribute type 21 has an invalid length. [ 799.189809][T20473] netlink: 'syz.4.7569': attribute type 3 has an invalid length. [ 799.226613][T20473] netlink: 'syz.4.7569': attribute type 3 has an invalid length. [ 799.353833][T20473] Process accounting paused [ 799.703048][T20489] x_tables: duplicate entry at hook 3 [ 800.054424][T20500] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7583'. [ 800.675075][T20523] xt_hashlimit: max too large, truncated to 1048576 [ 800.694196][T20527] netlink: 'syz.4.7593': attribute type 21 has an invalid length. [ 800.702101][T20527] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7593'. [ 800.990236][T20533] netlink: 'syz.0.7598': attribute type 10 has an invalid length. [ 801.045881][T20537] netlink: 'syz.2.7600': attribute type 1 has an invalid length. [ 801.175016][T20533] team0: Port device macvlan1 added [ 801.364875][T20548] ksmbd: Unknown IPC event: 4, ignore. [ 801.820349][ T5801] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 801.894637][ T52] block nbd1: Attempted send on invalid socket [ 801.901311][ T52] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 801.916838][T20565] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 802.038590][ T5801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.056349][ T5801] usb 4-1: not running at top speed; connect to a high speed hub [ 802.068368][ T4321] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 802.080103][ T5801] usb 4-1: config index 0 descriptor too short (expected 28771, got 10) [ 802.099616][ T5801] usb 4-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 802.136329][ T5801] usb 4-1: config 114 descriptor has 1 excess byte, ignoring [ 802.144436][ T5801] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 802.189878][ T5801] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 802.219665][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.235225][ T5801] usb 4-1: Product: syz [ 802.239542][ T5801] usb 4-1: Manufacturer: syz [ 802.262393][ T5801] usb 4-1: SerialNumber: syz [ 802.267407][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 802.281069][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 802.309185][T20578] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7619'. [ 802.315817][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 802.352006][T20578] bridge_slave_1: default FDB implementation only supports local addresses [ 802.389422][ T4321] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 802.418780][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.437743][ T4321] usb 5-1: Product: syz [ 802.456614][ T4321] usb 5-1: Manufacturer: syz [ 802.485934][ T4321] usb 5-1: SerialNumber: syz [ 802.499498][ T4321] usb 5-1: config 0 descriptor?? [ 802.546205][ T5801] usb 4-1: USB disconnect, device number 66 [ 802.744521][ T4321] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 802.984654][ T125] usb 5-1: USB disconnect, device number 71 [ 803.331056][T20602] netlink: 'syz.0.7632': attribute type 32 has an invalid length. [ 803.541772][T15078] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 803.739367][T15078] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.764113][T15078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 803.775375][T20614] xt_limit: Overflow, try lower: 65536/2147483648 [ 803.782725][T20616] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 803.782748][T20616] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 803.793314][T15078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 803.796881][T15078] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 803.796912][T15078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 803.796933][T15078] usb 2-1: Product: syz [ 803.796949][T15078] usb 2-1: Manufacturer: syz [ 803.796965][T15078] usb 2-1: SerialNumber: syz [ 803.800777][T15078] usb 2-1: config 0 descriptor?? [ 803.806390][T15078] usb 2-1: no audio or video endpoints found [ 