last executing test programs: 4.603919222s ago: executing program 2 (id=4131): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x4, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 4.384506289s ago: executing program 2 (id=4135): unshare(0x6020400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006) 4.170190906s ago: executing program 2 (id=4137): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000140)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {@grpquota}, {@nointegrity}, {@errors_remount}, {@nodiscard}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") lstat(&(0x7f0000006680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 2.736573232s ago: executing program 2 (id=4154): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x100c007, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="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"], 0xfd, 0xc37, &(0x7f0000000ec0)="$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") syz_usb_connect(0x3, 0x68, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000210730c08f0031d5835ba0102030109023600020702200509048f0301ff01070009050f100800f8010f0904d900", @ANYRES16], 0x0) 1.638431388s ago: executing program 1 (id=4163): r0 = socket(0x2, 0x80805, 0x0) flistxattr(r0, &(0x7f0000000240)=""/53, 0x35) 1.498111022s ago: executing program 1 (id=4165): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1.071295796s ago: executing program 3 (id=4168): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x29, 0x6, 0x0, 0x0) 912.799271ms ago: executing program 3 (id=4170): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x45b, 0x4, 0x3, {0x8, @sdr={0xb147019, 0x3af}}, 0x80000001}) 816.515894ms ago: executing program 1 (id=4171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0x29, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fe", 0x0}, 0x50) 815.850024ms ago: executing program 0 (id=4179): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x2, "b8f7436e6cceee1467d9c13fbc03fe2171408043c4b9f39e907c612296c208a3", 0x39555659}) 772.896026ms ago: executing program 3 (id=4172): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 666.508749ms ago: executing program 0 (id=4173): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x300fff2) 609.617731ms ago: executing program 2 (id=4174): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {0x18000000}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x44, 0xff9, 0x1}, 0x20) 585.381672ms ago: executing program 3 (id=4175): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 496.931624ms ago: executing program 1 (id=4176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 438.537816ms ago: executing program 0 (id=4177): r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(r0, 0x0, 0x0, 0x160, 0x0, 0x0) 349.287379ms ago: executing program 0 (id=4178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="980000005400010028bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="240001"], 0x98}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008800) 326.36901ms ago: executing program 2 (id=4180): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1b2, &(0x7f0000000500)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 249.518512ms ago: executing program 3 (id=4181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000100)=0x2) 227.142023ms ago: executing program 1 (id=4182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000000100)}, 0x87) 133.413626ms ago: executing program 0 (id=4183): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000340)=0x1) 7.80027ms ago: executing program 3 (id=4184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.12424ms ago: executing program 1 (id=4185): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x84, 0x0, 0x5, 0xb, "006093000100f16200000000000000000800"}) 0s ago: executing program 0 (id=4186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, 0x2b}, 0x9c) kernel console output (not intermixed with test programs): ] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 285.787559][ T5832] pwc: Failed to set LED on/off time (-71) [ 285.818790][ T5832] pwc: send_video_command error -71 [ 285.824116][ T5832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 285.859623][ T5832] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 285.892158][ T5832] usb 2-1: USB disconnect, device number 12 [ 286.144473][T12523] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2552'. [ 286.163595][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2552'. [ 286.778370][T12545] binfmt_misc: register: failed to install interpreter file ./file0 [ 286.931850][T12551] netlink: 'syz.1.2562': attribute type 41 has an invalid length. [ 287.175341][T12563] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 287.183476][T12562] netlink: 'syz.2.2566': attribute type 10 has an invalid length. [ 287.194909][T12562] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2566'. [ 287.204152][T12563] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2565'. [ 287.390035][T12536] loop0: detected capacity change from 0 to 32768 [ 287.451228][T12536] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 287.451228][T12536] [ 287.468114][T12536] ERROR: (device loop0): remounting filesystem as read-only [ 287.478717][T12536] ERROR: (device loop0): jfs_unlink: [ 287.478717][T12536] [ 287.583360][ T5775] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 287.583360][ T5775] [ 288.068654][T12599] netlink: 'syz.0.2571': attribute type 10 has an invalid length. [ 288.091210][T12599] bond0: (slave wlan1): Opening slave failed [ 288.134120][T12601] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 288.153182][T12601] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2576'. [ 288.507473][T12578] loop3: detected capacity change from 0 to 32768 [ 288.701674][T12620] loop2: detected capacity change from 0 to 4096 [ 288.935939][T12636] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 288.943618][T12636] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 290.215457][ T2133] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 290.436226][ T2133] usb 3-1: Using ep0 maxpacket: 8 [ 290.451814][ T2133] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 290.471422][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 290.505488][ T2133] usb 3-1: Product: syz [ 290.515398][ T2133] usb 3-1: Manufacturer: syz [ 290.525367][ T2133] usb 3-1: SerialNumber: syz [ 290.537898][ T2133] usb 3-1: config 0 descriptor?? [ 290.556906][ T2133] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 290.587990][T12683] loop1: detected capacity change from 0 to 32768 [ 290.639345][T12727] netlink: 368 bytes leftover after parsing attributes in process `syz.0.2614'. [ 290.675662][T12727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2614'. [ 290.684709][T12727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2614'. [ 290.699495][T12719] loop3: detected capacity change from 0 to 4096 [ 290.709610][T12727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2614'. [ 290.722619][T12719] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 290.987480][ T2133] gspca_sn9c2028: read1 error -71 [ 291.016489][ T2133] gspca_sn9c2028: read1 error -71 [ 291.021690][ T2133] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 291.081301][ T2133] usb 3-1: USB disconnect, device number 15 [ 291.337430][T12757] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2620'. [ 291.524054][T12766] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2623'. [ 292.389486][T12817] loop0: detected capacity change from 0 to 764 [ 292.746703][T12844] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2646'. [ 292.832354][T12848] netlink: 'syz.2.2648': attribute type 11 has an invalid length. [ 292.845511][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 292.956487][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 293.046212][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 293.059835][ T23] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 293.069837][ T23] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 293.081410][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.090911][ T23] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 293.100468][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.108995][ T23] usb 4-1: Product: syz [ 293.113273][ T23] usb 4-1: Manufacturer: syz [ 293.118497][ T23] usb 4-1: SerialNumber: syz [ 293.126909][ T23] usb 4-1: config 0 descriptor?? [ 293.155613][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 293.164071][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.174014][ T5832] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 293.183118][ T5832] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 293.198829][ T5832] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 293.208146][ T5832] usb 1-1: config 128 has no interface number 0 [ 293.214534][ T5832] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 293.226362][ T5832] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.236620][ T5832] usb 1-1: config 128 interface 127 has no altsetting 0 [ 293.245410][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 293.255496][ T5832] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 293.265027][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.273181][ T5832] usb 1-1: Product: syz [ 293.277582][ T5832] usb 1-1: Manufacturer: syz [ 293.282296][ T5832] usb 1-1: SerialNumber: syz [ 293.315600][ T5813] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 293.430162][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 293.439632][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.451128][ T9] usb 3-1: config 0 descriptor?? [ 293.513145][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.533544][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.558764][ T5813] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.574881][ T5832] usb 1-1: USB disconnect, device number 12 [ 293.590563][ T5813] usb 2-1: string descriptor 0 read error: -22 [ 293.597728][ T5813] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 293.598374][ T23] usb 4-1: USB disconnect, device number 18 [ 293.624385][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.681878][ T6223] udevd[6223]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.904952][ T9] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 293.923358][ T9] hackrf 3-1:0.0: Could not detect board [ 293.929782][ T9] hackrf: probe of 3-1:0.0 failed with error -71 [ 293.939896][ T9] usb 3-1: USB disconnect, device number 16 [ 294.083486][ T5813] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 294.097712][ T5813] usb 2-1: USB disconnect, device number 13 [ 294.367523][T12923] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 294.813465][T12943] loop2: detected capacity change from 0 to 8 [ 294.947442][T12943] SQUASHFS error: zstd decompression error: 10 [ 294.954183][T12943] SQUASHFS error: zstd decompression failed, data probably corrupt [ 294.974333][T12943] SQUASHFS error: Failed to read block 0x62b: -5 [ 295.000940][T12943] SQUASHFS error: Unable to read metadata cache entry [629] [ 295.019302][T12943] SQUASHFS error: Unable to read directory block [629:ff26] [ 295.417757][T12970] loop2: detected capacity change from 0 to 16 [ 295.458299][T12970] erofs: (device loop2): mounted with root inode @ nid 36. [ 295.986771][ T27] audit: type=1400 audit(2000000200.310:268): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12999 comm="syz.0.2679" [ 296.352705][T13016] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 296.585631][T12980] loop3: detected capacity change from 0 to 32768 [ 296.662652][T12980] JBD2: Ignoring recovery information on journal [ 296.695705][ T5813] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 296.735102][T12980] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 296.905335][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 296.954664][ T5813] usb 2-1: string descriptor 0 read error: -22 [ 296.980090][ T5813] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 297.010698][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.088500][ T5813] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 297.116900][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 297.124862][ T5813] usb 2-1: MIDIStreaming interface descriptor not found [ 297.478159][ T5832] usb 2-1: USB disconnect, device number 14 [ 299.013644][T13179] loop2: detected capacity change from 0 to 256 [ 299.112904][T13187] netlink: 'syz.3.2726': attribute type 16 has an invalid length. [ 299.125773][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 299.132537][T13187] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2726'. [ 299.212741][T13179] FAT-fs (loop2): Directory bread(block 64) failed [ 299.225329][T13179] FAT-fs (loop2): Directory bread(block 65) failed [ 299.232157][T13179] FAT-fs (loop2): Directory bread(block 66) failed [ 299.255357][T13179] FAT-fs (loop2): Directory bread(block 67) failed [ 299.262112][T13179] FAT-fs (loop2): Directory bread(block 68) failed [ 299.287813][T13179] FAT-fs (loop2): Directory bread(block 69) failed [ 299.302504][T13179] FAT-fs (loop2): Directory bread(block 70) failed [ 299.319745][T13179] FAT-fs (loop2): Directory bread(block 71) failed [ 299.332648][T13179] FAT-fs (loop2): Directory bread(block 72) failed [ 299.344386][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 299.353641][T13179] FAT-fs (loop2): Directory bread(block 73) failed [ 299.369282][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.387598][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.403111][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.426607][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.445534][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.475638][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.493901][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.508386][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.545562][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.561112][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.594420][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.635386][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.656767][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.674615][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.699524][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.715885][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.760466][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.795922][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.830151][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.845876][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.857448][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.867729][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.897066][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.917730][T13214] trusted_key: