last executing test programs: 4.7093749s ago: executing program 2 (id=3170): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000007f80), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40046f41, 0xffffffffffffffff) 4.554557954s ago: executing program 2 (id=3172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 4.239701802s ago: executing program 2 (id=3177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x11, 0x4, "65ef1b62"}, 0x0, 0x0}) 2.411841009s ago: executing program 2 (id=3203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000c80), 0x8800, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000cc0)) 2.203564314s ago: executing program 3 (id=3204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.084481857s ago: executing program 2 (id=3206): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8bi_size is wrong [ 230.832344][ T8964] [ 230.839632][ T7] usb 1-1: USB disconnect, device number 10 [ 230.918775][ T8964] ERROR: (device loop2): remounting filesystem as read-only [ 230.939349][ T8964] ialloc: diAlloc returned -5! [ 231.191290][ T8992] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2151'. [ 231.966490][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 231.993824][ T9010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.186787][ T9020] loop0: detected capacity change from 0 to 1024 [ 232.237028][ T9020] EXT4-fs: Ignoring removed orlov option [ 232.264945][ T9020] EXT4-fs: inline encryption not supported [ 232.292527][ T9020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.347647][ T9020] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.478512][ T9020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.497968][ T9020] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.547391][ T9020] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.2164: Freeing blocks not in datazone - block = 0, count = 16 [ 232.605791][ T9020] EXT4-fs (loop0): Remounting filesystem read-only [ 232.636645][ T9020] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2164: bg 0: block 112: padding at end of block bitmap is not set [ 232.702923][ T9020] EXT4-fs (loop0): Remounting filesystem read-only [ 232.719816][ T9020] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 232.770591][ T9020] EXT4-fs (loop0): Remounting filesystem read-only [ 232.928541][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 233.599108][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 233.608110][ T9071] loop1: detected capacity change from 0 to 256 [ 233.791076][ T7] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.819164][ T7] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 233.828439][ T7] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 233.901661][ T9080] loop3: detected capacity change from 0 to 64 [ 233.909128][ T7] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 233.967677][ T7] usb 1-1: config 220 interface 0 has no altsetting 0 [ 233.996981][ T7] usb 1-1: config 220 interface 1 has no altsetting 0 [ 234.033966][ T7] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 234.074941][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.109915][ T7] usb 1-1: Product: syz [ 234.114140][ T7] usb 1-1: Manufacturer: syz [ 234.139219][ T7] usb 1-1: SerialNumber: syz [ 234.379290][ T7] usb 1-1: selecting invalid altsetting 0 [ 234.402937][ T7] usb 1-1: selecting invalid altsetting 0 [ 234.429315][ T7] usbtest: probe of 1-1:220.1 failed with error -22 [ 234.469288][ T7] usb 1-1: USB disconnect, device number 11 [ 235.109233][ T8046] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.311589][ T8046] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.341363][ T8046] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.369227][ T8046] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.399329][ T8046] usb 3-1: config 1 interface 0 has no altsetting 0 [ 235.427331][ T8046] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.463798][ T8046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.528793][ T8046] usb 3-1: Product: syz [ 235.543375][ T8046] usb 3-1: Manufacturer: syz [ 235.573520][ T8046] usb 3-1: SerialNumber: syz [ 235.795140][ T8046] usb 3-1: bad CDC descriptors [ 235.834545][ T8046] usb 3-1: USB disconnect, device number 13 [ 236.192668][ T26] audit: type=1326 audit(1786753765.460:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.3.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 236.319638][ T26] audit: type=1326 audit(1786753765.470:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.3.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 236.364635][ T9155] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.409125][ T26] audit: type=1326 audit(1786753765.470:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.3.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 236.496326][ T26] audit: type=1326 audit(1786753765.470:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.3.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 236.809309][ T8051] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 237.001050][ T8051] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 237.029527][ T8051] usb 3-1: config 4 has no interface number 0 [ 237.035698][ T8051] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.068967][ T8051] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.101551][ T8051] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 237.119223][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.150248][ T8051] hub 3-1:4.128: USB hub found [ 237.249473][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.353571][ T8051] hub 3-1:4.128: 27 ports detected [ 237.358847][ T8051] hub 3-1:4.128: Using single TT (err -22) [ 237.382490][ T8051] hub 3-1:4.128: insufficient power available to use all downstream ports [ 237.448578][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 237.455943][ T7] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 237.485921][ T7] usb 2-1: config 0 has no interface number 0 [ 237.507722][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 237.537786][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.560941][ T8051] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 237.568041][ T7] usb 2-1: Product: syz [ 237.573419][ T8051] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 237.578168][ T7] usb 2-1: Manufacturer: syz [ 237.599218][ T7] usb 2-1: SerialNumber: syz [ 237.615687][ T7] usb 2-1: config 0 descriptor?? [ 237.627349][ T9171] loop3: detected capacity change from 0 to 32768 [ 237.650486][ T9169] loop4: detected capacity change from 0 to 40427 [ 237.659708][ T8051] usb 3-1: USB disconnect, device number 14 [ 237.698936][ T9169] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 237.709757][ T9169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.737120][ T9169] F2FS-fs (loop4): invalid crc value [ 237.743973][ T9171] [ 237.743973][ T9171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.743973][ T9171] [ 237.763068][ T9169] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 237.843926][ T7] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 237.859364][ T7] usb 2-1: Failed to initialize entity for entity 6 [ 237.892887][ T7] usb 2-1: Failed to register entities (-22). [ 237.913700][ T4283] [ 237.913700][ T4283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.913700][ T4283] [ 237.949914][ T9169] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 237.989153][ T4283] [ 237.989153][ T4283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.989153][ T4283] [ 238.003105][ T9169] F2FS-fs (loop4): Start checkpoint disabled! [ 238.097822][ T8051] usb 2-1: USB disconnect, device number 6 [ 238.104016][ T9169] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 238.129123][ T9169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 238.364305][ T9169] F2FS-fs (loop4): switch extent_cache option is not allowed [ 238.716335][ T9197] ax25_connect(): syz.3.2242 uses autobind, please contact jreuter@yaina.de [ 239.632729][ T26] audit: type=1400 audit(1786753768.900:80): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9221 comm="syz.3.2250" [ 240.510936][ T9254] xt_hashlimit: max too large, truncated to 1048576 [ 240.517815][ T9254] xt_hashlimit: overflow, try lower: 2/0 [ 240.938823][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 241.337934][ T9285] loop2: detected capacity change from 0 to 4096 [ 241.392338][ T9285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 241.414975][ T9285] EXT4-fs: Cannot change quota options when quota turned on [ 241.491570][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 242.259722][ T9325] netlink: 'syz.3.2299': attribute type 6 has an invalid length. [ 242.287838][ T9325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2299'. [ 242.469254][ T9331] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 242.567933][ T9331] batman_adv: batadv0: Interface deactivated: vlan1 [ 242.691252][ T9331] device veth0_vlan left promiscuous mode [ 242.733513][ T9331] device veth0_vlan entered promiscuous mode [ 242.795150][ T9331] batman_adv: batadv0: Interface activated: vlan1 [ 242.802856][ T9340] loop2: detected capacity change from 0 to 2048 [ 242.825249][ T9331] team0: Device veth0_vlan failed to register rx_handler [ 242.859863][ T9340] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.928918][ T9331] batman_adv: batadv0: Interface deactivated: vlan1 [ 242.951689][ T9347] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.008905][ T9340] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1560, name_len=5 [ 243.067817][ T9340] Remounting filesystem read-only [ 243.359578][ T9355] loop2: detected capacity change from 0 to 16 [ 243.378021][ T9355] erofs: (device loop2): mounted with root inode @ nid 36. [ 243.417256][ T9355] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 243.842278][ T9373] loop3: detected capacity change from 0 to 16 [ 243.861674][ T9373] erofs: (device loop3): mounted with root inode @ nid 36. [ 243.953109][ T9373] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 244.009288][ T9373] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 244.039916][ T9373] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 244.079393][ T9373] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 244.138577][ T9373] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 244.190059][ T9373] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 244.217946][ T26] audit: type=1800 audit(1786753773.480:81): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2322" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 244.474222][ T9398] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 244.652440][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2337'. [ 244.724956][ T9407] loop1: detected capacity change from 0 to 64 [ 244.800384][ T9407] syz.1.2340: attempt to access beyond end of device [ 244.800384][ T9407] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 244.875468][ T9407] Buffer I/O error on dev loop1, logical block 512, async page read [ 244.918910][ T9407] syz.1.2340: attempt to access beyond end of device [ 244.918910][ T9407] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 244.981164][ T9407] Buffer I/O error on dev loop1, logical block 56576, async page read [ 244.991863][ T9416] tipc: Can't bind to reserved service type 0 [ 245.220997][ T9424] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 245.707072][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 246.303956][ T9464] kAFS: unable to lookup cell '(,c¾Ì' [ 246.427098][ T9466] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 246.470834][ T26] audit: type=1326 audit(1786753775.740:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.0.2370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 246.538085][ T26] audit: type=1326 audit(1786753775.780:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.0.2370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 246.563030][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'. [ 246.593449][ T9472] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 246.612160][ T26] audit: type=1326 audit(1786753775.780:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.0.2370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 246.679718][ T26] audit: type=1326 audit(1786753775.780:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.0.2370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 246.719218][ T7] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 246.923530][ T7] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 246.944401][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.989545][ T7] usb 5-1: Product: syz [ 246.993775][ T7] usb 5-1: Manufacturer: syz [ 246.998488][ T7] usb 5-1: SerialNumber: syz [ 247.020842][ T9487] loop3: detected capacity change from 0 to 16 [ 247.076031][ T9487] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.129068][ T9487] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 247.289474][ T7] usb 5-1: Can't get UAC3 power state for id 10 [ 247.314043][ T7] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 247.475063][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 247.524328][ T7] usb 5-1: USB disconnect, device number 12 [ 247.810009][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.239082][ T4318] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 248.357981][ T9524] x_tables: duplicate underflow at hook 3 [ 248.429206][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 248.436589][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.469308][ T4318] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7 [ 248.518676][ T4318] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 248.562358][ T4318] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 248.588441][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.624285][ T4318] usb 1-1: Product: syz [ 248.628516][ T4318] usb 1-1: Manufacturer: syz [ 248.664755][ T4318] usb 1-1: SerialNumber: syz [ 248.852470][ T4598] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.891711][ T9543] loop3: detected capacity change from 0 to 256 [ 248.945746][ T4318] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 248.980370][ T4318] usb 1-1: clock source 0 is not valid, cannot use [ 249.007728][ T4318] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 249.018128][ T9543] FAT-fs (loop3): Directory bread(block 64) failed [ 249.040245][ T9543] FAT-fs (loop3): Directory bread(block 65) failed [ 249.042803][ T9547] loop2: detected capacity change from 0 to 256 [ 249.046879][ T9543] FAT-fs (loop3): Directory bread(block 66) failed [ 249.060700][ T4318] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 249.069182][ T4598] usb 5-1: Using ep0 maxpacket: 8 [ 249.095035][ T9543] FAT-fs (loop3): Directory bread(block 67) failed [ 249.095980][ T4598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.109434][ T9543] FAT-fs (loop3): Directory bread(block 68) failed [ 249.138102][ T9543] FAT-fs (loop3): Directory bread(block 69) failed [ 249.153016][ T4598] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.195227][ T9543] FAT-fs (loop3): Directory bread(block 70) failed [ 249.199530][ T4598] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.219214][ T4318] usb 1-1: USB disconnect, device number 12 [ 249.233849][ T9543] FAT-fs (loop3): Directory bread(block 71) failed [ 249.266463][ T4598] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 249.283553][ T9543] FAT-fs (loop3): Directory bread(block 72) failed [ 249.319223][ T9543] FAT-fs (loop3): Directory bread(block 73) failed [ 249.336921][ T4598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.352115][ T9551] loop1: detected capacity change from 0 to 1024 [ 249.367316][ T4598] usb 5-1: Product: syz [ 249.371985][ T4598] usb 5-1: Manufacturer: syz [ 249.387731][ T4598] usb 5-1: SerialNumber: syz [ 249.410507][ T9551] hfsplus: invalid length 32517 has been corrected to 255 [ 249.532358][ T4609] udevd[4609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.644640][ T4598] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 249.672547][ T4598] usb 5-1: 0:2 : does not exist [ 249.698596][ T4598] usb 5-1: USB disconnect, device number 13 [ 249.859159][ T4318] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 249.940478][ T5539] udevd[5539]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.059161][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 250.066398][ T4318] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 250.085186][ T4318] usb 3-1: config 0 has no interface number 0 [ 250.098357][ T4318] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 250.120779][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.129996][ T4318] usb 3-1: Product: syz [ 250.134355][ T4318] usb 3-1: Manufacturer: syz [ 250.138985][ T4318] usb 3-1: SerialNumber: syz [ 250.146866][ T4318] usb 3-1: config 0 descriptor?? [ 250.358846][ T4318] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 250.376044][ T4318] usb 3-1: Failed to initialize entity for entity 6 [ 250.402016][ T4318] usb 3-1: Failed to register entities (-22). [ 250.578825][ T4318] usb 3-1: USB disconnect, device number 15 [ 250.642730][ T9583] loop4: detected capacity change from 0 to 256 [ 250.687747][ T9583] FAT-fs (loop4): Directory bread(block 64) failed [ 250.698032][ T9583] FAT-fs (loop4): Directory bread(block 65) failed [ 250.759852][ T9583] FAT-fs (loop4): Directory bread(block 66) failed [ 250.796337][ T9583] FAT-fs (loop4): Directory bread(block 67) failed [ 250.809436][ T4590] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 250.830825][ T9583] FAT-fs (loop4): Directory bread(block 68) failed [ 250.846073][ T9583] FAT-fs (loop4): Directory bread(block 69) failed [ 250.859332][ T9583] FAT-fs (loop4): Directory bread(block 70) failed [ 250.882137][ T9583] FAT-fs (loop4): Directory bread(block 71) failed [ 250.888824][ T9583] FAT-fs (loop4): Directory bread(block 72) failed [ 250.916814][ T9583] FAT-fs (loop4): Directory bread(block 73) failed [ 251.009229][ T4590] usb 4-1: Using ep0 maxpacket: 8 [ 251.027352][ T4590] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.083459][ T9589] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.083876][ T4590] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 251.112666][ T4590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.129143][ T4590] usb 4-1: Product: syz [ 251.133524][ T4590] usb 4-1: Manufacturer: syz [ 251.138153][ T4590] usb 4-1: SerialNumber: syz [ 251.163325][ T4590] usb 4-1: config 0 descriptor?? [ 251.186316][ T4590] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 