last executing test programs: 4m56.732737575s ago: executing program 2 (id=7960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8000002}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 4m56.424338842s ago: executing program 2 (id=7964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 4m56.250139706s ago: executing program 2 (id=7967): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c010) 4m56.197006536s ago: executing program 2 (id=7969): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m55.941310182s ago: executing program 2 (id=7973): socket(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083e1ad40402000726b5b010203010902240001010740000904bcd1010101"], 0x0) 4m54.901264505s ago: executing program 2 (id=8003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}, 0x30}}, 0x80) 4m54.754055118s ago: executing program 32 (id=8003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}, 0x30}}, 0x80) 991.922529ms ago: executing program 0 (id=14275): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e00000004fcff", 0x58}], 0x1) 826.456472ms ago: executing program 1 (id=14280): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) preadv(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f0000001f80)=""/4082, 0xff2}], 0x5, 0x5, 0x7) 809.655503ms ago: executing program 5 (id=14281): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) 755.926964ms ago: executing program 0 (id=14282): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x6c, 0x30, 0x51b, 0x40000000, 0xfffffffe, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xf, 0x30000000, 0x58, 0x80}, 0xa}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 754.896774ms ago: executing program 4 (id=14283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@setlink={0x3c, 0x13, 0x331, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x34e4c, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20040850) 687.723535ms ago: executing program 5 (id=14284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 685.872385ms ago: executing program 3 (id=14285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="02", 0x0}, 0x50) 631.790637ms ago: executing program 1 (id=14286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1583}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x9, 0x20084}}}}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 598.845027ms ago: executing program 0 (id=14287): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x6}], 0x10}}], 0x2, 0xc88c4) 506.65298ms ago: executing program 3 (id=14288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000180)) 502.03206ms ago: executing program 1 (id=14289): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@private=0xa010101, 0x4e20, 0xff, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0xf1}, {0xed, 0x3, 0x6, 0x0, 0x3d, 0x2, 0x3, 0x6}, {0x64c, 0x8, 0x100000000, 0x1}, 0x3, 0x6e6bb0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x3, 0x2, 0x0, 0x8, 0x13}}, 0xe8) 493.34092ms ago: executing program 4 (id=14290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'ah\x00', 0x2}, &(0x7f00000000c0)=0x1e) 448.84695ms ago: executing program 5 (id=14291): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x1a8, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8ccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c420237ff6a373c47b428089917d49e27"]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xa9, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0x10a0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x12e, 0x6d, 0x0, 0x1, [@generic="64c4f39e5a8bf7075598bed7433f839921ccb03fb134a3b196876b70baae84163118d077a7e0c1765cd03b31b27bfb1b8d8138c1c584d2066b2debf8b0b310db4b1aef425b66f463d2f23ee796064df7fac114a0d9ca2097d33b1dfb5369ea375274b26a37efe91391b87c5a763ba6a10ca54e642ffee3da1555dbe57943a68eee57a34b919b1ebf67bf4f9a67ac2082d00133deee8390a60bd3d9d48ce63c9ec71edb076c4aaf095b37", @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4}, @nested={0x75, 0x68, 0x0, 0x1, [@generic="40f73d78a00e26aed4397d1132b7a024ee2a849ac4826242a58467e78a4e45e4ad38c053ca437e85a7a5c73cbce6ec1f446ba7c1472f3781be7a6654492a461e88ac1abcc31f0b11084c8cff274d1833eae36ee8701e836a2a08cf11499e842ebea0dda219a95182efaa6291c32db95eec"]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) 423.042491ms ago: executing program 0 (id=14292): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}]}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000}) 380.912882ms ago: executing program 4 (id=14293): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000022ac0), 0x0, 0x0) pread64(r0, &(0x7f0000022b00)=""/163, 0xa3, 0x3) 373.045052ms ago: executing program 1 (id=14294): open$dir(&(0x7f0000000080)='./file0\x00', 0x20040, 0x74) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default'}}, 0x64}]}) 356.767843ms ago: executing program 3 (id=14295): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 313.875353ms ago: executing program 5 (id=14296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}]}, 0x40}}, 0x0) 301.912814ms ago: executing program 0 (id=14297): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) 239.562385ms ago: executing program 4 (id=14298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 238.963705ms ago: executing program 1 (id=14299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400000001141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000024000e800c00028005000100930000001400018008000100ac1414bb080002006401010208000340000000008400068014000500ff020000000000000000000000000001080002007f0000010800020000000000080001"], 0x138}}, 0x0) 228.536786ms ago: executing program 3 (id=14300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001", @ANYRESOCT, @ANYBLOB], 0xc8}}, 0x0) 190.676796ms ago: executing program 0 (id=14301): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") rmdir(&(0x7f0000000000)='./file0\x00') 150.155417ms ago: executing program 4 (id=14302): socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000001240)={0xb, 0x3, 0x94f0, 0xfffffffffffffff7, 0x1, 0x291}, &(0x7f0000001280)={0x1, 0x10000, 0x1ec8745380000, 0x1, 0x5, 0x9, 0x4, 0x4}, 0x0, 0x0, 0x0) 94.939158ms ago: executing program 5 (id=14303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x24}}, 0x0) 91.839149ms ago: executing program 3 (id=14304): madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) 51.70881ms ago: executing program 1 (id=14305): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x32) 45.21107ms ago: executing program 4 (id=14306): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64, @ANYRES16=0x0], 0xa, 0x254, &(0x7f0000000180)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x6030) 42.56007ms ago: executing program 5 (id=14307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 3 (id=14308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa00}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) kernel console output (not intermixed with test programs): 27][ T4622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.733010][ T4622] usb 5-1: Product: syz [ 934.756534][ T4622] usb 5-1: Manufacturer: syz [ 934.780328][ T4622] usb 5-1: SerialNumber: syz [ 935.058777][ T4622] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 935.090095][ T4622] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 935.134682][T31330] bridge0: port 3(veth0_to_bond) entered blocking state [ 935.159109][ T4622] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 935.179988][T31330] bridge0: port 3(veth0_to_bond) entered disabled state [ 935.238692][T31330] device veth0_to_bond entered promiscuous mode [ 935.263685][ T4622] usb 5-1: USB disconnect, device number 36 [ 935.311255][ T4622] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 935.372731][ T4622] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 935.415685][ T4622] visor 5-1:1.0: device disconnected [ 935.825014][T31401] loop5: detected capacity change from 0 to 64 [ 935.850377][ T4728] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 936.104436][ T4728] usb 2-1: Using ep0 maxpacket: 8 [ 936.251551][ T4728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.275187][ T4728] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.406432][T31453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12003'. [ 936.503090][ T4728] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 936.521548][ T4728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.553856][ T4728] usb 2-1: Product: syz [ 936.558102][ T4728] usb 2-1: Manufacturer: syz [ 936.587078][ T4728] usb 2-1: SerialNumber: syz [ 936.654296][T31459] loop5: detected capacity change from 0 to 4096 [ 936.720532][T31459] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 936.819625][T31459] ntfs3: loop5: ino=5, "/" directory corrupted [ 936.879177][T31459] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 936.962117][ T4728] usb 2-1: 0:1 : does not exist [ 936.967152][ T4728] usb 2-1: 0:2 : does not exist [ 936.987111][ T4728] usb 2-1: BAAD HEADSET c_chmask mismatch [ 937.109273][ T4728] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 937.151498][ T4728] usb 2-1: USB disconnect, device number 17 [ 937.253191][T31514] loop3: detected capacity change from 0 to 256 [ 937.342789][T31514] exfat: Deprecated parameter 'namecase' [ 937.348563][T31514] exfat: Deprecated parameter 'namecase' [ 937.376490][T13420] udevd[13420]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.476506][T31514] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 937.532051][T31534] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.12024'. [ 938.193858][T31600] netlink: 'syz.4.12044': attribute type 2 has an invalid length. [ 938.467151][T31623] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.747971][ T26] audit: type=1326 audit(1234.249:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31647 comm="syz.5.12059" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a12d1e59 code=0x7ffc0000 [ 938.820725][ T26] audit: type=1326 audit(1234.249:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31647 comm="syz.5.12059" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a12d1e59 code=0x7ffc0000 [ 938.945681][ T26] audit: type=1326 audit(1234.292:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31647 comm="syz.5.12059" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f49a12d1e59 code=0x7ffc0000 [ 939.010071][ T26] audit: type=1326 audit(1234.292:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31647 comm="syz.5.12059" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a12d1e59 code=0x7ffc0000 [ 939.121172][ T26] audit: type=1326 audit(1234.292:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31647 comm="syz.5.12059" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a12d1e59 code=0x7ffc0000 [ 939.121222][T31678] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12068'. [ 939.151926][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.431024][T31695] netlink: 'syz.0.12075': attribute type 4 has an invalid length. [ 939.663522][T31711] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 939.841192][T31727] loop0: detected capacity change from 0 to 8 [ 939.929655][T31727] SQUASHFS error: zlib decompression failed, data probably corrupt [ 939.944216][T31727] SQUASHFS error: Failed to read block 0x4de: -5 [ 939.989466][T31727] SQUASHFS error: zlib decompression failed, data probably corrupt [ 940.010654][T31727] SQUASHFS error: Failed to read block 0x4df: -5 [ 940.034538][T31727] SQUASHFS error: zlib decompression failed, data probably corrupt [ 940.048687][T31727] SQUASHFS error: Failed to read block 0x4e0: -5 [ 940.058298][T31727] SQUASHFS error: Failed to read block 0x4e4: -5 [ 940.067131][T31727] SQUASHFS error: Failed to read block 0x9cc: -5 [ 940.075619][T31727] SQUASHFS error: Failed to read block 0x2cf4: -5 [ 940.083739][T31727] SQUASHFS error: Failed to read block 0x52cf4: -5 [ 940.101877][T31727] SQUASHFS error: Failed to read block 0x535f4: -5 [ 940.109301][T31727] SQUASHFS error: zlib decompression failed, data probably corrupt [ 940.122178][ T23] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 940.132404][T31727] SQUASHFS error: Failed to read block 0x4de: -5 [ 940.143222][ T26] audit: type=1800 audit(1235.751:54): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12088" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 940.424596][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12101'. [ 940.454607][T31772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12101'. [ 940.511225][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 940.613775][ T23] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 940.637146][ T23] usb 5-1: config 189 has no interface number 0 [ 940.653987][ T23] usb 5-1: config 189 interface 127 has no altsetting 0 [ 940.712831][T31799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12110'. [ 940.818635][ T23] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 940.828355][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.843499][ T23] usb 5-1: Product: syz [ 940.856847][ T23] usb 5-1: Manufacturer: syz [ 940.864296][ T23] usb 5-1: SerialNumber: syz [ 940.923003][ T4622] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 941.164352][ T23] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 941.177307][ T4622] usb 1-1: Using ep0 maxpacket: 16 [ 941.202623][ T23] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 941.217048][ T23] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 941.230005][ T23] safe_serial 5-1:189.127: safe_serial converter detected [ 941.240630][ T23] safe_serial: probe of 5-1:189.127 failed with error -22 [ 941.271452][T31844] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.12122'. [ 941.282705][ T23] usb 5-1: USB disconnect, device number 37 [ 941.330729][ T4622] usb 1-1: unable to get BOS descriptor or descriptor too short [ 941.414613][ T4622] usb 1-1: config 0 has an invalid interface number: 169 but max is 0 [ 941.426892][ T4622] usb 1-1: config 0 has no interface number 0 [ 941.433921][ T4622] usb 1-1: config 0 interface 169 altsetting 13 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 941.445531][ T4622] usb 1-1: config 0 interface 169 altsetting 13 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 941.460620][ T4622] usb 1-1: config 0 interface 169 has no altsetting 0 [ 941.612828][ T4622] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=4d.fc [ 941.627796][ T4622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.646576][ T4622] usb 1-1: Product: syz [ 941.664525][ T4622] usb 1-1: Manufacturer: syz [ 941.676907][ T4622] usb 1-1: SerialNumber: syz [ 941.698572][ T4622] usb 1-1: config 0 descriptor?? [ 941.975606][T31897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12136'. [ 942.022089][ T4622] usbtest 1-1:0.169: couldn't get endpoints, -71 [ 942.049962][ T4622] usbtest: probe of 1-1:0.169 failed with error -71 [ 942.088505][ T4622] usb 1-1: USB disconnect, device number 30 [ 942.111895][ T4714] udevd[4714]: setting mode of /dev/bus/usb/001/030 to 020664 failed: No such file or directory [ 942.143474][ T4714] udevd[4714]: setting owner of /dev/bus/usb/001/030 to uid=0, gid=0 failed: No such file or directory [ 942.406899][T31933] netlink: 'syz.1.12146': attribute type 9 has an invalid length. [ 942.481269][T31941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12149'. [ 942.626398][ T4622] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 942.701115][T31955] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 942.869080][ T4622] usb 4-1: Using ep0 maxpacket: 16 [ 942.975569][T31986] netlink: 'syz.5.12163': attribute type 2 has an invalid length. [ 942.984043][ T4622] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 942.995117][ T4622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.056058][ T4622] usb 4-1: config 0 has no interface number 0 [ 943.123585][ T4728] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 943.242875][ T4622] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 943.266771][ T26] audit: type=1400 audit(1239.099:55): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=32011 comm="syz.5.12172" [ 943.270409][ T4622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 943.337410][ T4622] usb 4-1: Product: syz [ 943.341649][ T4622] usb 4-1: Manufacturer: syz [ 943.346856][ T4622] usb 4-1: SerialNumber: syz [ 943.374389][ T4622] usb 4-1: config 0 descriptor?? [ 943.405713][T32021] netlink: 'syz.5.12175': attribute type 30 has an invalid length. [ 943.418805][ T4728] usb 5-1: Using ep0 maxpacket: 32 [ 943.480278][T32028] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12177'. [ 943.509320][T32028] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12177'. [ 943.534108][T32030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12176'. [ 943.642966][ T4622] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 943.652802][ T4622] usb 4-1: No valid video chain found. [ 943.691863][ T4622] usb 4-1: USB disconnect, device number 13 [ 943.735706][ T4728] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 943.750055][T32049] libceph: resolve '0.0' (ret=-3): failed [ 943.773836][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.807856][ T4728] usb 5-1: Product: syz [ 943.817816][ T4728] usb 5-1: Manufacturer: syz [ 943.830312][ T4728] usb 5-1: SerialNumber: syz [ 944.135806][ T4728] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 944.174721][ T4728] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 944.271773][ T4728] usb 5-1: USB disconnect, device number 38 [ 944.493845][T32140] loop3: detected capacity change from 0 to 512 [ 944.574219][ T4714] udevd[4714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.587835][T32143] netlink: 'syz.1.12204': attribute type 1 has an invalid length. [ 944.672865][T32140] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 944.707203][T32140] EXT4-fs error (device loop3): ext4_xattr_block_list:713: inode #12: comm syz.3.12203: corrupted xattr block 6 [ 944.713737][T32143] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.12204'. [ 944.765616][T32140] EXT4-fs (loop3): Remounting filesystem read-only [ 944.841108][T32157] netlink: 'syz.4.12211': attribute type 1 has an invalid length. [ 944.850329][T32157] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12211'. [ 945.111375][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12214'. [ 945.362640][T32213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12225'. [ 945.418913][T32218] loop3: detected capacity change from 0 to 128 [ 945.445330][T32221] binder: 32217:32221 unknown command 1074553619 [ 945.469525][T32221] binder: 32217:32221 ioctl c0306201 200000000000 returned -22 [ 945.519454][T32218] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 945.547176][T32224] loop0: detected capacity change from 0 to 2048 [ 945.663872][T32224] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 945.752035][T32224] attempt to access beyond end of device [ 945.752035][T32224] loop0: rw=524288, want=33554432, limit=2048 [ 945.768003][T32244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.944762][T32224] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 946.046756][T32224] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 946.248496][T32224] Remounting filesystem read-only [ 946.279377][T32224] NILFS (loop0): error -5 truncating bmap (ino=16) [ 946.433847][ T4639] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 946.702098][T32311] __nla_validate_parse: 2 callbacks suppressed [ 946.702119][T32311] netlink: 264 bytes leftover after parsing attributes in process `syz.3.12255'. [ 946.785493][T32311] netlink: 264 bytes leftover after parsing attributes in process `syz.3.12255'. [ 946.822557][T32311] netlink: 175 bytes leftover after parsing attributes in process `syz.3.12255'. [ 946.966137][T32333] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 947.443308][T32371] loop3: detected capacity change from 0 to 2048 [ 947.545582][T32371] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 947.572108][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.608011][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.652795][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.700323][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.743453][T32371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 947.767108][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.815439][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.855649][T32371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 947.878635][T32415] loop5: detected capacity change from 0 to 512 [ 947.918124][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 947.955249][T32415] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 947.968823][T32371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 947.991615][T32415] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 948.042447][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 948.074260][T32371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 948.094997][T32415] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 948.115443][T32371] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 948.183251][T32415] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 948.194146][T32433] ip6t_srh: unknown srh match flags 4001 [ 948.225035][T32415] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 948.320805][T32415] EXT4-fs (loop5): orphan cleanup on readonly fs [ 948.348634][T32415] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.12291: bg 0: block 34: padding at end of block bitmap is not set [ 948.463912][T32415] Quota error (device loop5): write_blk: dquota write failed [ 948.516546][T32453] program syz.0.12301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.538814][T32415] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 948.569678][T32415] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.12291: Failed to acquire dquot type 1 [ 948.616628][T32415] EXT4-fs (loop5): 1 truncate cleaned up [ 948.630002][T32465] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 948.648092][T32415] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000000,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 948.677313][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.759565][T17610] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 948.809067][T32476] netlink: 'syz.0.12309': attribute type 3 has an invalid length. [ 948.939923][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.030109][T32494] netlink: 'syz.3.12314': attribute type 30 has an invalid length. [ 949.121413][T32502] netlink: set zone limit has 4 unknown bytes [ 949.327800][T17610] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 949.347408][T17610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.365409][T17610] usb 2-1: Product: syz [ 949.374635][T17610] usb 2-1: Manufacturer: syz [ 949.392968][T17610] usb 2-1: SerialNumber: syz [ 949.422517][T17610] usb 2-1: config 0 descriptor?? [ 949.499207][T32537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12327'. [ 949.631610][T32545] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 949.731326][T17610] usb 2-1: selecting invalid altsetting 1 [ 949.737191][T17610] technisat-usb2: could not set alternate setting to 0 [ 949.782361][T32553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12333'. [ 949.812478][ T4728] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 949.927070][T17610] technisat-usb2: firmware version: 0.0 [ 949.932724][T17610] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 950.085292][ T4728] usb 1-1: Using ep0 maxpacket: 32 [ 950.155300][T17610] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 950.179559][T17610] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 950.208356][T17610] usb 2-1: USB disconnect, device number 18 [ 950.281437][ T4728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 950.390605][ T4728] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 950.589234][ T4728] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 950.605934][ T4728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.621597][T32633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12355'. [ 950.637004][ T4728] usb 1-1: Product: syz [ 950.641450][ T4728] usb 1-1: Manufacturer: syz [ 950.651488][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12355'. [ 950.660679][ T4728] usb 1-1: SerialNumber: syz [ 950.679703][T32517] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 951.071452][ T4728] usb 1-1: MIDIStreaming interface descriptor not found [ 951.138936][ T4728] usb 1-1: USB disconnect, device number 31 [ 951.457387][ T4983] udevd[4983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.752216][T32742] SET target dimension over the limit! [ 951.961291][T32751] netlink: 'syz.3.12384': attribute type 1 has an invalid length. [ 952.005371][T32751] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12384'. [ 952.212430][T32761] loop0: detected capacity change from 0 to 4096 [ 952.274786][T32761] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 952.374946][T32761] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 952.429061][T32761] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 952.446303][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 952.453228][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 952.487526][T32761] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 952.633549][T32761] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 952.633597][T32761] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 952.633658][T32761] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 952.633692][T32761] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 952.650959][T32761] ntfs: volume version 3.1. [ 952.759281][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.988167][ T349] overlayfs: './file0' not a directory [ 953.449659][ T371] loop0: detected capacity change from 0 to 4096 [ 953.487136][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12418'. [ 953.508486][ T371] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 953.522972][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12416'. [ 953.563779][ T371] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 953.608877][ T371] ntfs3: loop0: Failed to load $Extend. [ 953.731637][ T406] loop1: detected capacity change from 0 to 16 [ 953.884057][ T406] erofs: (device loop1): mounted with root inode @ nid 36. [ 954.048929][ T429] delete_channel: no stack [ 954.068843][ T431] loop5: detected capacity change from 0 to 512 [ 954.072504][ T4622] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 954.133744][ T431] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 954.185538][ T431] EXT4-fs (loop5): orphan cleanup on readonly fs [ 954.201431][ T450] Cannot find del_set index 4 as target [ 954.219748][ T431] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3894: comm syz.5.12432: Allocating blocks 41-42 which overlap fs metadata [ 954.324149][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.331415][ T431] __quota_error: 13 callbacks suppressed [ 954.331435][ T431] Quota error (device loop5): write_blk: dquota write failed [ 954.345532][ T431] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 954.356327][ T431] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.12432: Failed to acquire dquot type 0 [ 954.369705][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.380668][ T431] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 954.445129][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.462707][ T460] loop1: detected capacity change from 0 to 128 [ 954.466932][ T431] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.12432: corrupted inode contents [ 954.523839][ T460] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 954.532498][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.544395][ T431] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #12: comm syz.5.12432: mark_inode_dirty error [ 954.565949][ T460] vxfs: unsupported VxFS version (-1232326277) [ 954.582930][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.595488][ T4622] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 954.614434][ T4622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.627493][ T431] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.12432: corrupted inode contents [ 954.646064][ T4622] usb 5-1: Product: syz [ 954.655887][ T4622] usb 5-1: Manufacturer: syz [ 954.664016][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.671069][ T4622] usb 5-1: SerialNumber: syz [ 954.689031][ T431] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.12432: mark_inode_dirty error [ 954.713269][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.715202][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.727336][ T431] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.12432: corrupted inode contents [ 954.753096][ T4622] usb 5-1: config 0 descriptor?? [ 954.768226][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.785168][ T431] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 954.796806][ T4622] ch341 5-1:0.0: ch341-uart converter detected [ 954.809657][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.816400][ T431] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.12432: corrupted inode contents [ 954.884229][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.894394][ T431] EXT4-fs error (device loop5): ext4_truncate:4286: inode #12: comm syz.5.12432: mark_inode_dirty error [ 954.942368][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 954.979124][ T431] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 954.995009][ T4622] usb 5-1: short control message received (0 < 2) [ 955.002556][ T4622] usb 5-1: failed to receive control message: -5 [ 955.031283][ T4622] ch341-uart: probe of ttyUSB0 failed with error -5 [ 955.043495][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 955.086946][ T431] EXT4-fs (loop5): 1 truncate cleaned up [ 955.102296][ T490] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 955.113511][ T431] EXT4-fs (loop5): pa ffff888020b897e0: logic 1, phys. 41, len 23 [ 955.121981][ T431] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 955.193326][ T4622] usb 5-1: USB disconnect, device number 39 [ 955.212082][ T431] EXT4-fs (loop5): Remounting filesystem read-only [ 955.221155][ T4622] ch341 5-1:0.0: device disconnected [ 955.237453][ T431] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,dioread_nolock,dax=never,noinit_itable,nojournal_checksum,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 955.260221][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.422860][ T507] kAFS: unable to lookup cell '({^@' [ 955.646566][ T460] loop1: detected capacity change from 0 to 32768 [ 955.977123][ T547] netlink: 'syz.0.12462': attribute type 1 has an invalid length. [ 956.442810][ T580] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.546950][ T4631] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 956.604155][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12475'. [ 956.755405][ T541] loop5: detected capacity change from 0 to 32768 [ 956.786764][ T4631] usb 1-1: Using ep0 maxpacket: 8 [ 956.833418][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 956.878541][ T541] JBD2: Ignoring recovery information on journal [ 956.890824][ T541] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 956.897029][ T4631] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.914604][ T541] JBD2: bad block at