last executing test programs: 4m25.393816074s ago: executing program 0 (id=18314): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="1201500200000008662410804000010203010902600003010000840904000000010100000a240109000a00020102090401"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m23.532977482s ago: executing program 0 (id=18340): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4m21.865784785s ago: executing program 0 (id=18359): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000300)=0xa4ff, 0x4) 4m21.634178501s ago: executing program 0 (id=18362): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m20.611642037s ago: executing program 0 (id=18369): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x80, 0x2, 0xd, 0x10, 0x3eb, 0x2, 0x0, 0x20, 0x20, 0x1, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 4m19.611666333s ago: executing program 0 (id=18380): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000002880)) 4m19.159064994s ago: executing program 32 (id=18380): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000002880)) 4.193994561s ago: executing program 4 (id=21768): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x7, 0x2, 0x2, "d5470000002f1a0e0000000700", 0x51424752}) 3.984322696s ago: executing program 5 (id=21771): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.936936328s ago: executing program 4 (id=21772): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r0, 0x0, 0x0) 3.729210703s ago: executing program 4 (id=21775): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x13, 0x0, &(0x7f0000000040)) 3.728409783s ago: executing program 5 (id=21777): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 3.555926388s ago: executing program 4 (id=21778): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.247816681s ago: executing program 3 (id=21793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)='\t', 0x1, 0x0, 0x1}, 0x50) 2.053908046s ago: executing program 3 (id=21796): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0x38, 0x0) 1.970717299s ago: executing program 5 (id=21797): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40000) ioctl$BLKGETNRZONES(r0, 0x80041285, 0x0) 1.801551884s ago: executing program 3 (id=21800): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0x8839, 0x1ff, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @multicast1}}}}) 1.646755867s ago: executing program 5 (id=21802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000150001002abd700000000000021800ff", @ANYRES32, @ANYBLOB="14000300", @ANYRESDEC], 0x2c}}, 0x0) 1.55571029s ago: executing program 3 (id=21803): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b52, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) 1.457761602s ago: executing program 5 (id=21805): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000019ffff0f0000000080020100180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0x2f}, 0x94) 1.279040617s ago: executing program 3 (id=21807): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1.261786007s ago: executing program 2 (id=21808): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000020c0)={0x2, @vbi={0x9, 0x101, 0xa, 0x0, [0x7f, 0x7ff], [0xfff, 0x7], 0x13a}}) 1.215493848s ago: executing program 5 (id=21809): socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.119819971s ago: executing program 1 (id=21810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 996.678494ms ago: executing program 2 (id=21811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 914.162776ms ago: executing program 1 (id=21812): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x44810}, 0x840) 836.551898ms ago: executing program 2 (id=21813): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0x5, 0x0, 0x0) 755.258271ms ago: executing program 1 (id=21814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x4000001, 0x4) 658.275363ms ago: executing program 2 (id=21815): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 573.640455ms ago: executing program 1 (id=21816): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @local}}) 491.371417ms ago: executing program 4 (id=21817): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 457.550988ms ago: executing program 2 (id=21818): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 298.241292ms ago: executing program 1 (id=21819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 199.858555ms ago: executing program 2 (id=21820): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) 157.394376ms ago: executing program 1 (id=21821): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002061) 72.058458ms ago: executing program 4 (id=21822): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f0000000000)={[{@file_umask={'file_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}]}, 0x4, 0x349, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 0s ago: executing program 3 (id=21823): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) kernel console output (not intermixed with test programs): compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1712.584448][ T26] audit: type=1326 audit(1758.653:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15894 comm="syz.2.19981" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1712.688896][ T26] audit: type=1326 audit(1758.653:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15894 comm="syz.2.19981" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1712.721640][ T4977] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1712.740214][T15885] loop4: detected capacity change from 0 to 32768 [ 1712.744265][ T4977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1712.764842][T15885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.19976 (15885) [ 1712.780470][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19988'. [ 1712.796648][ T26] audit: type=1326 audit(1758.653:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15894 comm="syz.2.19981" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1712.808828][ T4977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1712.850717][T15909] netlink: 4260 bytes leftover after parsing attributes in process `syz.1.19988'. [ 1712.866007][ T26] audit: type=1326 audit(1758.653:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15894 comm="syz.2.19981" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1712.904211][ T4977] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1712.951062][ T4977] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1712.952241][T15885] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1712.978183][T15885] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1712.997833][T15885] BTRFS info (device loop4): using free space tree [ 1713.006638][ T4977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.043464][ T4977] usb 6-1: Product: syz [ 1713.063543][ T4977] usb 6-1: Manufacturer: syz [ 1713.079741][ T4977] usb 6-1: SerialNumber: syz [ 1713.137354][T15897] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1713.144688][T15897] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1713.222734][T15900] loop3: detected capacity change from 0 to 32768 [ 1713.288202][T15900] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.19984 (15900) [ 1713.336731][T15885] BTRFS info (device loop4): enabling ssd optimizations [ 1713.451012][T15900] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1713.555242][T15900] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1713.565867][T21948] usb 6-1: USB disconnect, device number 8 [ 1713.611349][T15900] BTRFS info (device loop3): enabling auto defrag [ 1713.648855][T15900] BTRFS info (device loop3): force clearing of disk cache [ 1713.681252][T15900] BTRFS info (device loop3): ignoring data csums [ 1713.687675][T15900] BTRFS info (device loop3): turning on async discard [ 1713.753319][T15900] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1713.796043][ T4947] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1713.813395][T15900] BTRFS info (device loop3): turning off async discard [ 1713.820330][T15900] BTRFS info (device loop3): disabling free space tree [ 1714.257659][T15973] loop1: detected capacity change from 0 to 64 [ 1714.403823][T15973] Trying to free block not in datazone [ 1714.441881][T15973] Trying to free block not in datazone [ 1714.823252][T15900] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1715.041736][T15987] Unsupported ieee802154 address type: 0 [ 1715.336911][T15994] autofs4:pid:15994:autofs_fill_super: called with bogus options [ 1715.514205][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20014'. [ 1715.584409][T16003] netlink: 4260 bytes leftover after parsing attributes in process `syz.2.20014'. [ 1715.675632][T16009] netlink: 'syz.1.20017': attribute type 1 has an invalid length. [ 1715.696682][T16009] netlink: 908 bytes leftover after parsing attributes in process `syz.1.20017'. [ 1715.719028][T16009] nbd: must specify at least one socket [ 1716.286685][T16027] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1716.397000][T16023] loop2: detected capacity change from 0 to 8192 [ 1716.534313][T16023] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1716.575498][T16023] FAT-fs (loop2): Filesystem has been set read-only [ 1716.865699][T16040] loop3: detected capacity change from 0 to 64 [ 1716.908792][T16044] bridge0: port 4(hsr0) entered blocking state [ 1716.945253][T16044] bridge0: port 4(hsr0) entered disabled state [ 1716.975242][T16044] device hsr0 entered promiscuous mode [ 1717.005604][T16044] bridge0: port 4(hsr0) entered blocking state [ 1717.012040][T16044] bridge0: port 4(hsr0) entered forwarding state [ 1717.077210][T16017] loop4: detected capacity change from 0 to 32768 [ 1718.129544][T16075] loop3: detected capacity change from 0 to 4096 [ 1718.165141][T16075] /dev/loop3: Can't open blockdev [ 1718.431053][T16088] loop5: detected capacity change from 0 to 16 [ 1718.500267][T16088] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1718.767915][T16097] qrtr: Invalid version 0 [ 1718.841259][T16070] loop2: detected capacity change from 0 to 32768 [ 1718.893175][T16070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.20047 (16070) [ 1719.029639][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.045811][T16070] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1719.091102][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1719.092944][T16070] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1719.114903][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.151325][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1719.156642][T16104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1719.189350][T16070] BTRFS info (device loop2): disabling free space tree [ 1719.232257][T16070] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1719.278706][T16070] BTRFS info (device loop2): turning off barriers [ 1719.318869][T16070] BTRFS info (device loop2): use no compression [ 1719.325226][T16070] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1719.395063][T16070] BTRFS info (device loop2): trying to use backup root at mount time [ 1719.411668][T16070] BTRFS error (device loop2): cannot disable free space tree [ 1719.441930][T16070] BTRFS error (device loop2): open_ctree failed: -22 [ 1720.013983][T21873] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1720.068881][T16103] loop1: detected capacity change from 0 to 32768 [ 1720.119622][T16103] XFS: ikeep mount option is deprecated. [ 1720.125319][T16103] XFS: ikeep mount option is deprecated. [ 1720.204564][T21873] usb 3-1: Using ep0 maxpacket: 16 [ 1720.211823][T21873] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1720.242589][T21873] usb 3-1: config 0 has no interface number 0 [ 1720.248800][T21873] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1720.250990][T16103] XFS (loop1): Mounting V5 Filesystem [ 1720.278797][T21873] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1720.316348][T21873] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1720.330407][T21873] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1720.343359][T21873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.360261][T21873] usb 3-1: Product: syz [ 1720.374706][T21873] usb 3-1: Manufacturer: syz [ 1720.379653][T21873] usb 3-1: SerialNumber: syz [ 1720.396455][T21873] usb 3-1: config 0 descriptor?? [ 1720.402056][T16119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1720.421947][T16119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1720.590663][T16103] XFS (loop1): Ending clean mount [ 1720.647945][T16119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1720.690265][T16119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1720.756623][T16146] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1720.893216][T21873] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1720.907783][ T4948] XFS (loop1): Unmounting Filesystem [ 1720.945226][T21873] usb 3-1: USB disconnect, device number 43 [ 1721.534823][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20087'. [ 1721.575701][ T5431] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1721.798295][ T5431] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1721.830923][ T5431] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1721.861970][ T5431] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.864195][T16172] loop4: detected capacity change from 0 to 128 [ 1721.899099][T16172] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1721.929142][ T5431] usb 4-1: config 63 has no interface number 0 [ 1721.935379][ T5431] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1721.943651][T16172] hpfs: filesystem error: improperly stopped [ 1721.976741][T16172] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1722.003246][T16172] hpfs: You really don't want any checks? You are crazy... [ 1722.013248][ T5431] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1722.028276][T16172] hpfs: Code page index out of array [ 1722.042423][ T5431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.049450][T16172] hpfs: code page support is disabled [ 1722.061774][ T26] audit: type=1326 audit(1769.151:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.1.20093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1722.071176][ T5431] usb 4-1: Product: syz [ 1722.090356][T16172] hpfs: hpfs_map_4sectors(): unaligned read [ 1722.096380][T16172] hpfs: hpfs_map_4sectors(): unaligned read [ 