251.212943][ T4590] usb 4-1: selecting invalid altsetting 1 [ 251.290179][ T26] audit: type=1326 audit(1786753780.560:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cfad9e0d9 code=0x7ffc0000 [ 251.391523][ T26] audit: type=1326 audit(1786753780.560:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3cfad9e0d9 code=0x7ffc0000 [ 251.426970][ T4590] gspca_stk014: init reg: 0x00 [ 251.432339][ T4590] stk014: probe of 4-1:0.0 failed with error -5 [ 251.507241][ T26] audit: type=1326 audit(1786753780.560:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cfad9e0d9 code=0x7ffc0000 [ 251.538713][ T26] audit: type=1326 audit(1786753780.560:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cfad9e0d9 code=0x7ffc0000 [ 251.723818][ T8046] usb 4-1: USB disconnect, device number 7 [ 252.209754][ T9624] syz.0.2445 uses old SIOCAX25GETINFO [ 252.391053][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 253.238103][ T9659] netlink: 'syz.3.2462': attribute type 10 has an invalid length. [ 253.332941][ T9661] loop2: detected capacity change from 0 to 1024 [ 253.357531][ T9661] hfsplus: type requires a 4 character value [ 253.359137][ T4318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 253.372037][ T9661] hfsplus: unable to parse mount options [ 253.481119][ T9659] device veth0_vlan left promiscuous mode [ 253.503010][ T9659] device veth0_vlan entered promiscuous mode [ 253.537995][ T9659] team0: Device veth0_vlan failed to register rx_handler [ 253.585795][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 253.596369][ T4318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.626605][ T4318] usb 1-1: string descriptor 0 read error: -22 [ 253.638978][ T4318] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 253.658560][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.749438][ T8046] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 253.764117][ T9672] Cannot find add_set index 65532 as target [ 253.937537][ T4318] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 253.961495][ T8046] usb 2-1: config 1 has an invalid interface number: 82 but max is 1 [ 253.981428][ T8046] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.000724][ T8046] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 254.014038][ T5539] udevd[5539]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.019143][ T8046] usb 2-1: config 1 has no interface number 2 [ 254.070368][ T8046] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.106258][ T8046] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.140819][ T8046] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 254.150908][ T8046] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.165254][ T8046] usb 2-1: config 1 interface 82 has no altsetting 0 [ 254.174732][ T8046] usb 2-1: config 1 interface 1 has no altsetting 0 [ 254.190331][ T41] usb 1-1: USB disconnect, device number 13 [ 254.198604][ T8046] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.209201][ T8046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.218478][ T8046] usb 2-1: Product: syz [ 254.223034][ T8046] usb 2-1: Manufacturer: syz [ 254.245425][ T8046] usb 2-1: SerialNumber: syz [ 254.292831][ T8046] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 254.310329][ T8046] cdc_ncm 2-1:1.0: bind() failure [ 254.428529][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 254.438166][ T9690] netlink: zone id is out of range [ 254.444163][ T9690] netlink: zone id is out of range [ 254.450427][ T9690] netlink: zone id is out of range [ 254.455576][ T9690] netlink: zone id is out of range [ 254.471506][ T9690] netlink: zone id is out of range [ 254.481768][ T9690] netlink: zone id is out of range [ 254.497231][ T9690] netlink: zone id is out of range [ 254.517043][ T9690] netlink: zone id is out of range [ 254.559787][ T9690] netlink: zone id is out of range [ 254.588287][ T9690] netlink: zone id is out of range [ 254.733111][ T7] usb 2-1: USB disconnect, device number 7 [ 254.768669][ T9696] loop4: detected capacity change from 0 to 512 [ 254.830754][ T9696] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2480: inode has both inline data and extents flags [ 254.848408][ T9696] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2480: couldn't read orphan inode 15 (err -117) [ 254.861494][ T9696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.909263][ T9704] netlink: 'syz.2.2481': attribute type 10 has an invalid length. [ 254.930592][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 255.046346][ T9704] team0: Device veth0_vlan failed to register rx_handler [ 255.308541][ T9708] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 255.345304][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 255.419082][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 255.595768][ T9722] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.651400][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.657817][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.673741][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 255.757013][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2495'. [ 255.949237][ T41] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 256.006838][ T9740] tmpfs: Bad value for 'size' [ 256.160631][ T41] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.190806][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.218818][ T41] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.259127][ T41] usb 2-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 9325, setting to 1024 [ 256.309130][ T41] usb 2-1: config 1 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.359184][ T41] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 256.392172][ T41] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 256.392207][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.392229][ T41] usb 2-1: Product: syz [ 256.392244][ T41] usb 2-1: Manufacturer: syz [ 256.392259][ T41] usb 2-1: SerialNumber: syz [ 256.609425][ T41] usb 2-1: 1:2 : no or invalid class specific endpoint descriptor [ 256.636441][ T41] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 256.675306][ T41] usb 2-1: unit 2 not found! [ 256.682534][ T41] usb 2-1: unit 8 not found! [ 256.747057][ T41] usb 2-1: USB disconnect, device number 8 [ 257.031627][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.132369][ T9777] loop2: detected capacity change from 0 to 16 [ 257.170285][ T9777] erofs: (device loop2): mounted with root inode @ nid 36. [ 257.593601][ T9794] loop0: detected capacity change from 0 to 1024 [ 257.648962][ T9794] EXT4-fs: Ignoring removed nobh option [ 257.810011][ T9794] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.2527: lblock 2 mapped to illegal pblock 2 (length 1) [ 257.842299][ T9794] EXT4-fs (loop0): Remounting filesystem read-only [ 257.859268][ T9794] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 257.867607][ T9794] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.2527: lblock 0 mapped to illegal pblock 48 (length 1) [ 257.913481][ T9794] EXT4-fs (loop0): Remounting filesystem read-only [ 257.959182][ T9794] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 257.980418][ T9794] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2527: Failed to acquire dquot type 0 [ 258.044973][ T9794] EXT4-fs (loop0): Remounting filesystem read-only [ 258.070120][ T9794] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 258.139344][ T9794] EXT4-fs (loop0): Remounting filesystem read-only [ 258.156928][ T9794] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.2527: mark_inode_dirty error [ 258.194815][ T9794] EXT4-fs (loop0): Remounting filesystem read-only [ 258.249385][ T9794] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 258.284160][ T9794] EXT4-fs (loop0): 1 orphan inode deleted [ 258.301007][ T9794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.329187][ T4323] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.404522][ T4323] EXT4-fs (loop0): Remounting filesystem read-only [ 258.419218][ T9821] loop4: detected capacity change from 0 to 512 [ 258.426868][ T9821] EXT4-fs: inline encryption not supported [ 258.435041][ T4323] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 258.465891][ T4323] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 258.492480][ T9821] EXT4-fs: Ignoring removed i_version option [ 258.513504][ T9824] loop1: detected capacity change from 0 to 2048 [ 258.571773][ T4323] EXT4-fs (loop0): Remounting filesystem read-only [ 258.612701][ T9821] EXT4-fs (loop4): 1 orphan inode deleted [ 258.618509][ T9821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 258.638145][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 258.672319][ T9824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 258.681094][ T4323] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.701200][ T9821] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.2540: Directory hole found for htree leaf block 0 [ 258.737631][ T9824] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.2542: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 258.760758][ T4323] EXT4-fs (loop0): Remounting filesystem read-only [ 258.781547][ T4323] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 258.809478][ T4323] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 258.855061][ T4323] EXT4-fs (loop0): Remounting filesystem read-only [ 258.887160][ T4273] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 258.922473][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 258.961244][ T4273] EXT4-fs (loop0): Remounting filesystem read-only [ 258.976269][ T4273] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 258.994273][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 259.051594][ T4273] EXT4-fs (loop0): Remounting filesystem read-only [ 259.073550][ T4273] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 259.099502][ T4273] EXT4-fs (loop0): Remounting filesystem read-only [ 259.361045][ T9847] netlink: 'syz.4.2552': attribute type 3 has an invalid length. [ 259.497176][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 259.539556][ T9853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2554'. [ 259.572432][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2555'. [ 260.081286][ T9876] loop1: detected capacity change from 0 to 16 [ 260.111459][ T9876] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 260.320585][ T9884] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2570'. [ 260.509127][ T41] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 260.575952][ T9894] netlink: 'syz.1.2573': attribute type 10 has an invalid length. [ 260.717220][ T9894] device veth0_vlan left promiscuous mode [ 260.726676][ T41] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 260.744505][ T41] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 260.760616][ T9894] device veth0_vlan entered promiscuous mode [ 260.766757][ T41] usb 3-1: Product: syz [ 260.798600][ T41] usb 3-1: config 0 descriptor?? [ 260.807741][ T9894] team0: Device veth0_vlan failed to register rx_handler [ 260.819357][ T41] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 260.847038][ T41] usb 3-1: Detected FT232H [ 261.024543][ T41] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 261.041437][ T41] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 261.072532][ T41] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 261.091950][ T41] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 261.122815][ T41] usb 3-1: USB disconnect, device number 16 [ 261.157652][ T41] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 261.177063][ T41] ftdi_sio 3-1:0.0: device disconnected [ 261.293106][ T9913] loop4: detected capacity change from 0 to 512 [ 261.337400][ T9913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.338241][ T9916] loop1: detected capacity change from 0 to 16 [ 261.382941][ T9913] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2585: inode has both inline data and extents flags [ 261.420114][ T9916] erofs: (device loop1): mounted with root inode @ nid 36. [ 261.509303][ T9913] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2585: couldn't read orphan inode 15 (err -117) [ 261.574520][ T9913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.777124][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 261.942210][ T9925] [U] [ 262.135292][ T9934] loop1: detected capacity change from 0 to 256 [ 262.167640][ T9936] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.242291][ T9934] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 262.793189][ T9956] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 262.822461][ T8051] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 262.957593][ T9962] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2608'. [ 263.031553][ T8051] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 263.052894][ T8051] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 4 [ 263.102413][ T8051] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 263.121908][ T8051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.168080][ T8051] usb 4-1: Product: syz [ 263.176070][ T8051] usb 4-1: Manufacturer: syz [ 263.185539][ T8051] usb 4-1: SerialNumber: syz [ 263.436266][ T8051] usb 4-1: Can't get UAC3 power state for id 10 [ 263.462331][ T8051] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 263.502585][ T8051] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 263.587908][ T8051] usb 4-1: USB disconnect, device number 8 [ 263.784162][ T9984] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2619'. [ 263.893642][ T9557] udevd[9557]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.007271][ T9968] loop0: detected capacity change from 0 to 32768 [ 264.059418][ T9968] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.2610 (9968) [ 264.159252][ T9968] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 264.211205][ T9968] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 264.239353][ T9968] BTRFS info (device loop0): enabling ssd optimizations [ 264.256643][ T9968] BTRFS info (device loop0): not using ssd optimizations [ 264.274981][ T9968] BTRFS info (device loop0): turning off barriers [ 264.299197][ T9968] BTRFS info (device loop0): use no compression [ 264.315833][ T9968] BTRFS info (device loop0): using free space tree [ 264.621602][T10026] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 264.800978][ T4273] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 265.493263][T10053] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 266.109938][T10073] MTD: Couldn't look up './bus': -15 [ 266.735119][T10083] loop3: detected capacity change from 0 to 4096 [ 266.758684][T10093] netlink: 'syz.4.2662': attribute type 10 has an invalid length. [ 266.796356][T10083] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 267.154955][T10093] device veth0_vlan left promiscuous mode [ 267.184320][T10093] device veth0_vlan entered promiscuous mode [ 267.222439][T10093] team0: Device veth0_vlan failed to register rx_handler [ 268.195284][T10131] device ip6gre2 entered promiscuous mode [ 268.582184][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 268.595102][ T26] audit: type=1326 audit(1786753797.860:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 268.679624][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 268.707234][ T26] audit: type=1326 audit(1786753797.900:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 268.744820][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 268.794907][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 268.816196][ T26] audit: type=1326 audit(1786753797.900:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 268.848333][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 268.868029][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 268.898425][T10157] netlink: 640 bytes leftover after parsing attributes in process `syz.1.2694'. [ 268.906071][ T26] audit: type=1326 audit(1786753797.900:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 268.919101][T10145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 269.007477][ T26] audit: type=1326 audit(1786753797.900:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 269.069952][ T26] audit: type=1326 audit(1786753797.900:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 269.143799][T10145] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 269.159449][ T26] audit: type=1326 audit(1786753797.900:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 269.189242][T10145] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 269.213328][T10165] loop1: detected capacity change from 0 to 1024 [ 269.254897][ T26] audit: type=1326 audit(1786753797.900:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.2690" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9da6b9e0d9 code=0x7ffc0000 [ 269.299815][T10165] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 269.359396][T10165] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 269.368979][T10165] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2699: Failed to acquire dquot type 0 [ 269.402978][T10165] EXT4-fs (loop1): 1 truncate cleaned up [ 269.408732][T10165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 269.448770][T10171] loop0: detected capacity change from 0 to 64 [ 269.531535][T10165] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2699: Failed to acquire dquot type 0 [ 269.752413][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 270.179869][T10159] loop2: detected capacity change from 0 to 32768 [ 270.407205][T10197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2714'. [ 270.746581][T10210] loop0: detected capacity change from 0 to 128 [ 270.870969][T10210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 270.932020][T10210] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.083376][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 271.242631][T10225] netlink: 'syz.3.2728': attribute type 21 has an invalid length. [ 271.306753][T10225] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2728'. [ 271.349408][T10225] netlink: 'syz.3.2728': attribute type 4 has an invalid length. [ 271.378036][T10225] netlink: 'syz.3.2728': attribute type 3 has an invalid length. [ 271.420573][T10225] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2728'. [ 271.596797][T10237] PM: Enabling pm_trace changes system date and time during resume. [ 271.596797][T10237] PM: Correct system time has to be restored manually after resume. [ 271.693468][T10235] loop0: detected capacity change from 0 to 4096 [ 271.878905][T10235] ntfs: volume version 3.1. [ 271.941007][ T4318] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 