offset 32 [ 956.949358][ T541] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 956.984617][ T4631] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 957.035497][ T541] ocfs2: Unmounting device (7,5) on (node local) [ 957.067254][ T4631] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.079203][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.121309][ T4631] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 957.174396][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.222904][ T4631] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 957.241189][ T4631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.249786][ T4631] usb 1-1: SerialNumber: syz [ 957.267757][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.294641][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.298888][ T568] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 957.335344][ T4631] usb 1-1: bad CDC descriptors [ 957.357907][ T4631] usb-storage 1-1:1.0: USB Mass Storage device detected [ 957.418980][ T4631] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 957.479420][ T4631] scsi host1: usb-storage 1-1:1.0 [ 957.512083][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.522646][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.532556][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.545305][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 957.555186][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12478'. [ 958.705126][ T636] usb 1-1: reset high-speed USB device number 32 using dummy_hcd [ 958.932756][ T721] loop1: detected capacity change from 0 to 4096 [ 959.004510][ T730] netlink: 'syz.5.12516': attribute type 2 has an invalid length. [ 959.041943][ T721] ntfs: volume version 3.1. [ 959.061938][ T721] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 959.091733][ T721] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 959.122104][ T721] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 959.148344][ T646] loop3: detected capacity change from 0 to 32768 [ 959.166872][ T721] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 959.187559][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.214089][ T721] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 959.271822][ T721] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 959.440194][ T646] XFS (loop3): Mounting V5 Filesystem [ 959.544221][ T9438] usb 1-1: USB disconnect, device number 32 [ 959.901127][ T646] XFS (loop3): Ending clean mount [ 959.984562][ T646] XFS (loop3): Quotacheck needed: Please wait. [ 960.114557][ T795] kAFS: No cell specified [ 960.184110][ T646] XFS (loop3): Quotacheck: Done. [ 960.264261][ T803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.347320][ T4650] XFS (loop3): Unmounting Filesystem [ 960.384946][ T813] loop1: detected capacity change from 0 to 256 [ 960.907357][ T854] netlink: 'syz.0.12551': attribute type 1 has an invalid length. [ 960.936645][ T855] device bond3 entered promiscuous mode [ 961.362480][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.610679][ T931] loop1: detected capacity change from 0 to 64 [ 961.968738][ T4622] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 962.475887][ T4622] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 962.490906][ T4622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.544690][ T4622] usb 1-1: Product: syz [ 962.549204][ T4622] usb 1-1: Manufacturer: syz [ 962.553887][ T4622] usb 1-1: SerialNumber: syz [ 962.587293][ T4622] usb 1-1: config 0 descriptor?? [ 962.640043][ T4622] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 962.722484][ T23] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 962.830465][ T1013] loop1: detected capacity change from 0 to 4096 [ 962.882515][ T1024] IPv6: sit2: Disabled Multicast RS [ 962.968760][ T1013] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 963.018929][ T1013] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 963.062529][T17363] usb 1-1: USB disconnect, device number 33 [ 963.069482][ T1013] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 963.087754][ T23] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 963.172206][ T1013] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 963.221310][ T1013] ntfs: volume version 3.1. [ 963.290329][ T23] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 963.319437][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.363372][ T23] usb 4-1: Product: syz [ 963.368831][ T23] usb 4-1: Manufacturer: syz [ 963.377653][ T23] usb 4-1: SerialNumber: syz [ 963.690746][ T23] usb 4-1: Cannot retrieve CPort count: -71 [ 963.690789][ T23] usb 4-1: Cannot retrieve CPort count: -71 [ 963.690817][ T23] es2_ap_driver: probe of 4-1:246.0 failed with error -71 [ 963.693153][ T23] usb 4-1: USB disconnect, device number 14 [ 964.266833][ T1135] netlink: 'syz.0.12617': attribute type 32 has an invalid length. [ 964.281150][ T1140] Timeout policy `syz1' can only be used by L3 protocol number 24578 [ 964.424250][ T1157] binfmt_misc: register: failed to install interpreter file ./file0 [ 964.696228][ T1189] No such timeout policy "syz1" [ 965.219423][ T1244] Timeout policy `syz1' can only be used by L3 protocol number 32907 [ 965.238690][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 965.345100][ T1258] __nla_validate_parse: 10 callbacks suppressed [ 965.345124][ T1258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12652'. [ 965.471222][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 965.528471][ T1270] netlink: 'syz.5.12656': attribute type 4 has an invalid length. [ 965.620739][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 965.694819][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 965.881312][ T23] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 965.902645][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.939809][ T23] usb 4-1: Product: syz [ 965.959214][ T23] usb 4-1: Manufacturer: syz [ 965.964683][ T23] usb 4-1: SerialNumber: syz [ 966.529249][ T4728] usb 4-1: USB disconnect, device number 15 [ 966.738487][ T1366] loop5: detected capacity change from 0 to 256 [ 966.841278][ T9438] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 966.907912][ T1373] ALSA: mixer_oss: invalid OSS volume 'u' [ 967.260587][ T9438] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 967.274836][ T9438] usb 5-1: config 1 has no interface number 0 [ 967.299411][ T9438] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 967.329994][ T9438] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 967.341637][ T9438] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.472001][ T1409] loop0: detected capacity change from 0 to 512 [ 967.531407][ T9438] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 967.571852][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 967.571870][ T26] audit: type=1326 audit(1265.181:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1415 comm="syz.3.12700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23855e8e59 code=0x7ffc0000 [ 967.582953][ T9438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.602313][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.634332][ T26] audit: type=1326 audit(1265.245:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1415 comm="syz.3.12700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23855e8e59 code=0x7ffc0000 [ 967.666065][ T1409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 967.677332][ T26] audit: type=1326 audit(1265.245:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1415 comm="syz.3.12700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23855e8e59 code=0x7ffc0000 [ 967.701651][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.727984][ T26] audit: type=1326 audit(1265.245:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1415 comm="syz.3.12700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23855e8e59 code=0x7ffc0000 [ 967.786877][ T1409] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 967.846446][ T9438] usb 5-1: Product: syz [ 967.878178][ T1424] device bond2 entered promiscuous mode [ 967.886116][ T1409] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 967.898050][ T1409] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.12698: Failed to acquire dquot type 0 [ 967.898893][ T9438] usb 5-1: Manufacturer: syz [ 967.924135][ T1424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 967.950203][ T9438] usb 5-1: SerialNumber: syz [ 967.987781][ T1351] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 968.006321][ T1351] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 968.030399][ T9438] usb 5-1: Error in usbnet_get_endpoints (-22) [ 968.048553][ T23] bond0 speed is unknown, defaulting to 1000 [ 968.341182][ T23] usb 5-1: USB disconnect, device number 40 [ 968.385693][ T1487] loop0: detected capacity change from 0 to 4096 [ 968.428855][ T1502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12712'. [ 968.558557][ T1487] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 968.947920][ T1525] loop1: detected capacity change from 0 to 8192 [ 969.029227][ T1525] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 969.063296][ T1525] REISERFS (device loop1): using ordered data mode [ 969.077827][ T1525] reiserfs: using flush barriers [ 969.094569][ T1525] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 969.199612][ T1552] netlink: 'syz.5.12728': attribute type 21 has an invalid length. [ 969.207675][ T1552] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12728'. [ 969.217906][ T1525] REISERFS (device loop1): checking transaction log (loop1) [ 969.238578][ T1525] REISERFS (device loop1): Using r5 hash to sort names [ 969.258190][ T1525] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 969.346935][ T1552] netlink: 'syz.5.12728': attribute type 5 has an invalid length. [ 969.412988][ T1552] netlink: 'syz.5.12728': attribute type 6 has an invalid length. [ 969.442691][ T1552] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12728'. [ 969.785318][ T1585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12732'. [ 970.087905][ T1615] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12746'. [ 970.242600][ T1631] MTD: Couldn't look up '': -22 [ 970.467256][ T23] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 970.495515][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12760'. [ 970.529975][ T1650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12760'. [ 970.699802][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 970.813153][ T23] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 970.835623][ T23] usb 5-1: config 0 has no interface number 0 [ 970.875541][ T23] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 970.903964][ T23] usb 5-1: config 0 interface 200 has no altsetting 0 [ 970.926867][ T1686] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12771'. [ 971.082660][ T23] usb 5-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 971.082700][ T23] usb 5-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 971.082725][ T23] usb 5-1: Product: syz [ 971.082745][ T23] usb 5-1: Manufacturer: syz [ 971.082765][ T23] usb 5-1: SerialNumber: syz [ 971.085020][ T23] usb 5-1: config 0 descriptor?? [ 971.323311][ T1628] udc-core: couldn't find an available UDC or it's busy [ 971.323337][ T1628] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 971.348507][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12781'. [ 971.348565][ T1718] netlink: 6 bytes leftover after parsing attributes in process `syz.0.12781'. [ 971.399637][ T23] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 971.421441][ T23] usb 5-1: USB disconnect, device number 41 [ 971.614283][ T1740] No such timeout policy "syz0" [ 971.998272][ T1756] loop5: detected capacity change from 0 to 1764 [ 972.524721][ T1797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12807'. [ 972.553366][ T1796] loop5: detected capacity change from 0 to 2048 [ 972.614590][ T1796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.642568][ T1796] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 188 with incorrect tag 0 [ 972.828600][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.168658][ T1851] loop5: detected capacity change from 0 to 8 [ 973.171118][ T4622] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 973.216200][ T4728] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 973.290222][ T1851] SQUASHFS error: Unable to read directory block [631:26] [ 973.422121][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.440223][ T4622] usb 4-1: Using ep0 maxpacket: 8 [ 973.592044][ T4622] usb 4-1: unable to get BOS descriptor or descriptor too short [ 973.608822][ T4728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.632285][ T4728] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.673397][ T4622] usb 4-1: config 8 has an invalid interface number: 42 but max is 0 [ 973.729256][ T4728] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 973.741497][ T4728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 973.750673][ T4728] usb 2-1: SerialNumber: syz [ 973.757893][ T4622] usb 4-1: config 8 has no interface number 0 [ 973.765162][ T4622] usb 4-1: config 8 interface 42 has no altsetting 0 [ 973.932471][ T1897] sctp: [Deprecated]: syz.4.12837 (pid 1897) Use of int in maxseg socket option. [ 973.932471][ T1897] Use struct sctp_assoc_value instead [ 973.980784][ T4622] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 974.009609][ T4622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.030210][ T4728] usb 2-1: 0:2 : does not exist [ 974.043472][ T4622] usb 4-1: Product: syz [ 974.054067][ T4622] usb 4-1: Manufacturer: syz [ 974.070465][ T4622] usb 4-1: SerialNumber: syz [ 974.077347][ T4728] usb 2-1: USB disconnect, device number 19 [ 974.337437][T13420] udevd[13420]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.401498][ T4622] empeg 4-1:8.42: empeg converter detected [ 974.420006][ T4622] usb 4-1: active config #8 != 1 ?? [ 974.467592][ T4622] usb 4-1: USB disconnect, device number 16 [ 974.596443][ T1958] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.687865][ T1948] loop0: detected capacity change from 0 to 8192 [ 974.744415][ T1948] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 974.824145][ T1948] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 974.843874][ T1948] ntfs3: loop0: Failed to load $Extend. [ 975.076709][ T1978] loop1: detected capacity change from 0 to 2048 [ 975.110919][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.203591][ T1978] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 975.291988][ T4721] udevd[4721]: incorrect nilfs2 checksum on /dev/loop1 [ 975.308819][ T1991] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 975.364783][ T1978] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 975.462783][ T1978] Remounting filesystem read-only [ 976.412804][ T2031] loop3: detected capacity change from 0 to 32768 [ 976.585539][ T2031] XFS (loop3): Mounting V5 Filesystem [ 976.626618][ T2097] device batadv0 left promiscuous mode [ 976.668773][ T2100] dlm: no locking on control device [ 976.679922][ T2097] device geneve1 left promiscuous mode [ 976.703076][ T2097] device netdevsim0 left promiscuous mode [ 976.709334][ T2097] device geneve2 left promiscuous mode [ 976.722688][ T2031] XFS (loop3): Ending clean mount [ 976.777012][ T2097] device ip6erspan0 left promiscuous mode [ 976.792141][ T2097] device bond3 left promiscuous mode [ 976.805310][ T2031] XFS (loop3): Quotacheck needed: Please wait. [ 976.967939][ T2112] affs: No valid root block on device nbd1 [ 977.064132][ T2031] XFS (loop3): Quotacheck: Done. [ 977.142833][ T2125] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 977.317028][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12905'. [ 