encrypted_key: keylen parameter is missing [ 299.960270][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.992721][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 300.005663][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 300.034610][ T9] usb 1-1: Product: syz [ 300.048813][ T9] usb 1-1: Manufacturer: syz [ 300.053511][ T9] usb 1-1: SerialNumber: syz [ 300.085670][ T9] usb 1-1: config 0 descriptor?? [ 300.171863][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 300.357901][T13241] loop1: detected capacity change from 0 to 16 [ 300.409134][T13241] erofs: (device loop1): mounted with root inode @ nid 36. [ 300.509283][ T9] usb 1-1: USB disconnect, device number 13 [ 300.522088][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 300.938987][T13273] binder: 13272:13273 ioctl c018620c 200000000100 returned -22 [ 301.225068][T13292] loop2: detected capacity change from 0 to 64 [ 301.961379][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.006163][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.016013][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.035851][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.072598][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.106664][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.141967][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.162019][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.181883][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 302.728898][T13363] loop1: detected capacity change from 0 to 256 [ 302.879159][T13363] FAT-fs (loop1): Directory bread(block 64) failed [ 302.898420][T13363] FAT-fs (loop1): Directory bread(block 65) failed [ 302.905237][T13363] FAT-fs (loop1): Directory bread(block 66) failed [ 302.955389][T13363] FAT-fs (loop1): Directory bread(block 67) failed [ 302.990160][T13363] FAT-fs (loop1): Directory bread(block 68) failed [ 303.005468][T13363] FAT-fs (loop1): Directory bread(block 69) failed [ 303.012335][T13363] FAT-fs (loop1): Directory bread(block 70) failed [ 303.056583][T13363] FAT-fs (loop1): Directory bread(block 71) failed [ 303.085684][T13363] FAT-fs (loop1): Directory bread(block 72) failed [ 303.095532][T13363] FAT-fs (loop1): Directory bread(block 73) failed [ 303.123987][T13379] loop0: detected capacity change from 0 to 1024 [ 303.149956][T13383] netlink: 'syz.2.2782': attribute type 10 has an invalid length. [ 303.655597][ T5813] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 303.834012][T13394] loop0: detected capacity change from 0 to 32768 [ 303.848874][ T5813] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 82, changing to 7 [ 303.866508][T13394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2783 (13394) [ 303.885412][ T5813] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 303.923764][ T5813] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 303.935306][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.953659][ T5813] usb 3-1: Product: syz [ 303.958273][ T5813] usb 3-1: Manufacturer: syz [ 303.963784][ T5813] usb 3-1: SerialNumber: syz [ 303.971006][T13394] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.984550][T13394] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 303.994824][T13394] BTRFS info (device loop0): using free space tree [ 304.069379][T13384] loop3: detected capacity change from 0 to 32768 [ 304.124687][T13384] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2781 (13384) [ 304.199203][T13394] BTRFS info (device loop0): enabling ssd optimizations [ 304.217313][T13394] BTRFS info (device loop0): auto enabling async discard [ 304.227429][T13384] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 304.248787][ T5813] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 304.275687][T13384] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 304.287684][ T5813] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 304.332344][T13384] BTRFS info (device loop3): force zlib compression, level 3 [ 304.376205][T13384] BTRFS info (device loop3): turning on flush-on-commit [ 304.388948][ T5813] usb 3-1: USB disconnect, device number 17 [ 304.413489][T13384] BTRFS info (device loop3): max_inline at 4096 [ 304.465433][T13384] BTRFS info (device loop3): using free space tree [ 304.522187][ T6223] udevd[6223]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.575836][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.705948][T13384] BTRFS info (device loop3): enabling ssd optimizations [ 304.713025][T13384] BTRFS info (device loop3): auto enabling async discard [ 304.739439][T13451] loop1: detected capacity change from 0 to 4096 [ 304.804643][T11975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (11975) [ 305.419943][ T5783] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 305.478360][ T5832] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 305.685416][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 305.702627][ T5832] usb 1-1: string descriptor 0 read error: -22 [ 305.735096][ T5832] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 305.765456][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.810888][ T5832] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 305.835974][ T5832] usb 1-1: MIDIStreaming interface descriptor not found [ 306.106035][ T5832] usb 1-1: USB disconnect, device number 14 [ 306.742258][T13561] loop1: detected capacity change from 0 to 4096 [ 306.764988][T13561] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 306.788971][T13572] x_tables: duplicate entry at hook 3 [ 306.851950][T13561] ntfs: volume version 3.1. [ 306.947362][T13578] netlink: 'syz.2.2809': attribute type 5 has an invalid length. [ 307.150870][ T48] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 307.396830][T13600] ipt_REJECT: TCP_RESET invalid for non-tcp [ 307.752115][T13622] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 307.855581][ T5813] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 308.055342][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 308.098081][ T5813] usb 3-1: string descriptor 0 read error: -22 [ 308.104468][ T5813] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 308.137171][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.137564][T13639] loop0: detected capacity change from 0 to 8 [ 308.162961][T13638] __nla_validate_parse: 12 callbacks suppressed [ 308.162990][T13638] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2827'. [ 308.185853][T13639] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 308.192223][ T5813] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 308.211661][ T5813] usb 3-1: MIDIStreaming interface descriptor not found [ 308.231150][T11975] udevd[11975]: incorrect cramfs checksum on /dev/loop0 [ 308.259905][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 308.283468][T13639] cramfs: bad data blocksize 4294934200 [ 308.299126][T13638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2827'. [ 308.325572][T13639] cramfs: bad data blocksize 4294934200 [ 308.335880][ T27] audit: type=1800 audit(2000000212.650:269): pid=13639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2828" name="file1" dev="loop0" ino=33092 res=0 errno=0 [ 308.349706][ T5777] udevd[5777]: incorrect cramfs checksum on /dev/loop0 [ 308.454692][T13615] loop1: detected capacity change from 0 to 32768 [ 308.503265][T13615] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.532413][T13615] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 308.559403][T13661] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2830'. [ 308.568865][T13615] BTRFS info (device loop1): using free space tree [ 308.721884][ T788] usb 3-1: USB disconnect, device number 18 [ 308.777852][T13615] BTRFS info (device loop1): enabling ssd optimizations [ 308.784902][T13615] BTRFS info (device loop1): auto enabling async discard [ 309.004266][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.390628][T13741] loop3: detected capacity change from 0 to 4096 [ 309.508253][T13741] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 309.821754][ T5783] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 309.831224][T13733] loop0: detected capacity change from 0 to 32768 [ 309.855636][T13733] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2831 (13733) [ 309.885224][T13733] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 309.901018][T13733] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 309.910874][T13733] BTRFS info (device loop0): force zlib compression, level 3 [ 309.921141][T13733] BTRFS info (device loop0): turning on flush-on-commit [ 309.928639][T13733] BTRFS info (device loop0): max_inline at 4096 [ 309.935079][T13733] BTRFS info (device loop0): using free space tree [ 310.085994][T13733] BTRFS info (device loop0): enabling ssd optimizations [ 310.106583][T13733] BTRFS info (device loop0): auto enabling async discard [ 310.425131][T13786] loop3: detected capacity change from 0 to 4096 [ 310.503708][T13786] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 310.528659][ T5775] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 310.536779][T13786] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 310.574282][T13786] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 310.596278][T13786] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 310.656839][T13786] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 310.698237][T13786] ntfs: volume version 3.1. [ 310.705484][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 310.760122][T13786] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 310.806571][T13786] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 310.885697][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 310.902958][ T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 310.945588][ T23] usb 3-1: config 0 has no interface number 0 [ 310.951796][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 310.992618][T13752] loop1: detected capacity change from 0 to 32768 [ 310.999697][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 311.036654][T13752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2833 (13752) [ 311.053589][ T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 311.085718][ T23] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 311.093905][ T23] usb 3-1: Product: syz [ 311.115811][T13752] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.126267][ T23] usb 3-1: SerialNumber: syz [ 311.144777][T13752] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 311.166577][ T23] usb 3-1: config 0 descriptor?? [ 311.178206][ T23] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 311.188808][T13752] BTRFS info (device loop1): using free space tree [ 311.234868][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 311.391877][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 311.423159][T13828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2845'. [ 311.473516][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 311.497402][T13752] BTRFS info (device loop1): enabling ssd optimizations [ 311.510023][T13828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2845'. [ 311.516893][T13752] BTRFS info (device loop1): auto enabling async discard [ 311.544662][T13828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2845'. [ 311.684256][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 311.691838][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.702252][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.709493][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.716718][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.723933][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.731151][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.738869][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.746430][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.754747][ T23] usb 3-1: USB disconnect, device number 19 [ 311.754822][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 311.767771][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 311.804327][ T23] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 311.916705][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.165949][ T6223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (6223) [ 312.216001][T13857] loop0: detected capacity change from 0 to 1024 [ 312.306812][T13857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.392411][T13868] loop3: detected capacity change from 0 to 64 [ 312.487231][T13868] MINIX-fs: mounting file system with errors, running fsck is recommended [ 312.583809][T13868] Trying to free block not in datazone [ 312.596630][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.641867][T13872] loop2: detected capacity change from 0 to 4096 [ 312.682637][T13872] __ntfs_error: 9 callbacks suppressed [ 312.682652][T13872] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 312.911121][T13872] ntfs: volume version 3.1. [ 313.056383][T13897] loop0: detected capacity change from 0 to 512 [ 313.114566][T13897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 313.132707][T13897] System zones: 1-12 [ 313.144904][T13897] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2859: Directory hole found for htree index block 0 [ 313.153329][ T2196] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 313.175808][T13897] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 313.185436][ T788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 313.193557][T13897] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2859: Directory hole found for htree index block 0 [ 313.212447][T13897] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 313.225025][T13897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.252961][T13897] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2859: Directory hole found for htree index block 0 [ 313.353150][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.395580][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 313.420396][ T788] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 313.445403][ T788] usb 2-1: config 4 has no interface number 0 [ 313.468986][ T788] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.524080][ T788] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.570500][ T788] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.629656][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.692700][ T788] hub 2-1:4.128: USB hub found [ 313.906431][ T788] hub 2-1:4.128: 19 ports detected [ 313.928819][ T788] hub 2-1:4.128: Using single TT (err -22) [ 313.953605][ T788] hub 2-1:4.128: insufficient power available to use all downstream ports [ 314.020434][T13938] loop0: detected capacity change from 0 to 256 [ 314.043289][T13938] exfat: Deprecated parameter 'utf8' [ 314.058124][T13938] exfat: Deprecated parameter 'namecase' [ 314.110353][ T788] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 314.119517][ T788] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 314.127654][T13938] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 314.197180][ T788] usb 2-1: USB disconnect, device number 15 [ 314.379656][T13959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2873'. [ 314.492442][T13963] loop3: detected capacity change from 0 to 1024 [ 315.155745][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 315.355561][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 315.376945][ T788] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 315.380626][T14032] netlink: 'syz.3.2888': attribute type 1 has an invalid length. [ 315.393592][T14032] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2888'. [ 315.405357][ T788] usb 2-1: config 0 has no interface number 0 [ 315.411560][ T788] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.455654][ T788] usb 2-1: config 0 interface 2 has no altsetting 0 [ 315.477278][ T788] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 315.504820][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.527958][T14027] loop0: detected capacity change from 0 to 8192 [ 315.535830][ T788] usb 2-1: Product: syz [ 315.540069][ T788] usb 2-1: Manufacturer: syz [ 315.544703][ T788] usb 2-1: SerialNumber: syz [ 315.569809][T14027] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 315.585571][ T788] usb 2-1: config 0 descriptor?? [ 315.590873][T14027] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 315.606057][T14027] REISERFS (device loop0): using ordered data mode [ 315.612769][T14027] reiserfs: using flush barriers [ 315.623794][T14027] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 315.642086][T14027] REISERFS (device loop0): checking transaction log (loop0) [ 315.655946][T14027] REISERFS (device loop0): Using r5 hash to sort names [ 315.663471][T14027] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 315.826777][ T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 315.985050][T14052] loop3: detected capacity change from 0 to 2048 [ 316.089418][T14052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.199454][ T788] usb 2-1: USB disconnect, device number 16 [ 316.281722][T14052] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.2893: reserved inode found cleared - inode=1 [ 316.321543][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.004563][T14079] loop0: detected capacity change from 0 to 32768 [ 317.038270][T14079] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.174767][T14079] XFS (loop0): Ending clean mount [ 317.207946][T14079] XFS (loop0): Quotacheck needed: Please wait. [ 317.317117][T14123] loop2: detected capacity change from 0 to 764 [ 317.338975][T14079] XFS (loop0): Quotacheck: Done. [ 317.396082][T14123] Symlink component flag not implemented [ 317.402394][T14123] Symlink component flag not implemented (116) [ 317.465802][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472248][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.584975][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.421193][T14131] loop2: detected capacity change from 0 to 32768 [ 318.459692][T14131] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2904 (14131) [ 318.526508][T14131] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 318.554191][T14131] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 318.572972][T14131] BTRFS info (device loop2): setting nodatacow, compression disabled [ 318.583255][T14064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 318.615495][T14131] BTRFS info (device loop2): force clearing of disk cache [ 318.628455][T14131] BTRFS info (device loop2): enabling ssd optimizations [ 318.658425][T14131] BTRFS info (device loop2): using spread ssd allocation scheme [ 318.681671][T14131] BTRFS info (device loop2): turning off barriers [ 318.745341][T14131] BTRFS info (device loop2): disabling free space tree [ 318.752323][T14131] BTRFS info (device loop2): not using ssd optimizations [ 318.794947][T14131] BTRFS info (device loop2): not using spread ssd allocation scheme [ 319.008847][T14131] BTRFS info (device loop2): rebuilding free space tree [ 319.130851][T14131] BTRFS info (device loop2): disabling free space tree [ 319.159050][T14131] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 319.205347][T14131] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 319.464250][T14205] loop1: detected capacity change from 0 to 2048 [ 319.536652][T14214] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.597093][T14217] x_tables: ip_tables: osf match: only valid for protocol 6 [ 319.638647][T14205] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 319.660028][ T5787] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.704625][T14205] Remounting filesystem read-only [ 319.813833][T14220] qrtr: Invalid version 73 [ 320.775925][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 321.011895][ T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 321.032326][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 321.052151][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2943'. [ 321.064757][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 321.085536][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.135874][ T9] usb 2-1: Product: syz [ 321.140134][ T9] usb 2-1: Manufacturer: syz [ 321.144868][ T9] usb 2-1: SerialNumber: syz [ 321.186506][ T9] usb 2-1: config 0 descriptor?? [ 321.199745][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 321.270697][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 321.637228][ T9] gspca_sunplus: reg_r err -71 [ 321.642175][ T9] sunplus: probe of 2-1:0.0 failed with error -71 [ 321.703276][ T9] usb 2-1: USB disconnect, device number 17 [ 321.716637][T14311] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2951'. [ 321.730809][T14314] netlink: 'syz.2.2952': attribute type 21 has an invalid length. [ 321.739720][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.785681][T14314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2952'. [ 322.236914][ T788] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 322.335474][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 322.447795][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.468365][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 322.500278][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 322.519973][ T788] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 322.529249][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.533822][T14362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.555949][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 322.585627][ T788] hub 4-1:1.0: bad descriptor, ignoring hub [ 322.599456][ T9] usb 1-1: config 0 has no interfaces? [ 322.613610][ T788] hub: probe of 4-1:1.0 failed with error -5 [ 322.626651][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 322.646829][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 322.652144][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 322.660219][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.671911][ T9] usb 1-1: Product: syz [ 322.678985][ T788] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 322.687753][ T9] usb 1-1: Manufacturer: syz [ 322.692627][ T9] usb 1-1: SerialNumber: syz [ 322.709781][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 322.899278][T14382] netlink: 798 bytes leftover after parsing attributes in process `syz.2.2968'. [ 322.937032][ T788] usb 4-1: USB disconnect, device number 19 [ 322.995977][ T9] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 323.051039][ T27] audit: type=1326 audit(2000000227.370:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.1.2970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 323.145553][ T27] audit: type=1326 audit(2000000227.370:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.1.2970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 323.209329][ T9] usb 1-1: USB disconnect, device number 15 [ 323.237380][ T27] audit: type=1326 audit(2000000227.380:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.1.2970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 323.304891][ T27] audit: type=1326 audit(2000000227.380:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.1.2970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 323.334955][T14407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2974'. [ 323.473594][T14413] loop1: detected capacity change from 0 to 256 [ 323.573878][T14413] FAT-fs (loop1): Directory bread(block 64) failed [ 323.585957][T14413] FAT-fs (loop1): Directory bread(block 65) failed [ 323.603007][T14413] FAT-fs (loop1): Directory bread(block 66) failed [ 323.625368][T14413] FAT-fs (loop1): Directory bread(block 67) failed [ 323.632146][T14413] FAT-fs (loop1): Directory bread(block 68) failed [ 323.671924][T14413] FAT-fs (loop1): Directory bread(block 69) failed [ 323.688473][T14413] FAT-fs (loop1): Directory bread(block 70) failed [ 323.702736][T14413] FAT-fs (loop1): Directory bread(block 71) failed [ 323.714173][T14413] FAT-fs (loop1): Directory bread(block 72) failed [ 323.724819][T14413] FAT-fs (loop1): Directory bread(block 73) failed [ 324.128826][T14444] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2985'. [ 325.101680][T14495] netlink: 'syz.1.3000': attribute type 25 has an invalid length. [ 325.110344][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3001'. [ 325.141586][T14495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3000'. [ 325.197359][T14499] trusted_key: encrypted_key: keylen parameter is missing [ 325.434484][T14509] loop1: detected capacity change from 0 to 128 [ 325.525649][T14509] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 325.577490][T14509] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 325.696698][T14509] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 325.849535][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.154421][T14532] loop2: detected capacity change from 0 to 8192 [ 326.171825][T14548] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3016'. [ 326.197981][T14532] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 326.240869][T14532] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 326.311928][T14532] REISERFS (device loop2): using ordered data mode [ 326.340967][T14532] reiserfs: using flush barriers [ 326.388127][T14532] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 326.407128][T14532] REISERFS (device loop2): checking transaction log (loop2) [ 326.421501][T14532] REISERFS (device loop2): Using r5 hash to sort names [ 326.429420][T14532] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 327.130174][T14584] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 327.286831][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 327.302430][T14602] loop2: detected capacity change from 0 to 256 [ 327.498579][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 327.518275][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.547461][ T23] usb 4-1: config 0 descriptor?? [ 327.564293][ T23] cp210x 4-1:0.0: cp210x converter detected [ 327.587880][ T5813] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 327.700726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.781454][ T23] usb 4-1: cp210x converter now attached to ttyUSB0 [ 327.809617][T14636] loop2: detected capacity change from 0 to 512 [ 327.817814][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 327.825984][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.850167][ T5813] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 327.869923][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.880623][ T5813] usb 2-1: Product: syz [ 327.884866][ T5813] usb 2-1: Manufacturer: syz [ 327.890290][ T5813] usb 2-1: SerialNumber: syz [ 327.901032][T14636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.918861][ T5813] usb 2-1: config 0 descriptor?? [ 327.925417][T14636] ext4 filesystem being mounted at /738/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.006782][ T5813] hub 2-1:0.0: bad descriptor, ignoring hub [ 328.012805][ T5813] hub: probe of 2-1:0.0 failed with error -5 [ 328.047300][ T23] usb 4-1: USB disconnect, device number 20 [ 328.068221][T14636] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.3040: corrupted xattr block 6: invalid header [ 328.073904][ T5813] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 328.102200][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 328.123898][ T23] cp210x 4-1:0.0: device disconnected [ 328.273799][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.355156][T14669] loop0: detected capacity change from 0 to 4096 [ 328.770272][T14689] delete_channel: no stack [ 329.390875][ T1203] usb 2-1: USB disconnect, device number 18 [ 329.821456][ T27] audit: type=1326 audit(2000000234.140:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.3.3064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacf59ce59 code=0x7ffc0000 [ 329.905563][ T27] audit: type=1326 audit(2000000234.140:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.3.3064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacf59ce59 code=0x7ffc0000 [ 329.989641][ T27] audit: type=1326 audit(2000000234.180:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.3.3064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fdacf59ce59 code=0x7ffc0000 [ 330.043111][ T27] audit: type=1326 audit(2000000234.180:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.3.3064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacf59ce59 code=0x7ffc0000 [ 330.073149][T14708] loop0: detected capacity change from 0 to 32768 [ 330.084689][T14750] [U]  [ 330.173868][T14708] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 330.397634][T14708] XFS (loop0): Ending clean mount [ 330.452267][T14708] XFS (loop0): Quotacheck needed: Please wait. [ 330.502556][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 330.517218][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 330.557018][T14782] xt_policy: neither incoming nor outgoing policy selected [ 330.583115][T14708] XFS (loop0): Quotacheck: Done. [ 330.851994][ T5775] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 331.135494][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 331.335842][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 331.353688][ T23] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 331.379266][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.409392][ T23] usb 3-1: config 0 descriptor?? [ 331.444761][ T23] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 331.639002][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 331.685826][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.727486][ T23] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 331.756179][ T23] usb 3-1: media controller created [ 331.789846][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.873378][T14849] netlink: 'syz.3.3089': attribute type 29 has an invalid length. [ 331.885413][ T788] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 332.024875][ T23] DVB: Unable to find symbol lgdt330x_attach() [ 332.042299][ T23] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 332.080802][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 332.092516][ T23] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 332.113305][ T788] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 332.133223][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.155780][ T23] usb 3-1: USB disconnect, device number 20 [ 332.161150][ T788] usb 1-1: Product: syz [ 332.184939][ T788] usb 1-1: Manufacturer: syz [ 332.192557][ T788] usb 1-1: SerialNumber: syz [ 332.230774][ T788] r8152-cfgselector 1-1: config 0 descriptor?? [ 332.329370][ T23] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 332.483759][ T788] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 332.726581][ T788] usb 1-1: USB disconnect, device number 16 [ 333.319631][T14925] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 333.654088][T14944] loop0: detected capacity change from 0 to 16 [ 333.658479][T14942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3114'. [ 333.685876][T14942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3114'. [ 333.729388][ T6223] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.015504][ T1203] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 334.070811][T14966] loop2: detected capacity change from 0 to 256 [ 334.112982][T14966] exfat: Deprecated parameter 'utf8' [ 334.160548][T14966] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 334.225964][ T1203] usb 1-1: Using ep0 maxpacket: 32 [ 334.262248][ T1203] usb 1-1: unable to get BOS descriptor or descriptor too short [ 334.273963][ T1203] usb 1-1: config 6 has an invalid interface number: 35 but max is 1 [ 334.287643][ T1203] usb 1-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config [ 334.319261][ T1203] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 334.333879][ T1203] usb 1-1: config 6 has no interface number 0 [ 334.342620][ T1203] usb 1-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30 [ 334.381240][ T1203] usb 1-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 334.413899][ T1203] usb 1-1: config 6 interface 35 has no altsetting 0 [ 334.453784][ T1203] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 334.465707][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.492816][ T1203] usb 1-1: Product: syz [ 334.505356][ T1203] usb 1-1: Manufacturer: syz [ 334.510156][ T1203] usb 1-1: SerialNumber: syz [ 334.768036][ T1203] ums-jumpshot 1-1:6.35: USB Mass Storage device detected [ 334.805544][ T1203] ums-jumpshot 1-1:6.35: Quirks match for vid 05dc pid 0001: 2 [ 334.960299][ T1203] usb 1-1: USB disconnect, device number 17 [ 336.045526][T15070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3149'. [ 336.067300][T15070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3149'. [ 336.340413][T15087] xt_hashlimit: overflow, try lower: 3/0 [ 336.396268][ T788] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 336.492228][T15096] loop1: detected capacity change from 0 to 256 [ 336.639041][ T788] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 336.658106][ T788] usb 3-1: config 0 has no interface number 0 [ 336.664333][ T788] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 336.715172][ T788] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.774528][ T788] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 336.805400][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.813505][ T788] usb 3-1: Product: syz [ 336.847993][ T788] usb 3-1: Manufacturer: syz [ 336.852974][ T788] usb 3-1: SerialNumber: syz [ 336.888151][ T788] usb 3-1: config 0 descriptor?? [ 336.903497][T15075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.937004][ T788] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 337.009748][ T788] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 337.473575][ T788] usb 3-1: USB disconnect, device number 21 [ 337.497813][ T788] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 337.546154][ T788] cyberjack 3-1:0.69: device disconnected [ 337.725142][T15165] netlink: zone id is out of range [ 337.731608][T15165] netlink: zone id is out of range [ 337.737928][T15165] netlink: zone id is out of range [ 337.743217][T15165] netlink: zone id is out of range [ 337.751812][T15165] netlink: zone id is out of range [ 337.757301][T15165] netlink: get zone limit has 4 unknown bytes [ 338.180691][T15185] loop2: detected capacity change from 0 to 256 [ 338.214499][T15189] blktrace: Concurrent blktraces are not allowed on sg0 [ 338.304563][T15185] FAT-fs (loop2): Directory bread(block 64) failed [ 338.325376][T15185] FAT-fs (loop2): Directory bread(block 65) failed [ 338.332134][T15185] FAT-fs (loop2): Directory bread(block 66) failed [ 338.355437][T15185] FAT-fs (loop2): Directory bread(block 67) failed [ 338.362182][T15185] FAT-fs (loop2): Directory bread(block 68) failed [ 338.385720][T15185] FAT-fs (loop2): Directory bread(block 69) failed [ 338.411627][T15185] FAT-fs (loop2): Directory bread(block 70) failed [ 338.421558][ T27] audit: type=1326 audit(2000000242.730:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 338.459523][T15185] FAT-fs (loop2): Directory bread(block 71) failed [ 338.483602][T15185] FAT-fs (loop2): Directory bread(block 72) failed [ 338.495505][T15185] FAT-fs (loop2): Directory bread(block 73) failed [ 338.508643][ T27] audit: type=1326 audit(2000000242.770:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 338.592028][ T27] audit: type=1326 audit(2000000242.770:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 338.698324][ T27] audit: type=1326 audit(2000000242.770:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 338.811242][ T27] audit: type=1326 audit(2000000242.770:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 338.915924][ T27] audit: type=1326 audit(2000000242.770:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 339.029835][ T27] audit: type=1326 audit(2000000242.770:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 339.135953][ T27] audit: type=1326 audit(2000000242.770:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 339.166637][T15225] blktrace: Concurrent blktraces are not allowed on sg0 [ 339.241863][ T27] audit: type=1326 audit(2000000242.770:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 339.435809][T15237] overlayfs: cannot append lower layer [ 339.767538][T15260] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 339.795170][T15260] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3203'. [ 339.823481][T15260] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3203'. [ 340.202405][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3211'. [ 340.215527][ T5813] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 340.430753][ T5813] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 340.445451][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 340.457943][T15290] loop0: detected capacity change from 0 to 4096 [ 340.464029][ T5813] usb 2-1: Product: syz [ 340.471074][ T5813] usb 2-1: SerialNumber: syz [ 340.488780][ T5813] usb 2-1: config 0 descriptor?? [ 340.625623][ T5832] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 340.715647][ T5813] hso 2-1:0.0: Failed to find INT IN ep [ 340.835821][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 340.851958][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 340.885837][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.913853][ T5832] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.941535][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 340.967364][ T23] usb 2-1: USB disconnect, device number 19 [ 340.969471][ T5832] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 341.014699][ T5832] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 341.057685][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.091696][ T5832] usb 4-1: config 0 descriptor?? [ 341.104986][T15292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.580327][ T23] usb 4-1: USB disconnect, device number 21 [ 341.588984][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 342.050170][T15391] netlink: 'syz.2.3237': attribute type 7 has an invalid length. [ 343.140115][T15453] netlink: 'syz.3.3257': attribute type 1 has an invalid length. [ 343.165644][T15456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3259'. [ 343.187403][ T27] audit: type=1326 audit(2000000247.510:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.1.3258" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6219ce59 code=0x7ffc0000 [ 343.625478][ T5832] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 343.821557][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 343.832633][ T5832] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.859398][ T5832] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.898032][ T5832] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 343.911807][ T5832] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 343.935135][ T5832] usb 4-1: Product: syz [ 343.955492][ T5832] usb 4-1: Manufacturer: syz [ 343.993498][ T5832] hub 4-1:4.0: USB hub found [ 344.198039][ T5832] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 344.225435][ T788] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 344.275976][ T1203] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 344.428482][ T788] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 344.445796][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.461989][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 344.474672][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.490076][ T1203] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 344.499983][ T788] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 344.509695][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.518462][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.527148][ T1203] usb 1-1: Product: syz [ 344.531515][ T1203] usb 1-1: Manufacturer: syz [ 344.537940][ T1203] usb 1-1: SerialNumber: syz [ 344.545628][ T5813] usb 4-1: USB disconnect, device number 22 [ 344.551772][ T788] hub 2-1:1.0: bad descriptor, ignoring hub [ 344.560302][ T788] hub: probe of 2-1:1.0 failed with error -5 [ 344.571021][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 344.580216][ T788] cdc_wdm 2-1:1.0: invalid descriptor buffer length [ 344.589863][ T1203] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 344.608433][ T788] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 344.620595][ T5832] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 344.895782][ T788] usb 2-1: USB disconnect, device number 20 [ 345.137665][ T788] usb 1-1: USB disconnect, device number 18 [ 345.700815][ T5832] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 345.722131][ T5832] ath9k_htc: Failed to initialize the device [ 345.750595][ T788] usb 1-1: ath9k_htc: USB layer deinitialized [ 345.779347][T15593] loop1: detected capacity change from 0 to 4096 [ 345.941171][T15593] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 346.009874][T15593] ntfs3: loop1: Failed to load $Extend (-22). [ 346.031164][T15593] ntfs3: loop1: Failed to initialize $Extend. [ 346.489380][T15635] xt_cgroup: invalid path, errno=-2 [ 347.119914][T15666] netlink: 'syz.2.3311': attribute type 2 has an invalid length. [ 347.493046][T15638] loop0: detected capacity change from 0 to 32768 [ 347.529486][T15638] [ 347.529486][T15638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.529486][T15638] [ 347.585532][T15638] ERROR: (device loop0): ea_get: invalid ea.flag [ 347.585532][T15638] [ 347.649931][T15638] ERROR: (device loop0): remounting filesystem as read-only [ 347.694836][T15686] openvswitch: netlink: Flow actions attr not present in new flow. [ 348.010313][T15693] loop2: detected capacity change from 0 to 4096 [ 348.114619][T15701] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.240629][T15693] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 348.307774][T15693] Remounting filesystem read-only [ 348.454444][ T5787] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 348.476293][T15672] loop1: detected capacity change from 0 to 32768 [ 348.505956][ T5787] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 348.600170][T15672] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.732126][T15672] XFS (loop1): Ending clean mount [ 348.905589][ T5832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 349.041210][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.122188][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 349.142477][ T5832] usb 1-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 349.155535][ T5832] usb 1-1: config 66 interface 0 has no altsetting 0 [ 349.168631][ T5832] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 349.178152][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.186781][ T5832] usb 1-1: Product: syz [ 349.191134][ T5832] usb 1-1: Manufacturer: syz [ 349.198564][ T5832] usb 1-1: SerialNumber: syz [ 349.264987][T15721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 349.554161][ T5832] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 349.597363][ T5832] usb 1-1: USB disconnect, device number 19 [ 349.885604][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 