272.119095][ T8051] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 272.142498][ T4318] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 272.153477][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.166847][ T4318] usb 3-1: config 0 descriptor?? [ 272.176838][ T4318] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 272.331178][ T8051] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 272.350269][ T8051] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.363297][ T8051] usb 2-1: config 0 has no interface number 0 [ 272.381296][ T8051] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 272.402883][ T8051] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 272.429188][ T8051] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.459333][ T8051] usb 2-1: config 0 interface 52 has no altsetting 0 [ 272.495434][ T8051] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 272.529265][ T8051] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 272.547948][ T8051] usb 2-1: Product: syz [ 272.558106][ T8051] usb 2-1: Manufacturer: syz [ 272.568275][ T8051] usb 2-1: SerialNumber: syz [ 272.596407][ T4318] gp8psk: usb in 128 operation failed. [ 272.603525][ T8051] usb 2-1: config 0 descriptor?? [ 272.608714][ T4318] gp8psk: usb in 137 operation failed. [ 272.629142][ T4318] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 272.666679][ T4318] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 272.720693][ T4318] usb 3-1: USB disconnect, device number 17 [ 272.824429][ T8051] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 272.849595][ T8051] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 272.957333][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 273.028352][ T4598] usb 2-1: USB disconnect, device number 9 [ 274.259498][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 274.431856][T10326] ALSA: mixer_oss: invalid OSS volume 'u' [ 274.451880][ T7] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 274.470861][ T7] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 274.501217][ T7] usb 5-1: config 0 has no interface number 0 [ 274.521480][ T7] usb 5-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 274.553101][ T7] usb 5-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 274.567413][ T7] usb 5-1: config 0 interface 115 has no altsetting 0 [ 274.587509][ T7] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 274.607128][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.609113][ T4318] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 274.628407][ T7] usb 5-1: config 0 descriptor?? [ 274.666558][ T7] ftdi_sio 5-1:0.115: FTDI USB Serial Device converter detected [ 274.685485][ T7] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 274.796819][T10335] comedi comedi2: pcmmio: I/O port conflict (0x6a,32) [ 274.821177][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.843199][ T4318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 274.869127][ T4318] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 274.870058][ T7] usb 5-1: USB disconnect, device number 14 [ 274.899078][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.950585][ T7] ftdi_sio 5-1:0.115: device disconnected [ 274.961193][ T4318] usb 3-1: config 0 descriptor?? [ 275.090074][T10329] loop0: detected capacity change from 0 to 32768 [ 275.199550][T10329] JBD2: Ignoring recovery information on journal [ 275.266979][T10329] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 275.331960][T10351] loop1: detected capacity change from 0 to 8 [ 275.400121][ T4318] Bluetooth: Can't get version to change to load ram patch err [ 275.424713][ T4318] Bluetooth: Loading patch file failed [ 275.466616][T10329] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 275.484080][ T4318] ath3k: probe of 3-1:0.0 failed with error -71 [ 275.517018][ T4318] usb 3-1: USB disconnect, device number 18 [ 275.559461][T10329] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 275.586101][T10355] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551613) [ 275.596962][T10329] OCFS2: File system is now read-only. [ 275.621449][T10329] (syz.0.2778,10329,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 275.639677][T10355] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 275.652559][T10329] (syz.0.2778,10329,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 275.662404][T10329] (syz.0.2778,10329,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 275.707823][T10329] (syz.0.2778,10329,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 275.738776][T10329] (syz.0.2778,10329,1):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 275.769071][T10329] (syz.0.2778,10329,1):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 275.804822][T10329] (syz.0.2778,10329,1):ocfs2_dx_dir_attach_index:2329 ERROR: status = -30 [ 275.845310][T10329] (syz.0.2778,10329,1):ocfs2_expand_inline_dir:3022 ERROR: status = -30 [ 275.864854][T10329] (syz.0.2778,10329,1):ocfs2_extend_dir:3204 ERROR: status = -30 [ 275.897022][T10329] (syz.0.2778,10329,1):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30 [ 275.939125][T10329] (syz.0.2778,10329,1):ocfs2_mknod:298 ERROR: status = -30 [ 275.946555][T10329] (syz.0.2778,10329,1):ocfs2_mknod:502 ERROR: status = -30 [ 275.984895][T10329] (syz.0.2778,10329,1):ocfs2_mkdir:659 ERROR: status = -30 [ 276.163347][ T4273] (syz-executor,4273,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 276.210233][ T4273] (syz-executor,4273,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -12 [ 276.248294][ T4273] (syz-executor,4273,1):_ocfs2_free_clusters:2605 ERROR: status = -12 [ 276.266580][ T4273] (syz-executor,4273,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 276.318926][ T4273] (syz-executor,4273,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 276.370013][ T4273] (syz-executor,4273,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 276.419530][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 276.601578][T10385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2806'. [ 276.829434][T10392] netlink: 'syz.2.2809': attribute type 21 has an invalid length. [ 276.852826][T10392] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2809'. [ 277.308283][T10406] loop2: detected capacity change from 0 to 1024 [ 277.355164][T10406] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 277.443438][T10406] hfsplus: filesystem is marked journaled, leaving read-only. [ 278.059163][ T41] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 278.259279][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 278.267575][ T41] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.300760][ T41] usb 3-1: config 1 has an invalid interface number: 237 but max is 0 [ 278.327265][T10439] loop0: detected capacity change from 0 to 2048 [ 278.349654][ T41] usb 3-1: config 1 has no interface number 0 [ 278.366059][ T41] usb 3-1: config 1 interface 237 has no altsetting 0 [ 278.385018][T10439] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 278.413604][ T41] usb 3-1: string descriptor 0 read error: -22 [ 278.435185][T10439] NILFS (loop0): mounting unchecked fs [ 278.441409][ T41] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 278.469127][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.485186][ T41] ipaq 3-1:1.237: PocketPC PDA converter detected [ 278.558300][T10439] NILFS (loop0): recovery complete [ 278.579168][T10449] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.697512][ T41] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 278.789163][ T4598] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 278.969402][ T4590] usb 3-1: USB disconnect, device number 19 [ 278.979162][ T4598] usb 4-1: Using ep0 maxpacket: 8 [ 278.995653][ T4598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.996120][T10459] comedi comedi0: No channels found! [ 279.018242][ T4590] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 279.031757][ T4598] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 279.049906][ T4590] ipaq 3-1:1.237: device disconnected [ 279.055468][ T4598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.071906][ T4598] usb 4-1: Product: syz [ 279.076142][ T4598] usb 4-1: Manufacturer: syz [ 279.082148][ T4598] usb 4-1: SerialNumber: syz [ 279.088720][ T4598] usb 4-1: config 0 descriptor?? [ 279.138322][ T4598] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 279.304387][ T4590] usb 4-1: USB disconnect, device number 9 [ 280.475863][T10497] loop3: detected capacity change from 0 to 512 [ 280.497263][T10497] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.532123][T10497] /dev/loop3: Can't open blockdev [ 280.539534][ T41] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 280.602919][T10499] xt_hashlimit: invalid rate [ 280.729157][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 280.736214][ T41] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 280.765291][ T41] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 280.789169][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 280.809135][ T41] usb 3-1: config 1 has no interface number 0 [ 280.850963][ T41] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.874675][ T41] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 280.911928][T10481] loop1: detected capacity change from 0 to 40427 [ 