1722.131594][T16159] 9pnet_fd: p9_fd_create_tcp (16159): problem connecting socket to 127.0.0.1 [ 1722.157142][ T26] audit: type=1326 audit(1769.151:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.1.20093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1722.180811][ T5431] usb 4-1: Manufacturer: syz [ 1722.180834][ T5431] usb 4-1: SerialNumber: syz [ 1722.182053][T16172] hpfs: filesystem error: unable to find root dir [ 1722.235175][T16178] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1722.287690][ T26] audit: type=1326 audit(1769.151:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.1.20093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1722.421834][ T26] audit: type=1326 audit(1769.151:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.1.20093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1722.433794][ T5431] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 1722.535690][ T5431] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1722.566868][ T5431] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1722.605732][ T5431] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1722.661517][ T5431] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1722.686251][ T5431] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1722.734411][ T5431] usb 4-1: No streaming interface found for terminal 29. [ 1722.776270][ T5431] uvcvideo 4-1:63.66: Entity type for entity Output 5 was not initialized! [ 1722.787893][T16194] 0x000000000000-0x000000020000 : "" [ 1722.838832][ T5431] usb 4-1: USB disconnect, device number 71 [ 1722.857289][T16194] ftl_cs: FTL header not found. [ 1723.688255][T16224] loop5: detected capacity change from 0 to 64 [ 1724.006080][T16228] loop3: detected capacity change from 0 to 2048 [ 1724.114203][T16196] loop4: detected capacity change from 0 to 32768 [ 1724.250235][ T5431] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1724.486499][ T5431] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1724.514981][ T5431] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1724.547813][ T5431] usb 2-1: Product: syz [ 1724.552187][ T5431] usb 2-1: SerialNumber: syz [ 1724.568581][T16245] xt_limit: Overflow, try lower: 1207959552/384 [ 1724.585229][ T5431] usb 2-1: config 0 descriptor?? [ 1724.802824][ T5431] hso 2-1:0.0: Failed to find BULK IN ep [ 1724.998096][T14230] usb 2-1: USB disconnect, device number 72 [ 1725.043708][T16259] loop2: detected capacity change from 0 to 128 [ 1725.065114][T16255] loop4: detected capacity change from 0 to 4096 [ 1725.139157][T16255] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1725.282058][ T11] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1725.288824][ T4947] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1725.299676][ T4947] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1725.346076][ T4947] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1725.365342][ T6435] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1725.375594][ T4947] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 1725.464951][T16265] loop2: detected capacity change from 0 to 2048 [ 1725.549082][T16265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1725.589565][T16265] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.20136: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1725.664182][T16265] EXT4-fs (loop2): Remounting filesystem read-only [ 1725.904350][T16257] loop5: detected capacity change from 0 to 32768 [ 1725.933418][ T4939] EXT4-fs (loop2): unmounting filesystem. [ 1725.955495][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.006765][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.049135][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.064997][T16257] JBD2: Ignoring recovery information on journal [ 1726.103446][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.167031][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.187681][T16257] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1726.205222][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.260440][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.300566][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.334911][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.351344][T12039] ocfs2: Unmounting device (7,5) on (node local) [ 1726.367090][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.391334][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.414538][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.447520][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.477486][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.509517][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.540434][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.567003][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20140'. [ 1726.798866][T16288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1726.937513][T16294] loop3: detected capacity change from 0 to 1764 [ 1727.059308][T16294] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1727.331779][T16308] device team0 entered promiscuous mode [ 1727.360379][T16310] netlink: del zone limit has 8 unknown bytes [ 1727.367626][T16308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.405804][T16308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1727.651293][T16318] xt_ecn: cannot match TCP bits for non-tcp packets [ 1728.014776][T16335] 0x000000000000-0x000000020000 : "" [ 1728.049345][T16335] ftl_cs: FTL header not found. [ 1728.078579][T16339] netlink: 'syz.3.20166': attribute type 21 has an invalid length. [ 1728.350480][T16345] loop5: detected capacity change from 0 to 512 [ 1728.449528][T16345] FAT-fs (loop5): Directory bread(block 2080) failed [ 1728.488802][T16345] FAT-fs (loop5): Directory bread(block 2081) failed [ 1728.527582][T16345] FAT-fs (loop5): Directory bread(block 2082) failed [ 1728.558695][T16345] FAT-fs (loop5): Directory bread(block 2083) failed [ 1728.590358][T16345] FAT-fs (loop5): Directory bread(block 2084) failed [ 1728.612942][T16345] FAT-fs (loop5): Directory bread(block 2085) failed [ 1728.649577][T16345] FAT-fs (loop5): Directory bread(block 2086) failed [ 1728.671937][ T5431] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1728.681812][T16345] FAT-fs (loop5): Directory bread(block 2087) failed [ 1728.716070][T16345] FAT-fs (loop5): Directory bread(block 2080) failed [ 1728.736525][T16356] Process accounting resumed [ 1728.738617][T16345] FAT-fs (loop5): Directory bread(block 2081) failed [ 1728.918334][ T5431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1728.952143][ T5431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1728.986397][ T5431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1729.043326][ T5431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1729.082612][ T5431] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1729.126419][ T5431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.164255][ T5431] usb 2-1: Product: syz [ 1729.176803][ T5431] usb 2-1: Manufacturer: syz [ 1729.201036][ T5431] usb 2-1: SerialNumber: syz [ 1729.222423][ T5431] usb 2-1: config 0 descriptor?? [ 1729.312673][T16374] netlink: 'syz.3.20184': attribute type 2 has an invalid length. [ 1729.433693][ T5431] adutux 2-1:0.0: Could not retrieve serial number [ 1729.453075][ T5431] adutux: probe of 2-1:0.0 failed with error -5 [ 1729.540885][T16382] program syz.3.20188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1729.646374][T16386] loop4: detected capacity change from 0 to 764 [ 1729.647701][ T5431] usb 2-1: USB disconnect, device number 73 [ 1729.996989][T16399] netlink: 'syz.3.20196': attribute type 21 has an invalid length. [ 1730.033060][T16399] netlink: 'syz.3.20196': attribute type 6 has an invalid length. [ 1730.708233][T16423] loop5: detected capacity change from 0 to 764 [ 1731.380826][T16446] block nbd4: NBD_DISCONNECT [ 1731.768267][T16425] loop1: detected capacity change from 0 to 32768 [ 1731.897348][T16425] XFS (loop1): Mounting V5 Filesystem [ 1731.969624][T16470] loop2: detected capacity change from 0 to 1024 [ 1732.074732][T16470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1732.169623][T16425] XFS (loop1): Ending clean mount [ 1732.281018][ T4939] EXT4-fs (loop2): unmounting filesystem. [ 1732.287330][T16481] xt_bpf: check failed: parse error [ 1732.371905][ T4948] XFS (loop1): Unmounting Filesystem [ 1732.798731][T16491] loop2: detected capacity change from 0 to 4096 [ 1732.883347][ C0] vkms_vblank_simulate: vblank timer overrun [ 1732.923223][T16491] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1733.348501][T16505] __nla_validate_parse: 36 callbacks suppressed [ 1733.348523][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20243'. [ 1733.885318][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20250'. [ 1733.958405][T16527] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20252'. [ 1734.611800][T16511] loop2: detected capacity change from 0 to 32768 [ 1734.794717][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20264'. [ 1734.852876][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20264'. [ 1735.211767][ T5431] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1735.446871][ T5431] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1735.486580][ T5431] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 4 [ 1735.539104][ T5431] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1735.568046][ T5431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.615656][ T5431] usb 2-1: Product: syz [ 1735.619887][ T5431] usb 2-1: Manufacturer: syz [ 1735.672831][ T5431] usb 2-1: SerialNumber: syz [ 1735.905557][ T5431] usb 2-1: Can't get UAC3 power state for id 10 [ 1735.931179][ T5431] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1735.983521][ T5431] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1735.994579][T16585] loop5: detected capacity change from 0 to 8 [ 1736.085501][ T5431] usb 2-1: USB disconnect, device number 74 [ 1736.124373][T16585] SQUASHFS error: xz decompression failed, data probably corrupt [ 1736.157294][T16585] SQUASHFS error: Failed to read block 0x108: -5 [ 1736.185688][T16585] SQUASHFS error: Unable to read metadata cache entry [106] [ 1736.223962][T16585] SQUASHFS error: Unable to read inode 0x11f [ 1736.434389][ T5007] udevd[5007]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1736.560415][ T26] audit: type=1326 audit(1784.374:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16592 comm="syz.2.20284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1736.563232][T16591] netlink: 'syz.5.20283': attribute type 5 has an invalid length. [ 1736.611724][T16570] loop4: detected capacity change from 0 to 40427 [ 1736.625711][ T26] audit: type=1326 audit(1784.395:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16592 comm="syz.2.20284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1736.695813][T16570] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1736.730720][T16570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1736.759508][ T26] audit: type=1326 audit(1784.406:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16592 comm="syz.2.20284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1736.783873][T16570] F2FS-fs (loop4): invalid crc value [ 1736.836808][T16570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1736.862385][T16583] loop3: detected capacity change from 0 to 32768 [ 1736.892384][ T26] audit: type=1326 audit(1784.406:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16592 comm="syz.2.20284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1737.018216][ T26] audit: type=1326 audit(1784.406:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16592 comm="syz.2.20284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1737.108832][T16570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1737.149670][T16570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1737.839370][ T4839] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1737.882747][T16622] loop5: detected capacity change from 0 to 4096 [ 1738.026143][T16622] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1738.060651][ T4839] usb 2-1: Using ep0 maxpacket: 8 [ 1738.068125][ T4839] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1738.108582][ T4839] usb 2-1: config 179 has no interface number 0 [ 1738.135985][ T4839] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1738.189125][ T4839] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1738.241025][ T4839] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1738.281034][ T4839] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1738.314791][T16636] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1738.339861][ T4839] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1738.366975][ T4839] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1738.385068][ T4839] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1738.453531][ T4839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.500074][ T4839] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input111 [ 1738.783279][T16648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20309'. [ 1738.920665][T16652] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1738.946860][T14228] usb 2-1: USB disconnect, device number 75 [ 1738.951970][T16652] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1738.953065][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1738.978485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1738.985709][T14228] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1739.090062][ T5431] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1739.294147][ T5431] usb 3-1: not running at top speed; connect to a high speed hub [ 1739.322827][ T5431] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.356622][ T5431] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1739.406974][ T5431] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1739.454304][ T5431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.503525][ T5431] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1739.592261][T16672] loop4: detected capacity change from 0 to 256 [ 1739.886068][ T5431] gspca_spca501: reg write: error -71 [ 1739.896029][ T5431] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1739.925995][ T5431] spca501: probe of 3-1:1.0 failed with error -22 [ 1739.957927][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20328'. [ 1739.962897][ T5431] usb 3-1: Found UVC 1.00 device (0000:0000) [ 1739.996407][T16684] netlink: 'syz.4.20328': attribute type 1 has an invalid length. [ 1740.027770][ T5431] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1740.047016][ T5431] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1740.085822][ T5431] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 1740.126452][T16681] loop5: detected capacity change from 0 to 8192 [ 1740.159357][ T5431] usb 3-1: USB disconnect, device number 44 [ 1740.210539][T16681] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1740.254451][T16681] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1740.292627][T16681] REISERFS (device loop5): using ordered data mode [ 1740.367598][T16681] reiserfs: using flush barriers [ 1740.388328][T16681] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1740.453946][T16681] REISERFS (device loop5): checking transaction log (loop5) [ 1740.502762][T16681] REISERFS (device loop5): Using tea hash to sort names [ 1740.985143][T16678] loop3: detected capacity change from 0 to 32768 [ 1741.019241][T16705] netlink: 'syz.4.20338': attribute type 11 has an invalid length. [ 1741.071620][T16707] IPv6: NLM_F_CREATE should be specified when creating new route [ 1741.081114][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20336'. [ 1741.106422][ T5072] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1741.445520][T21873] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1741.638286][T21873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1741.682689][T21873] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1741.706556][T21873] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.770039][T21873] usb 3-1: config 63 has no interface number 0 [ 1741.776285][T21873] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1741.815923][T21873] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1741.854878][T21873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.899958][T21873] usb 3-1: Product: syz [ 1741.940014][T21873] usb 3-1: Manufacturer: syz [ 1741.969243][T21873] usb 3-1: SerialNumber: syz [ 1742.192445][T21873] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 1742.208239][T21873] usb 3-1: No valid video chain found. [ 1742.251981][T21873] usb 3-1: USB disconnect, device number 45 [ 1742.314307][T16745] dlm: no locking on control device [ 1742.499896][T14228] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1742.713972][T14228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1742.743538][T14228] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1742.797812][T14228] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 145, changing to 11 [ 1742.873444][T14228] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1742.903208][T14228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.911294][T14228] usb 5-1: Product: syz [ 1742.944827][T14228] usb 5-1: Manufacturer: syz [ 1742.954410][T14228] usb 5-1: SerialNumber: syz [ 1743.057794][T16770] loop3: detected capacity change from 0 to 256 [ 1743.140579][ T5431] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1743.178614][T14228] cdc_ncm 5-1:1.0: bind() failure [ 1743.184788][T14228] usbtest 5-1:1.0: Linux gadget zero [ 1743.207202][T14228] usbtest 5-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1743.244068][T14228] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1743.276411][T14228] cdc_ncm 5-1:1.1: bind() failure [ 1743.304803][T14228] usbtest 5-1:1.1: couldn't get endpoints, -71 [ 1743.311255][T16773] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1743.322112][T14228] usbtest: probe of 5-1:1.1 failed with error -71 [ 1743.344693][ T5431] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1743.354321][T14228] usb 5-1: USB disconnect, device number 41 [ 1743.362662][ T5431] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.407428][ T5431] usb 2-1: config 0 has no interface number 0 [ 1743.418041][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1743.426424][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1743.432871][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1743.441971][ T5431] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1743.462790][ T5431] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1743.491940][ T5431] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1743.524161][ T5431] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1743.545603][ T5431] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1743.564392][ T5431] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1743.565352][T16777] netlink: 'syz.3.20373': attribute type 10 has an invalid length. [ 1743.583577][ T5431] usb 2-1: Product: syz [ 1743.587789][ T5431] usb 2-1: SerialNumber: syz [ 1743.604528][ T5431] usb 2-1: config 0 descriptor?? [ 1743.616200][T16777] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20373'. [ 1743.806276][ T5431] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1743.834969][ T5431] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 1744.067065][ T5431] usb 2-1: USB disconnect, device number 76 [ 1744.361495][T16801] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.20385'. [ 1744.508146][T16805] netlink: 'syz.2.20387': attribute type 21 has an invalid length. [ 1744.547801][T16805] netlink: 'syz.2.20387': attribute type 1 has an invalid length. [ 1744.565248][T16805] netlink: 144 bytes leftover after parsing attributes in process `syz.2.20387'. [ 1744.996111][T16824] loop2: detected capacity change from 0 to 128 [ 1745.055533][ T5431] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1745.056576][T16826] IPv6: NLM_F_CREATE should be specified when creating new route [ 1745.071719][T16824] FAT-fs (loop2): Directory bread(block 162) failed [ 1745.079068][T16824] FAT-fs (loop2): Directory bread(block 163) failed [ 1745.102616][T16824] FAT-fs (loop2): Directory bread(block 164) failed [ 1745.122630][T16824] FAT-fs (loop2): Directory bread(block 165) failed [ 1745.129354][T16824] FAT-fs (loop2): Directory bread(block 166) failed [ 1745.160235][T16824] FAT-fs (loop2): Directory bread(block 167) failed [ 1745.186850][T16824] FAT-fs (loop2): Directory bread(block 168) failed [ 1745.216678][T16824] FAT-fs (loop2): Directory bread(block 169) failed [ 1745.255787][T16824] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1745.319958][ T5431] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1745.326992][T16824] FAT-fs (loop2): Directory bread(block 162) failed [ 1745.356588][ T5431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.376186][T16824] FAT-fs (loop2): Directory bread(block 163) failed [ 1745.385087][ T5431] usb 5-1: config 0 descriptor?? [ 1745.412774][T16824] syz.2.20396: attempt to access beyond end of device [ 1745.412774][T16824] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 1745.511667][T16824] syz.2.20396: attempt to access beyond end of device [ 1745.511667][T16824] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 1745.543922][T16840] autofs4:pid:16840:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 1745.608575][T16840] autofs4:pid:16840:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1745.817588][ T5431] usb 5-1: Cannot set MAC address [ 1745.822885][ T5431] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1745.871140][ T5431] usb 5-1: USB disconnect, device number 42 [ 1746.052630][T16856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20412'. [ 1746.639301][T16878] xt_l2tp: v2 doesn't support IP mode [ 1746.788704][ T5431] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1746.817616][T14230] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1746.836615][T14228] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1746.988996][ T5431] usb 2-1: Using ep0 maxpacket: 32 [ 1746.998154][ T5431] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1747.026361][ T5431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.034982][T14230] usb 4-1: Using ep0 maxpacket: 16 [ 1747.040594][T14228] usb 3-1: Using ep0 maxpacket: 8 [ 1747.048365][T14230] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1747.058276][T14228] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1747.078724][T14228] usb 3-1: config 179 has no interface number 0 [ 1747.085468][ T5431] usb 2-1: Product: syz [ 1747.092115][T14230] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1747.106645][ T5431] usb 2-1: Manufacturer: syz [ 1747.115486][T14228] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1747.130869][ T5431] usb 2-1: SerialNumber: syz [ 1747.135807][T14230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.156001][ T5431] usb 2-1: config 0 descriptor?? [ 1747.164116][T14228] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1747.176104][T14230] usb 4-1: Product: syz [ 1747.188588][T14230] usb 4-1: Manufacturer: syz [ 1747.214516][T14230] usb 4-1: SerialNumber: syz [ 1747.219671][T14228] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1747.237285][T14230] r8152-cfgselector 4-1: config 0 descriptor?? [ 1747.253478][T14228] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1747.285019][T14228] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1747.317862][T14228] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1747.334571][T14228] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1747.356819][T14228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.384935][ T5431] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 1747.409077][ T5431] ab 43 1e 80 9b f8 7a f0 [ 1747.432720][T14228] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input113 [ 1747.453712][ T5431] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 1747.498099][T16888] xt_nat: multiple ranges no longer supported [ 1747.586225][T14228] usb 2-1: USB disconnect, device number 77 [ 1747.674606][T14230] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1747.701038][T14230] r8152-cfgselector 4-1: USB disconnect, device number 72 [ 1747.759651][T16894] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.20431'. [ 1747.806715][T16894] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4 [ 1747.915410][T14228] usb 3-1: USB disconnect, device number 46 [ 1747.931726][T14228] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1748.142508][T16903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20435'. [ 1749.130288][T16937] netlink: 'syz.5.20450': attribute type 41 has an invalid length. [ 1749.159067][T16937] netlink: 'syz.5.20450': attribute type 41 has an invalid length. [ 1749.794249][T16961] loop2: detected capacity change from 0 to 736 [ 1750.265959][T16977] netlink: 'syz.4.20472': attribute type 3 has an invalid length. [ 1750.325760][T16981] loop3: detected capacity change from 0 to 128 [ 1750.398705][T16981] /dev/loop3: Can't open blockdev [ 1750.917698][T17001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20484'. [ 1751.287511][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20493'. [ 1751.704887][T14230] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1751.739642][T17037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20502'. [ 1751.811500][ T26] audit: type=1326 audit(1800.385:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1751.835331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.884189][T17043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20505'. [ 1751.940136][ T26] audit: type=1326 audit(1800.427:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1751.963843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.973326][T17043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20505'. [ 1752.025457][T14230] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1752.046549][T14230] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.124436][ T26] audit: type=1326 audit(1800.427:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1752.126984][T14230] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1752.244428][ T26] audit: type=1326 audit(1800.427:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1752.266328][T14230] usb 3-1: config 150 has no interface number 0 [ 1752.268939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.275144][T14230] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1752.398750][T14230] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1752.412250][ T26] audit: type=1326 audit(1800.427:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1752.437529][T14230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.445567][T14230] usb 3-1: Product: syz [ 1752.503749][T14230] usb 3-1: Manufacturer: syz [ 1752.508416][T14230] usb 3-1: SerialNumber: syz [ 1752.515587][ T26] audit: type=1326 audit(1800.427:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1752.539252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.568789][T17064] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1752.661256][ T26] audit: type=1326 audit(1800.427:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1752.787405][ T26] audit: type=1326 audit(1800.427:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.20504" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1752.791040][T14230] xr_serial 3-1:150.204: skipping garbage [ 1752.871828][T14230] xr_serial 3-1:150.204: invalid descriptor buffer length [ 1752.896319][T17069] loop3: detected capacity change from 0 to 4096 [ 1752.906279][T14230] usb 3-1: USB disconnect, device number 47 [ 1752.933562][T17069] /dev/loop3: Can't open blockdev [ 1753.180625][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1753.637287][T17098] futex_wake_op: syz.1.20531 tries to shift op by -1; fix this program [ 1754.088352][T17117] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1754.231730][T17119] loop2: detected capacity change from 0 to 2048 [ 1754.281698][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20544'. [ 1754.315747][T17119] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1754.360982][T17119] syz.2.20543: attempt to access beyond end of device [ 1754.360982][T17119] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1754.375786][T17128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1754.543143][T17119] syz.2.20543: attempt to access beyond end of device [ 1754.543143][T17119] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1754.616101][T17119] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 1754.649313][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20550'. [ 1754.777344][T17137] loop4: detected capacity change from 0 to 164 [ 1754.866036][T17137] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1756.072923][T17178] loop4: detected capacity change from 0 to 4096 [ 1756.184462][T17193] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1756.268157][T17178] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1756.356112][T17178] Remounting filesystem read-only [ 1756.534246][ T4947] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1756.748953][T14228] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1756.967325][T14228] usb 3-1: Using ep0 maxpacket: 8 [ 1756.979851][T14228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.018865][T14228] usb 3-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 1757.066294][T14228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.084194][T14228] usb 3-1: config 0 descriptor?? [ 1757.119623][T14228] usb 3-1: Found UVC 148.00 device (05a9:2630) [ 1757.152024][T14228] usb 3-1: No valid video chain found. [ 1757.319363][ T4868] usb 3-1: USB disconnect, device number 48 [ 1757.484672][T17230] Process accounting paused [ 1757.846765][T17249] device bridge_slave_0 entered promiscuous mode [ 1757.880858][T17249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1757.919036][T17249] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1758.523580][T17275] netlink: 'syz.2.20619': attribute type 1 has an invalid length. [ 1759.063346][T17300] nfs: Deprecated parameter 'nointr' [ 1759.820368][T17325] binder: 17324:17325 ioctl c018620c 200000000000 returned -22 [ 1759.839520][T17326] loop1: detected capacity change from 0 to 16 [ 1759.883898][T17326] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 1759.936435][T17326] overlayfs: failed to resolve '/¡&ùJµÍúTEÃÀíILuiÖ76¯wÂ0èåE5Öy [ 1759.936435][T17326] ®²"·e²PߊÄU}*àüý{5n’Ýíß²òyðÈÞ†À*éE8h6ô–xÆýï®dë[ú1owÿåŃ“À—5?R ½¢Õ?gß¹P¦ 9.