349.911886][T15766] ip6tnl2: entered allmulticast mode [ 350.134986][T15779] loop2: detected capacity change from 0 to 1024 [ 350.247524][T15779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.257387][T15793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3341'. [ 350.286107][T15790] netlink: 'syz.0.3340': attribute type 21 has an invalid length. [ 350.506474][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.874563][T15819] CIFS: VFS: Malformed UNC in devname [ 351.437648][T15851] netlink: 'syz.0.3359': attribute type 12 has an invalid length. [ 351.461063][T15851] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3359'. [ 352.242709][T15890] loop0: detected capacity change from 0 to 4096 [ 352.364208][T15903] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.503978][T15904] loop2: detected capacity change from 0 to 4096 [ 352.580948][T15904] __ntfs_error: 7 callbacks suppressed [ 352.581005][T15904] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 352.631232][T15904] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 352.725632][T15904] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 352.755382][T15904] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 352.781356][T15904] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 352.811628][T15904] ntfs: volume version 3.1. [ 352.831439][T15904] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 352.849517][T15904] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 352.889603][T15904] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 352.911818][T15904] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 352.938556][T15904] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 353.055045][ T788] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 353.242262][ T788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 353.262067][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.267096][T15930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.306072][T15930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.311582][ T788] usb 1-1: config 0 descriptor?? [ 353.349956][T15930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.373358][T15930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.416207][T15930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.450950][T15930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.481110][T15930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.501797][T15930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.782251][ T788] ath6kl: Failed to submit usb control message: -71 [ 353.803487][ T788] ath6kl: unable to send the bmi data to the device: -71 [ 353.831624][ T788] ath6kl: Unable to send get target info: -71 [ 353.862260][ T788] ath6kl: Failed to init ath6kl core: -71 [ 353.895804][ T788] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 353.918456][ T788] usb 1-1: USB disconnect, device number 20 [ 354.553751][T15987] loop0: detected capacity change from 0 to 1024 [ 354.796811][ T4604] hfsplus: b-tree write err: -5, ino 25 [ 354.802763][ T4604] hfsplus: b-tree write err: -5, ino 4 [ 354.842791][ T4604] hfsplus: b-tree write err: -5, ino 2 [ 354.889117][T16009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3404'. [ 355.136401][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 355.341969][T16033] loop0: detected capacity change from 0 to 256 [ 355.356022][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 355.373621][T16033] exfat: Deprecated parameter 'namecase' [ 355.387000][ T23] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 355.404645][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.422000][ T23] usb 3-1: Product: syz [ 355.441238][ T23] usb 3-1: Manufacturer: syz [ 355.451301][T16033] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 355.455483][ T23] usb 3-1: SerialNumber: syz [ 355.496681][ T23] usb 3-1: config 0 descriptor?? [ 355.543070][ T23] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 355.648003][T16046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3413'. [ 355.657931][T16046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3413'. [ 355.997285][ T23] radio-usb-si4713: probe of 3-1:0.0 failed with error -71 [ 356.004925][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 356.047941][ T23] usb 3-1: USB disconnect, device number 22 [ 356.151240][T16075] loop1: detected capacity change from 0 to 1024 [ 356.272443][ T48] hfsplus: b-tree write err: -5, ino 25 [ 356.284740][ T48] hfsplus: b-tree write err: -5, ino 4 [ 356.307844][ T48] hfsplus: b-tree write err: -5, ino 2 [ 357.045902][T16118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.222666][T16130] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3437'. [ 357.234921][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3437'. [ 357.554136][T16143] mmap: syz.3.3430 (16143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 357.810600][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.844542][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.873874][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.902852][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.915747][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.939157][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.961134][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.983608][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.571914][T16197] loop0: detected capacity change from 0 to 64 [ 358.965450][ T1203] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 359.167889][ T1203] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 359.185403][ T1203] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 359.203913][ T1203] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 359.223362][ T1203] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 359.258389][ T1203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 359.296480][ T1203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 359.330417][ T1203] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 359.378138][ T1203] usb 2-1: string descriptor 0 read error: -22 [ 359.384717][ T1203] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 359.409024][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.420054][ T1203] usb 2-1: config 0 descriptor?? [ 359.437722][ T1203] hub 2-1:0.0: bad descriptor, ignoring hub [ 359.453525][ T1203] hub: probe of 2-1:0.0 failed with error -5 [ 359.473315][ T1203] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 359.615370][ T5832] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 359.699959][ T1203] usb 2-1: USB disconnect, device number 21 [ 359.815487][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 359.860016][ T5832] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 359.880958][ T5832] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 359.890030][T16278] kAFS: No cell specified [ 359.899086][ T5832] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 359.907665][ T5832] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 359.916080][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 359.925147][ T5832] usb 1-1: config 0 has no interface number 0 [ 359.931740][ T5832] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 359.951829][ T5832] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 359.969249][ T5832] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.981817][ T5832] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.996899][ T5832] usb 1-1: config 0 interface 125 has no altsetting 0 [ 360.009815][ T5832] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 360.021376][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.029802][ T5832] usb 1-1: Product: syz [ 360.034177][ T5832] usb 1-1: Manufacturer: syz [ 360.039166][ T5832] usb 1-1: SerialNumber: syz [ 360.065923][ T5832] usb 1-1: config 0 descriptor?? [ 360.515656][ T5832] usb 1-1: USB disconnect, device number 21 [ 361.263209][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3495'. [ 361.309168][T16344] openvswitch: netlink: Missing key (keys=40, expected=100) [ 361.333060][T16352] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 361.976210][ T5832] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 362.012270][T16393] loop1: detected capacity change from 0 to 8 [ 362.195575][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 362.215755][ T5832] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 362.236371][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.256655][ T5832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 362.270838][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 362.283341][ T5832] usb 1-1: SerialNumber: syz [ 362.302461][ T5832] usb 1-1: 0:2 : does not exist [ 362.717211][ T5832] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 362.756559][ T5832] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 362.788097][ T5832] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 362.795898][T16433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3519'. [ 362.813463][ T5832] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 362.872179][ T5832] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 362.930287][ T5832] usb 1-1: USB disconnect, device number 22 [ 363.020506][ T6223] udevd[6223]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.375758][ T5778] Bluetooth: hci0: command tx timeout [ 363.495661][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3528'. [ 363.568770][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3530'. [ 363.973589][T16444] loop1: detected capacity change from 0 to 32768 [ 363.982359][T16494] loop0: detected capacity change from 0 to 16 [ 364.020479][T16494] erofs: (device loop0): mounted with root inode @ nid 36. [ 364.033988][T16444] ea_get: invalid extended attribute [ 364.901111][T16535] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 365.079263][T16543] loop2: detected capacity change from 0 to 256 [ 365.203031][T16543] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 365.256419][T16551] loop1: detected capacity change from 0 to 1024 [ 365.276249][T16551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.453598][T16551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.619860][T16551] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 40: comm syz.1.3551: bad entry in directory: rec_len is smaller than minimal - offset=8960, inode=0, rec_len=0, size=1024 fake=0 [ 365.775057][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.855480][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 366.047598][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 366.064897][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.084900][ T9] usb 4-1: config 179 has no interface number 0 [ 366.104674][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 366.106452][T16591] 9pnet_fd: Insufficient options for proto=fd [ 366.135404][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 366.172222][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 366.196425][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 366.213524][T16594] autofs4:pid:16594:autofs_fill_super: called with bogus options [ 366.231820][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.294034][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 366.305483][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 366.324794][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.412254][T16597] loop2: detected capacity change from 0 to 1764 [ 366.434854][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 366.503453][T16579] loop0: detected capacity change from 0 to 32768 [ 366.520782][T16579] (syz.0.3558,16579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.544950][ T5126] input input16: unable to receive magic message: -110 [ 366.568942][T16579] (syz.0.3558,16579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.621974][ T5126] input input16: unable to receive magic message: -32 [ 366.680475][T16579] JBD2: Ignoring recovery information on journal [ 366.780759][ T5777] input input16: unable to receive magic message: -32 [ 366.790742][T16616] PM: Enabling pm_trace changes system date and time during resume. [ 366.790742][T16616] PM: Correct system time has to be restored manually after resume. [ 366.812588][T16579] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 366.856147][ T5126] input input16: unable to receive magic message: -32 [ 366.892618][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 366.902093][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 366.925402][T16621] loop2: detected capacity change from 0 to 256 [ 366.931828][ T9] usb 4-1: USB disconnect, device number 23 [ 366.949153][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 367.327006][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 367.698684][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3575'. [ 367.715528][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 367.841245][T16667] loop1: detected capacity change from 0 to 1024 [ 367.928337][T16667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.033171][T16667] EXT4-fs error (device loop1): ext4_get_first_dir_block:3595: inode #11: comm syz.1.3577: directory missing '.' [ 368.053286][T16667] EXT4-fs (loop1): Remounting filesystem read-only [ 368.103953][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.317724][T16689] program syz.1.3582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.354275][T16689] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 369.355552][ T788] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 369.571886][ T788] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 369.591196][ T788] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 369.624157][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.644288][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 369.653859][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 369.674822][ T788] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 369.687361][ T788] usb 3-1: Product: syz [ 369.691611][ T788] usb 3-1: Manufacturer: syz [ 369.708220][ T788] usb 3-1: SerialNumber: syz [ 369.731038][ T788] usb 3-1: config 0 descriptor?? [ 369.745888][ T788] hub 3-1:0.0: bad descriptor, ignoring hub [ 369.756509][ T788] hub: probe of 3-1:0.0 failed with error -5 [ 369.785428][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 369.796061][ T788] usb 3-1: selecting invalid altsetting 0 [ 369.977908][ T788] usb 3-1: USB disconnect, device number 23 [ 370.005522][ T9] usb 4-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 