280.921865][ T41] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 280.938329][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.947718][T10481] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 280.963086][T10481] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 281.009617][ T41] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 281.041528][T10481] F2FS-fs (loop1): invalid crc value [ 281.061651][T10481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.116249][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2864'. [ 281.166136][T10481] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 281.179881][T10481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 281.212492][ T41] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 281.451062][ T4318] usb 3-1: USB disconnect, device number 20 [ 281.458854][ T4318] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 281.821920][T10521] loop4: detected capacity change from 0 to 1024 [ 281.926159][T10521] syz.4.2872: attempt to access beyond end of device [ 281.926159][T10521] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 281.998199][T10521] Buffer I/O error on dev loop4, logical block 2889, async page read [ 282.027524][T10521] syz.4.2872: attempt to access beyond end of device [ 282.027524][T10521] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 282.094585][T10521] Buffer I/O error on dev loop4, logical block 2889, async page read [ 282.143240][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 282.143314][ T26] audit: type=1800 audit(1786753811.410:111): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2872" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 282.221424][T10532] xt_TCPMSS: Only works on TCP SYN packets [ 282.655225][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 282.906814][T10554] loop2: detected capacity change from 0 to 256 [ 282.943199][T10554] exfat: Deprecated parameter 'namecase' [ 282.998179][T10554] exfat: Deprecated parameter 'utf8' [ 283.034885][T10554] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 283.408205][T10572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2895'. [ 283.490221][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'. [ 283.796434][T10584] loop2: detected capacity change from 0 to 2048 [ 283.854158][T10589] loop1: detected capacity change from 0 to 8 [ 283.921930][T10594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.510096][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 284.733066][T10618] device bridge1 entered promiscuous mode [ 285.313269][T10640] loop0: detected capacity change from 0 to 2048 [ 285.421164][T10640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 285.463529][T10640] VFS: Lookup of 'file0' in ext4 loop0 would have caused loop [ 285.588485][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 285.859645][T10615] loop4: detected capacity change from 0 to 40427 [ 285.902990][T10615] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 285.929230][T10615] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 285.940064][T10661] netlink: 'syz.1.2938': attribute type 12 has an invalid length. [ 285.951448][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2938'. [ 285.992449][T10615] F2FS-fs (loop4): invalid crc value [ 286.039750][T10615] F2FS-fs (loop4): Found nat_bits in checkpoint [ 286.309823][T10615] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 286.320661][T10615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 286.469067][ T4598] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 286.689239][ T4598] usb 4-1: Using ep0 maxpacket: 8 [ 286.696886][ T4598] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.730413][ T4598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 286.765560][ T4598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.804911][ T4598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 286.846933][ T4598] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 286.878294][ T4598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 286.916530][ T4598] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 286.916604][T10689] binder: 10688:10689 ioctl 40046210 0 returned -14 [ 286.938881][ T4598] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 286.964694][ T4598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.003875][ T4598] usb 4-1: Product: syz [ 287.008135][ T4598] usb 4-1: Manufacturer: syz [ 287.034251][ T4598] usb 4-1: SerialNumber: syz [ 287.057183][ T4598] usb 4-1: config 0 descriptor?? [ 287.065933][T10669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 287.077446][T10669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 287.381726][ T4598] usb 4-1: USB disconnect, device number 10 [ 287.481760][T10705] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 287.513987][ T94] block nbd0: Attempted send on invalid socket [ 287.520848][ T94] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.748389][T10710] loop4: detected capacity change from 0 to 256 [ 287.800149][T10710] exfat: Deprecated parameter 'namecase' [ 287.851363][T10710] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 288.186906][T10727] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 288.387622][T10734] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2974'. [ 288.429351][T10734] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2974'. [ 289.074346][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 289.319311][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2991'. [ 289.321115][T10769] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 289.341476][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2991'. [ 289.361389][T10774] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2991'. [ 289.429199][ T4318] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 289.555940][T10780] libceph: resolve '0' (ret=-3): failed [ 289.633899][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 289.669923][ T4318] usb 4-1: not running at top speed; connect to a high speed hub [ 289.710495][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.755050][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.778498][ T4318] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 289.798231][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.813265][ T4318] usb 4-1: Product: syz [ 289.817671][ T4318] usb 4-1: Manufacturer: syz [ 289.832762][ T4318] usb 4-1: SerialNumber: syz [ 290.071771][ T4318] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 290.113668][ T4318] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 290.144085][ T4318] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 290.166375][ T4318] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 290.192747][ T4318] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3) [ 290.208390][T10803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3008'. [ 290.245200][ T4318] usb 4-1: USB disconnect, device number 11 [ 290.493915][ T5539] udevd[5539]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.533216][T10816] loop1: detected capacity change from 0 to 64 [ 290.951211][T10828] loop1: detected capacity change from 0 to 2048 [ 291.000876][T10828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.452041][T10847] loop2: detected capacity change from 0 to 256 [ 291.634257][T10855] loop4: detected capacity change from 0 to 256 [ 291.720039][ T4598] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 291.949746][ T4598] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 291.958206][ T4598] usb 4-1: config 0 has no interface number 0 [ 291.983847][ T4598] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 292.031581][ T4598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.059381][ T4598] usb 4-1: Product: syz [ 292.070771][ T4598] usb 4-1: Manufacturer: syz [ 292.085659][ T4598] usb 4-1: SerialNumber: syz [ 292.102381][ T4598] usb 4-1: config 0 descriptor?? [ 292.500552][T10877] bridge0: port 3(batadv0) entered blocking state [ 292.527558][T10877] bridge0: port 3(batadv0) entered disabled state [ 292.539068][ T4598] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 292.561835][T10877] device batadv0 entered promiscuous mode [ 292.568296][T10877] bridge0: port 3(batadv0) entered blocking state [ 292.574975][T10877] bridge0: port 3(batadv0) entered forwarding state [ 292.583365][ T4598] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 292.628566][ T4598] asix: probe of 4-1:0.251 failed with error -5 [ 292.659888][ T4598] usb 4-1: USB disconnect, device number 12 [ 292.786351][T10863] loop4: detected capacity change from 0 to 32768 [ 292.794055][ T5711] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 292.804244][ T5711] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 292.822522][T10863] JBD2: Ignoring recovery information on journal [ 292.941594][T10863] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 292.991408][T10893] netlink: 'syz.1.3050': attribute type 4 has an invalid length. [ 292.997630][T10863] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 292.997793][T10863] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 292.997807][T10863] OCFS2: File system is now read-only. [ 292.997822][T10863] (syz.4.3037,10863,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 292.997902][T10863] (syz.4.3037,10863,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 