ûÂÁôOÚÊ[¾Òäíá$ñ2Ëò˜˜§Œ¢–íªÙ¦y‹': -2 [ 1760.309204][ T26] audit: type=1326 audit(1809.298:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1760.418878][ T26] audit: type=1326 audit(1809.298:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1760.541813][ T26] audit: type=1326 audit(1809.298:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1760.685896][ T26] audit: type=1326 audit(1809.340:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1760.810139][ T26] audit: type=1326 audit(1809.340:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1760.922355][ T26] audit: type=1326 audit(1809.340:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1761.070628][ T26] audit: type=1326 audit(1809.340:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1761.140218][T17370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20663'. [ 1761.171321][ T26] audit: type=1326 audit(1809.340:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17339 comm="syz.2.20650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1761.200997][T17370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20663'. [ 1761.419617][T17376] netlink: 'syz.2.20666': attribute type 11 has an invalid length. [ 1761.457440][T17376] netlink: 140 bytes leftover after parsing attributes in process `syz.2.20666'. [ 1761.467771][T17379] qrtr: Invalid version 0 [ 1761.496033][T17381] kAFS: unable to lookup cell ' [ 1761.496033][T17381] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 1761.496033][T17381] ' [ 1761.630316][T17383] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1761.694626][T17344] loop5: detected capacity change from 0 to 32768 [ 1761.860894][T17344] JBD2: Ignoring recovery information on journal [ 1762.000423][T17344] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1762.301823][T17407] xt_hashlimit: max too large, truncated to 1048576 [ 1762.312288][T17407] xt_hashlimit: overflow, try lower: 2/0 [ 1762.338797][T12039] ocfs2: Unmounting device (7,5) on (node local) [ 1762.806250][T17425] loop2: detected capacity change from 0 to 164 [ 1763.393642][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20700'. [ 1763.600983][T14230] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1763.833981][T14230] usb 4-1: Using ep0 maxpacket: 8 [ 1763.842317][T14230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1763.888555][T14230] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1763.915281][T14230] usb 4-1: config 0 has no interface number 0 [ 1763.931215][T14230] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1763.992566][T14230] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1764.031737][T17470] netlink: 'syz.1.20711': attribute type 1 has an invalid length. [ 1764.039777][T14230] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1764.069006][T17472] bridge0: port 1(netdevsim0) entered blocking state [ 1764.100221][T14230] usb 4-1: string descriptor 0 read error: -22 [ 1764.114977][T14230] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1764.124366][T17472] bridge0: port 1(netdevsim0) entered disabled state [ 1764.143670][T14230] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1764.154491][T17472] device netdevsim0 entered promiscuous mode [ 1764.203281][T14230] usb 4-1: config 0 descriptor?? [ 1764.230727][T14230] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input114 [ 1764.478522][T14230] usb 4-1: USB disconnect, device number 73 [ 1764.516006][ T5495] udevd[5495]: Error opening device "/dev/input/event4": Input/output error [ 1764.554135][ T5495] udevd[5495]: Unable to EVIOCGABS device "/dev/input/event4" [ 1764.599627][ T5495] udevd[5495]: Unable to EVIOCGABS device "/dev/input/event4" [ 1764.640137][ T5495] udevd[5495]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1764.739988][ T3639] udevd[3639]: worker [5495] terminated by signal 6 (Aborted) [ 1764.757968][ T3639] udevd[3639]: worker [5495] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input114/event4' [ 1764.864111][T17496] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1765.150978][T17507] loop4: detected capacity change from 0 to 64 [ 1765.725517][ T4868] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1765.809298][ T26] audit: type=1326 audit(1815.072:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.3.20740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1765.850679][T14230] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 1765.897077][ T26] audit: type=1326 audit(1815.072:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.3.20740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1765.924001][ T4868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1765.963128][ T4868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1765.984694][ T4868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64 [ 1765.992974][T14228] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1766.008359][ T26] audit: type=1326 audit(1815.124:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.3.20740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1766.040169][ T4868] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1766.068028][ T4868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.092650][T14230] usb 3-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 1766.108601][ T4868] usb 5-1: config 0 descriptor?? [ 1766.114933][T17516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1766.124491][ T26] audit: type=1326 audit(1815.124:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.3.20740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1766.132777][T14230] usb 3-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.150034][T17516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1766.229712][ T26] audit: type=1326 audit(1815.124:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.3.20740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1766.241883][T14228] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1766.254956][ T4868] hub 5-1:0.0: bad descriptor, ignoring hub [ 1766.285240][ T4868] hub: probe of 5-1:0.0 failed with error -5 [ 1766.312745][T17510] loop2: detected capacity change from 0 to 32768 [ 1766.312918][T14230] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1766.334297][T14228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.370532][T14228] usb 2-1: Product: syz [ 1766.399824][T14228] usb 2-1: Manufacturer: syz [ 1766.411053][T17510] loop2: p1 p3 < > [ 1766.432769][T14230] usb 3-1: string descriptor 0 read error: -22 [ 1766.448604][T14230] usb 3-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 1766.457880][T14228] usb 2-1: SerialNumber: syz [ 1766.474497][T14228] usb 2-1: config 0 descriptor?? [ 1766.494426][T14230] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1766.517701][T14228] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1766.550176][T14230] usbhid 3-1:1.0: fixing wrong optional hid class descriptors count [ 1766.581071][T14230] usbhid 3-1:1.0: can't add hid device: -22 [ 1766.606855][T14230] usbhid: probe of 3-1:1.0 failed with error -22 [ 1766.788200][T21873] usb 3-1: USB disconnect, device number 49 [ 1766.822336][ T4868] usb 5-1: USB disconnect, device number 43 [ 1766.906562][T14228] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1766.913745][T14228] sq905c 2-1:0.0: Reading version command failed [ 1766.950256][T14228] sq905c: probe of 2-1:0.0 failed with error -71 [ 1766.990268][T17549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1767.029880][T14228] usb 2-1: USB disconnect, device number 78 [ 1767.080008][T17551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20750'. [ 1767.113930][T17551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20750'. [ 1767.999473][T17575] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1768.046161][T17576] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1768.258568][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1768.262473][T17584] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20766'. [ 1768.319751][T17580] loop5: detected capacity change from 0 to 4096 [ 1768.354099][T17584] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20766'. [ 1768.401662][T17580] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1768.851844][T17597] loop1: detected capacity change from 0 to 128 [ 1769.451039][T17621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.20782'. [ 1769.507169][T17621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1769.777204][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20787'. [ 1769.900845][T17638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20790'. [ 1770.256962][T17652] netlink: 'syz.1.20795': attribute type 3 has an invalid length. [ 1770.316294][T17654] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20797'. [ 1771.168650][T17686] netlink: 'syz.1.20812': attribute type 3 has an invalid length. [ 1771.211428][T17686] netlink: 666 bytes leftover after parsing attributes in process `syz.1.20812'. [ 1771.576882][T17698] netlink: 'syz.4.20818': attribute type 21 has an invalid length. [ 1771.645710][T17698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20818'. [ 1771.927572][T17711] loop1: detected capacity change from 0 to 256 [ 1771.946700][T17714] loop2: detected capacity change from 0 to 256 [ 1772.043861][T17711] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1772.097632][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.145052][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.153642][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.329968][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.348834][T17727] loop5: detected capacity change from 0 to 8 [ 1772.392695][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.422408][T17727] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1772.430245][ T5084] udevd[5084]: incorrect cramfs checksum on /dev/loop5 [ 1772.440861][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.473593][ T5007] udevd[5007]: incorrect cramfs checksum on /dev/loop5 [ 1772.488311][T17727] cramfs: bad data blocksize 4294934200 [ 1772.517094][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.545304][T17727] cramfs: bad data blocksize 4294934200 [ 1772.565533][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.575944][ T26] audit: type=1800 audit(1822.180:693): pid=17727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.20832" name="file1" dev="loop5" ino=33092 res=0 errno=0 [ 1772.659008][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.667606][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.740155][T17729] loop1: detected capacity change from 0 to 4096 [ 1772.754237][T17733] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1772.779917][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.795913][T17729] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1772.850856][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.882239][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.933020][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1772.982976][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.021604][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.032502][T17739] netlink: 'syz.3.20838': attribute type 12 has an invalid length. [ 1773.045224][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.084539][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.121049][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.175186][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.175299][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.175328][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.175387][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.175411][T17714] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1773.175633][ T26] audit: type=1800 audit(1822.809:694): pid=17714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.20826" name="file2" dev="loop2" ino=1048764 res=0 errno=0 [ 1773.492089][T17750] 9p: Unknown access argument z: -22 [ 1773.831718][T17760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.839043][T17760] IPv6: NLM_F_CREATE should be set when creating new route [ 1774.212277][T17775] tmpfs: Bad value for 'mpol' [ 1774.414406][ T26] audit: type=1326 audit(1824.111:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17781 comm="syz.3.20859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1774.573637][T17786] netlink: 'syz.2.20861': attribute type 5 has an invalid length. [ 1774.612124][ T26] audit: type=1326 audit(1824.111:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17781 comm="syz.3.20859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1774.682237][ T26] audit: type=1326 audit(1824.111:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17781 comm="syz.3.20859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1774.798069][ T26] audit: type=1326 audit(1824.111:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17781 comm="syz.3.20859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1f9e0d9 code=0x7ffc0000 [ 1775.532671][T17780] loop5: detected capacity change from 0 to 32768 [ 1775.647399][T17780] XFS (loop5): Mounting V5 Filesystem [ 1775.783799][T17780] XFS (loop5): Ending clean mount [ 1775.796812][ T26] audit: type=1326 audit(1825.560:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17826 comm="syz.2.20877" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1775.842226][ T26] audit: type=1326 audit(1825.560:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17826 comm="syz.2.20877" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1775.868007][T14230] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1775.982892][ T26] audit: type=1326 audit(1825.560:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17826 comm="syz.2.20877" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1776.021902][T12039] XFS (loop5): Unmounting Filesystem [ 1776.088315][T14230] usb 2-1: Using ep0 maxpacket: 8 [ 1776.093882][ T26] audit: type=1326 audit(1825.560:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17826 comm="syz.2.20877" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff7fbf9e0d9 code=0x7ffc0000 [ 1776.098966][T14230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1776.244052][T14230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1776.263587][T14230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1776.303879][T14230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1776.360519][T14230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1776.420568][T14230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1776.439883][T14230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.489403][T14230] usb 2-1: config 0 descriptor?? [ 1776.495504][T17814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1776.881488][T17854] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 1776.897534][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 1776.906749][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.914528][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.925029][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.932206][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.940103][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.947267][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.954122][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.962930][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.969905][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.976941][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1776.988251][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.004547][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.011500][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.018477][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.026097][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.033352][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.040252][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.047236][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.054153][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.061174][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.068137][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.075151][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.084544][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.091641][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.097920][ T5431] usb 2-1: USB disconnect, device number 79 [ 1777.098779][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.111254][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.118246][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.125149][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.132045][ T8063] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1777.142516][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1777.468038][T17865] tipc: Trying to set illegal importance in message [ 1777.881214][T17881] binder: 17880:17881 ioctl c0306201 200000000680 returned -14 [ 1778.312590][T17897] loop2: detected capacity change from 0 to 512 [ 1778.441454][T17897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 1778.460384][T17897] System zones: 1-12 [ 1778.465377][T17897] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1778.498716][T17897] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1778.542279][T17897] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1778.619921][T17897] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.20912: attempt to clear invalid blocks 2 len 1 [ 1778.684411][T17897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.20912: invalid indirect mapped block 1819239214 (level 0) [ 1778.804705][T17897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.20912: invalid indirect mapped block 1819239214 (level 1) [ 1778.917963][T17897] EXT4-fs (loop2): 1 truncate cleaned up [ 1778.923699][T17897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1778.936667][T17890] loop1: detected capacity change from 0 to 32768 [ 1778.992211][T17897] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1779.044476][T17890] JBD2: Ignoring recovery information on journal [ 1779.080790][T17897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 1779.127242][T17897] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.20912: Abort forced by user [ 1779.180422][T17897] EXT4-fs (loop2): Remounting filesystem read-only [ 1779.190716][T17890] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1779.221807][T17897] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1779.253515][T17919] loop3: detected capacity change from 0 to 4096 [ 1779.304946][T17919] /dev/loop3: Can't open blockdev [ 1779.405058][ T4939] EXT4-fs (loop2): unmounting filesystem. [ 1779.500928][ T4948] ocfs2: Unmounting device (7,1) on (node local) [ 1779.637281][T17929] loop4: detected capacity change from 0 to 2048 [ 1779.736627][T17929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1780.860076][T17931] loop2: detected capacity change from 0 to 32768 [ 1780.868096][T17968] xt_connbytes: Forcing CT accounting to be enabled [ 1780.917055][T17931] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1781.031870][T21873] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1781.068818][ T4939] ocfs2: Unmounting device (7,2) on (node local) [ 1781.213145][T21873] usb 4-1: Using ep0 maxpacket: 32 [ 1781.230633][T21873] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1781.275961][T21873] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1781.322589][T21873] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1781.384851][T21873] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1781.432335][T21873] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1781.479502][T21873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1781.524554][T21873] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1781.563949][T21873] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1781.603285][T21873] usb 4-1: Product: syz [ 1781.607513][T21873] usb 4-1: Manufacturer: syz [ 1781.640452][T21873] usb 4-1: SerialNumber: syz [ 1781.667817][T21873] usb 4-1: config 0 descriptor?? [ 1781.717826][T21873] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1781.772849][T21873] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1781.947052][T17966] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1781.959607][T14230] usb 4-1: USB disconnect, device number 74 [ 1781.975970][T14230] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1782.128221][ T5431] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1782.244510][T17986] loop4: detected capacity change from 0 to 32768 [ 1782.349005][ T5431] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1782.368937][ T5431] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1782.377884][T17990] loop2: detected capacity change from 0 to 32768 [ 1782.412929][ T5431] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1782.461752][ T5431] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1782.491978][ T5431] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1782.492407][T17990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1782.531132][ T5431] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1782.560017][ T5431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.599251][T17996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1782.611846][T17996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1782.632625][T17996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1782.641316][ T5431] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 1782.683865][T18000] loop3: detected capacity change from 0 to 256 [ 1782.698096][T17994] loop1: detected capacity change from 0 to 40427 [ 1782.756247][T17994] F2FS-fs (loop1): invalid crc value [ 1782.791939][T17994] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1782.834138][ T4939] ocfs2: Unmounting device (7,2) on (node local) [ 1782.863382][ T5431] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1782.909634][ T5431] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1783.075606][ T4868] usb 6-1: USB disconnect, device number 9 [ 1783.076495][T17994] F2FS-fs (loop1): Start checkpoint disabled! [ 1783.115045][ T4868] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1783.188261][ T4868] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1783.242565][ T4868] mos7720 6-1:1.0: device disconnected [ 1783.267835][T17994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1783.425192][T18018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20966'. [ 1784.425931][T18042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20978'. [ 1784.433455][T18014] loop2: detected capacity change from 0 to 32768 [ 1784.557175][T18051] loop1: detected capacity change from 0 to 512 [ 1784.586586][T18014] XFS (loop2): Mounting V5 Filesystem [ 1784.616346][T18051] EXT4-fs: Ignoring removed orlov option [ 1784.622814][T14230] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1784.674334][T18051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1784.886592][T14230] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.917279][T18014] XFS (loop2): Ending clean mount [ 1784.934823][T14230] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1784.984955][T14230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.017026][ T4948] EXT4-fs (loop1): unmounting filesystem. [ 1785.083838][T14230] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1785.177608][ T4939] XFS (loop2): Unmounting Filesystem [ 1785.203045][T18071] loop5: detected capacity change from 0 to 512 [ 1785.337537][T18071] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1785.385905][T18071] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1785.462268][T18071] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 1785.473420][T18071] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1785.598347][T18071] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1785.726965][T12039] EXT4-fs (loop5): unmounting filesystem. [ 1786.103322][T14230] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1786.214987][T18099] Process accounting resumed [ 1786.299370][T14230] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1786.328018][T14230] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1786.365745][T14230] usb 4-1: USB disconnect, device number 75 [ 1786.511237][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21005'. [ 1786.784037][T18122] netlink: 'syz.2.21012': attribute type 12 has an invalid length. [ 1786.900622][T18127] tc_dump_action: action bad kind [ 1786.950408][T18129] xt_policy: neither incoming nor outgoing policy selected [ 1787.144992][T18135] loop1: detected capacity change from 0 to 164 [ 1787.163329][T18134] sctp: [Deprecated]: syz.2.21016 (pid 18134) Use of int in max_burst socket option deprecated. [ 1787.163329][T18134] Use struct sctp_assoc_value instead [ 1787.192725][T18135] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1787.526381][T18141] loop1: detected capacity change from 0 to 1024 [ 1787.935577][T18155] delete_channel: no stack [ 1788.103364][T18123] loop5: detected capacity change from 0 to 40427 [ 1788.143286][T18123] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 1788.185097][T18159] loop2: detected capacity change from 0 to 512 [ 1788.204414][T18123] F2FS-fs (loop5): Should set mode=lfs with 16KB-sized IO [ 1788.231620][T18159] EXT4-fs: inline encryption not supported [ 1788.270077][T18159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1788.331263][T18159] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1788.385859][T18159] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1788.442918][T18159] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1788.502817][T18159] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1788.532610][T18159] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1788.628229][T18159] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.21029: bg 0: block 34: padding at end of block bitmap is not set [ 1788.685271][T18159] __quota_error: 5 callbacks suppressed [ 1788.685287][T18159] Quota error (device loop2): write_blk: dquota write failed [ 1788.745170][T18159] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1788.776089][T18159] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.21029: Failed to acquire dquot type 1 [ 1788.861006][T18159] EXT4-fs (loop2): 1 truncate cleaned up [ 1788.891052][T18159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1788.939484][T18159] EXT4-fs (loop2): unmounting filesystem. [ 1788.974894][T18150] loop4: detected capacity change from 0 to 32768 [ 1789.010281][T18182] loop5: detected capacity change from 0 to 512 [ 1789.090104][T18182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 1789.098125][T18182] System zones: 1-12 [ 1789.101491][T18150] XFS (loop4): Mounting V5 Filesystem [ 1789.119818][T18182] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1789.126247][T18182] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1789.146581][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21042'. [ 