370.034537][ T9] usb 4-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 370.100065][ T9] usb 4-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 370.131795][ T9] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 370.164236][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.202355][ T9] usb 4-1: config 0 descriptor?? [ 370.238573][ T9] rndis_wlan 4-1:0.0: invalid descriptor buffer length [ 370.264571][ T9] usb 4-1: bad CDC descriptors [ 370.293980][ T9] rndis_host 4-1:0.0: invalid descriptor buffer length [ 370.310024][ T9] usb 4-1: bad CDC descriptors [ 370.351068][T16809] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3611'. [ 370.472898][ T788] usb 4-1: USB disconnect, device number 24 [ 370.908349][T16847] overlayfs: missing 'lowerdir' [ 371.780270][T16882] loop2: detected capacity change from 0 to 4096 [ 371.816862][T16882] __ntfs_warning: 6 callbacks suppressed [ 371.816879][T16882] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 371.961181][T16882] ntfs: volume version 3.1. [ 372.081420][T16906] xfrm1: entered allmulticast mode [ 372.173657][T16913] loop1: detected capacity change from 0 to 256 [ 372.222632][T16913] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 372.808817][T16940] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 373.090032][T16962] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 373.135776][T16962] overlayfs: conflicting options: metacopy=off,verity=on [ 373.162657][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3657'. [ 373.173018][T16960] loop2: detected capacity change from 0 to 4096 [ 373.234383][T16960] ntfs: volume version 3.1. [ 373.285457][T16960] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 373.334232][T16960] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 373.385445][T16960] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 373.477660][T16960] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 373.570792][T16960] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 373.615978][T16960] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 374.315733][ T1203] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 374.508494][ T1203] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.531119][ T1203] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 374.551153][ T1203] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 374.612540][ T1203] usb 3-1: config 63 has no interface number 0 [ 374.625779][ T1203] usb 3-1: config 63 interface 66 has no altsetting 0 [ 374.645984][ T1203] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 374.671960][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.685407][ T1203] usb 3-1: Product: syz [ 374.689739][ T1203] usb 3-1: Manufacturer: syz [ 374.724991][ T1203] usb 3-1: SerialNumber: syz [ 374.980421][ T1203] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 375.000497][ T1203] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 375.041549][ T1203] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 375.085495][ T1203] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 375.114896][ T1203] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 375.140325][ T1203] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 375.169895][ T1203] usb 3-1: No streaming interface found for terminal 29. [ 375.190309][ T1203] uvcvideo 3-1:63.66: Entity type for entity Output 5 was not initialized! [ 375.231811][ T1203] usb 3-1: USB disconnect, device number 24 [ 376.325173][T17126] xt_l2tp: missing protocol rule (udp|l2tpip) [ 376.801109][T17150] loop1: detected capacity change from 0 to 2048 [ 376.906813][T17150] loop1: p2 p3 < > p4 < p5 > [ 376.912239][T17150] loop1: partition table partially beyond EOD, truncated [ 376.965020][T17150] loop1: p3 start 4225 is beyond EOD, truncated [ 377.300456][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3720'. [ 377.401912][ T6223] udevd[6223]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 377.431506][T11975] udevd[11975]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 377.434399][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 377.619332][ T6223] udevd[6223]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 377.629256][T11975] udevd[11975]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 377.680526][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 377.949351][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3729'. [ 378.231488][T17236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3732'. [ 378.295664][T17236] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 378.346413][T17236] gretap2: entered promiscuous mode [ 378.372114][T17236] gretap2: entered allmulticast mode [ 378.655058][T17254] netlink: 'syz.0.3737': attribute type 1 has an invalid length. [ 378.900671][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.914495][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.119599][T17275] No such timeout policy "syz1" [ 379.868369][T17258] loop1: detected capacity change from 0 to 32768 [ 379.975554][T17258] XFS (loop1): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 380.199522][T17332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3760'. [ 380.364464][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.635716][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 381.093512][T17371] loop0: detected capacity change from 0 to 2048 [ 381.173800][T17371] loop0: p2 p3 < > p4 < p5 > [ 381.194315][T17371] loop0: partition table partially beyond EOD, truncated [ 381.242959][T17371] loop0: p3 start 4225 is beyond EOD, truncated [ 381.328736][T17371] syz.0.3771: attempt to access beyond end of device [ 381.328736][T17371] loop0p2: rw=4096, sector=128, nr_sectors = 8 limit=7 [ 381.373309][T17371] gfs2: error 10 reading superblock [ 381.419324][T17390] kernel read not supported for file /eth0 (pid: 17390 comm: syz.1.3776) [ 381.457118][ T27] audit: type=1800 audit(2000000285.780:295): pid=17390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="eth0" dev="mqueue" ino=32327 res=0 errno=0 [ 381.676146][T17401] loop1: detected capacity change from 0 to 512 [ 381.705634][T17402] netlink: 'syz.2.3779': attribute type 6 has an invalid length. [ 381.737787][T17401] EXT4-fs (loop1): 1 truncate cleaned up [ 381.746710][T17401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.807971][T17410] loop0: detected capacity change from 0 to 1024 [ 381.831005][T17401] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 13: comm syz.1.3778: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=4021682188, rec_len=0, size=1024 fake=0 [ 381.852032][T17410] hfsplus: invalid length 32517 has been corrected to 255 [ 381.939572][T17401] EXT4-fs (loop1): Remounting filesystem read-only [ 382.089411][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.568938][T17446] loop0: detected capacity change from 0 to 2048 [ 382.616756][T17446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.997592][T17458] loop1: detected capacity change from 0 to 4096 [ 383.033851][T17458] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 383.275994][T17458] ntfs3: loop1: failed to convert "c46c" to cp437 [ 383.400196][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 383.414153][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 383.524197][T17485] loop2: detected capacity change from 0 to 8192 [ 383.635369][T17485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 383.710554][T17485] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 383.752350][T17485] REISERFS (device loop2): using ordered data mode [ 383.806005][T17485] reiserfs: using flush barriers [ 383.833399][T17511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3807'. [ 383.848583][T17485] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 383.905889][T17485] REISERFS (device loop2): checking transaction log (loop2) [ 384.160438][T17522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3813'. [ 384.196633][T17485] REISERFS (device loop2): Using tea hash to sort names [ 384.367763][T17485] reiserfs: enabling write barrier flush mode [ 384.400270][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'. [ 384.421711][T17485] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 384.539167][T17541] loop0: detected capacity change from 0 to 256 [ 384.575687][T17541] exfat: Deprecated parameter 'utf8' [ 384.600372][T17541] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 385.061476][T17561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3824'. [ 385.088714][T17561] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3824'. [ 385.407393][T17583] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 385.687223][T17597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 385.745034][T17600] loop2: detected capacity change from 0 to 512 [ 385.776835][T17600] EXT4-fs: Ignoring removed bh option [ 385.802168][T17600] EXT4-fs (loop2): Test dummy encryption mode enabled [ 385.823359][T17600] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 385.853954][T17600] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 385.876897][T17600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.052662][T17615] xt_limit: Overflow, try lower: 2147483649/3300 [ 386.067201][T17600] EXT4-fs: Ignoring removed bh option [ 386.101954][T17600] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 386.268317][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.357583][T17630] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.429006][T17634] netlink: 'syz.2.3845': attribute type 4 has an invalid length. [ 387.115711][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 387.199339][T17666] loop0: detected capacity change from 0 to 4096 [ 387.333303][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.363094][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.381435][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.422207][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.455599][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.512669][ T9] usb 3-1: config 0 descriptor?? [ 387.527817][ T9] hub 3-1:0.0: USB hub found [ 387.560661][T17674] loop0: detected capacity change from 0 to 2048 [ 387.642494][T17674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.705689][T17681] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 387.740642][ T9] hub 3-1:0.0: 11 ports detected [ 387.773884][ T9] hub 3-1:0.0: insufficient power available to use all downstream ports [ 387.872864][T17668] loop1: detected capacity change from 0 to 32768 [ 387.914598][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.963108][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 387.965966][T17668] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 387.972961][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 388.023564][ T9] usb 3-1: USB disconnect, device number 25 [ 388.093969][T17668] XFS (loop1): Ending clean mount [ 388.359514][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 389.054435][T17742] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 389.642373][T17761] netlink: 'syz.2.3875': attribute type 5 has an invalid length. [ 389.923663][T17735] loop1: detected capacity change from 0 to 32768 [ 389.953316][T17735] XFS: attr2 mount option is deprecated. [ 389.963132][T17745] loop0: detected capacity change from 0 to 32768 [ 390.058584][T17735] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 390.081052][T17745] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.094483][T17735] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 390.299994][T17735] XFS (loop1): Ending clean mount [ 390.333243][T17735] XFS (loop1): Quotacheck needed: Please wait. [ 390.382494][T17745] XFS (loop0): Ending clean mount [ 390.472249][T17735] XFS (loop1): Quotacheck: Done. [ 390.572998][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.634252][T17810] veth1_macvtap: left promiscuous mode [ 390.785144][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.245390][ T27] audit: type=1326 audit(2000000295.560:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.300803][ T27] audit: type=1326 audit(2000000295.560:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.390112][ T27] audit: type=1326 audit(2000000295.570:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.456434][ T27] audit: type=1326 audit(2000000295.570:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.535569][ T27] audit: type=1326 audit(2000000295.570:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.647041][ T27] audit: type=1326 audit(2000000295.570:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.696004][ T27] audit: type=1326 audit(2000000295.600:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.815376][ T27] audit: type=1326 audit(2000000295.600:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.857295][T17854] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 391.874758][ T27] audit: type=1326 audit(2000000295.600:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17828 comm="syz.2.3889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4e7eb9ce59 code=0x7ffc0000 [ 391.898936][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.316806][T17876] loop2: detected capacity change from 0 to 64 [ 393.192221][ T5436] veth1_macvtap: entered promiscuous mode [ 393.443225][T17901] loop0: detected capacity change from 0 to 32768 [ 393.496060][T17901] JBD2: Ignoring recovery information on journal [ 393.673737][T17901] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 394.065451][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3914'. [ 394.172829][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 394.460073][T17905] loop2: detected capacity change from 0 to 32768 [ 394.571174][T17905] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 394.898078][T17905] XFS (loop2): Ending clean mount [ 394.990667][T17982] loop0: detected capacity change from 0 to 764 [ 395.088146][T17982] Symlink component flag not implemented [ 395.093957][T17982] Symlink component flag not implemented (122) [ 395.302408][ T5787] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 395.525345][ T23] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 395.750930][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.768892][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 395.815375][ T23] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 395.838642][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.878842][ T23] usb 4-1: config 0 descriptor?? [ 395.975366][ T788] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 