804.033471][T20624] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 804.049828][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7639'. [ 804.061225][T15078] usb 2-1: USB disconnect, device number 60 [ 804.082853][T20625] netlink: 'syz.3.7639': attribute type 1 has an invalid length. [ 804.297352][T20629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7644'. [ 804.348667][T20628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7643'. [ 804.392252][T20628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7643'. [ 804.430138][T20628] netlink: 'syz.4.7643': attribute type 6 has an invalid length. [ 804.657545][T15153] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 804.852610][T15153] usb 4-1: Using ep0 maxpacket: 32 [ 804.860938][T15153] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 804.902307][T15153] usb 4-1: config 0 has no interface number 0 [ 804.928283][T15153] usb 4-1: config 0 interface 132 has no altsetting 0 [ 804.949471][T15153] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 804.961133][T15153] usb 4-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 804.969894][T15153] usb 4-1: Product: syz [ 804.974886][T15153] usb 4-1: Manufacturer: syz [ 804.979978][T15153] usb 4-1: SerialNumber: syz [ 804.987298][T15153] usb 4-1: config 0 descriptor?? [ 805.016320][T15153] ftdi_sio 4-1:0.132: FTDI USB Serial Device converter detected [ 805.048629][T15153] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 805.113274][ T125] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 805.239997][T15152] usb 4-1: USB disconnect, device number 67 [ 805.254102][T15152] ftdi_sio 4-1:0.132: device disconnected [ 805.297404][T20658] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 805.329243][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 805.336872][ T125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 805.369424][ T125] usb 3-1: config 4 interface 0 has no altsetting 0 [ 805.385080][ T125] usb 3-1: string descriptor 0 read error: -22 [ 805.400314][ T125] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 805.410139][ T125] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 805.442868][ T125] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 805.465139][ T125] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 805.491493][ T125] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 805.521092][ T125] usb 3-1: media controller created [ 805.580942][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 805.942879][ T125] usb 3-1: USB disconnect, device number 81 [ 806.428927][T20687] loop3: detected capacity change from 0 to 1024 [ 806.462166][ T5801] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 806.546938][T20687] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 806.685253][T20687] [ 806.687908][T20687] ====================================================== [ 806.694952][T20687] WARNING: possible circular locking dependency detected [ 806.702083][T20687] syzkaller #0 Not tainted [ 806.706529][T20687] ------------------------------------------------------ [ 806.713564][T20687] syz.3.7671/20687 is trying to acquire lock: [ 806.719644][T20687] ffff8880530848c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 806.729258][T20687] [ 806.729258][T20687] but task is already holding lock: [ 806.736640][T20687] ffff8880489dc208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 806.746269][T20687] [ 806.746269][T20687] which lock already depends on the new lock. [ 806.746269][T20687] [ 806.756700][T20687] [ 806.756700][T20687] the existing dependency chain (in reverse order) is: [ 806.765829][T20687] [ 806.765829][T20687] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 806.773954][T20687] down_read+0x42/0x2d0 [ 806.778675][T20687] v2_read_dquot+0x4a/0x110 [ 806.783779][T20687] dquot_acquire+0x152/0x520 [ 806.788926][T20687] ext4_acquire_dquot+0x2e3/0x4a0 [ 806.789843][T20666] loop1: detected capacity change from 0 to 40427 [ 