1789.192132][T18182] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1789.252396][T18150] XFS (loop4): Ending clean mount [ 1789.309489][T18182] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.21040: attempt to clear invalid blocks 2 len 1 [ 1789.333950][T18150] XFS (loop4): Quotacheck needed: Please wait. [ 1789.367393][T18182] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.21040: invalid indirect mapped block 1819239214 (level 0) [ 1789.405249][T18182] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.21040: invalid indirect mapped block 1819239214 (level 1) [ 1789.469961][T18182] EXT4-fs (loop5): 1 truncate cleaned up [ 1789.509395][T18182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1789.535960][T18150] XFS (loop4): Quotacheck: Done. [ 1789.612504][T18182] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1789.682824][T18182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 1789.766254][T18182] EXT4-fs error (device loop5): __ext4_remount:6650: comm syz.5.21040: Abort forced by user [ 1789.861396][T18182] EXT4-fs (loop5): Remounting filesystem read-only [ 1789.867995][T18182] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1789.879181][ T4947] XFS (loop4): Unmounting Filesystem [ 1790.069036][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21051'. [ 1790.093017][T12039] EXT4-fs (loop5): unmounting filesystem. [ 1790.129035][T18212] netlink: 108 bytes leftover after parsing attributes in process `syz.3.21051'. [ 1790.185975][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21051'. [ 1790.229177][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21051'. [ 1791.283578][T18253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21070'. [ 1791.394720][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21071'. [ 1791.745320][T14228] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1791.987768][T14228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.014636][T14228] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1792.090759][T14228] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1792.137817][T14228] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1792.147015][T14228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.207231][T14228] usb 5-1: config 0 descriptor?? [ 1792.572056][T18224] syz.5.21057 (18224): drop_caches: 3 [ 1792.581428][T18289] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1792.612773][T14228] usb 5-1: USB disconnect, device number 44 [ 1792.659593][T18289] overlayfs: missing 'lowerdir' [ 1793.295680][T18305] device wlan0 entered promiscuous mode [ 1793.365045][T18305] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1793.588959][T18318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21101'. [ 1793.698708][ T26] audit: type=1326 audit(1844.352:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1793.762274][ T26] audit: type=1326 audit(1844.352:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1793.923829][ T26] audit: type=1326 audit(1844.394:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.034206][ T26] audit: type=1326 audit(1844.394:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.177156][ T26] audit: type=1326 audit(1844.394:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.329278][ T26] audit: type=1326 audit(1844.394:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.445397][ T26] audit: type=1326 audit(1844.394:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.579570][ T26] audit: type=1326 audit(1844.394:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.701096][ T26] audit: type=1326 audit(1844.394:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.5.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3debf9e0d9 code=0x7ffc0000 [ 1794.768504][T18358] loop1: detected capacity change from 0 to 512 [ 1794.813911][T18358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1795.007499][T18358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1795.321378][ T4948] EXT4-fs (loop1): unmounting filesystem. [ 1795.757618][T21873] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1795.957971][T21873] usb 6-1: Using ep0 maxpacket: 32 [ 1795.965418][T21873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1796.014860][T21873] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.072505][T21873] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1796.092177][T21873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.119733][T21873] usb 6-1: Product: syz [ 1796.148615][T21873] usb 6-1: Manufacturer: syz [ 1796.154539][T21873] usb 6-1: SerialNumber: syz [ 1796.316287][ T26] audit: type=1400 audit(1847.103:717): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18419 comm="syz.4.21150" [ 1796.385264][T21873] usb 6-1: Invalid number of CPorts: 0 [ 1796.391239][T21873] es2_ap_driver: probe of 6-1:7.0 failed with error -22 [ 1796.592271][T21873] usb 6-1: USB disconnect, device number 10 [ 1797.594804][T18470] loop4: detected capacity change from 0 to 64 [ 1797.677999][T18472] loop2: detected capacity change from 0 to 64 [ 1797.700767][ T5431] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1797.779320][T21948] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1797.879573][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21178'. [ 1797.934619][ T5431] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1797.953738][ T5431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.991101][T21948] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1798.002462][ T5431] usb 2-1: Product: syz [ 1798.021962][ T5431] usb 2-1: Manufacturer: syz [ 1798.034946][T21948] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1798.043655][ T5431] usb 2-1: SerialNumber: syz [ 1798.069120][T21948] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1798.100631][T21948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.141113][T21948] usb 6-1: Product: syz [ 1798.148834][T21948] usb 6-1: Manufacturer: syz [ 1798.159020][T21948] usb 6-1: SerialNumber: syz [ 1798.163788][T14228] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1798.406036][T21948] usb 6-1: selecting invalid altsetting 0 [ 1798.428645][T21948] usb 6-1: Can't get UAC3 power state for id 10 [ 1798.455321][T21948] usb 6-1: selecting invalid altsetting 0 [ 1798.462679][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21187'. [ 1798.491213][T21948] usb 6-1: selecting invalid altsetting 0 [ 1798.491318][T18494] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1798.577194][T21948] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1798.607481][ T5431] usb 2-1: USB disconnect, device number 80 [ 1798.628267][T21948] usb 6-1: USB disconnect, device number 11 [ 1798.652925][ T5084] udevd[5084]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1799.009536][T18507] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1799.201129][T14228] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1799.210556][T14228] ath9k_htc: Failed to initialize the device [ 1799.233521][ T5431] usb 2-1: ath9k_htc: USB layer deinitialized [ 1799.262844][T18523] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1799.274802][ T26] audit: type=1326 audit(1850.211:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1799.368212][T18523] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1799.405452][ T26] audit: type=1326 audit(1850.305:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1799.501404][T18527] netlink: 'syz.4.21200': attribute type 10 has an invalid length. [ 1799.533673][ T26] audit: type=1326 audit(1850.305:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1799.589158][T18529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1799.651587][ T26] audit: type=1326 audit(1850.326:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1799.797344][ T26] audit: type=1326 audit(1850.326:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1799.844958][T18538] loop1: detected capacity change from 0 to 512 [ 1799.878434][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21206'. [ 1799.911447][ T26] audit: type=1326 audit(1850.326:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1799.996975][ T26] audit: type=1326 audit(1850.326:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1800.139717][ T26] audit: type=1326 audit(1850.326:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.1.21197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ce4f9e0d9 code=0x7ffc0000 [ 1800.199520][T18547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21209'. [ 1800.301323][T18552] netlink: 'syz.1.21212': attribute type 10 has an invalid length. [ 1800.344887][T18552] team0: Device geneve1 is up. Set it down before adding it as a team port [ 1800.484236][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21215'. [ 1800.890343][T18571] loop4: detected capacity change from 0 to 256 [ 1800.940354][T18571] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 1801.120680][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21225'. [ 1801.515513][T18591] loop1: detected capacity change from 0 to 512 [ 1801.779033][T18591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1801.941728][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.948075][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.043583][ T4948] EXT4-fs (loop1): unmounting filesystem. [ 1802.329973][T14230] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1802.339454][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21245'. [ 1802.399384][T18626] ip6t_srh: unknown srh match flags 4000 [ 1802.576520][T14230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1802.600814][T14230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1802.679619][T14230] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1802.698444][T14230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.718719][T18636] netlink: 224 bytes leftover after parsing attributes in process `syz.4.21252'. [ 1802.737837][T14230] usb 6-1: Product: syz [ 1802.747452][T14230] usb 6-1: Manufacturer: syz [ 1802.761469][T18636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21252'. [ 1802.771359][T14230] usb 6-1: SerialNumber: syz [ 1802.797365][T14230] usb 6-1: config 0 descriptor?? [ 1802.825829][T14230] hub 6-1:0.0: bad descriptor, ignoring hub [ 1802.831815][T14230] hub: probe of 6-1:0.0 failed with error -5 [ 1802.888879][T14230] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input116 [ 1803.178281][T21948] usb 6-1: USB disconnect, device number 12 [ 1803.652747][T18670] No such timeout policy "syz1" [ 1803.863666][T18674] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1804.123294][T18686] netlink: 'syz.1.21277': attribute type 10 has an invalid length. [ 1804.198220][T18686] team0: Device veth1_macvtap failed to register rx_handler [ 1804.254723][T18688] netlink: 'syz.2.21275': attribute type 3 has an invalid length. [ 1804.264453][T18688] netlink: 'syz.2.21275': attribute type 3 has an invalid length. [ 1804.275273][T18694] netlink: 'syz.5.21280': attribute type 46 has an invalid length. [ 1804.296760][T18694] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21280'. [ 1804.667213][T18702] lo speed is unknown, defaulting to 1000 [ 1805.141982][T18722] netlink: 'syz.5.21294': attribute type 10 has an invalid length. [ 1805.222262][T18722] team0: Device veth1_macvtap failed to register rx_handler [ 1805.835814][T18744] netlink: 'syz.4.21304': attribute type 10 has an invalid length. [ 1805.918439][T18744] team0: Cannot enslave team device to itself [ 1805.957644][T18746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21305'. [ 1806.896092][T14228] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1807.147325][T14228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1807.189372][T14228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.209477][T14228] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1807.250118][T18790] loop4: detected capacity change from 0 to 64 [ 1807.260452][T14228] usb 4-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 9325, setting to 1024 [ 1807.301157][T14228] usb 4-1: config 1 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1807.349864][T14228] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1807.381363][T14228] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1807.422876][T14228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.453398][T14228] usb 4-1: Product: syz [ 1807.482736][T14228] usb 4-1: Manufacturer: syz [ 1807.500524][T18761] syz.2.21310 (18761): drop_caches: 3 [ 1807.511315][T14228] usb 4-1: SerialNumber: syz [ 1807.750462][T18797] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1807.772482][T18797] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1807.800615][T14228] usb 4-1: 1:2 : no or invalid class specific endpoint descriptor [ 1807.824620][T14228] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1807.866502][T18797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1807.869433][T14228] usb 4-1: unit 2 not found! [ 1807.896395][T18801] loop4: detected capacity change from 0 to 512 [ 1807.947413][T14228] usb 4-1: unit 8 not found! [ 1808.019667][T18801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1808.098384][T14228] usb 4-1: USB disconnect, device number 76 [ 1808.286571][T18810] netlink: 'syz.1.21335': attribute type 29 has an invalid length. [ 1808.321646][T18810] netlink: 'syz.1.21335': attribute type 29 has an invalid length. [ 1808.430680][ T4947] EXT4-fs (loop4): unmounting filesystem. [ 1808.581841][T18816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21338'. [ 1808.932451][T18828] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1808.962249][T18828] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1808.987548][T18828] overlayfs: missing 'lowerdir' [ 1809.695846][T14228] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1809.907431][T14228] usb 2-1: Using ep0 maxpacket: 32 [ 1809.915524][T14228] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1809.943446][T14228] usb 2-1: config 2 has no interface number 0 [ 1809.950831][T14228] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1809.988054][T14228] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1810.004217][T14230] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1810.026734][T14228] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1810.055605][T14228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1810.063658][T14228] usb 