977.400216][ T2147] loop1: detected capacity change from 0 to 512 [ 977.426838][ T4650] XFS (loop3): Unmounting Filesystem [ 977.493410][ T2143] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.508706][ T2143] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.585435][ T2147] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.12908: bg 0: block 5: invalid block bitmap [ 977.663342][ T2147] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 977.675983][ T2147] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.12908: invalid indirect mapped block 3 (level 2) [ 977.696803][ T2147] EXT4-fs (loop1): 1 orphan inode deleted [ 977.708341][ T2154] netlink: 'syz.5.12910': attribute type 2 has an invalid length. [ 977.717353][ T2147] EXT4-fs (loop1): 1 truncate cleaned up [ 977.724139][ T2147] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 978.315814][ T2192] device bridge5 entered promiscuous mode [ 978.441656][ T2204] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12922'. [ 978.441685][ T2204] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12922'. [ 978.627196][ T2216] device sit0 left promiscuous mode [ 978.700483][ T2216] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.726339][ T2216] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.807742][ T2216] device geneve2 left promiscuous mode [ 978.823894][ T2216] device veth3 left promiscuous mode [ 978.825395][ T2216] device geneve4 left promiscuous mode [ 978.960503][ T2232] loop0: detected capacity change from 0 to 256 [ 979.073903][ T2232] FAT-fs (loop0): Directory bread(block 64) failed [ 979.073951][ T2232] FAT-fs (loop0): Directory bread(block 65) failed [ 979.074032][ T2232] FAT-fs (loop0): Directory bread(block 66) failed [ 979.074068][ T2232] FAT-fs (loop0): Directory bread(block 67) failed [ 979.074142][ T2232] FAT-fs (loop0): Directory bread(block 68) failed [ 979.074183][ T2232] FAT-fs (loop0): Directory bread(block 69) failed [ 979.074269][ T2232] FAT-fs (loop0): Directory bread(block 70) failed [ 979.074303][ T2232] FAT-fs (loop0): Directory bread(block 71) failed [ 979.074378][ T2232] FAT-fs (loop0): Directory bread(block 72) failed [ 979.074413][ T2232] FAT-fs (loop0): Directory bread(block 73) failed [ 979.140305][ T2238] loop3: detected capacity change from 0 to 512 [ 979.187788][ T2238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 979.265374][ T2238] EXT4-fs (loop3): mount failed [ 979.341368][ T2249] SET target dimension over the limit! [ 979.445024][ T2197] loop5: detected capacity change from 0 to 32768 [ 979.510712][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.628266][ T2197] XFS (loop5): Mounting V5 Filesystem [ 979.881049][ T2267] loop0: detected capacity change from 0 to 4096 [ 979.962089][ T2197] XFS (loop5): Ending clean mount [ 979.979881][ T2298] netlink: 'syz.4.12948': attribute type 20 has an invalid length. [ 980.034902][ T2267] ntfs: volume version 3.1. [ 980.042440][ T2197] XFS (loop5): Quotacheck needed: Please wait. [ 980.174384][ T2301] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 980.340585][ T2197] XFS (loop5): Quotacheck: Done. [ 980.556597][T21618] XFS (loop5): Unmounting Filesystem [ 980.627848][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.074714][ T2425] pvrusb2: request_firmware fatal error with code=-110 [ 981.108116][ T2425] pvrusb2: Failure uploading firmware1 [ 981.193877][ T2425] pvrusb2: Device initialization was not successful. [ 981.219996][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 981.250618][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 981.296634][ T4627] pvrusb2: Device being rendered inoperable [ 981.501903][ T2383] netlink: 'syz.4.12973': attribute type 8 has an invalid length. [ 981.902626][ T2423] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 982.008181][ T2435] loop1: detected capacity change from 0 to 128 [ 982.058585][ T2438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12991'. [ 982.082145][ T2442] loop0: detected capacity change from 0 to 8 [ 982.122579][ T2435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 982.143459][ T2435] System zones: 1-3, 19-19, 35-36 [ 982.178894][ T2456] block nbd5: NBD_DISCONNECT [ 982.212902][ T2435] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 982.236766][ T2435] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 982.370830][ T2471] netlink: 196 bytes leftover after parsing attributes in process `syz.4.12998'. [ 982.509571][ T2481] loop0: detected capacity change from 0 to 512 [ 982.521235][ T2487] loop5: detected capacity change from 0 to 256 [ 982.549630][ T2495] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13005'. [ 982.561256][ T2481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 982.575985][ T2487] exfat: Deprecated parameter 'namecase' [ 982.607426][ T2481] EXT4-fs (loop0): mount failed [ 982.647916][ T2487] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 982.975268][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.090046][ T2556] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 983.114911][ T2556] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 983.144809][ T2556] overlayfs: missing 'lowerdir' [ 983.243027][ T2576] xt_TCPMSS: Only works on TCP SYN packets [ 983.282431][ T9438] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 983.285715][ T2584] xt_hashlimit: max too large, truncated to 1048576 [ 983.307915][ T26] audit: type=1400 audit(1282.068:60): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=2579 comm="syz.1.13024" [ 983.339209][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.381964][ T2584] xt_hashlimit: overflow, try lower: 137438953472/8 [ 983.525648][ T2605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13028'. [ 983.581520][ T9438] usb 4-1: Using ep0 maxpacket: 8 [ 983.661975][ T2624] loop0: detected capacity change from 0 to 512 [ 983.745329][ T2624] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,barrier,quota,,errors=continue. Quota mode: writeback. [ 983.772966][ T9438] usb 4-1: unable to get BOS descriptor or descriptor too short [ 983.860601][ T9438] usb 4-1: config index 0 descriptor too short (expected 810, got 42) [ 983.878422][ T9438] usb 4-1: config 129 has too many interfaces: 240, using maximum allowed: 32 [ 983.888066][ T9438] usb 4-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 983.896974][ T9438] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 983.914077][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.918886][ T9438] usb 4-1: config 129 has 0 interfaces, different from the descriptor's value: 240 [ 984.007942][ T2656] loop1: detected capacity change from 0 to 256 [ 984.130398][ T2656] FAT-fs (loop1): Directory bread(block 64) failed [ 984.150047][ T9438] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=bf.ab [ 984.153069][ T2656] FAT-fs (loop1): Directory bread(block 65) failed [ 984.175342][ T9438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.195809][ T9438] usb 4-1: Product: syz [ 984.202289][ T2656] FAT-fs (loop1): Directory bread(block 66) failed [ 984.208954][ T9438] usb 4-1: Manufacturer: syz [ 984.208978][ T9438] usb 4-1: SerialNumber: syz [ 984.249558][ T2656] FAT-fs (loop1): Directory bread(block 67) failed [ 984.267915][ T2656] FAT-fs (loop1): Directory bread(block 68) failed [ 984.292833][ T2656] FAT-fs (loop1): Directory bread(block 69) failed [ 984.321030][ T2656] FAT-fs (loop1): Directory bread(block 70) failed [ 984.363005][ T2656] FAT-fs (loop1): Directory bread(block 71) failed [ 984.429823][ T2656] FAT-fs (loop1): Directory bread(block 72) failed [ 984.436466][ T2656] FAT-fs (loop1): Directory bread(block 73) failed [ 984.496751][ T9438] usb 4-1: USB disconnect, device number 17 [ 984.800563][ T2703] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13053'. [ 985.593356][ T2761] loop5: detected capacity change from 0 to 16 [ 985.703333][ T2766] loop0: detected capacity change from 0 to 64 [ 985.714693][ T2761] erofs: (device loop5): mounted with root inode @ nid 36. [ 985.747132][ T2761] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 985.762182][ T2761] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 986.325436][ T2827] loop1: detected capacity change from 0 to 256 [ 987.084450][ T2884] loop3: detected capacity change from 0 to 164 [ 987.198948][ T2884] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 987.252420][ T2884] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 987.900361][ T2957] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 988.926849][ T2955] loop1: detected capacity change from 0 to 32768 [ 989.096152][ T2955] XFS (loop1): Mounting V5 Filesystem [ 989.244193][ T2955] XFS (loop1): Ending clean mount [ 989.486180][ T4640] XFS (loop1): Unmounting Filesystem [ 989.734015][ T3118] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13179'. [ 989.962263][ T3133] device gre0 entered promiscuous mode [ 990.427668][ T3163] loop3: detected capacity change from 0 to 164 [ 990.679327][ T3174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13197'. [ 990.758445][ T3174] netlink: 21 bytes leftover after parsing attributes in process `syz.4.13197'. [ 990.794759][ T3174] netlink: 'syz.4.13197': attribute type 2 has an invalid length. [ 990.813876][ T3174] netlink: 21 bytes leftover after parsing attributes in process `syz.4.13197'. [ 991.166044][ T3218] sctp: [Deprecated]: syz.3.13211 (pid 3218) Use of int in maxseg socket option. [ 991.166044][ T3218] Use struct sctp_assoc_value instead [ 991.277269][ T3212] loop0: detected capacity change from 0 to 4096 [ 991.323640][ T3212] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 991.401441][ T9438] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 991.424089][ T3234] smc: removing ib device syz2 [ 991.445965][ T3212] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 991.643011][ T9438] usb 5-1: Using ep0 maxpacket: 16 [ 991.760077][ T3256] netlink: 'syz.3.13222': attribute type 32 has an invalid length. [ 991.792304][ T9438] usb 5-1: config 1 has an invalid interface number: 19 but max is 0 [ 991.808064][ T9438] usb 5-1: config 1 has no interface number 0 [ 991.836041][ T9438] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.897622][ T3267] netlink: 25 bytes leftover after parsing attributes in process `syz.1.13226'. [ 991.909483][ T9438] usb 5-1: config 1 interface 19 has no altsetting 0 [ 991.953945][ T3268] loop0: detected capacity change from 0 to 128 [ 992.039005][ T3268] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 992.091601][ T9438] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 992.113279][ T3268] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00005106) [ 992.130341][ T9438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.149467][ T9438] usb 5-1: Product: syz [ 992.159288][ T3268] FAT-fs (loop0): Filesystem has been set read-only [ 992.171683][ T9438] usb 5-1: Manufacturer: syz [ 992.201301][ T9438] usb 5-1: SerialNumber: syz [ 992.272938][ T4639] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00005106) [ 992.328763][ T9438] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 992.490790][ T9438] usb 5-1: USB disconnect, device number 42 [ 992.497819][ T9] usb 5-1: Failed to submit usb control message: -71 [ 992.521711][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 992.558517][ T9] usb 5-1: unable to get target info from device [ 992.588437][ T9] usb 5-1: could not get target info (-71) [ 992.612844][ T9] usb 5-1: could not probe fw (-71) [ 992.776285][ T3316] autofs4:pid:3316:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 992.809693][ T3316] autofs4:pid:3316:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 993.392746][ T3362] delete_channel: no stack [ 993.973930][ T9438] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 994.079152][ T3417] loop0: detected capacity change from 0 to 16 [ 994.132971][ T3426] netlink: 'syz.1.13269': attribute type 9 has an invalid length. [ 994.146554][ T3417] erofs: (device loop0): mounted with root inode @ nid 36. [ 994.158420][ T3426] netlink: 'syz.1.13269': attribute type 7 has an invalid length. [ 994.182045][ T3426] netlink: 'syz.1.13269': attribute type 8 has an invalid length. [ 994.193719][ T23] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 994.271310][ T9438] usb 5-1: Using ep0 maxpacket: 32 [ 994.468078][ T9438] usb 5-1: unable to get BOS descriptor or descriptor too short [ 994.551425][ T23] usb 4-1: config 250 has an invalid interface number: 52 but max is 1 [ 994.559748][ T23] usb 4-1: config 250 has an invalid interface number: 52 but max is 1 [ 994.561224][ T9438] usb 5-1: config 6 has an invalid interface number: 49 but max is 0 [ 994.586929][ T23] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 994.607637][ T9438] usb 5-1: config 6 has no interface number 0 [ 994.625725][ T23] usb 4-1: config 250 has no interface number 0 [ 994.634910][ T9438] usb 5-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 994.642921][ T23] usb 4-1: config 250 interface 52 altsetting 8 has an invalid endpoint with address 0x46, skipping [ 994.670184][ T9438] usb 5-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 994.682058][ T3452] loop0: detected capacity change from 0 to 128 [ 994.719392][ T23] usb 4-1: config 250 interface 52 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 994.733079][ T9438] usb 5-1: config 6 interface 49 has no altsetting 0 [ 994.775080][ T23] usb 4-1: config 250 interface 52 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 994.820469][ T3460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13279'. [ 994.830863][ T23] usb 4-1: config 250 interface 52 has no altsetting 0 [ 994.839523][ T23] usb 4-1: config 250 interface 52 has no altsetting 1 [ 994.952161][ T9438] usb 5-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 994.973073][ T9438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.000585][ T9438] usb 5-1: Product: syz [ 995.004821][ T9438] usb 5-1: Manufacturer: syz [ 995.009672][ T23] usb 4-1: New USB device found, idVendor=04e8, idProduct=5136, bcdDevice=5c.a1 [ 995.029044][ T9438] usb 5-1: SerialNumber: syz [ 995.036230][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.048398][ T23] usb 4-1: Product: syz [ 995.053450][ T23] usb 4-1: Manufacturer: syz [ 995.082342][ T23] usb 4-1: SerialNumber: syz [ 995.189141][ T3495] loop5: detected capacity change from 0 to 128 [ 995.232912][ T3495] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 995.249095][ T3499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13287'. [ 995.273545][ T3495] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00005106) [ 995.306790][ T3495] FAT-fs (loop5): Filesystem has been set read-only [ 995.336112][ T9438] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 995.365118][T21618] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00005106) [ 995.379966][ T9438] sonixb 5-1:6.49: Error reading register 00: -71 [ 995.393624][ T23] usb-storage 4-1:250.52: USB Mass Storage device detected [ 995.417077][ T9438] usb 5-1: USB disconnect, device number 43 [ 995.437973][ T23] usb-storage 4-1:250.52: Quirks match for vid 04e8 pid 5136: 400 [ 995.551649][ T23] usb 4-1: USB disconnect, device number 18 [ 995.705279][ T3544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13293'. [ 995.943738][ T3557] loop1: detected capacity change from 0 to 2048 [ 996.089962][ T3557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 996.264931][ T3588] netlink: 'syz.5.13309': attribute type 3 has an invalid length. [ 996.661609][ T3602] loop5: detected capacity change from 0 to 8192 [ 996.772807][ T3558] loop0: detected capacity change from 0 to 32768 [ 996.831973][ T3602] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 996.859735][ T3617] loop1: detected capacity change from 0 to 4096 [ 996.870874][ T3602] REISERFS (device loop5): using ordered data mode [ 996.899721][ T3558] XFS (loop0): Mounting V5 Filesystem [ 996.912596][ T3602] reiserfs: using flush barriers [ 996.952828][ T3602] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 996.976361][ T3638] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 997.024730][ T3602] REISERFS (device loop5): checking transaction log (loop5) [ 997.059593][ T3602] REISERFS (device loop5): Using r5 hash to sort names [ 997.066966][ T3602] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 997.084022][ T3645] loop3: detected capacity change from 0 to 16 [ 997.140537][ T3558] XFS (loop0): Ending clean mount [ 997.252406][ T3645] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 2 [ 997.385583][ T4639] XFS (loop0): Unmounting Filesystem [ 997.540739][ T3645] loop3: detected capacity change from 0 to 128 [ 997.723595][ T3645] FAT-fs (loop3): bogus number of reserved sectors [ 997.761940][ T3645] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 997.781766][ T3645] FAT-fs (loop3): Can't find a valid FAT filesystem [ 997.796075][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.181471][ T3698] device bridge3 entered promiscuous mode [ 998.313478][ T3708] netlink: 'syz.5.13342': attribute type 16 has an invalid length. [ 998.313503][ T3708] netlink: 'syz.5.13342': attribute type 17 has an invalid length. [ 998.458410][ T3708] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.841209][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 999.022720][ T3726] infiniband syz2: set down [ 999.071862][ T3726] infiniband syz2: added batadv_slave_0 [ 999.080851][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 999.339108][ T3726] RDS/IB: syz2: added [ 999.345175][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 999.364362][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.397774][ T23] usb 4-1: Product: syz [ 999.402113][ T23] usb 4-1: Manufacturer: syz [ 999.403453][ T3726] smc: adding ib device syz2 with port count 1 [ 999.432303][ T23] usb 4-1: SerialNumber: syz [ 999.453009][ T3726] smc: ib device syz2 port 1 has pnetid [ 999.486171][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 999.621975][ T9438] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 999.686896][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13362'. [ 999.715051][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13362'. [ 999.873170][ T9438] usb 5-1: Using ep0 maxpacket: 16 [ 999.948428][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 999.968830][ T23] r8152-cfgselector 4-1: USB disconnect, device number 19 [ 1000.004539][ T9438] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.037298][ T9438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1000.222445][ T9438] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1000.242894][ T9438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.278265][ T9438] usb 5-1: Product: syz [ 1000.282508][ T9438] usb 5-1: Manufacturer: syz [ 1000.292807][ T9438] usb 5-1: SerialNumber: syz [ 1000.308304][ T9438] usb 5-1: config 0 descriptor?? [ 1000.369521][ T9438] hub 5-1:0.0: bad descriptor, ignoring hub [ 1000.386100][ T9438] hub: probe of 5-1:0.0 failed with error -5 [ 1000.465576][ T9438] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1000.526886][ T155] usb 5-1: Failed to submit usb control message: -71 [ 1000.598801][ T155] usb 5-1: unable to send the bmi data to the device: -71 [ 1000.634074][ T155] usb 5-1: unable to get target info from device [ 1000.666081][ T4728] usb 5-1: USB disconnect, device number 44 [ 1000.672711][ T155] usb 5-1: could not get target info (-71) [ 1000.721404][ T155] usb 5-1: could not probe fw (-71) [ 1001.024825][ T3872] SET target dimension over the limit! [ 1001.156955][ T3882] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13385'. [ 1001.183499][ T3882] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13385'. [ 1001.210536][ T3882] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13385'. [ 1001.635098][ T23] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1001.636837][ T3913] openvswitch: netlink: Actions may not be safe on all matching packets [ 1001.828487][ T4631] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1001.865770][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 1001.926824][ T3923] device ip6gretap1 entered promiscuous mode [ 1002.007429][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1002.020161][ T3933] x_tables: unsorted underflow at hook 1 [ 1002.045499][ T4631] usb 6-1: Using ep0 maxpacket: 8 [ 1002.083948][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1002.083987][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1002.084013][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1002.084042][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1002.084069][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1002.084092][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1002.084115][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1002.156801][ T4631] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1002.156835][ T4631] usb 6-1: config 179 has no interface number 0 [ 1002.156874][ T4631] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1002.156911][ T4631] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1002.156940][ T4631] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1002.156967][ T4631] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1002.156991][ T4631] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1002.157018][ T4631] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1002.157051][ T4631] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1002.157076][ T4631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.201708][ T4631] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input61 [ 1002.235985][ T23] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1002.236019][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.236042][ T23] usb 5-1: Product: syz [ 1002.236059][ T23] usb 5-1: Manufacturer: syz [ 1002.236075][ T23] usb 5-1: SerialNumber: syz [ 1002.256441][ T23] usb 5-1: config 0 descriptor?? [ 1002.269148][ T3894] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1002.454159][ T4631] usb 6-1: USB disconnect, device number 16 [ 1002.454915][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1002.488209][ T23] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 1002.510976][ T23] usb 5-1: USB disconnect, device number 45 [ 1002.549174][ T4631] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1002.774563][ T4983] udevd[4983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.923573][ T4017] loop3: detected capacity change from 0 to 4096 [ 1003.079456][ T4027] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1003.140872][ T4031] netlink: 'syz.1.13417': attribute type 13 has an invalid length. [ 1003.271375][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13421'. [ 1003.433768][ T4045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13419'. [ 1003.466566][ T4052] loop1: detected capacity change from 0 to 256 [ 1003.705329][ T4065] loop5: detected capacity change from 0 to 1024 [ 1003.817653][ T4631] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1003.975520][ T1108] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1004.039374][ T4631] usb 4-1: Using ep0 maxpacket: 8 [ 1004.151188][ T4631] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1004.151220][ T4631] usb 4-1: config 2 has no interface number 0 [ 1004.151259][ T4631] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1004.204325][ T4094] netlink: 'syz.4.13436': attribute type 1 has an invalid length. [ 1004.301243][ T4631] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1004.301279][ T4631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.301303][ T4631] usb 4-1: Product: syz [ 1004.301319][ T4631] usb 4-1: Manufacturer: syz [ 1004.301336][ T4631] usb 4-1: SerialNumber: syz [ 1004.344121][ T1108] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1004.344153][ T1108] usb 2-1: config 0 has no interface number 0 [ 1004.344192][ T1108] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1004.344231][ T1108] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1004.344257][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.346571][ T1108] usb 2-1: config 0 descriptor?? [ 1004.396472][ T1108] ttusbir 2-1:0.83: cannot find expected altsetting [ 1004.599264][T17610] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1004.599270][ T4622] usb 2-1: USB disconnect, device number 20 [ 1004.748826][ T4122] loop0: detected capacity change from 0 to 512 [ 1004.819957][ T4122] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13441: bg 0: block 169: padding at end of block bitmap is not set [ 1004.843072][ T4122] Quota error (device loop0): write_blk: dquota write failed [ 1004.856546][ T4122] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1004.867036][ T1108] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1004.875201][ T4122] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.13441: Failed to acquire dquot type 0 [ 1004.889838][ T4122] EXT4-fs (loop0): 1 truncate cleaned up [ 1004.895880][ T4122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1004.938911][ T4122] Quota error (device loop0): write_blk: dquota write failed [ 1004.948139][ T4631] ch9200: probe of 4-1:2.31 failed with error -22 [ 1004.955390][ T4122] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1004.969315][ T4631] usb 4-1: USB disconnect, device number 20 [ 1004.979438][ T4122] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.13441: Failed to acquire dquot type 0 [ 1005.135156][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 1005.186488][T17610] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1005.204593][T17610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.220886][T17610] usb 6-1: Product: syz [ 1005.234636][T17610] usb 6-1: Manufacturer: syz [ 1005.239779][T17610] usb 6-1: SerialNumber: syz [ 1005.253901][T17610] usb 6-1: config 0 descriptor?? [ 1005.279726][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.291931][T17610] hub 6-1:0.0: bad descriptor, ignoring hub [ 1005.305231][T17610] hub: probe of 6-1:0.0 failed with error -5 [ 1005.317639][T17610] usbsevseg 6-1:0.0: USB 7 Segment device now attached [ 1005.487938][ T1108] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1005.511910][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.540579][ T1108] usb 5-1: Product: syz [ 1005.545268][ T1108] usb 5-1: Manufacturer: syz [ 1005.565846][ T1108] usb 5-1: SerialNumber: syz [ 1005.581006][ T1108] usb 5-1: config 0 descriptor?? [ 1005.646378][ T1108] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1005.727353][T17610] usb 6-1: USB disconnect, device number 17 [ 1005.752685][T17610] usbsevseg 6-1:0.0: USB 7 Segment now disconnected [ 1005.883636][ T1108] gspca_t613: unknown sensor 0000 [ 1005.889049][ T1108] t613: probe of 5-1:0.0 failed with error -22 [ 1005.916963][ T1108] usb 5-1: USB disconnect, device number 46 [ 1006.376176][ T4251] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13475'. [ 1006.421965][ T4256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13476'. [ 1006.455360][ T4256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13476'. [ 1006.556359][ T1108] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1006.808685][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 1006.869472][ T4295] netlink: set zone limit has 8 unknown bytes [ 1007.087884][ T1108] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1007.097733][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.124489][ T1108] usb 4-1: Product: syz [ 1007.144856][ T1108] usb 4-1: Manufacturer: syz [ 1007.155427][ T1108] usb 4-1: SerialNumber: syz [ 1007.179533][ T1108] usb 4-1: config 0 descriptor?? [ 1007.431995][ T1108] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1007.446690][ T1108] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1007.575544][ T4330] netlink: 'syz.4.13500': attribute type 1 has an invalid length. [ 1007.590760][ T4330] netlink: 'syz.4.13500': attribute type 2 has an invalid length. [ 1007.611029][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13500'. [ 1007.625970][ T4622] usb 4-1: USB disconnect, device number 21 [ 1007.638311][ T4333] SET target dimension over the limit! [ 1008.374143][ T4389] netlink: 'syz.3.13516': attribute type 5 has an invalid length. [ 1008.911916][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13532'. [ 1008.921796][ T4622] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1008.948851][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13532'. [ 1009.073326][ T4631] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1009.200077][ T4455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1009.329268][ T4460] loop5: detected capacity change from 0 to 8192 [ 1009.395645][ T4503] openvswitch: netlink: Actions may not be safe on all matching packets [ 1009.415489][ T4460] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1009.421581][ T4622] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1009.435996][ T4631] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1009.444743][ T4631] usb 4-1: config 0 has no interface number 1 [ 1009.453559][ T4460] REISERFS (device loop5): using ordered data mode [ 1009.461609][ T4622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.468170][ T4460] reiserfs: using flush barriers [ 1009.484825][ T4631] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1009.508549][ T4622] usb 5-1: Product: syz [ 1009.512958][ T4622] usb 5-1: Manufacturer: syz [ 1009.517758][ T4631] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1009.529374][ T4622] usb 5-1: SerialNumber: syz [ 1009.538603][ T4460] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1009.551497][ T4622] usb 5-1: config 0 descriptor?? [ 1009.585568][ T4460] REISERFS (device loop5): checking transaction log (loop5) [ 1009.596580][ T4622] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1009.603755][ T4631] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1009.612846][ T4631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1009.668420][ T4631] usb 4-1: SerialNumber: syz [ 1009.697996][ T4631] usb 4-1: config 0 descriptor?? [ 1009.709444][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.722413][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.801873][ T4460] REISERFS (device loop5): Using tea hash to sort names [ 1009.820891][ T4460] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1009.927479][ T4527] loop1: detected capacity change from 0 to 256 [ 1009.985869][ T4631] usb 4-1: Found UVC 0.00 device (0002:0000) [ 1009.992817][ T4631] usb 4-1: No valid video chain found. [ 1010.014874][ T4622] gspca_sunplus: reg_w_riv err -71 [ 1010.020230][ T4622] sunplus: probe of 5-1:0.0 failed with error -71 [ 1010.071678][ T4622] usb 5-1: USB disconnect, device number 47 [ 1010.081793][ T4631] usb 4-1: USB disconnect, device number 22 [ 1010.109450][ T4527] FAT-fs (loop1): Directory bread(block 64) failed [ 1010.125193][ T4527] FAT-fs (loop1): Directory bread(block 65) failed [ 1010.172839][ T4527] FAT-fs (loop1): Directory bread(block 66) failed [ 1010.199212][ T4527] FAT-fs (loop1): Directory bread(block 67) failed [ 1010.206844][ T4527] FAT-fs (loop1): Directory bread(block 68) failed [ 1010.224141][ T4527] FAT-fs (loop1): Directory bread(block 69) failed [ 1010.278621][ T4527] FAT-fs (loop1): Directory bread(block 70) failed [ 1010.285425][ T4527] FAT-fs (loop1): Directory bread(block 71) failed [ 1010.292517][ T4527] FAT-fs (loop1): Directory bread(block 72) failed [ 