396.034165][T18025] xt_TCPMSS: Only works on TCP SYN packets [ 396.165456][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 396.180593][ T788] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 396.195550][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.213921][ T788] usb 1-1: Product: syz [ 396.218854][ T788] usb 1-1: Manufacturer: syz [ 396.223518][ T788] usb 1-1: SerialNumber: syz [ 396.255902][ T788] usb 1-1: config 0 descriptor?? [ 396.296903][ T788] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 396.297694][ T23] Bluetooth: Can't get version to change to load ram patch err [ 396.314593][ T23] Bluetooth: Loading patch file failed [ 396.333840][ T23] ath3k: probe of 4-1:0.0 failed with error -71 [ 396.353027][ T23] usb 4-1: USB disconnect, device number 25 [ 396.636339][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 396.699675][ T788] ssu100: probe of 1-1:0.0 failed with error -71 [ 396.732170][ T788] usb 1-1: USB disconnect, device number 23 [ 396.794612][T18071] loop2: detected capacity change from 0 to 1024 [ 396.892139][T18071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.113372][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.533907][T18106] loop2: detected capacity change from 0 to 2048 [ 397.603692][T18109] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.655423][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 397.662932][T18106] NILFS (loop2): failed to count free inodes: err=-34 [ 397.875608][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 397.898203][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 397.935723][ T9] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 397.975442][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 397.998410][ T9] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 398.015399][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.024738][T18119] loop2: detected capacity change from 0 to 4096 [ 398.043882][ T9] usb 2-1: Product: syz [ 398.051234][ T9] usb 2-1: Manufacturer: syz [ 398.071390][ T9] usb 2-1: SerialNumber: syz [ 398.086485][ T9] usb 2-1: config 0 descriptor?? [ 398.097651][T18119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.124994][ T9] usb 2-1: cannot find UAC_HEADER [ 398.227912][ T9] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 398.249552][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.333221][ T6223] udevd[6223]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.483549][ T2133] usb 2-1: USB disconnect, device number 22 [ 398.737722][T18116] loop0: detected capacity change from 0 to 32768 [ 398.760651][T18116] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 398.992671][T11975] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 399.667123][T18199] loop2: detected capacity change from 0 to 16 [ 399.693466][T18199] erofs: (device loop2): mounted with root inode @ nid 36. [ 399.714534][T18199] syz.2.3971: attempt to access beyond end of device [ 399.714534][T18199] loop2: rw=0, sector=48, nr_sectors = 16 limit=16 [ 400.274679][T18233] loop1: detected capacity change from 0 to 2048 [ 400.296123][ T2133] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 400.332156][T18233] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 400.364612][T18233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.510147][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 400.522644][T18243] loop2: detected capacity change from 0 to 256 [ 400.535351][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 400.581664][ T2133] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 400.598338][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.625731][ T2133] usb 4-1: Product: syz [ 400.645338][ T2133] usb 4-1: Manufacturer: syz [ 400.651605][ T2133] usb 4-1: SerialNumber: syz [ 400.682838][ T2133] usb 4-1: config 0 descriptor?? [ 400.702245][T18243] FAT-fs (loop2): Directory bread(block 64) failed [ 400.711669][T18243] FAT-fs (loop2): Directory bread(block 65) failed [ 400.745063][ T2133] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 400.765689][T18243] FAT-fs (loop2): Directory bread(block 66) failed [ 400.772465][T18243] FAT-fs (loop2): Directory bread(block 67) failed [ 400.834544][T18243] FAT-fs (loop2): Directory bread(block 68) failed [ 400.850077][T18243] FAT-fs (loop2): Directory bread(block 69) failed [ 400.858234][T18243] FAT-fs (loop2): Directory bread(block 70) failed [ 400.864843][T18243] FAT-fs (loop2): Directory bread(block 71) failed [ 400.877678][T18243] FAT-fs (loop2): Directory bread(block 72) failed [ 400.884406][T18243] FAT-fs (loop2): Directory bread(block 73) failed [ 401.023339][ T1203] usb 4-1: USB disconnect, device number 26 [ 401.097146][T18229] loop0: detected capacity change from 0 to 32768 [ 401.520249][T18290] loop1: detected capacity change from 0 to 128 [ 401.614834][T18290] FAT-fs (loop1): Directory bread(block 32) failed [ 401.661716][T18290] FAT-fs (loop1): Directory bread(block 33) failed [ 401.669222][T18290] FAT-fs (loop1): Directory bread(block 34) failed [ 401.709005][T18290] FAT-fs (loop1): Directory bread(block 35) failed [ 401.724286][T18290] FAT-fs (loop1): Directory bread(block 36) failed [ 401.745523][T18290] FAT-fs (loop1): Directory bread(block 37) failed [ 401.752263][T18290] FAT-fs (loop1): Directory bread(block 38) failed [ 401.795453][T18290] FAT-fs (loop1): Directory bread(block 39) failed [ 401.802291][T18290] FAT-fs (loop1): Directory bread(block 40) failed [ 401.835385][T18290] FAT-fs (loop1): Directory bread(block 41) failed [ 402.019544][T18309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3989'. [ 402.072107][T18312] loop2: detected capacity change from 0 to 164 [ 402.162883][T18312] Unsupported NM flag settings (240) [ 402.194512][T18290] FAT-fs (loop1): Filesystem has been set read-only [ 403.482704][T18384] netlink: 'syz.1.4018': attribute type 1 has an invalid length. [ 403.539734][T18384] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4018'. [ 403.997044][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 404.063383][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 404.126676][T18422] loop2: detected capacity change from 0 to 512 [ 404.186855][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 404.203323][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 404.212836][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.233929][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.253656][ T9] usb 1-1: config 1 has no interface number 0 [ 404.260400][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.285142][T18426] loop1: detected capacity change from 0 to 1024 [ 404.327987][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 404.348466][T18426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.353577][ T9] usb 1-1: string descriptor 0 read error: -22 [ 404.369286][T18422] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #16: comm syz.2.4030: mark_inode_dirty error [ 404.400196][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 404.418955][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 404.436066][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.444226][T18422] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4030: mark_inode_dirty error [ 404.493003][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 404.512321][T18422] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 404.521686][T18426] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.4031: Attempting to read directory block (623) that is past i_size (638464) [ 404.538793][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 404.558357][T18422] EXT4-fs error (device loop2): ext4_truncate:4301: inode #16: comm syz.2.4030: mark_inode_dirty error [ 404.581350][T18422] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 404.610999][T18422] EXT4-fs (loop2): 1 truncate cleaned up [ 404.629657][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 404.641258][T18422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.666297][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 404.681235][T18422] ext4 filesystem being mounted at /989/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.721571][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.826463][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 404.863432][T18422] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #16: comm syz.2.4030: mark_inode_dirty error [ 404.889421][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 404.906467][ T9] us122l: couldn't allocate write buffer [ 404.924420][ T9] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 404.942352][T18422] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4030: mark_inode_dirty error [ 404.962774][ T9] usb 1-1: USB disconnect, device number 24 [ 404.984095][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 405.063351][T18422] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4030: mark_inode_dirty error [ 405.100448][T18422] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.4030: corrupted inode contents [ 405.167405][T18422] EXT4-fs error (device loop2): ext4_truncate:4301: inode #16: comm syz.2.4030: mark_inode_dirty error [ 405.184213][T18422] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem [ 405.258919][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.300828][ T4604] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 405.469851][T18467] loop2: detected capacity change from 0 to 16 [ 405.526111][T18467] erofs: (device loop2): mounted with root inode @ nid 36. [ 405.598063][T18467] syz.2.4036: attempt to access beyond end of device [ 405.598063][T18467] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 405.678315][T18467] syz.2.4036: attempt to access beyond end of device [ 405.678315][T18467] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 405.693901][ T27] audit: type=1800 audit(2000000310.010:305): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4036" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 406.096817][T18502] openvswitch: netlink: Message has 4 unknown bytes. [ 406.184929][ T1203] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 406.397320][ T1203] usb 1-1: Using ep0 maxpacket: 8 [ 406.419614][ T1203] usb 1-1: unable to get BOS descriptor or descriptor too short [ 406.442895][ T1203] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 406.466492][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.481585][ T1203] usb 1-1: Product: syz [ 406.490612][ T1203] usb 1-1: Manufacturer: syz [ 406.497235][ T1203] usb 1-1: SerialNumber: syz [ 406.785584][ T1203] usb 1-1: 1:1 : bogus bTerminalLink 3 [ 406.795718][ T1203] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to g@b4.vu [ 406.827338][ T1203] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 406.925100][ T1203] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 407.015783][ T1203] usb 1-1: USB disconnect, device number 25 [ 407.021853][ T6223] udevd[6223]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.320168][T18568] loop2: detected capacity change from 0 to 1024 [ 407.341266][T18568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.466390][T18516] syz.1.4050 (18516): drop_caches: 2 [ 407.537849][T18568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.586042][T18581] binfmt_misc: register: failed to install interpreter file ./file0 [ 407.665658][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 407.710148][T18568] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 407.870929][ T9] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 407.882532][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.891837][ T9] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 407.925394][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.958994][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 407.991070][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.013969][ T9] usb 4-1: Product: syz [ 408.023323][ T9] usb 4-1: Manufacturer: syz [ 408.042821][ T9] usb 4-1: SerialNumber: syz [ 408.065036][ T9] usb 4-1: config 0 descriptor?? [ 408.099257][T18608] xt_ecn: cannot match TCP bits for non-tcp packets [ 408.118572][ T9] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 408.153295][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 408.188699][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 408.245728][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 408.266404][ T788] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 408.284454][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 408.312396][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 408.341034][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 408.359483][T18616] usb usb7: usbfs: process 18616 (syz.1.4067) did not claim interface 0 before use [ 408.360669][ T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 408.411620][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 408.429981][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 408.448265][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 408.465366][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 408.482355][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 408.495890][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 408.509041][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.533896][ T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 408.554182][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 408.590899][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.599765][ T9] usb 4-1: USB disconnect, device number 27 [ 408.621431][ T788] usb 1-1: Product: syz [ 408.629832][ T788] usb 1-1: Manufacturer: syz [ 408.654799][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 408.665046][ T788] usb 1-1: SerialNumber: syz [ 408.678624][ T788] usb 1-1: config 0 descriptor?? [ 408.712654][ T788] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 408.725756][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 408.765643][ T788] gspca_stv06xx: st6422 sensor detected [ 408.774634][ T9] keyspan 4-1:0.0: device disconnected [ 408.800631][T18644] netlink: 'syz.2.4070': attribute type 2 has an invalid length. [ 408.834478][T18644] netlink: 'syz.2.4070': attribute type 3 has an invalid length. [ 408.855759][T18644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4070'. [ 409.246473][ T788] STV06xx: probe of 1-1:0.0 failed with error -71 [ 409.278516][ T788] usb 1-1: USB disconnect, device number 26 [ 409.321330][ T5884] udevd[5884]: setting owner of /dev/bus/usb/001/026 