806.794588][T20687] dqget+0x713/0xbb0 [ 806.794611][T20687] __dquot_initialize+0x324/0xd00 [ 806.794629][T20687] ext4_process_orphan+0x4c/0x2e0 [ 806.794653][T20687] ext4_orphan_cleanup+0xc32/0x1470 [ 806.794675][T20687] ext4_fill_super+0x6f0c/0x78f0 [ 806.794693][T20687] get_tree_bdev+0x3e6/0x610 [ 806.794712][T20687] vfs_get_tree+0x88/0x270 [ 806.794731][T20687] do_new_mount+0x247/0xa40 [ 806.794750][T20687] __se_sys_mount+0x2e3/0x3d0 [ 806.794768][T20687] do_syscall_64+0x4c/0xa0 [ 806.794791][T20687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.794815][T20687] [ 806.794815][T20687] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 806.794849][T20687] __mutex_lock+0x12d/0xae0 [ 806.794890][T20687] dquot_commit+0x5a/0x410 [ 806.794907][T20687] ext4_write_dquot+0x1f0/0x360 [ 806.794929][T20687] mark_all_dquot_dirty+0xf9/0x400 [ 806.794949][T20687] __dquot_free_space+0x7f8/0xbc0 [ 806.794969][T20687] ext4_free_blocks+0x1be5/0x26a0 [ 806.841332][T20666] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 806.843187][T20687] ext4_ext_remove_space+0x22ba/0x43d0 [ 806.843215][T20687] ext4_ext_truncate+0x213/0x370 [ 806.885365][T20666] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 806.888407][T20687] ext4_truncate+0xa5b/0x12a0 [ 806.932262][T20687] ext4_evict_inode+0xb21/0x10e0 [ 806.937767][T20687] evict+0x4b6/0x8b0 [ 806.942223][T20687] do_unlinkat+0x388/0x580 [ 806.947184][T20687] __x64_sys_unlinkat+0xd1/0xe0 [ 806.952551][T20687] do_syscall_64+0x4c/0xa0 [ 806.957502][T20687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.959998][T20666] F2FS-fs (loop1): invalid crc value [ 806.963936][T20687] [ 806.963936][T20687] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 806.977113][T20687] __lock_acquire+0x2d18/0x7c40 [ 806.982751][T20687] lock_acquire+0x1bb/0x4a0 [ 806.987903][T20687] down_write+0x36/0x60 [ 806.992610][T20687] ext4_map_blocks+0x914/0x1a90 [ 806.998023][T20687] ext4_getblk+0x1c5/0x720 [ 807.002986][T20687] ext4_bread+0x26/0x170 [ 807.007863][T20687] ext4_quota_write+0x237/0x580 [ 807.013273][T20687] find_free_dqentry+0x68c/0xc30 [ 807.018854][T20687] do_insert_tree+0x717/0x1060 [ 807.024262][T20687] do_insert_tree+0x9f5/0x1060 [ 807.029586][T20687] do_insert_tree+0x9f5/0x1060 [ 807.034900][T20687] do_insert_tree+0x9f5/0x1060 [ 807.040184][T20687] qtree_write_dquot+0x49b/0x5d0 [ 807.045662][T20687] v2_write_dquot+0x108/0x190 [ 807.050889][T20687] dquot_acquire+0x2d5/0x520 [ 807.056001][T20687] ext4_acquire_dquot+0x2e3/0x4a0 [ 807.061544][T20687] dqget+0x713/0xbb0 [ 807.065966][T20687] __dquot_initialize+0x3a9/0xd00 [ 807.071571][T20687] ext4_process_orphan+0x4c/0x2e0 [ 807.077206][T20687] ext4_orphan_cleanup+0xc32/0x1470 [ 807.083015][T20687] ext4_fill_super+0x6f0c/0x78f0 [ 807.088471][T20687] get_tree_bdev+0x3e6/0x610 [ 807.093679][T20687] vfs_get_tree+0x88/0x270 [ 807.098611][T20687] do_new_mount+0x247/0xa40 [ 807.103629][T20687] __se_sys_mount+0x2e3/0x3d0 [ 807.108830][T20687] do_syscall_64+0x4c/0xa0 [ 807.113785][T20687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.120298][T20687] [ 807.120298][T20687] other info that might help us debug this: [ 807.120298][T20687] [ 807.130534][T20687] Chain exists of: [ 807.130534][T20687] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 807.130534][T20687] [ 807.144208][T20687] Possible unsafe locking scenario: [ 807.144208][T20687] [ 807.151661][T20687] CPU0 CPU1 [ 807.157052][T20687] ---- ---- [ 807.162430][T20687] lock(&s->s_dquot.dqio_sem); [ 807.167291][T20687] lock(&dquot->dq_lock); [ 807.174406][T20687] lock(&s->s_dquot.dqio_sem); [ 807.181791][T20687] lock(&ei->i_data_sem/2); [ 807.186419][T20687] [ 807.186419][T20687] *** DEADLOCK *** [ 807.186419][T20687] [ 807.194593][T20687] 3 locks held by syz.3.7671/20687: [ 807.199816][T20687] #0: ffff8880489dc0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 807.209984][T20687] #1: ffff8880532d6268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 