292.997927][T10863] (syz.4.3037,10863,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 292.997948][T10863] (syz.4.3037,10863,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 292.997970][T10863] (syz.4.3037,10863,0):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 292.997993][T10863] (syz.4.3037,10863,0):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 292.998014][T10863] (syz.4.3037,10863,0):ocfs2_dx_dir_attach_index:2329 ERROR: status = -30 [ 292.998037][T10863] (syz.4.3037,10863,0):ocfs2_expand_inline_dir:3022 ERROR: status = -30 [ 292.998107][T10863] (syz.4.3037,10863,0):ocfs2_extend_dir:3204 ERROR: status = -30 [ 292.998130][T10863] (syz.4.3037,10863,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30 [ 292.998154][T10863] (syz.4.3037,10863,0):ocfs2_mknod:298 ERROR: status = -30 [ 292.998178][T10863] (syz.4.3037,10863,0):ocfs2_mknod:502 ERROR: status = -30 [ 292.998198][T10863] (syz.4.3037,10863,0):ocfs2_mkdir:659 ERROR: status = -30 [ 293.152977][ T4282] (syz-executor,4282,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 293.153116][ T4282] (syz-executor,4282,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -12 [ 293.153203][ T4282] (syz-executor,4282,1):_ocfs2_free_clusters:2605 ERROR: status = -12 [ 293.153226][ T4282] (syz-executor,4282,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 293.153248][ T4282] (syz-executor,4282,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 293.153270][ T4282] (syz-executor,4282,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 293.164560][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 293.569490][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 293.759081][ T4318] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 293.821353][T10913] xt_CT: No such helper "pptp" [ 293.939109][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 293.943082][ T4318] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 293.943117][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.943138][ T4318] usb 5-1: Product: syz [ 293.943155][ T4318] usb 5-1: Manufacturer: syz [ 293.943171][ T4318] usb 5-1: SerialNumber: syz [ 293.957790][ T4318] usb 5-1: config 0 descriptor?? [ 293.963060][ T4318] gspca_main: sq930x-2.14.0 probing 2770:930c [ 294.390442][ T4318] gspca_sq930x: ucbus_write failed -71 [ 294.396031][ T4318] sq930x: probe of 5-1:0.0 failed with error -71 [ 294.430698][ T4318] usb 5-1: USB disconnect, device number 15 [ 295.104659][T10960] loop4: detected capacity change from 0 to 256 [ 295.676990][T10984] loop0: detected capacity change from 0 to 64 [ 296.452220][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'. [ 296.538189][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3111'. [ 296.597579][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3111'. [ 296.684983][T11022] netlink: 'syz.1.3116': attribute type 3 has an invalid length. [ 297.512726][ T4278] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 298.368351][T11093] xt_connbytes: Forcing CT accounting to be enabled [ 298.376948][T11093] xt_NFQUEUE: number of total queues is 0 [ 298.469217][ T8051] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 298.659367][ T8051] usb 5-1: Using ep0 maxpacket: 8 [ 298.667280][ T8051] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 298.699215][ T4318] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.720086][ T8051] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 298.740114][ T8051] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 298.748253][ T8051] usb 5-1: Product: syz [ 298.759113][ T8051] usb 5-1: Manufacturer: syz [ 298.763897][ T8051] usb 5-1: SerialNumber: syz [ 298.857373][T11105] loop1: detected capacity change from 0 to 4096 [ 298.867852][T11113] loop2: detected capacity change from 0 to 16 [ 298.889140][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 298.897021][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.908791][T11105] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 298.922250][ T4318] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 298.932594][T11113] erofs: (device loop2): mounted with root inode @ nid 36. [ 298.953534][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.963508][ T4318] usb 4-1: Product: syz [ 298.967774][ T4318] usb 4-1: Manufacturer: syz [ 298.974746][ T4318] usb 4-1: SerialNumber: syz [ 299.010490][ T8051] usb 5-1: Invalid connection information received from device [ 299.030872][ T4318] usb 4-1: config 0 descriptor?? [ 299.060306][ T4318] cdc_phonet 4-1:0.0: skipping garbage [ 299.075040][T11105] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 299.095577][ T4318] cdc_phonet: probe of 4-1:0.0 failed with error -22 [ 299.118964][T11105] ntfs3: loop1: Failed to load $Extend. [ 299.182033][T11105] ntfs3: loop1: no free space to extend mft [ 299.228914][ T4318] usb 5-1: USB disconnect, device number 16 [ 299.260046][ T8051] usb 4-1: USB disconnect, device number 13 [ 299.825534][T11129] loop1: detected capacity change from 0 to 4096 [ 299.874104][T11129] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 299.949108][ T26] audit: type=1326 audit(1786753829.210:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.3173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 300.044762][ T26] audit: type=1326 audit(1786753829.270:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.3173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 300.082020][T11129] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 300.164998][ T26] audit: type=1326 audit(1786753829.270:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.3173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 300.256127][ T26] audit: type=1326 audit(1786753829.270:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.3173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4dd9e0d9 code=0x7ffc0000 [ 300.569179][ T4598] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 300.654238][T11160] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3183'. [ 300.675390][T11160] net_ratelimit: 42 callbacks suppressed [ 300.675461][T11160] netlink: zone id is out of range [ 300.729668][T11164] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 300.730163][T11160] netlink: get zone limit has 8 unknown bytes [ 300.747971][T11164] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 300.769176][ T4598] usb 3-1: Using ep0 maxpacket: 16 [ 300.776656][ T4598] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 300.806727][ T4598] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 300.836126][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.870421][ T4598] usb 3-1: Product: syz [ 300.882623][ T4598] usb 3-1: Manufacturer: syz [ 300.896240][ T4598] usb 3-1: SerialNumber: syz [ 300.913769][ T4598] r8152-cfgselector 3-1: config 0 descriptor?? [ 300.998124][T11170] netlink: 'syz.4.3186': attribute type 27 has an invalid length. [ 301.033395][T11170] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 301.172308][T11174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 301.362736][ T4598] r8152-cfgselector 3-1: Unknown version 0x0000 [ 301.377638][T11181] netlink: 'syz.0.3191': attribute type 27 has an invalid length. [ 301.389692][T11181] netlink: 'syz.0.3191': attribute type 3 has an invalid length. [ 301.397480][T11181] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3191'. [ 301.407317][ T4598] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 301.571642][ T4278] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 301.580623][ T4278] Bluetooth: hci0: Injecting HCI hardware error event [ 301.591519][ T4274] Bluetooth: hci0: hardware error 0x00 [ 301.819084][ T4590] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 302.039090][ T4590] usb 5-1: Using ep0 maxpacket: 8 [ 302.046779][ T4590] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.089164][ T4590] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 302.118839][ T4590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 302.152527][ T4590] usb 5-1: Product: syz [ 302.156777][ T4590] usb 5-1: Manufacturer: syz [ 302.182045][ T4590] usb 5-1: SerialNumber: syz [ 302.428752][ T4590] pcwd_usb: The device isn't a Human Interface Device [ 302.465878][ T4590] usb 5-1: USB disconnect, device number 17 [ 302.738141][T11196] loop1: detected capacity change from 0 to 32768 [ 302.878411][T11196] XFS (loop1): Mounting V5 Filesystem [ 303.033881][T11196] XFS (loop1): Ending clean mount [ 303.219844][ T4272] XFS (loop1): Unmounting Filesystem [ 303.729277][ T4274] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 303.937213][T11240] loop3: detected capacity change from 0 to 32768 [ 304.068037][T11220] loop2: detected capacity change from 0 to 32768 [ 304.094045][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 304.103553][T11240] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 304.119697][T11240] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 304.179888][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 304.232524][T11220] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 304.289449][T11220] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 304.353471][ T4283] INFO: trying to register non-static key. [ 304.359350][ T4283] The code is fine but needs lockdep annotation, or maybe [ 304.366571][ T4283] you didn't initialize this object before use? [ 304.372829][ T4283] turning off the locking correctness validator. [ 304.379181][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0 [ 304.386849][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.397054][ T4283] Call Trace: [ 304.400436][ T4283] [ 304.403458][ T4283] dump_stack_lvl+0x188/0x24e [ 304.408355][ T4283] ? show_regs_print_info+0x12/0x12 [ 304.413601][ T4283] ? load_image+0x410/0x410 [ 304.418173][ T4283] ? _find_next_bit+0x11e/0x130 [ 304.423231][ T4283] ? __is_module_percpu_address+0x279/0x3b0 [ 304.429211][ T4283] ? is_kernel_percpu_address+0x18f/0x1b0 [ 304.435022][ T4283] assign_lock_key+0x201/0x230 [ 304.439860][ T4283] ? SOFTIRQ_verbose+0x10/0x10 [ 304.444688][ T4283] register_lock_class+0x21d/0x870 [ 304.449856][ T4283] ? mark_lock+0x94/0x320 [ 304.454223][ T4283] ? is_dynamic_key+0x260/0x260 [ 304.459139][ T4283] ? __lock_acquire+0x1465/0x7c40 [ 304.464207][ T4283] __lock_acquire+0x172/0x7c40 [ 304.469015][ T4283] ? kernel_text_address+0x9c/0xd0 [ 304.474246][ T4283] ? __kernel_text_address+0x9/0x30 [ 304.479486][ T4283] ? verify_lock_unused+0x140/0x140 [ 304.484725][ T4283] ? verify_lock_unused+0x140/0x140 [ 304.490054][ T4283] ? stack_trace_save+0xa6/0xf0 [ 304.494946][ T4283] ? __stack_depot_save+0x35/0x480 [ 304.500164][ T4283] lock_acquire+0x1bb/0x4a0 [ 304.504714][ T4283] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 304.510709][ T4283] ? memset+0x1e/0x40 [ 304.514770][ T4283] ? read_lock_is_recursive+0x10/0x10 [ 304.520183][ T4283] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 304.526468][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 304.531717][ T4283] _raw_spin_lock_irqsave+0xb0/0x100 [ 304.537102][ T4283] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 304.543036][ T4283] ? _raw_spin_lock+0x40/0x40 [ 304.547743][ T4283] ? ktime_get+0x247/0x270 [ 304.552199][ T4283] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 304.558134][ T4283] ? ocfs2_dlm_shutdown+0x230/0x230 [ 304.563468][ T4283] ? slab_free_freelist_hook+0x133/0x1b0 [ 304.569167][ T4283] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 304.574762][ T4283] ? ocfs2_journal_init+0xd40/0xd40 [ 304.580006][ T4283] ocfs2_dlm_shutdown+0x33/0x230 [ 304.585069][ T4283] ocfs2_dismount_volume+0x479/0x940 [ 304.590473][ T4283] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 304.595799][ T4283] ? clear_inode+0x150/0x150 [ 304.600449][ T4283] ? dput+0x37/0x1d0 [ 304.604423][ T4283] ? ocfs2_free_inode+0x20/0x20 [ 304.609313][ T4283] generic_shutdown_super+0x130/0x340 [ 304.614772][ T4283] kill_block_super+0x7c/0xe0 [ 304.619495][ T4283] deactivate_locked_super+0x93/0xf0 [ 304.624815][ T4283] cleanup_mnt+0x471/0x4f0 [ 304.629409][ T4283] task_work_run+0x1d0/0x260 [ 304.634037][ T4283] ? task_work_cancel+0x220/0x220 [ 304.639094][ T4283] ? exit_to_user_mode_loop+0x3b/0x110 [ 304.644638][ T4283] exit_to_user_mode_loop+0xe6/0x110 [ 304.649973][ T4283] exit_to_user_mode_prepare+0xee/0x180 [ 304.655554][ T4283] syscall_exit_to_user_mode+0x16/0x40 [ 304.661043][ T4283] do_syscall_64+0x58/0xa0 [ 304.665500][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 304.670267][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 304.675096][ T4283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.681030][ T4283] RIP: 0033:0x7f2e4dd9f317 [ 304.685526][ T4283] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 304.705207][ T4283] RSP: 002b:00007ffda76e2e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 304.713676][ T4283] RAX: 0000000000000000 RBX: 00007f2e4de34474 RCX: 00007f2e4dd9f317 [ 304.721654][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda76e2ef0 [ 304.729627][ T4283] RBP: 00007ffda76e2ef0 R08: 00007ffda76e3ef0 R09: 00000000ffffffff [ 304.737602][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda76e3f80 [ 304.745577][ T4283] R13: 00007f2e4de34474 R14: 000000000004a467 R15: 00007ffda76e3fc0 [ 304.753569][ T4283] [ 304.763969][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 304.768690][T11220] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms [ 304.781898][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 304.789969][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 304.829895][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 304.838244][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done [ 304.844087][T11220] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 304.888948][T11220] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 304.899093][T11220] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 304.899093][T11220] inode = 12 2341 [ 304.899093][T11220] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 304.918851][T11220] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 304.928310][T11220] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:11220 [syz.2.3209] __gfs2_lookup+0xa9/0x290 [ 304.939779][T11220] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 304.948810][T11220] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 304.960244][T11220] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 304.985698][T11220] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 305.007001][T11220] gfs2: fsid=syz:syz.0: File system withdrawn [ 305.013583][T11220] CPU: 1 PID: 11220 Comm: syz.2.3209 Not tainted syzkaller #0 [ 305.021088][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.031176][T11220] Call Trace: [ 305.034470][T11220] [ 305.037413][T11220] dump_stack_lvl+0x188/0x24e [ 305.042095][T11220] ? show_regs_print_info+0x12/0x12 [ 305.047297][T11220] ? load_image+0x410/0x410 [ 305.052002][T11220] ? kobject_uevent_env+0x364/0x890 [ 305.057253][T11220] gfs2_withdraw+0xc69/0x1450 [ 305.061966][T11220] ? gfs2_lm+0x240/0x240 [ 305.066280][T11220] ? load_image+0x410/0x410 [ 305.070836][T11220] ? gfs2_consist_inode_i+0xf1/0x110 [ 305.076211][T11220] gfs2_dirent_scan+0x540/0x680 [ 305.081118][T11220] ? gfs2_dirent_search+0x800/0x800 [ 305.086357][T11220] gfs2_dirent_search+0x2d5/0x800 [ 305.091401][T11220] ? gfs2_dirent_search+0x800/0x800 [ 305.096609][T11220] ? gfs2_permission+0x408/0x4e0 [ 305.101908][T11220] ? gfs2_dir_search+0x220/0x220 [ 305.106868][T11220] ? gfs2_lookupi+0x660/0x660 [ 305.111572][T11220] gfs2_dir_search+0x49/0x220 [ 305.116259][T11220] gfs2_lookupi+0x46b/0x660 [ 305.120881][T11220] ? __d_lookup_rcu+0x3bf/0x4c0 [ 305.125760][T11220] ? gfs2_lookup_simple+0x100/0x100 [ 305.130973][T11220] ? d_alloc_parallel+0x1457/0x1590 [ 305.136184][T11220] ? __gfs2_lookup+0xa9/0x290 [ 305.140872][T11220] ? d_alloc_parallel+0x352/0x1590 [ 305.145989][T11220] __gfs2_lookup+0xa9/0x290 [ 305.150506][T11220] ? lockdep_softirqs_off+0x430/0x430 [ 305.155886][T11220] ? gfs2_atomic_open+0x210/0x210 [ 305.160949][T11220] ? __d_lookup+0x8b/0x7c0 [ 305.165420][T11220] ? __init_waitqueue_head+0xa4/0x140 [ 305.170870][T11220] __lookup_slow+0x29d/0x3f0 [ 305.175465][T11220] ? lookup_one_len+0x2d0/0x2d0 [ 305.180428][T11220] ? down_read+0x1a8/0x2d0 [ 305.184875][T11220] lookup_slow+0x53/0x70 [ 305.189126][T11220] walk_component+0x2ad/0x3e0 [ 305.193809][T11220] path_lookupat+0x148/0x420 [ 305.198405][T11220] do_o_path+0x9c/0x200 [ 305.202568][T11220] ? do_tmpfile+0x240/0x240 [ 305.207166][T11220] path_openat+0x2930/0x2f10 [ 305.211758][T11220] ? stack_trace_save+0xa6/0xf0 [ 305.216617][T11220] ? __stack_depot_save+0x35/0x480 [ 305.221845][T11220] ? kasan_set_track+0x60/0x70 [ 305.226632][T11220] ? kasan_set_track+0x4b/0x70 [ 305.231410][T11220] ? __kasan_slab_alloc+0x6b/0x80 [ 305.236454][T11220] ? slab_post_alloc_hook+0x4b/0x490 [ 305.241755][T11220] ? kmem_cache_alloc+0x18b/0x2f0 [ 305.246786][T11220] ? getname_flags+0xb7/0x500 [ 305.251466][T11220] ? do_sys_openat2+0xdd/0x4f0 [ 305.256301][T11220] ? __x64_sys_openat+0x135/0x160 [ 305.261340][T11220] ? do_syscall_64+0x4c/0xa0 [ 305.265940][T11220] ? do_filp_open+0x420/0x420 [ 305.270620][T11220] ? rcu_is_watching+0x11/0xa0 [ 305.275435][T11220] do_filp_open+0x1ee/0x420 [ 305.279948][T11220] ? vfs_tmpfile+0x470/0x470 [ 305.284540][T11220] ? lock_release+0xcf/0x920 [ 305.289159][T11220] ? _raw_spin_unlock+0x24/0x40 [ 305.294011][T11220] ? alloc_fd+0x590/0x640 [ 305.298358][T11220] do_sys_openat2+0x14b/0x4f0 [ 305.303051][T11220] ? do_sys_open+0xe0/0xe0 [ 305.307485][T11220] ? lock_chain_count+0x20/0x20 [ 305.312348][T11220] ? fpregs_activate+0xb0/0x230 [ 305.317224][T11220] __x64_sys_openat+0x135/0x160 [ 305.322177][T11220] do_syscall_64+0x4c/0xa0 [ 305.326604][T11220] ? clear_bhb_loop+0x60/0xb0 [ 305.331289][T11220] ? clear_bhb_loop+0x60/0xb0 [ 305.335977][T11220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.341880][T11220] RIP: 0033:0x7f3cfad9e0d9 [ 305.346300][T11220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.366011][T11220] RSP: 002b:00007f3cfbc0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 305.374435][T11220] RAX: ffffffffffffffda RBX: 00007f3cfb025fa0 RCX: 00007f3cfad9e0d9 [ 305.382498][T11220] RDX: 000000000034f201 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 305.390471][T11220] RBP: 00007f3cfae35024 R08: 0000000000000000 R09: 0000000000000000 [ 305.398445][T11220] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000000 [ 305.406594][T11220] R13: 00007f3cfb026038 R14: 00007f3cfb025fa0 R15: 00007ffea47d3b28 [ 305.414583][T11220]