1010.300134][ T4527] FAT-fs (loop1): Directory bread(block 73) failed [ 1010.644097][ T4574] tmpfs: Bad value for 'mpol' [ 1010.727800][ T4579] sctp: [Deprecated]: syz.5.13561 (pid 4579) Use of int in max_burst socket option. [ 1010.727800][ T4579] Use struct sctp_assoc_value instead [ 1010.942656][ T4595] binder: 4594:4595 ioctl 40046210 0 returned -14 [ 1011.358357][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13575'. [ 1011.424286][ T4660] i2c i2c-0: Invalid block write size 253 [ 1011.757779][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13586'. [ 1011.813361][ T1108] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1012.036759][ T4631] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1012.082824][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 1012.125853][ T4730] loop5: detected capacity change from 0 to 4096 [ 1012.214002][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1012.250484][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1012.277590][ T4730] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1012.285440][ T4631] usb 1-1: Using ep0 maxpacket: 8 [ 1012.360245][ T4754] damon: kdamond (4754) starts [ 1012.456334][ T1108] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1012.475217][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.488842][ T1108] usb 2-1: Product: syz [ 1012.518263][ T1108] usb 2-1: Manufacturer: syz [ 1012.529726][ T1108] usb 2-1: SerialNumber: syz [ 1012.542521][ T1108] usb 2-1: config 0 descriptor?? [ 1012.549111][ T4631] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1012.558332][ T4631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.566645][ T4622] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1012.623392][ T4631] usb 1-1: Product: syz [ 1012.639491][ T4631] usb 1-1: Manufacturer: syz [ 1012.647178][ T4631] usb 1-1: SerialNumber: syz [ 1012.669302][ T4631] usb 1-1: config 0 descriptor?? [ 1012.722244][ T4777] netlink: 'syz.5.13606': attribute type 4 has an invalid length. [ 1012.772452][ T4777] netlink: 206236 bytes leftover after parsing attributes in process `syz.5.13606'. [ 1012.880540][ T4788] netlink: 'syz.4.13611': attribute type 21 has an invalid length. [ 1012.932336][ T4631] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1012.939450][ T4631] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 1012.951441][ T4631] usb 1-1: USB disconnect, device number 34 [ 1012.978251][ T4622] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1013.012537][ T1108] usb 2-1: USB disconnect, device number 21 [ 1013.204625][ T4816] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1013.215989][ T4622] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 1013.226654][ T4622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.239887][ T4622] usb 4-1: Product: syz [ 1013.243221][ T4816] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1013.244120][ T4622] usb 4-1: Manufacturer: syz [ 1013.262844][ T4622] usb 4-1: SerialNumber: syz [ 1013.266014][ T4816] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1013.549104][ T4622] usb 4-1: Invalid firmware size=96. [ 1013.573103][ T4622] usb 4-1: Invalid firmware size=96. [ 1013.602889][ T4622] usb 4-1: Invalid firmware size=96. [ 1013.631903][ T4622] usb 4-1: USB disconnect, device number 23 [ 1013.698056][ T4861] loop1: detected capacity change from 0 to 1764 [ 1013.739885][ T4869] cifs: Unknown parameter 'h}# [ 1013.739885][ T4869] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1013.739885][ T4869] SȘȞZ6' [ 1013.791615][ T4861] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1013.799532][ T4627] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1014.031487][ T4627] usb 1-1: Using ep0 maxpacket: 32 [ 1014.143191][ T4627] usb 1-1: config 8 has an invalid interface number: 52 but max is 0 [ 1014.151380][ T4627] usb 1-1: config 8 has no interface number 0 [ 1014.171638][ T4627] usb 1-1: config 8 interface 52 has no altsetting 0 [ 1014.347967][ T4627] usb 1-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=89.97 [ 1014.372810][ T4627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.388211][ T4627] usb 1-1: Product: syz [ 1014.397018][ T4627] usb 1-1: Manufacturer: syz [ 1014.411651][ T4627] usb 1-1: SerialNumber: syz [ 1014.539900][ T4919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13645'. [ 1014.584699][ T4919] IPv6: sit2: Disabled Multicast RS [ 1014.761854][ T4627] belkin_sa 1-1:8.52: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1014.810104][ T4627] usb 1-1: bcdDevice: 8997, bfc: 0 [ 1014.856181][ T4627] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1014.882222][ T4631] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1014.911827][ T4949] IPv6: sit2: Disabled Multicast RS [ 1014.941762][ T4627] usb 1-1: USB disconnect, device number 35 [ 1014.985825][ T4627] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1015.042760][ T4627] belkin_sa 1-1:8.52: device disconnected [ 1015.066964][ T4967] syz.3.13656 uses obsolete (PF_INET,SOCK_PACKET) [ 1015.246530][ T4631] usb 6-1: config 32 has an invalid interface number: 255 but max is 0 [ 1015.270660][ T4631] usb 6-1: config 32 has no interface number 0 [ 1015.337066][ T4631] usb 6-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1015.391572][ T4631] usb 6-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1015.412845][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13658'. [ 1015.439078][ T4631] usb 6-1: config 32 interface 255 has no altsetting 0 [ 1015.479885][ T4631] usb 6-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1015.500310][ T4631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.603709][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13663'. [ 1015.617016][ T4631] usb-storage 6-1:32.255: USB Mass Storage device detected [ 1015.655459][ T5002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1015.758932][ T4631] usb-storage 6-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 1015.855140][ T4631] usb 6-1: USB disconnect, device number 18 [ 1016.696600][ T4631] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1016.724767][ T5128] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13694'. [ 1016.927332][ T5141] netlink: 'syz.4.13698': attribute type 1 has an invalid length. [ 1017.054383][ T4631] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1017.086267][ T4631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.109993][ T4631] usb 4-1: config 0 descriptor?? [ 1017.184812][ T4631] pwc: Creative Labs Webcam 5 detected. [ 1017.582113][ T4631] pwc: send_video_command error -71 [ 1017.596595][ T4631] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1017.638898][ T4631] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1017.697505][ T4631] usb 4-1: USB disconnect, device number 24 [ 1017.861950][ T4627] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1017.948566][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13724'. [ 1017.993733][ T5221] netlink: 'syz.5.13724': attribute type 1 has an invalid length. [ 1018.025744][ T5221] netlink: 92 bytes leftover after parsing attributes in process `syz.5.13724'. [ 1018.039367][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13725'. [ 1018.113829][ T4627] usb 1-1: Using ep0 maxpacket: 16 [ 1018.393810][ T4627] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1018.424029][ T4627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.453263][ T4627] usb 1-1: Product: syz [ 1018.467516][ T4627] usb 1-1: Manufacturer: syz [ 1018.493820][ T4627] usb 1-1: SerialNumber: syz [ 1018.516158][ T4627] usb 1-1: config 0 descriptor?? [ 1018.571898][ T5271] netlink: 'syz.3.13741': attribute type 13 has an invalid length. [ 1018.634671][ T5271] gretap0: refused to change device tx_queue_len [ 1018.683033][ T5271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1018.757716][ T4627] usb 1-1: ignoring: not an USB2CAN converter [ 1018.958369][ T4627] usb 1-1: USB disconnect, device number 36 [ 1019.023216][ T5298] x_tables: duplicate underflow at hook 2 [ 1019.468896][ T5330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13759'. [ 1019.533262][ T5330] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13759'. [ 1019.738786][ T5289] loop5: detected capacity change from 0 to 32768 [ 1019.810742][ T5289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.13747 (5289) [ 1019.882016][ T5359] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.13768'. [ 1019.900899][ T5289] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1019.915963][ T4622] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1019.931090][ T5289] BTRFS info (device loop5): using free space tree [ 1019.949455][ T5289] BTRFS info (device loop5): has skinny extents [ 1020.164366][ T4622] usb 2-1: Using ep0 maxpacket: 16 [ 1020.257777][ T5289] BTRFS info (device loop5): enabling ssd optimizations [ 1020.276376][ T4622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.292120][ T4622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1020.309691][ T4622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 1020.326950][ T4622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1020.341237][ T4622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1020.351767][ T4622] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.365697][ T4622] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1020.375410][ T4622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.390346][ T4622] usb 2-1: config 0 descriptor?? [ 1020.424879][ T4728] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1020.584671][ T4622] rc_core: IR keymap rc-hauppauge not found [ 1020.590948][ T4622] Registered IR keymap rc-empty [ 1020.611066][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.676431][ T4728] usb 1-1: Using ep0 maxpacket: 32 [ 1020.684749][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.757343][ T4622] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1020.787116][ T4622] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64 [ 1020.835107][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.836032][ T4728] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1020.863291][ T4728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.883381][ T5420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13780'. [ 1020.895520][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.979619][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.010583][ T4728] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1021.044354][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.080847][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.127513][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.182593][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.217558][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.254274][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.283550][ T4622] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.322265][ T4622] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1021.337305][ T4622] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.390262][ T4622] usb 2-1: USB disconnect, device number 22 [ 1021.441234][ T5445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13784'. [ 1021.451343][ T4728] gspca_nw80x: reg_r err -71 [ 1021.469184][ T4728] nw80x: probe of 1-1:3.0 failed with error -71 [ 1021.510535][ T4728] usb 1-1: USB disconnect, device number 37 [ 1021.878911][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13794'. [ 1022.026992][ T5499] netlink: 'syz.0.13797': attribute type 12 has an invalid length. [ 1022.525124][ C0] sd 0:0:1:0: tag#1485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1022.535305][ C0] sd 0:0:1:0: tag#1485 CDB: opcode=0x2 [ 1022.540879][ C0] sd 0:0:1:0: tag#1485 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 1022.549953][ C0] sd 0:0:1:0: tag#1485 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 1022.550401][ T4622] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1022.559075][ C0] sd 0:0:1:0: tag#1485 CDB[20]: 47 [ 1022.719164][ T5561] xt_TCPMSS: Only works on TCP SYN packets [ 1022.841000][ T5569] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1022.867664][ T4622] usb 6-1: Using ep0 maxpacket: 32 [ 1023.015949][ T4622] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1023.090858][ T4622] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.277347][ T4622] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1023.303278][ T4622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.319427][ T23] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1023.337332][ T4622] usb 6-1: Product: syz [ 1023.341564][ T4622] usb 6-1: Manufacturer: syz [ 1023.363543][ T4622] usb 6-1: SerialNumber: syz [ 1023.378633][ T5620] ubi16: attaching mtd0 [ 1023.403072][ T5620] ubi16: scanning is finished [ 1023.421739][ T5620] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1023.579723][ T5620] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1023.650029][ T4622] usb 6-1: Invalid number of CPorts: 0 [ 1023.655980][ T4622] es2_ap_driver: probe of 6-1:7.0 failed with error -22 [ 1023.668710][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1023.687732][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1023.780387][ T4631] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1023.844542][ T4622] usb 6-1: USB disconnect, device number 19 [ 1023.864868][ T23] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1023.874333][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.883813][ T23] usb 5-1: Product: syz [ 1023.888117][ T23] usb 5-1: Manufacturer: syz [ 1023.893726][ T23] usb 5-1: SerialNumber: syz [ 1023.900734][ T23] usb 5-1: config 0 descriptor?? [ 1023.920999][ T5592] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1023.928277][ T5592] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1023.994508][ T13] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1024.143798][ T23] dm9601: probe of 5-1:0.0 failed with error -71 [ 1024.153363][ T4631] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1024.176381][ T23] usb 5-1: USB disconnect, device number 48 [ 1024.255758][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.266661][ T4631] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.396094][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1024.496100][ T13] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 1024.502024][ T4631] usb 2-1: string descriptor 0 read error: -22 [ 1024.512226][ T13] usb 4-1: config 0 has no interface number 0 [ 1024.520465][ T13] usb 4-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 1024.530486][ T4631] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1024.530485][ T13] usb 4-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 1024.530522][ T4631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.539633][ T13] usb 4-1: config 0 interface 86 has no altsetting 0 [ 1024.613474][ T4631] usb 2-1: selecting invalid altsetting 1 [ 1024.639433][ T4631] usb 2-1: unit 3 not found! [ 1024.733948][ T13] usb 4-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 1024.754288][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.783221][ T13] usb 4-1: Product: syz [ 1024.795609][ T13] usb 4-1: Manufacturer: syz [ 1024.802984][ T13] usb 4-1: SerialNumber: syz [ 1024.810690][ T13] usb 4-1: config 0 descriptor?? [ 1024.824583][ T4631] usb 2-1: cannot request logical cluster ID: 0 (err: -5) [ 1024.835937][ T5651] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1024.837014][ T4631] usb 2-1: invalid MIXER UNIT descriptor 6 [ 1024.861667][ T5651] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1024.873831][ T5694] netlink: 'syz.4.13852': attribute type 3 has an invalid length. [ 1024.929157][ T4631] snd-usb-audio: probe of 2-1:1.0 failed with