807.219434][T20687] #2: ffff8880489dc208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 807.229500][T20687] [ 807.229500][T20687] stack backtrace: [ 807.235417][T20687] CPU: 0 PID: 20687 Comm: syz.3.7671 Not tainted syzkaller #0 [ 807.242910][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 807.253083][T20687] Call Trace: [ 807.256393][T20687] [ 807.259351][T20687] dump_stack_lvl+0x188/0x24e [ 807.264090][T20687] ? load_image+0x410/0x410 [ 807.268634][T20687] ? show_regs_print_info+0x12/0x12 [ 807.273885][T20687] ? print_circular_bug+0x12b/0x1a0 [ 807.279136][T20687] check_noncircular+0x296/0x330 [ 807.284120][T20687] ? add_chain_block+0x9b0/0x9b0 [ 807.289096][T20687] ? lockdep_lock+0xf1/0x1f0 [ 807.293750][T20687] ? _find_first_zero_bit+0xd2/0x100 [ 807.299099][T20687] __lock_acquire+0x2d18/0x7c40 [ 807.303995][T20687] ? verify_lock_unused+0x140/0x140 [ 807.309233][T20687] ? rcu_read_unlock_special+0x510/0x510 [ 807.315048][T20687] ? verify_lock_unused+0x140/0x140 [ 807.320292][T20687] ? verify_lock_unused+0x140/0x140 [ 807.325537][T20687] ? verify_lock_unused+0x140/0x140 [ 807.330793][T20687] lock_acquire+0x1bb/0x4a0 [ 807.335341][T20687] ? ext4_map_blocks+0x914/0x1a90 [ 807.340420][T20687] ? __might_sleep+0xd0/0xd0 [ 807.345103][T20687] ? read_lock_is_recursive+0x10/0x10 [ 807.350514][T20687] ? rcu_is_watching+0x11/0xa0 [ 807.355318][T20687] ? ext4_es_lookup_extent+0x638/0xb00 [ 807.360818][T20687] down_write+0x36/0x60 [ 807.365002][T20687] ? ext4_map_blocks+0x914/0x1a90 [ 807.370068][T20687] ext4_map_blocks+0x914/0x1a90 [ 807.374958][T20687] ? ext4_es_lookup_extent+0x638/0xb00 [ 807.380584][T20687] ? ext4_issue_zeroout+0x250/0x250 [ 807.385837][T20687] ? kasan_set_track+0x60/0x70 [ 807.390711][T20687] ? __kasan_kmalloc+0x8e/0xa0 [ 807.395478][T20687] ? __kmalloc+0xb3/0x240 [ 807.399865][T20687] ? find_free_dqentry+0x56/0xc30 [ 807.404912][T20687] ext4_getblk+0x1c5/0x720 [ 807.409325][T20687] ? ext4_fill_super+0x6f0c/0x78f0 [ 807.414435][T20687] ? get_tree_bdev+0x3e6/0x610 [ 807.419226][T20687] ? ext4_get_block_unwritten+0x100/0x100 [ 807.424942][T20687] ? ext4_getblk+0x2b7/0x720 [ 807.429538][T20687] ? ext4_get_block_unwritten+0x100/0x100 [ 807.435263][T20687] ext4_bread+0x26/0x170 [ 807.439517][T20687] ext4_quota_write+0x237/0x580 [ 807.444397][T20687] ? ext4_quota_read+0x380/0x380 [ 807.449339][T20687] ? ext4_quota_read+0x304/0x380 [ 807.454277][T20687] ? check_dquot_block_header+0x1fb/0x2e0 [ 807.460010][T20687] ? ext4_quota_read+0x380/0x380 [ 807.464981][T20687] find_free_dqentry+0x68c/0xc30 [ 807.469926][T20687] do_insert_tree+0x717/0x1060 [ 807.474692][T20687] do_insert_tree+0x9f5/0x1060 [ 807.479540][T20687] do_insert_tree+0x9f5/0x1060 [ 807.484331][T20687] do_insert_tree+0x9f5/0x1060 [ 807.489132][T20687] qtree_write_dquot+0x49b/0x5d0 [ 807.494077][T20687] ? qtree_entry_unused+0xe0/0xe0 [ 807.499119][T20687] ? rwsem_write_trylock+0x135/0x1c0 [ 807.504402][T20687] ? trace_contention_end+0x5f/0x170 [ 807.509786][T20687] v2_write_dquot+0x108/0x190 [ 807.514462][T20687] dquot_acquire+0x2d5/0x520 [ 807.519049][T20687] ext4_acquire_dquot+0x2e3/0x4a0 [ 807.524076][T20687] dqget+0x713/0xbb0 [ 807.527988][T20687] __dquot_initialize+0x3a9/0xd00 [ 807.533011][T20687] ? dquot_initialize+0x20/0x20 [ 807.537859][T20687] ext4_process_orphan+0x4c/0x2e0 [ 807.542883][T20687] ext4_orphan_cleanup+0xc32/0x1470 [ 807.548125][T20687] ? ext4_orphan_del+0xc90/0xc90 [ 807.553061][T20687] ? ext4_register_sysfs+0x27e/0x2c0 [ 807.558345][T20687] ? errseq_check_and_advance+0x62/0x120 [ 807.564028][T20687] ext4_fill_super+0x6f0c/0x78f0 [ 807.568969][T20687] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 807.575225][T20687] ? vscnprintf+0x80/0x80 [ 807.579570][T20687] ? set_blocksize+0x1d0/0x470 [ 807.584107][T20666] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 807.584330][T20687] ? sb_set_blocksize+0xa5/0xe0 [ 807.599521][T20687] get_tree_bdev+0x3e6/0x610 [ 