2-1: Product: syz [ 1810.107070][T14228] usb 2-1: Manufacturer: syz [ 1810.111737][T14228] usb 2-1: SerialNumber: syz [ 1810.158193][T18844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1810.239609][T14230] usb 3-1: Using ep0 maxpacket: 16 [ 1810.251025][T14230] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1810.300717][T14230] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1810.319601][T14230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.348542][T14230] usb 3-1: Product: syz [ 1810.362616][T14230] usb 3-1: Manufacturer: syz [ 1810.367269][T14230] usb 3-1: SerialNumber: syz [ 1810.379003][T14228] asix: probe of 2-1:2.88 failed with error -71 [ 1810.414785][T14228] usb 2-1: USB disconnect, device number 81 [ 1810.434606][T14230] r8152-cfgselector 3-1: config 0 descriptor?? [ 1810.826798][T18864] loop3: detected capacity change from 0 to 32768 [ 1810.875346][T14230] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1810.910246][T14230] r8152-cfgselector 3-1: USB disconnect, device number 50 [ 1810.928382][T18864] XFS (loop3): Mounting V5 Filesystem [ 1811.105227][T18864] XFS (loop3): Ending clean mount [ 1811.258324][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21376'. [ 1811.288019][ T4940] XFS (loop3): Unmounting Filesystem [ 1811.298761][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21378'. [ 1811.788536][T18919] CIFS mount error: No usable UNC path provided in device string! [ 1811.788536][T18919] [ 1811.855557][T18919] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1812.031195][T18928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21389'. [ 1812.034798][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21390'. [ 1812.908063][T18962] netlink: 'syz.5.21404': attribute type 1 has an invalid length. [ 1812.954744][T18962] netlink: 216 bytes leftover after parsing attributes in process `syz.5.21404'. [ 1812.994025][T18962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21404'. [ 1813.786231][T18950] loop3: detected capacity change from 0 to 32768 [ 1813.841389][T18950] /dev/loop3: Can't open blockdev [ 1814.010552][T18998] netlink: 'syz.5.21424': attribute type 27 has an invalid length. [ 1814.284185][T19008] netlink: 456 bytes leftover after parsing attributes in process `syz.2.21428'. [ 1814.371923][T19010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1814.665415][T19024] device veth1 entered promiscuous mode [ 1814.743754][T19024] netlink: 'syz.3.21436': attribute type 1 has an invalid length. [ 1814.781797][T19024] netlink: 9 bytes leftover after parsing attributes in process `syz.3.21436'. [ 1815.031251][T19026] loop5: detected capacity change from 0 to 4096 [ 1815.049662][T19030] Process accounting paused [ 1815.106779][T19026] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1815.361337][T19042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21446'. [ 1815.532271][T14228] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1815.714543][T19056] loop3: detected capacity change from 0 to 164 [ 1815.756025][T14228] usb 2-1: config 32 has an invalid interface number: 255 but max is 0 [ 1815.779523][T14228] usb 2-1: config 32 has no interface number 0 [ 1815.800567][T19056] rock: directory entry would overflow storage [ 1815.806897][T19056] rock: sig=0x66, size=4, remaining=3 [ 1815.815182][T14228] usb 2-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1815.865048][T14228] usb 2-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1815.892296][T19056] rock: directory entry would overflow storage [ 1815.910002][T19056] rock: sig=0x66, size=4, remaining=3 [ 1815.918303][T14228] usb 2-1: config 32 interface 255 has no altsetting 0 [ 1815.937119][T14228] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1815.998396][T14228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.041399][T14228] usb-storage 2-1:32.255: USB Mass Storage device detected [ 1816.094551][T14228] usb-storage 2-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 1816.141567][T19068] MTD: Couldn't look up '': -22 [ 1816.276313][T14228] usb 2-1: USB disconnect, device number 82 [ 1816.313473][ T5431] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1816.368097][T19072] loop3: detected capacity change from 0 to 1764 [ 1816.396727][T19075] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1816.420560][T19073] [U] ^C [ 1816.541681][ T5431] usb 6-1: Using ep0 maxpacket: 16 [ 1816.563143][ T5431] usb 6-1: config 0 has no interfaces? [ 1816.605389][ T5431] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1816.636922][ T5431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.657113][ T5431] usb 6-1: Product: syz [ 1816.668068][ T5431] usb 6-1: Manufacturer: syz [ 1816.672715][ T5431] usb 6-1: SerialNumber: syz [ 1816.717912][ T5431] r8152-cfgselector 6-1: config 0 descriptor?? [ 1816.903660][T19090] netlink: 1033 bytes leftover after parsing attributes in process `syz.1.21468'. [ 1816.964604][ T5431] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1817.173142][ T5431] usb 6-1: USB disconnect, device number 13 [ 1817.515220][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21477'. [ 1817.568469][T19108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21477'. [ 1818.182599][T19128] netlink: 5 bytes leftover after parsing attributes in process `syz.1.21487'. [ 1818.672432][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21492'. [ 1818.721583][T19142] loop2: detected capacity change from 0 to 256 [ 1819.024339][T19118] loop5: detected capacity change from 0 to 32768 [ 1819.076629][T19095] syz.4.21470 (19095): drop_caches: 3 [ 1819.144642][T19154] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1819.200963][ T53] block nbd1: Attempted send on invalid socket [ 1819.207231][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1819.263085][T19118] XFS (loop5): Mounting V5 Filesystem [ 1819.327424][T19161] xt_cgroup: invalid path, errno=-2 [ 1819.389567][T19167] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1819.408462][T19167] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1819.584172][T19118] XFS (loop5): Ending clean mount [ 1819.779229][T12039] XFS (loop5): Unmounting Filesystem [ 1820.204748][T19191] netlink: 'syz.4.21514': attribute type 5 has an invalid length. [ 1820.239821][T19191] netlink: 7 bytes leftover after parsing attributes in process `syz.4.21514'. [ 1820.361535][T19196] loop2: detected capacity change from 0 to 64 [ 1820.414676][T19196] syz.2.21515: attempt to access beyond end of device [ 1820.414676][T19196] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1820.503763][T19196] Buffer I/O error on dev loop2, logical block 22533, async page read [ 1820.537532][T19198] loop4: detected capacity change from 0 to 256 [ 1820.552171][T19196] syz.2.21515: attempt to access beyond end of device [ 1820.552171][T19196] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1820.630914][T19198] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1820.643843][T19196] Buffer I/O error on dev loop2, logical block 22533, async page read [ 1820.742851][T19198] UBIFS error (pid: 19198): cannot open "ubi:0", error -19 [ 1821.043046][T19211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.21521'. [ 1821.271756][T19215] loop2: detected capacity change from 0 to 2048 [ 1821.355021][T19219] loop4: detected capacity change from 0 to 256 [ 1821.389741][T19215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1821.461724][T19194] loop3: detected capacity change from 0 to 32768 [ 1821.611361][ T5007] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1822.618391][T19253] device bond1 entered promiscuous mode [ 1822.721145][T19253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1823.066762][T19270] netlink: 'syz.5.21549': attribute type 9 has an invalid length. [ 1823.206252][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21552'. [ 1823.327378][T19281] loop4: detected capacity change from 0 to 256 [ 1823.437953][T19285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21556'. [ 1823.476066][T19285] netlink: 108 bytes leftover after parsing attributes in process `syz.5.21556'. [ 1823.542852][T19285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21556'. [ 1823.599599][T19285] netlink: 108 bytes leftover after parsing attributes in process `syz.5.21556'. [ 1823.619001][T19285] netlink: 84 bytes leftover after parsing attributes in process `syz.5.21556'. [ 1824.410015][T21948] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1824.600231][T21948] usb 5-1: Using ep0 maxpacket: 16 [ 1824.607522][T21948] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1824.648233][T21948] usb 5-1: config 0 has no interface number 0 [ 1824.695059][T21948] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1824.716814][T21948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.762018][T21948] usb 5-1: Product: syz [ 1824.780881][T21948] usb 5-1: Manufacturer: syz [ 1824.785533][T21948] usb 5-1: SerialNumber: syz [ 1824.811502][T21948] usb 5-1: config 0 descriptor?? [ 1824.846806][T21948] hub 5-1:0.132: bad descriptor, ignoring hub [ 1824.876437][T21948] hub: probe of 5-1:0.132 failed with error -5 [ 1824.913686][T21948] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input117 [ 1824.951466][T19304] loop2: detected capacity change from 0 to 32768 [ 1825.124257][ T5431] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1825.313131][T19324] netlink: 'syz.3.21575': attribute type 5 has an invalid length. [ 1825.318187][T19306] syz.1.21563 (19306): drop_caches: 3 [ 1825.357365][ T5431] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1825.388223][ T5431] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1825.391519][T21870] usb 5-1: USB disconnect, device number 45 [ 1825.427323][ T5431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.458342][T19304] XFS (loop2): Mounting V5 Filesystem [ 1825.608436][T19304] XFS (loop2): Ending clean mount [ 1825.656494][ T5431] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 1825.839269][ T4939] XFS (loop2): Unmounting Filesystem [ 1825.894086][ T5431] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 6e:16:cf:8a:9c:e5 [ 1825.894680][T19343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1825.954452][ T5431] usb 6-1: USB disconnect, device number 14 [ 1825.995790][ T5431] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 1826.133402][T19346] netlink: 168 bytes leftover after parsing attributes in process `syz.4.21583'. [ 1826.410855][T19353] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1826.593014][T19356] netlink: 'syz.5.21589': attribute type 1 has an invalid length. [ 1826.698068][T19362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21591'. [ 1827.096017][T19374] netlink: 132 bytes leftover after parsing attributes in process `syz.5.21596'. [ 1827.631640][T19396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21606'. [ 1827.642941][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21607'. [ 1827.686521][T19396] netlink: 40 bytes leftover after parsing attributes in process `syz.5.21606'. [ 1827.704998][ T4868] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1827.710748][T19394] netlink: zone id is out of range [ 1827.780983][T19394] netlink: zone id is out of range [ 1827.795833][T19394] netlink: zone id is out of range [ 1827.843266][T19394] netlink: zone id is out of range [ 1827.857187][T19394] netlink: zone id is out of range [ 1827.872026][T19394] netlink: zone id is out of range [ 1827.888574][ T4868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.895458][T19394] netlink: zone id is out of range [ 1827.912207][ T4868] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 1827.942183][ T4868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.950690][T19402] netlink: 'syz.5.21610': attribute type 32 has an invalid length. [ 1827.952568][T19394] netlink: zone id is out of range [ 1827.991554][ T4868] cp210x 4-1:1.0: cp210x converter detected [ 1828.012277][T19394] netlink: zone id is out of range [ 1828.020882][T19406] Unknown options in mask b7f2 [ 1828.182301][ T4868] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1828.379433][ T4868] usb 4-1: USB disconnect, device number 77 [ 1828.404780][ T4868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1828.439348][ T4868] cp210x 4-1:1.0: device disconnected [ 1829.032858][T19435] loop5: detected capacity change from 0 to 64 [ 1829.109522][T19435] syz.5.21626: attempt to access beyond end of device [ 1829.109522][T19435] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1829.192136][T19435] Buffer I/O error on dev loop5, logical block 512, async page read [ 1829.219470][T19435] syz.5.21626: attempt to access beyond end of device [ 1829.219470][T19435] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1829.305500][T19435] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1829.477006][T21870] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1829.556192][T19451] netlink: 'syz.3.21634': attribute type 2 has an invalid length. [ 1829.575581][T19451] netlink: 'syz.3.21634': attribute type 8 has an invalid length. [ 1829.594819][T19451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21634'. [ 1829.633611][T19452] lo speed is unknown, defaulting to 1000 [ 1829.668687][T21870] usb 5-1: not running at top speed; connect to a high speed hub [ 1829.696118][T19429] loop2: detected capacity change from 0 to 32768 [ 1829.713012][T21870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1829.749941][T21870] usb 5-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 1829.771668][T19429] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.21624 (19429) [ 1829.801700][T21870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.825056][T19455] loop5: detected capacity change from 0 to 256 [ 1829.889974][T19455] exfat: Deprecated parameter 'namecase' [ 1829.919076][T19455] exfat: Deprecated parameter 'utf8' [ 1829.919249][T19429] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1829.973455][T19455] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1830.009991][T19429] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1830.018791][T19429] BTRFS info (device loop2): using free space tree [ 1830.058280][T21870] usb 5-1: USB disconnect, device number 46 [ 1830.365629][T19429] BTRFS info (device loop2): enabling ssd optimizations [ 1830.551199][T19489] netlink: 'syz.5.21643': attribute type 4 has an invalid length. [ 1830.643230][T19489] netlink: 