error -5 [ 1025.025156][ T4631] usb 2-1: USB disconnect, device number 23 [ 1025.124377][ T5725] x_tables: unsorted underflow at hook 2 [ 1025.188815][ T13] omninet 4-1:0.86: ZyXEL - omni.net usb converter detected [ 1025.205423][ T13] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1025.257650][ T13] usb 4-1: USB disconnect, device number 25 [ 1025.274026][ T4739] udevd[4739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.314109][ T13] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1025.347282][ T13] omninet 4-1:0.86: device disconnected [ 1025.453899][ T5758] IPv6: Can't replace route, no match found [ 1025.767063][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13872'. [ 1025.944188][ T5803] netlink: 830 bytes leftover after parsing attributes in process `syz.4.13878'. [ 1025.991300][ T4631] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1026.138095][ T13] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1026.281300][ T5818] futex_wake_op: syz.1.13882 tries to shift op by 144; fix this program [ 1026.292489][ T5818] futex_wake_op: syz.1.13882 tries to shift op by 144; fix this program [ 1026.328638][ T4631] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1026.351097][ T4631] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.372300][ T4631] usb 6-1: config 0 has no interface number 0 [ 1026.378578][ T5820] netlink: 'syz.1.13883': attribute type 1 has an invalid length. [ 1026.389839][ T4728] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1026.397182][ T4631] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1026.418307][ T4631] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1026.436918][ T4631] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.548430][ T13] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 1026.573533][ T13] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 1026.593478][ T5824] loop1: detected capacity change from 0 to 4096 [ 1026.604420][ T4631] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1026.620888][ T5824] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1026.625240][ T4631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.634385][ T4728] usb 5-1: Using ep0 maxpacket: 8 [ 1026.656448][ T4631] usb 6-1: Product: syz [ 1026.667492][ T4631] usb 6-1: Manufacturer: syz [ 1026.677018][ T4631] usb 6-1: SerialNumber: syz [ 1026.699106][ T4631] usb 6-1: config 0 descriptor?? [ 1026.722931][ T5824] ntfs: volume version 3.1. [ 1026.772353][ T4728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.791680][ T4728] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1026.808064][ T4728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.826671][ T4728] usb 5-1: config 0 descriptor?? [ 1026.869741][ T4728] usb 5-1: selecting invalid altsetting 1 [ 1026.877055][ T4728] usb 5-1: Can not set alternate setting to 1, error: -22 [ 1026.888292][ T4728] synaptics_usb: probe of 5-1:0.0 failed with error -22 [ 1026.898081][ T13] usb 4-1: string descriptor 0 read error: -22 [ 1026.918365][ T13] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1026.952192][ T4631] usbtouchscreen: probe of 6-1:0.117 failed with error -71 [ 1026.970451][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.987491][ T4631] usb 6-1: USB disconnect, device number 20 [ 1027.028582][ T13] usb 4-1: low speed audio streaming not supported [ 1027.051124][ T13] usb 4-1: low speed audio streaming not supported [ 1027.149674][ T13] usb 5-1: USB disconnect, device number 49 [ 1027.158970][ T5857] device caif0 entered promiscuous mode [ 1027.261432][ T4631] usb 4-1: USB disconnect, device number 26 [ 1027.438703][ T5887] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1027.475559][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1027.647711][ T5936] netlink: 'syz.0.13898': attribute type 1 has an invalid length. [ 1027.655957][ T5936] netlink: 'syz.0.13898': attribute type 3 has an invalid length. [ 1027.664416][ T5936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13898'. [ 1027.674694][ T5936] NCSI netlink: No device for ifindex 2986344450 [ 1027.721026][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13899'. [ 1027.723636][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1027.844595][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1027.866381][ T23] usb 2-1: config 0 has no interface number 0 [ 1027.890409][ T23] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1028.044137][ T5962] netlink: 'syz.0.13907': attribute type 21 has an invalid length. [ 1028.072097][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1028.087122][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.105448][ T23] usb 2-1: Product: syz [ 1028.117322][ T5965] Cannot find del_set index 4 as target [ 1028.139545][ T23] usb 2-1: Manufacturer: syz [ 1028.151958][ T23] usb 2-1: SerialNumber: syz [ 1028.171894][ T23] usb 2-1: config 0 descriptor?? [ 1028.209499][ T5976] xt_socket: unknown flags 0xc [ 1028.403838][ T23] i2c-cp2615: probe of 2-1:0.1 failed with error -71 [ 1028.426950][ T23] usb 2-1: USB disconnect, device number 24 [ 1028.451585][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13920'. [ 1028.720245][ T6026] NILFS (nullb0): couldn't find nilfs on the device [ 1028.997544][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13939'. [ 1029.242379][ T13] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1029.377820][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13953'. [ 1029.513927][ T6122] netlink: 'syz.4.13955': attribute type 1 has an invalid length. [ 1029.540866][ T1108] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1029.595527][ T6122] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.13955'. [ 1029.610288][ T6122] netlink: 'syz.4.13955': attribute type 1 has an invalid length. [ 1029.661493][ T13] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 1029.671117][ T13] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1029.692629][ T13] usb 4-1: config 0 has no interface number 0 [ 1029.713884][ T13] usb 4-1: too many endpoints for config 0 interface 55 altsetting 169: 64, using maximum allowed: 30 [ 1029.741639][ T13] usb 4-1: config 0 interface 55 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1029.788691][ T13] usb 4-1: config 0 interface 55 has no altsetting 0 [ 1029.799022][ T13] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1029.810722][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.852296][ T13] usb 4-1: config 0 descriptor?? [ 1029.885377][ T4622] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1029.925662][ T13] ftdi_sio 4-1:0.55: FTDI USB Serial Device converter detected [ 1029.942972][ T1108] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1029.952391][ T13] usb 4-1: Detected FT-X [ 1029.957343][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.971161][ T1108] usb 2-1: config 0 has no interface number 0 [ 1029.977315][ T1108] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1029.989618][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.003513][ T1108] usb 2-1: config 0 descriptor?? [ 1030.061716][ T1108] rndis_wlan 2-1:0.18: skipping garbage [ 1030.081667][ T1108] usb 2-1: bad CDC descriptors [ 1030.109479][ T4622] usb 1-1: Using ep0 maxpacket: 16 [ 1030.118247][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1030.131147][ T1108] rndis_host 2-1:0.18: skipping garbage [ 1030.146303][ T13] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1030.155388][ T1108] usb 2-1: bad CDC descriptors [ 1030.192829][ T13] ftdi_sio 4-1:0.55: GPIO initialisation failed: -71 [ 1030.214260][ T13] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1030.224920][ T4622] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.249796][ T4622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1030.265551][ T4622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 1030.277466][ T6177] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 1030.285908][ T4622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1030.303534][ T4622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.310969][ T13] usb 4-1: USB disconnect, device number 27 [ 1030.323482][ T4622] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.345113][ T4622] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1030.358439][ T4622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.368166][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1030.386078][ T13] ftdi_sio 4-1:0.55: device disconnected [ 1030.393422][ T4622] usb 1-1: config 0 descriptor?? [ 1030.409221][ T4728] usb 2-1: USB disconnect, device number 25 [ 1030.528172][ T4622] rc_core: IR keymap rc-hauppauge not found [ 1030.534215][ T4622] Registered IR keymap rc-empty [ 1030.545414][ T6205] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4653] was attempted by ""[6205] [ 1030.557145][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.584731][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.629230][ T4622] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1030.669260][ T5576] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1030.681663][ T4622] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input67 [ 1030.740800][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.777221][ T6221] loop3: detected capacity change from 0 to 512 [ 1030.793044][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.808327][ T6221] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1030.815766][ T6221] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1030.845257][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.873756][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.888408][ T6221] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000009,mblk_io_submit,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1030.902109][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.947860][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1030.957670][ T5576] usb 6-1: Using ep0 maxpacket: 16 [ 1030.989858][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.032093][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.078777][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.097187][ T5576] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.110976][ T4622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1031.116168][ T5576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1031.154515][ T4622] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1031.157679][ T5576] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1031.177748][ T4622] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1031.197307][ T5576] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1031.230218][ T4622] usb 1-1: USB disconnect, device number 38 [ 1031.388281][ T6266] loop1: detected capacity change from 0 to 512 [ 1031.421028][ T6266] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1031.436697][ T5576] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1031.451425][ T5576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.484087][ T6266] EXT4-fs (loop1): Mount option "dax=always" incompatible with ext3 [ 1031.497587][ T5576] usb 6-1: Product: syz [ 1031.511730][ T5576] usb 6-1: Manufacturer: syz [ 1031.534168][ T5576] usb 6-1: SerialNumber: syz [ 1031.562102][ T5576] usb 6-1: config 0 descriptor?? [ 1031.632920][ T5576] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1031.647338][ T6266] gfs2: Unexpected value for 'barrier' [ 1031.846562][ T13] usb 6-1: USB disconnect, device number 21 [ 1031.852895][ T5576] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1031.953204][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13997'. [ 1031.978691][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13997'. [ 1032.121880][ T5576] usb 5-1: Using ep0 maxpacket: 16 [ 1032.252737][ T5576] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1032.276939][ T5576] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1032.315331][ T5576] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 1032.372438][ T5576] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1032.578894][ T5576] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1032.595245][ T5576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.620667][ T5576] usb 5-1: Product: syz [ 1032.626681][ T5576] usb 5-1: Manufacturer: syz [ 1032.631668][ T5576] usb 5-1: SerialNumber: syz [ 1032.671142][ T5576] usb 5-1: config 0 descriptor?? [ 1032.991982][ T6385] bond0: option ad_select: unable to set because the bond device is up [ 1033.131290][ T5576] usb 5-1: USB disconnect, device number 50 [ 1033.251092][ T6412] --map-set only usable from mangle table [ 1033.510756][ T13] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1033.595291][ T5576] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1033.727383][ T6454] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.14041'. [ 1033.766466][ T6454] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 1033.856343][ T5576] usb 2-1: Using ep0 maxpacket: 16 [ 1033.921830][ T13] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1033.944619][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.995778][ T5576] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1034.011194][ T5576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.039959][ T26] audit: type=1326 audit(1336.497:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.086411][ T5576] usb 2-1: config 0 descriptor?? [ 1034.129865][ T26] audit: type=1326 audit(1336.497:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.176234][ T26] audit: type=1326 audit(1336.497:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.204911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.227126][ T5576] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1034.235807][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1034.265155][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.279219][ T13] usb 4-1: Product: syz [ 1034.283529][ T13] usb 4-1: Manufacturer: syz [ 1034.299171][ T13] usb 4-1: SerialNumber: syz [ 1034.406285][ T26] audit: type=1326 audit(1336.497:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.463514][ T5576] usb 2-1: Detected FT8U232AM [ 1034.476736][ T5576] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1034.512722][ T26] audit: type=1326 audit(1336.497:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.581252][ T13] usb 4-1: 0:1 : does not exist [ 1034.588640][ T6512] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1034.614620][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 1034.619330][ T13] usb 4-1: unit 6 not found! [ 1034.622939][ T26] audit: type=1326 audit(1336.497:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.643917][ T13] usb 4-1: unit 2 not found! [ 1034.712163][ T13] usb 4-1: USB disconnect, device number 28 [ 1034.775837][ T26] audit: type=1326 audit(1336.497:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.813467][ T5576] usb 2-1: USB disconnect, device number 26 [ 1034.833822][ T5576] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1034.849824][ T26] audit: type=1326 audit(1336.497:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1034.947125][ T5576] ftdi_sio 2-1:0.0: device disconnected [ 1034.964606][ T26] audit: type=1326 audit(1336.497:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.14050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f794f8d2e59 code=0x7ffc0000 [ 1035.330439][ T4622] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1035.580000][ T4622] usb 5-1: Using ep0 maxpacket: 16 [ 1035.613110][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14083'. [ 1035.655378][ T13] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1035.693959][ T4622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.724685][ T4622] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.742988][ T4622] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1035.753162][ T4622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.791256][ T4622] usb 5-1: config 0 descriptor?? [ 1035.856090][ T4622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1035.967824][ T6634] loop0: detected capacity change from 0 to 2048 [ 1036.016448][ T6634] EXT4-fs (loop0): Ignoring removed bh option [ 1036.043109][ T4622] usb 5-1: USB disconnect, device number 51 [ 1036.083396][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.115056][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1036.137145][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.147704][ T13] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1036.157790][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.168004][ T6634] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,bh,errors=remount-ro,. Quota mode: none. [ 1036.215195][ T13] hub 2-1:1.0: bad descriptor, ignoring hub [ 1036.232007][ T13] hub: probe of 2-1:1.0 failed with error -5 [ 1036.239017][ T13] cdc_wdm 2-1:1.0: skipping garbage [ 1036.246617][ T13] cdc_wdm 2-1:1.0: skipping garbage [ 1036.252963][ T13] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1036.271186][ T6634] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.14091: deleted inode referenced: 12 [ 1036.306772][ T6634] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.409829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1036.542371][ T4728] usb 2-1: USB disconnect, device number 27 [ 1036.651775][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14103'. [ 1037.176963][ T6737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1037.409120][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14130'. [ 1037.534938][ T6776] netlink: 5 bytes leftover after parsing attributes in process `syz.4.14131'. [ 1037.675768][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14137'. [ 1037.693006][ T6791] nfs: Unknown parameter 'ntext' [ 1037.700970][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14139'. [ 1037.739716][ T6795] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14140'. [ 1037.823133][ T6795] device hsr_slave_0 left promiscuous mode [ 1037.846085][ T6795] device hsr_slave_1 left promiscuous mode [ 1037.876841][ T6806] xt_nat: multiple ranges no longer supported [ 1038.588526][ T6858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14160'. [ 1038.627526][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14161'. [ 1039.249865][ T6921] loop0: detected capacity change from 0 to 64 [ 1039.322603][ T6928] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14184'. [ 1039.344445][ T6921] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1039.893107][ T6986] sctp: [Deprecated]: syz.0.14203 (pid 6986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1039.893107][ T6986] Use struct sctp_sack_info instead [ 1040.116432][ T7005] overlayfs: workdir and upperdir must be separate subtrees [ 1040.743765][ T4631] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1040.769195][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14236'. [ 1041.004875][ T4631] usb 5-1: Using ep0 maxpacket: 16 [ 1041.117012][ T4631] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.322160][ T4631] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1041.359076][ T4631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.409737][ T4631] usb 5-1: Product: syz [ 1041.413980][ T4631] usb 5-1: Manufacturer: syz [ 1041.465521][ T4631] usb 5-1: SerialNumber: syz [ 1041.525198][ T7116] netlink: 'syz.0.14249': attribute type 20 has an invalid length. [ 1041.545020][ T7116] IPv6: NLM_F_CREATE should be specified when creating new route [ 1041.589817][ T4631] usb 5-1: config 0 descriptor?? [ 1041.860652][ T23] usb 5-1: USB disconnect, device number 52 [ 1041.903469][ T7069] loop5: detected capacity change from 0 to 32768 [ 1041.995776][ T7069] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 1042.218560][ T7151] loop3: detected capacity change from 0 to 4096 [ 1042.262406][ T7151] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1042.479032][ T7176] netlink: 'syz.4.14266': attribute type 2 has an invalid length. [ 1042.654962][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14271'. [ 1042.829215][ T7211] netlink: 'syz.3.14278': attribute type 21 has an invalid length. [ 1042.882771][ T7211] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14278'. [ 1043.032319][ T7220] gretap0: refused to change device tx_queue_len [ 1043.086904][ T7226] netlink: 292 bytes leftover after parsing attributes in process `syz.5.14284'. [ 1043.391676][ T7252] tmpfs: Bad value for 'mpol' [ 1043.527784][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14299'. [ 1043.566704][ T7271] loop0: detected capacity change from 0 to 512 [ 1043.577481][ T7266] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14299'. [ 1043.718162][ T7271] ================================================================== [ 1043.727315][ T7271] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e90 [ 1043.734505][ T7271] Read of size 8 at addr ffff8880722ab440 by task syz.0.14301/7271 [ 1043.742439][ T7271] [ 1043.744814][ T7271] CPU: 0 PID: 7271 Comm: syz.0.14301 Not tainted syzkaller #0 [ 1043.752397][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1043.762980][ T7271] Call Trace: [ 1043.766334][ T7271] [ 1043.769328][ T7271] dump_stack_lvl+0x188/0x250 [ 1043.774061][ T7271] ? show_regs_print_info+0x20/0x20 [ 1043.779337][ T7271] ? load_image+0x410/0x410 [ 1043.783905][ T7271] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1043.789496][ T7271] ? __rwlock_init+0x140/0x140 [ 1043.795092][ T7271] print_address_description+0x60/0x2d0 [ 1043.800711][ T7271] ? __ext4_iget+0x2bb/0x3e90 [ 1043.805435][ T7271] kasan_report+0xdf/0x130 [ 1043.810142][ T7271] ? __ext4_iget+0x2bb/0x3e90 [ 1043.814962][ T7271] __ext4_iget+0x2bb/0x3e90 [ 1043.819538][ T7271] ? apply_workqueue_attrs+0x170/0x170 [ 1043.825119][ T7271] ? ext4_get_projid+0x140/0x140 [ 1043.830221][ T7271] ext4_fill_super+0x72e8/0x93f0 [ 1043.835574][ T7271] ? format_decode+0x8b1/0x1330 [ 1043.840607][ T7271] ? ext4_mount+0x40/0x40 [ 1043.845425][ T7271] ? set_blocksize+0x1f1/0x360 [ 1043.850341][ T7271] ? sb_set_blocksize+0xa5/0xe0 [ 1043.855246][ T7271] mount_bdev+0x28a/0x3c0 [ 1043.859640][ T7271] ? ext4_mount+0x40/0x40 [ 1043.864020][ T7271] legacy_get_tree+0xe6/0x180 [ 1043.869006][ T7271] ? ext4_errno_to_code+0x160/0x160 [ 1043.874272][ T7271] vfs_get_tree+0x88/0x270 [ 1043.878783][ T7271] do_new_mount+0x247/0xa40 [ 1043.883370][ T7271] __se_sys_mount+0x2e3/0x3d0 [ 1043.888286][ T7271] ? __x64_sys_mount+0xc0/0xc0 [ 1043.893098][ T7271] ? lockdep_hardirqs_on+0x94/0x140 [ 1043.898346][ T7271] ? __x64_sys_mount+0x1c/0xc0 [ 1043.903219][ T7271] do_syscall_64+0x4c/0xa0 [ 1043.908302][ T7271] ? clear_bhb_loop+0x30/0x80 [ 1043.913029][ T7271] ? clear_bhb_loop+0x30/0x80 [ 1043.917761][ T7271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1043.923738][ T7271] RIP: 0033:0x7f9561b760ca [ 1043.928300][ T7271] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.948893][ T7271] RSP: 002b:00007f955fdcce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1043.957618][ T7271] RAX: ffffffffffffffda RBX: 00007f955fdccee0 RCX: 00007f9561b760ca [ 1043.965994][ T7271] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007f955fdccea0 [ 1043.974071][ T7271] RBP: 0000200000000080 R08: 00007f955fdccee0 R09: 0000000000000008 [ 1043.982121][ T7271] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000000 [ 1043.991109][ T7271] R13: 00007f955fdccea0 R14: 000000000000050c R15: 0000200000000600 [ 1043.999818][ T7271] [ 1044.003225][ T7271] [ 1044.005694][ T7271] Allocated by task 13727: [ 1044.010663][ T7271] __kasan_slab_alloc+0x92/0xc0 [ 1044.015667][ T7271] slab_post_alloc_hook+0x4c/0x380 [ 1044.020928][ T7271] kmem_cache_alloc+0x15d/0x280 [ 1044.025847][ T7271] reiserfs_alloc_inode+0x19/0xb0 [ 1044.030993][ T7271] new_inode_pseudo+0x5f/0x210 [ 1044.035810][ T7271] new_inode+0x25/0x1d0 [ 1044.040871][ T7271] reiserfs_mkdir+0x1cc/0x920 [ 1044.045714][ T7271] reiserfs_xattr_init+0x33a/0x720 [ 1044.051048][ T7271] reiserfs_fill_super+0x1cd9/0x2120 [ 1044.056402][ T7271] mount_bdev+0x28a/0x3c0 [ 1044.060813][ T7271] legacy_get_tree+0xe6/0x180 [ 1044.065879][ T7271] vfs_get_tree+0x88/0x270 [ 1044.070453][ T7271] do_new_mount+0x247/0xa40 [ 1044.075131][ T7271] __se_sys_mount+0x2e3/0x3d0 [ 1044.079855][ T7271] do_syscall_64+0x4c/0xa0 [ 1044.084332][ T7271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.090404][ T7271] [ 1044.093039][ T7271] Last potentially related work creation: [ 1044.098808][ T7271] kasan_save_stack+0x35/0x60 [ 1044.103612][ T7271] kasan_record_aux_stack+0xb8/0x100 [ 1044.108977][ T7271] call_rcu+0x189/0x900 [ 1044.115035][ T7271] evict+0x810/0x8b0 [ 1044.119015][ T7271] evict_inodes+0x650/0x6e0 [ 1044.123714][ T7271] generic_shutdown_super+0x93/0x300 [ 1044.130187][ T7271] kill_block_super+0x7c/0xe0 [ 1044.134932][ T7271] deactivate_locked_super+0x93/0xf0 [ 1044.140619][ T7271] cleanup_mnt+0x426/0x4d0 [ 1044.145218][ T7271] task_work_run+0x125/0x1a0 [ 1044.149986][ T7271] exit_to_user_mode_loop+0x10f/0x130 [ 1044.155421][ T7271] exit_to_user_mode_prepare+0xee/0x180 [ 1044.161851][ T7271] syscall_exit_to_user_mode+0x16/0x40 [ 1044.167849][ T7271] do_syscall_64+0x58/0xa0 [ 1044.173021][ T7271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.179169][ T7271] [ 1044.181764][ T7271] The buggy address belongs to the object at ffff8880722aae60 [ 1044.181764][ T7271] which belongs to the cache reiser_inode_cache of size 1568 [ 1044.197665][ T7271] The buggy address is located 1504 bytes inside of [ 1044.197665][ T7271] 1568-byte region [ffff8880722aae60, ffff8880722ab480) [ 1044.211481][ T7271] The buggy address belongs to the page: [ 1044.217266][ T7271] page:ffffea0001c8aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880722af740 pfn:0x722a8 [ 1044.229412][ T7271] head:ffffea0001c8aa00 order:3 compound_mapcount:0 compound_pincount:0 [ 1044.238308][ T7271] memcg:ffff88801b7d8701 [ 1044.242987][ T7271] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1044.251265][ T7271] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88814693ddc0 [ 1044.260245][ T7271] raw: ffff8880722af740 0000000080130010 00000001ffffffff ffff88801b7d8701 [ 1044.269076][ T7271] page dumped because: kasan: bad access detected [ 1044.275628][ T7271] page_owner tracks the page as allocated [ 1044.281796][ T7271] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5065, ts 95672956578, free_ts 91609603321 [ 1044.305293][ T7271] get_page_from_freelist+0x24f6/0x2670 [ 1044.311281][ T7271] __alloc_pages+0x1ee/0x480 [ 1044.316087][ T7271] new_slab+0xc0/0x4b0 [ 1044.321188][ T7271] ___slab_alloc+0x807/0xdd0 [ 1044.326243][ T7271] kmem_cache_alloc+0xf0/0x280 [ 1044.331156][ T7271] reiserfs_alloc_inode+0x19/0xb0 [ 1044.336254][ T7271] iget5_locked+0x9e/0x250 [ 1044.340915][ T7271] reiserfs_fill_super+0x10ac/0x2120 [ 1044.346352][ T7271] mount_bdev+0x28a/0x3c0 [ 1044.350765][ T7271] legacy_get_tree+0xe6/0x180 [ 1044.355499][ T7271] vfs_get_tree+0x88/0x270 [ 1044.359977][ T7271] do_new_mount+0x247/0xa40 [ 1044.364623][ T7271] __se_sys_mount+0x2e3/0x3d0 [ 1044.369397][ T7271] do_syscall_64+0x4c/0xa0 [ 1044.373977][ T7271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.380108][ T7271] page last free stack trace: [ 1044.384906][ T7271] free_unref_page_prepare+0x637/0x6c0 [ 1044.390426][ T7271] free_unref_page+0x8f/0x2a0 [ 1044.395256][ T7271] __unfreeze_partials+0x188/0x1e0 [ 1044.400418][ T7271] put_cpu_partial+0x12d/0x190 [ 1044.405252][ T7271] qlist_free_all+0x35/0x90 [ 1044.410164][ T7271] kasan_quarantine_reduce+0x150/0x160 [ 1044.415687][ T7271] __kasan_slab_alloc+0x2f/0xc0 [ 1044.420790][ T7271] slab_post_alloc_hook+0x4c/0x380 [ 1044.426088][ T7271] kmem_cache_alloc+0x15d/0x280 [ 1044.430998][ T7271] getname_flags+0xb7/0x4f0 [ 1044.435551][ T7271] do_sys_openat2+0xdd/0x500 [ 1044.440363][ T7271] __x64_sys_openat+0x135/0x160 [ 1044.445349][ T7271] do_syscall_64+0x4c/0xa0 [ 1044.450203][ T7271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.456598][ T7271] [ 1044.458976][ T7271] Memory state around the buggy address: [ 1044.464759][ T7271] ffff8880722ab300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.472963][ T7271] ffff8880722ab380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.482375][ T7271] >ffff8880722ab400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.490916][ T7271] ^ [ 1044.497324][ T7271] ffff8880722ab480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1044.505533][ T7271] ffff8880722ab500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.514643][ T7271] ================================================================== [ 1044.523350][ T7271] Disabling lock debugging due to kernel taint [ 1044.558481][ T7271] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1044.565838][ T7271] CPU: 0 PID: 7271 Comm: syz.0.14301 Tainted: G B syzkaller #0 [ 1044.575221][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1044.585322][ T7271] Call Trace: [ 1044.588635][ T7271] [ 1044.591647][ T7271] dump_stack_lvl+0x188/0x250 [ 1044.596741][ T7271] ? show_regs_print_info+0x20/0x20 [ 1044.602348][ T7271] ? load_image+0x410/0x410 [ 1044.606921][ T7271] panic+0x2f8/0x850 [ 1044.610888][ T7271] ? bpf_jit_dump+0xd0/0xd0 [ 1044.615536][ T7271] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1044.621565][ T7271] ? _raw_spin_unlock+0x40/0x40 [ 1044.626559][ T7271] ? __ext4_iget+0x2bb/0x3e90 [ 1044.631592][ T7271] check_panic_on_warn+0x80/0xa0 [ 1044.636888][ T7271] ? __ext4_iget+0x2bb/0x3e90 [ 1044.641624][ T7271] end_report+0x6d/0xf0 [ 1044.645900][ T7271] kasan_report+0x102/0x130 [ 1044.650906][ T7271] ? __ext4_iget+0x2bb/0x3e90 [ 1044.655645][ T7271] __ext4_iget+0x2bb/0x3e90 [ 1044.660307][ T7271] ? apply_workqueue_attrs+0x170/0x170 [ 1044.666034][ T7271] ? ext4_get_projid+0x140/0x140 [ 1044.671143][ T7271] ext4_fill_super+0x72e8/0x93f0 [ 1044.676223][ T7271] ? format_decode+0x8b1/0x1330 [ 1044.681314][ T7271] ? ext4_mount+0x40/0x40 [ 1044.686943][ T7271] ? set_blocksize+0x1f1/0x360 [ 1044.691784][ T7271] ? sb_set_blocksize+0xa5/0xe0 [ 1044.696786][ T7271] mount_bdev+0x28a/0x3c0 [ 1044.702296][ T7271] ? ext4_mount+0x40/0x40 [ 1044.706730][ T7271] legacy_get_tree+0xe6/0x180 [ 1044.711477][ T7271] ? ext4_errno_to_code+0x160/0x160 [ 1044.716766][ T7271] vfs_get_tree+0x88/0x270 [ 1044.722369][ T7271] do_new_mount+0x247/0xa40 [ 1044.727382][ T7271] __se_sys_mount+0x2e3/0x3d0 [ 1044.732314][ T7271] ? __x64_sys_mount+0xc0/0xc0 [ 1044.737234][ T7271] ? lockdep_hardirqs_on+0x94/0x140 [ 1044.743270][ T7271] ? __x64_sys_mount+0x1c/0xc0 [ 1044.748301][ T7271] do_syscall_64+0x4c/0xa0 [ 1044.752906][ T7271] ? clear_bhb_loop+0x30/0x80 [ 1044.757637][ T7271] ? clear_bhb_loop+0x30/0x80 [ 1044.762366][ T7271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.768552][ T7271] RIP: 0033:0x7f9561b760ca [ 1044.773027][ T7271] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.793557][ T7271] RSP: 002b:00007f955fdcce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1044.802141][ T7271] RAX: ffffffffffffffda RBX: 00007f955fdccee0 RCX: 00007f9561b760ca [ 1044.811149][ T7271] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007f955fdccea0 [ 1044.819801][ T7271] RBP: 0000200000000080 R08: 00007f955fdccee0 R09: 0000000000000008 [ 1044.828218][ T7271] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000000 [ 1044.836762][ T7271] R13: 00007f955fdccea0 R14: 000000000000050c R15: 0000200000000600 [ 1044.844990][ T7271] [ 1044.848364][ T7271] Kernel Offset: disabled [ 1044.852829][ T7271] Rebooting in 86400 seconds..