807.604142][T20687] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 807.610420][T20687] vfs_get_tree+0x88/0x270 [ 807.614872][T20687] do_new_mount+0x247/0xa40 [ 807.619408][T20687] __se_sys_mount+0x2e3/0x3d0 [ 807.624125][T20687] ? __x64_sys_mount+0xc0/0xc0 [ 807.628918][T20687] ? lockdep_hardirqs_on+0x94/0x140 [ 807.633251][T20666] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 807.634130][T20687] ? __x64_sys_mount+0x1c/0xc0 [ 807.634158][T20687] do_syscall_64+0x4c/0xa0 [ 807.641408][T20666] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 807.646008][T20687] ? clear_bhb_loop+0x60/0xb0 [ 807.646037][T20687] ? clear_bhb_loop+0x60/0xb0 [ 807.667298][T20687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.673234][T20687] RIP: 0033:0x7ff102d9f0ca [ 807.677677][T20687] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.697321][T20687] RSP: 002b:00007ff103c94e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 807.705781][T20687] RAX: ffffffffffffffda RBX: 00007ff103c94ee0 RCX: 00007ff102d9f0ca [ 807.713785][T20687] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff103c94ea0 [ 807.721781][T20687] RBP: 0000200000000180 R08: 00007ff103c94ee0 R09: 0000000001018ed8 [ 807.729753][T20687] R10: 0000000001018ed8 R11: 0000000000000246 R12: 0000200000000000 [ 807.737728][T20687] R13: 00007ff103c94ea0 R14: 000000000000062b R15: 0000200000000040 [ 807.745721][T20687] [ 807.752796][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 807.768125][T20687] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.7671: lblock 2 mapped to illegal pblock 2 (length 1) [ 807.768330][ T5801] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 807.784160][T20687] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 807.810009][ T5801] usb 1-1: config 0 has no interface number 0 [ 807.810651][T20687] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.7671: lblock 0 mapped to illegal pblock 48 (length 1) [ 807.820986][ T5801] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 807.830817][T20666] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 807.842663][ T5801] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 807.852053][T20687] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 807.858095][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 807.858118][ T5801] usb 1-1: Product: syz [ 807.858132][ T5801] usb 1-1: SerialNumber: syz [ 807.875767][ T5801] usb 1-1: config 0 descriptor?? [ 807.891166][T20687] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.7671: Failed to acquire dquot type 0 [ 807.903119][T20687] EXT4-fs (loop3): ext4_process_orphan: deleting unreferenced inode 11 [ 807.908945][ T5801] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input74 [ 807.913914][T20687] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 807.933594][T20687] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.7671: mark_inode_dirty error [ 807.994166][T20687] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 808.004498][T20687] EXT4-fs (loop3): 1 orphan inode deleted [ 808.026743][T20687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 808.035281][ T47] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 808.075292][ T47] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 808.091740][ T47] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 808.125026][T20687] EXT4-fs (loop3): unmounting filesystem. [ 808.131497][T20687] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.7671: Invalid inode table block 1 in block_group 0 [ 808.147489][T20687] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 808.157518][T20687] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz.3.7671: mark_inode_dirty error [ 808.239610][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 808.239807][T15153] usb 1-1: USB disconnect, device number 81 [ 808.246601][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 808.269006][T15153] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19