220 bytes leftover after parsing attributes in process `syz.5.21643'. [ 1830.935307][ T4939] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1832.135375][T19533] 9p: Unknown access argument 18446744073709551615: -34 [ 1832.155414][T19534] loop4: detected capacity change from 0 to 1024 [ 1832.239125][T19534] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1832.291260][T19534] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1832.318636][T19534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1832.336717][T19534] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.21662: Inode bitmap for bg 0 marked uninitialized [ 1832.436762][T19534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1832.536379][T19534] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.21662: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1832.775213][ T4947] EXT4-fs (loop4): unmounting filesystem. [ 1833.004667][T19556] loop2: detected capacity change from 0 to 8 [ 1833.225692][T19558] loop4: detected capacity change from 0 to 4096 [ 1833.310266][T19558] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1833.414267][T19558] ntfs3: loop4: Failed to load $Extend. [ 1833.652016][T19574] loop1: detected capacity change from 0 to 4096 [ 1833.688232][T19574] ntfs3: Unknown parameter 'ÿ017777777777777777777770177777777777777777777700000000000000000000ÿÿ' [ 1833.894367][T19582] xt_cgroup: path and classid specified [ 1834.173831][T21871] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1834.363576][T21871] usb 5-1: Using ep0 maxpacket: 32 [ 1834.370628][T21871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.395317][T21871] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1834.429821][T21871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.437976][T21871] usb 5-1: Product: syz [ 1834.452013][T21871] usb 5-1: Manufacturer: syz [ 1834.456675][T21871] usb 5-1: SerialNumber: syz [ 1834.458240][T14230] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1834.518173][T21871] usb 5-1: config 0 descriptor?? [ 1834.539736][T21871] usb 5-1: bad CDC descriptors [ 1834.560462][T21871] usb 5-1: unsupported MDLM descriptors [ 1834.586772][T19602] loop2: detected capacity change from 0 to 256 [ 1834.693569][T14230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1834.715326][T14230] usb 4-1: not running at top speed; connect to a high speed hub [ 1834.744768][T14230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.772712][T14230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1834.802784][T14228] usb 5-1: USB disconnect, device number 48 [ 1834.811765][T14230] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1834.840314][T14230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.848475][T14230] usb 4-1: Product: syz [ 1834.871983][T14230] usb 4-1: Manufacturer: syz [ 1834.876969][T14230] usb 4-1: SerialNumber: syz [ 1834.896366][ T5431] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1834.898658][T19590] loop5: detected capacity change from 0 to 32768 [ 1834.952647][T19590] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.21692 (19590) [ 1835.022469][T19590] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1835.048938][T19590] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1835.093683][T14230] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 1835.107010][T19590] BTRFS info (device loop5): using free space tree [ 1835.115409][ T5431] usb 2-1: Using ep0 maxpacket: 32 [ 1835.122646][ T5431] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1835.137160][T14230] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 1835.154282][ T5431] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1835.183464][ T5431] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.197092][T14230] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 1835.221550][T14230] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 1835.238665][ T5431] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1835.257987][ T5431] usb 2-1: config 1 has no interface number 0 [ 1835.265076][T14230] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1835.306626][ T5431] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1835.335287][ T5431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.344233][T14230] usb 4-1: USB disconnect, device number 78 [ 1835.447227][ T5431] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1835.497146][T19632] loop4: detected capacity change from 0 to 1024 [ 1835.514162][T19632] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1835.524390][T19632] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1835.531296][T19632] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.21705: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 1835.550867][T19632] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.21705: Bad quota inode: 3, type: 0 [ 1835.582975][ T5431] snd_usb_pod 2-1:1.1: set_interface failed [ 1835.589163][ T5431] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1835.611022][T19590] BTRFS info (device loop5): enabling ssd optimizations [ 1835.642728][T19632] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1835.662881][ T5431] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 1835.671239][ T5072] udevd[5072]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1835.716056][ T5431] usb 2-1: USB disconnect, device number 83 [ 1835.741804][T19632] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1835.785507][T19632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1835.845153][T19632] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.21705: iget: bad extended attribute block 6 [ 1836.544409][ T4947] EXT4-fs (loop4): unmounting filesystem. [ 1836.604770][T12039] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1836.966430][T19662] netlink: 'syz.4.21718': attribute type 1 has an invalid length. [ 1837.131976][T19667] loop3: detected capacity change from 0 to 16 [ 1837.163223][T19667] /dev/loop3: Can't open blockdev [ 1838.632165][T19676] loop4: detected capacity change from 0 to 32768 [ 1838.679715][T19676] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1839.096835][ T5072] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1839.219091][T19734] loop4: detected capacity change from 0 to 764 [ 1839.370077][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21757'. [ 1839.384215][T19734] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1839.945698][T19753] ALSA: mixer_oss: invalid OSS volume ' €' [ 1840.176168][T19760] netlink: 'syz.2.21766': attribute type 9 has an invalid length. [ 1840.704864][T19746] loop3: detected capacity change from 0 to 32768 [ 1840.813284][ T5072] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1840.954522][T14228] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1841.098024][ T5431] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1841.167194][T14228] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 1841.182883][T14228] usb 6-1: config 4 has no interface number 0 [ 1841.203112][T19788] loop1: detected capacity change from 0 to 4096 [ 1841.209721][T14228] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1841.241491][T14228] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.279294][T14228] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1841.306339][T14228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.316148][ T5431] usb 5-1: Using ep0 maxpacket: 16 [ 1841.326115][ T5431] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1841.352612][ T5431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.356930][T19792] netlink: 'syz.2.21782': attribute type 1 has an invalid length. [ 1841.373787][T14228] hub 6-1:4.128: USB hub found [ 1841.381656][ T5431] usb 5-1: Product: syz [ 1841.400814][ T5431] usb 5-1: Manufacturer: syz [ 1841.410565][ T5431] usb 5-1: SerialNumber: syz [ 1841.447651][ T5431] usb 5-1: config 0 descriptor?? [ 1841.464303][T19788] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1841.574427][T14228] hub 6-1:4.128: 2 ports detected [ 1841.579949][T19788] ntfs3: loop1: Failed to load $Extend. [ 1841.585639][T14228] hub 6-1:4.128: Using single TT (err -22) [ 1841.771379][T14228] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 1841.795695][T14228] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 1841.889765][T14228] usb 6-1: USB disconnect, device number 15 [ 1842.104734][T19810] netlink: 96 bytes leftover after parsing attributes in process `syz.1.21791'. [ 1842.647142][T19825] loop2: detected capacity change from 0 to 4096 [ 1842.735922][T19825] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1842.811249][T19825] ntfs3: loop2: Failed to load $Extend. [ 1843.095799][T19840] ksmbd: Unknown IPC event: 4, ignore. [ 1843.516710][T21873] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1843.717277][T21873] usb 6-1: Using ep0 maxpacket: 8 [ 1843.724650][T21873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1843.737674][T19783] Process accounting resumed [ 1843.769059][T21873] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1843.778428][T14228] usb 5-1: USB disconnect, device number 49 [ 1843.804574][T21873] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1843.841014][T21873] usb 6-1: config 8 interface 0 has no altsetting 0 [ 1843.852819][T21873] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1843.899513][T21873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.913838][T19842] loop3: detected capacity change from 0 to 32768 [ 1843.927413][T21873] usb 6-1: Product: syz [ 1843.931622][T21873] usb 6-1: Manufacturer: syz [ 1843.961943][T21873] usb 6-1: SerialNumber: syz [ 1843.988127][T19842] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1844.050609][T19842] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 1844.227363][T21873] usb 6-1: selecting invalid altsetting 0 [ 1844.292763][T19874] loop4: detected capacity change from 0 to 64 [ 1844.309889][ T4940] INFO: trying to register non-static key. [ 1844.315739][ T4940] The code is fine but needs lockdep annotation, or maybe [ 1844.322861][ T4940] you didn't initialize this object before use? [ 1844.329108][ T4940] turning off the locking correctness validator. [ 1844.331195][T21873] snd-usb-audio: probe of 6-1:8.0 failed with error -12 [ 1844.335463][ T4940] CPU: 0 PID: 4940 Comm: syz-executor Not tainted syzkaller #0 [ 1844.349938][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1844.360070][ T4940] Call Trace: [ 1844.363342][ T4940] [ 1844.366268][ T4940] dump_stack_lvl+0x188/0x24e [ 1844.370950][ T4940] ? show_regs_print_info+0x12/0x12 [ 1844.376148][ T4940] ? load_image+0x410/0x410 [ 1844.380645][ T4940] ? _find_next_bit+0x11e/0x130 [ 1844.385593][ T4940] ? __is_module_percpu_address+0x279/0x3b0 [ 1844.391523][ T4940] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1844.397299][ T4940] assign_lock_key+0x201/0x230 [ 1844.402068][ T4940] ? SOFTIRQ_verbose+0x10/0x10 [ 1844.406838][ T4940] register_lock_class+0x21d/0x870 [ 1844.411946][ T4940] ? mark_lock+0x94/0x320 [ 1844.416358][ T4940] ? is_dynamic_key+0x260/0x260 [ 1844.421203][ T4940] ? __lock_acquire+0x1465/0x7c40 [ 1844.426225][ T4940] __lock_acquire+0x172/0x7c40 [ 1844.430989][ T4940] ? kernel_text_address+0x9c/0xd0 [ 1844.436187][ T4940] ? __kernel_text_address+0x9/0x30 [ 1844.441379][ T4940] ? verify_lock_unused+0x140/0x140 [ 1844.446574][ T4940] ? verify_lock_unused+0x140/0x140 [ 1844.451782][ T4940] ? stack_trace_save+0xa6/0xf0 [ 1844.456653][ T4940] ? __stack_depot_save+0x35/0x480 [ 1844.461857][ T4940] lock_acquire+0x1bb/0x4a0 [ 1844.466365][ T4940] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1844.472337][ T4940] ? memset+0x1e/0x40 [ 1844.476357][ T4940] ? read_lock_is_recursive+0x10/0x10 [ 1844.481728][ T4940] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1844.487965][ T4940] ? lockdep_hardirqs_on+0x94/0x140 [ 1844.493174][ T4940] _raw_spin_lock_irqsave+0xb0/0x100 [ 1844.498487][ T4940] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1844.504386][ T4940] ? _raw_spin_lock+0x40/0x40 [ 1844.509059][ T4940] ? ktime_get+0x247/0x270 [ 1844.513469][ T4940] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1844.519198][ T4940] ? ocfs2_dlm_shutdown+0x230/0x230 [ 1844.524390][ T4940] ? slab_free_freelist_hook+0x133/0x1b0 [ 1844.530058][ T4940] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 1844.535603][ T4940] ? ocfs2_journal_init+0xd40/0xd40 [ 1844.540800][ T4940] ocfs2_dlm_shutdown+0x33/0x230 [ 1844.545736][ T4940] ocfs2_dismount_volume+0x479/0x940 [ 1844.551122][ T4940] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 1844.556420][ T4940] ? clear_inode+0x150/0x150 [ 1844.561016][ T4940] ? dput+0x37/0x1d0 [ 1844.564916][ T4940] ? ocfs2_free_inode+0x20/0x20 [ 1844.569769][ T4940] generic_shutdown_super+0x130/0x340 [ 1844.575138][ T4940] kill_block_super+0x7c/0xe0 [ 1844.579810][ T4940] deactivate_locked_super+0x93/0xf0 [ 1844.585088][ T4940] cleanup_mnt+0x471/0x4f0 [ 1844.589498][ T4940] task_work_run+0x1d0/0x260 [ 1844.594089][ T4940] ? task_work_cancel+0x220/0x220 [ 1844.599106][ T4940] ? exit_to_user_mode_loop+0x3b/0x110 [ 1844.604565][ T4940] exit_to_user_mode_loop+0xe6/0x110 [ 1844.609849][ T4940] exit_to_user_mode_prepare+0xee/0x180 [ 1844.615417][ T4940] syscall_exit_to_user_mode+0x16/0x40 [ 1844.620884][ T4940] do_syscall_64+0x58/0xa0 [ 1844.625307][ T4940] ? clear_bhb_loop+0x60/0xb0 [ 1844.629996][ T4940] ? clear_bhb_loop+0x60/0xb0 [ 1844.634679][ T4940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1844.640570][ T4940] RIP: 0033:0x7f7bf1f9f317 [ 1844.644982][ T4940] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1844.664586][ T4940] RSP: 002b:00007ffd9272a678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1844.672995][ T4940] RAX: 0000000000000000 RBX: 00007f7bf2034474 RCX: 00007f7bf1f9f317 [ 1844.680957][ T4940] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9272a730 [ 1844.688919][ T4940] RBP: 00007ffd9272a730 R08: 00007ffd9272b730 R09: 00000000ffffffff [ 1844.696888][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9272b7c0 [ 1844.704885][ T4940] R13: 00007f7bf2034474 R14: 00000000001cf3a8 R15: 00007ffd9272b800 [ 1844.712946][ T4940] [ 1844.728619][ T9028] udevd[9028]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1844.732302][T21873] usb 6-1: USB disconnect, device number 16 [ 1844.974134][ T4940] ocfs2: Unmounting device (7,3) on (node local) [ 1845.840746][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!