to uid=0, gid=0 failed: No such file or directory [ 410.078823][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4087'. [ 410.129541][T18721] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4087'. [ 410.182379][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4087'. [ 410.202290][T18721] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4087'. [ 410.213338][T18721] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4087'. [ 410.515127][T18744] netlink: 'syz.2.4094': attribute type 39 has an invalid length. [ 410.936644][T18767] netlink: 'syz.1.4101': attribute type 26 has an invalid length. [ 411.223442][T18783] loop0: detected capacity change from 0 to 256 [ 411.392013][T18782] loop1: detected capacity change from 0 to 4096 [ 411.894277][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4115'. [ 412.601687][T18854] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4128'. [ 412.602134][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4129'. [ 412.675149][T18854] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4128'. [ 413.095147][T18870] loop0: detected capacity change from 0 to 8192 [ 413.275559][T18870] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 413.447659][T18894] loop1: detected capacity change from 0 to 24 [ 413.486636][T18894] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 413.545527][T18894] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 414.289323][T18885] loop2: detected capacity change from 0 to 32768 [ 414.359230][T18885] jfs_strtoUCS: char2uni returned -22. [ 414.388118][T18885] charset = cp949, char = 0xd4 [ 414.767038][T18944] loop2: detected capacity change from 0 to 2048 [ 414.810670][T18944] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 414.969195][T18960] netlink: 'syz.0.4157': attribute type 3 has an invalid length. [ 415.155395][T10190] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 415.355491][T10190] usb 3-1: Using ep0 maxpacket: 8 [ 415.370797][T10190] usb 3-1: config 7 has an invalid interface number: 143 but max is 1 [ 415.395454][T10190] usb 3-1: config 7 has an invalid interface number: 217 but max is 1 [ 415.425495][T10190] usb 3-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 415.453588][T10190] usb 3-1: config 7 has no interface number 0 [ 415.485306][T10190] usb 3-1: config 7 has no interface number 1 [ 415.491530][T10190] usb 3-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 415.529766][T10190] usb 3-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 415.616108][T10190] usb 3-1: config 7 interface 143 has no altsetting 0 [ 415.638960][T10190] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 415.653702][T10190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.671884][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4162'. [ 415.681199][T10190] usb 3-1: Product: syz [ 415.691402][T10190] usb 3-1: Manufacturer: syz [ 415.701543][T10190] usb 3-1: SerialNumber: syz [ 415.852774][T18984] loop1: detected capacity change from 0 to 512 [ 415.880083][T18984] EXT4-fs: Ignoring removed nobh option [ 415.933480][T10190] qmi_wwan: probe of 3-1:7.143 failed with error -22 [ 415.936621][T18984] EXT4-fs: Ignoring removed mblk_io_submit option [ 415.979362][T18984] EXT4-fs (loop1): orphan cleanup on readonly fs [ 416.020131][T18984] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 416.033613][T10190] usb 3-1: USB disconnect, device number 26 [ 416.087641][T18984] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4165: attempt to clear invalid blocks 2 len 1 [ 416.121109][T18984] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 416.193822][T18984] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4165: invalid indirect mapped block 1819239214 (level 0) [ 416.231445][T18984] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4165: invalid indirect mapped block 1819239214 (level 1) [ 416.253571][T18984] EXT4-fs (loop1): 1 truncate cleaned up [ 416.262983][T18984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.444509][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.084574][T19049] loop2: detected capacity change from 0 to 16 [ 417.101036][T19049] erofs: (device loop2): mounted with root inode @ nid 36. [ 417.184113][T19049] syz.2.4180: attempt to access beyond end of device [ 417.184113][T19049] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 417.257124][T19049] syz.2.4180: attempt to access beyond end of device [ 417.257124][T19049] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 417.277507][T19049] ================================================================== [ 417.285725][T19049] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x38c/0x460 [ 417.293910][T19049] Read of size 4096 at addr ffff888055738000 by task syz.2.4180/19049 [ 417.302252][T19049] [ 417.304624][T19049] CPU: 1 PID: 19049 Comm: syz.2.4180 Not tainted syzkaller #0 [ 417.312219][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.322326][T19049] Call Trace: [ 417.325718][T19049] [ 417.328788][T19049] dump_stack_lvl+0x18c/0x250 [ 417.333692][T19049] ? __lock_acquire+0x7d40/0x7d40 [ 417.338883][T19049] ? show_regs_print_info+0x20/0x20 [ 417.344152][T19049] ? load_image+0x420/0x420 [ 417.348785][T19049] ? __virt_addr_valid+0x469/0x540 [ 417.353935][T19049] print_report+0xa8/0x210 [ 417.358434][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 417.364109][T19049] kasan_report+0x117/0x150 [ 417.368693][T19049] ? trace_contention_end+0x39/0xe0 [ 417.373948][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 417.379700][T19049] kasan_check_range+0x241/0x290 [ 417.384670][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 417.390334][T19049] __asan_memcpy+0x29/0x70 [ 417.394790][T19049] z_erofs_transform_plain+0x38c/0x460 [ 417.400578][T19049] ? z_erofs_lz4_decompress+0x17a0/0x17a0 [ 417.406380][T19049] z_erofs_decompress_queue+0x1780/0x26f0 [ 417.412145][T19049] ? z_erofs_onlinepage_end+0x360/0x360 [ 417.417764][T19049] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 417.423817][T19049] ? lock_chain_count+0x20/0x20 [ 417.428722][T19049] ? z_erofs_decompressqueue_endio+0x5a0/0x5a0 [ 417.434910][T19049] ? erofs_map_blocks+0x17b0/0x17b0 [ 417.440145][T19049] ? folio_unlock+0x118/0x2e0 [ 417.444886][T19049] z_erofs_runqueue+0x1a4e/0x1bf0 [ 417.449957][T19049] ? z_erofs_do_read_page+0x36b0/0x36b0 [ 417.455546][T19049] ? __lock_acquire+0x7d40/0x7d40 [ 417.460625][T19049] ? put_page+0xea/0x260 [ 417.464928][T19049] ? z_erofs_pcluster_readmore+0x39e/0x450 [ 417.470802][T19049] z_erofs_read_folio+0x323/0x5c0 [ 417.475880][T19049] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 417.481299][T19049] filemap_read_folio+0x172/0x760 [ 417.486358][T19049] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 417.491765][T19049] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 417.497436][T19049] ? down_read+0x1ac/0x2e0 [ 417.501999][T19049] filemap_get_pages+0x13c7/0x1e90 [ 417.507159][T19049] ? filemap_read+0xf00/0xf00 [ 417.511878][T19049] ? __might_sleep+0xe0/0xe0 [ 417.516531][T19049] ? deref_stack_reg+0x1bd/0x240 [ 417.521511][T19049] filemap_read+0x402/0xf00 [ 417.526045][T19049] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.532278][T19049] ? filemap_get_folios_tag+0x830/0x830 [ 417.537878][T19049] ? generic_file_read_iter+0x90/0x4f0 [ 417.543371][T19049] ? __asan_memset+0x22/0x40 [ 417.548030][T19049] ? iov_iter_kvec+0xd4/0x1b0 [ 417.552797][T19049] __kernel_read+0x2f3/0x710 [ 417.557434][T19049] ? rw_verify_area+0x1b0/0x1b0 [ 417.562332][T19049] integrity_kernel_read+0x8a/0xd0 [ 417.567508][T19049] ? integrity_inode_free+0x170/0x170 [ 417.572918][T19049] ? kernel_fpu_end+0x51/0x70 [ 417.577672][T19049] ? _sha256_update+0x129/0x1f0 [ 417.582553][T19049] ? sha256_transform_avx+0xcc0/0xcc0 [ 417.587967][T19049] ima_calc_file_hash+0x91d/0x1910 [ 417.593125][T19049] ? is_bpf_text_address+0x26/0x2a0 [ 417.598404][T19049] ? look_up_lock_class+0x75/0x140 [ 417.603583][T19049] ? ima_alloc_tfm+0x2f0/0x2f0 [ 417.608400][T19049] ? register_lock_class+0xc4/0x8a0 [ 417.613659][T19049] ? __lock_acquire+0x2b81/0x7d40 [ 417.618722][T19049] ? generic_fillattr+0x312/0x7b0 [ 417.623774][T19049] ? __asan_memcpy+0x40/0x70 [ 417.628402][T19049] ? generic_fillattr+0x4fc/0x7b0 [ 417.633464][T19049] ima_collect_measurement+0x4d4/0xa20 [ 417.638965][T19049] ? ima_get_action+0xb0/0xb0 [ 417.643682][T19049] ? erofs_getxattr+0x13e/0x460 [ 417.648594][T19049] ? rcu_is_watching+0x15/0xb0 [ 417.653406][T19049] ? ima_get_hash_algo+0x91/0x4a0 [ 417.658458][T19049] ? ima_get_cache_status+0x1e0/0x1e0 [ 417.663854][T19049] process_measurement+0x128e/0x1d70 [ 417.669184][T19049] ? ima_file_mmap+0x1d0/0x1d0 [ 417.674000][T19049] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 417.680192][T19049] ima_bprm_check+0xfb/0x200 [ 417.684823][T19049] ? common_file_perm+0x198/0x1f0 [ 417.689877][T19049] ? ima_file_mprotect+0x580/0x580 [ 417.695019][T19049] ? tomoyo_bprm_check_security+0xea/0x170 [ 417.700858][T19049] ? tomoyo_bprm_check_security+0x159/0x170 [ 417.706795][T19049] bprm_execve+0xa6e/0x1700 [ 417.711346][T19049] ? alloc_bprm+0x9b0/0x9b0 [ 417.715882][T19049] ? put_arg_page+0xea/0x260 [ 417.720504][T19049] ? copy_string_kernel+0x1e9/0x220 [ 417.725741][T19049] do_execveat_common+0x51b/0x6c0 [ 417.730809][T19049] __x64_sys_execveat+0xc4/0xe0 [ 417.735726][T19049] do_syscall_64+0x55/0xb0 [ 417.740186][T19049] ? clear_bhb_loop+0x40/0x90 [ 417.744942][T19049] ? clear_bhb_loop+0x40/0x90 [ 417.749645][T19049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.755586][T19049] RIP: 0033:0x7f4e7eb9ce59 [ 417.760110][T19049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.779902][T19049] RSP: 002b:00007f4e7fab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 417.788417][T19049] RAX: ffffffffffffffda RBX: 00007f4e7ee15fa0 RCX: 00007f4e7eb9ce59 [ 417.796605][T19049] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 417.804775][T19049] RBP: 00007f4e7ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 417.812769][T19049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.820813][T19049] R13: 00007f4e7ee16038 R14: 00007f4e7ee15fa0 R15: 00007fff477f7578 [ 417.828824][T19049] [ 417.831870][T19049] [ 417.834211][T19049] The buggy address belongs to the physical page: [ 417.840721][T19049] page:ffffea000155ce00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55738 [ 417.850913][T19049] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 417.858065][T19049] page_type: 0xffffff7f(buddy) [ 417.862856][T19049] raw: 00fff00000000000 ffffea000155c708 ffffea00016e4f88 0000000000000000 [ 417.871474][T19049] raw: 0000000000000000 0000000000000001 00000000ffffff7f 0000000000000000 [ 417.880167][T19049] page dumped because: kasan: bad access detected [ 417.886613][T19049] page_owner tracks the page as freed [ 417.892030][T19049] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x540dc0(GFP_USER|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 5775, tgid 5775 (syz-executor), ts 413637658038, free_ts 413732377541 [ 417.911338][T19049] post_alloc_hook+0x1c1/0x200 [ 417.916229][T19049] get_page_from_freelist+0x1951/0x19e0 [ 417.921888][T19049] __alloc_pages+0x1f0/0x460 [ 417.926498][T19049] pte_alloc_one+0x84/0x530 [ 417.931032][T19049] __pte_alloc+0x22/0x2a0 [ 417.935396][T19049] copy_page_range+0x2d96/0x3670 [ 417.940378][T19049] copy_mm+0x1281/0x1d80 [ 417.944651][T19049] copy_process+0x16f7/0x3dc0 [ 417.949355][T19049] kernel_clone+0x24b/0x8a0 [ 417.953888][T19049] __x64_sys_clone+0x1b7/0x230 [ 417.958770][T19049] do_syscall_64+0x55/0xb0 [ 417.963209][T19049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.969136][T19049] page last free stack trace: [ 417.973829][T19049] free_unref_page_prepare+0x7b2/0x8c0 [ 417.979327][T19049] free_unref_page_list+0xbe/0x860 [ 417.984477][T19049] release_pages+0x1f7a/0x2200 [ 417.989275][T19049] tlb_flush_mmu+0x379/0x510 [ 417.993896][T19049] tlb_finish_mmu+0xf9/0x220 [ 417.998518][T19049] exit_mmap+0x428/0xb90 [ 418.002798][T19049] __mmput+0x118/0x3c0 [ 418.006888][T19049] exit_mm+0x24a/0x350 [ 418.010986][T19049] do_exit+0x8dd/0x2460 [ 418.015171][T19049] do_group_exit+0x21b/0x2d0 [ 418.019793][T19049] get_signal+0x12fc/0x13f0 [ 418.024315][T19049] arch_do_signal_or_restart+0xc2/0x800 [ 418.029945][T19049] exit_to_user_mode_loop+0x70/0x110 [ 418.035266][T19049] exit_to_user_mode_prepare+0xee/0x180 [ 418.040895][T19049] syscall_exit_to_user_mode+0x1a/0x50 [ 418.046386][T19049] do_syscall_64+0x61/0xb0 [ 418.050882][T19049] [ 418.053234][T19049] Memory state around the buggy address: [ 418.059060][T19049] ffff888055737f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.067150][T19049] ffff888055737f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.075241][T19049] >ffff888055738000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 418.083335][T19049] ^ [ 418.087432][T19049] ffff888055738080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 418.095519][T19049] ffff888055738100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 418.103604][T19049] ================================================================== [ 418.222533][T19049] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 418.229822][T19049] CPU: 0 PID: 19049 Comm: syz.2.4180 Not tainted syzkaller #0 [ 418.237326][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.247429][T19049] Call Trace: [ 418.250798][T19049] [ 418.253773][T19049] dump_stack_lvl+0x18c/0x250 [ 418.258520][T19049] ? show_regs_print_info+0x20/0x20 [ 418.263785][T19049] ? load_image+0x420/0x420 [ 418.268353][T19049] panic+0x2dc/0x730 [ 418.272452][T19049] ? bpf_jit_dump+0xd0/0xd0 [ 418.277028][T19049] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 418.283074][T19049] ? _raw_spin_unlock+0x40/0x40 [ 418.287990][T19049] ? print_memory_metadata+0x314/0x400 [ 418.293519][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 418.299388][T19049] check_panic_on_warn+0x84/0xa0 [ 418.304401][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 418.310096][T19049] end_report+0x6f/0x130 [ 418.314391][T19049] kasan_report+0x128/0x150 [ 418.318955][T19049] ? trace_contention_end+0x39/0xe0 [ 418.324217][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 418.329899][T19049] kasan_check_range+0x241/0x290 [ 418.334892][T19049] ? z_erofs_transform_plain+0x38c/0x460 [ 418.340611][T19049] __asan_memcpy+0x29/0x70 [ 418.345064][T19049] z_erofs_transform_plain+0x38c/0x460 [ 418.350552][T19049] ? z_erofs_lz4_decompress+0x17a0/0x17a0 [ 418.356298][T19049] z_erofs_decompress_queue+0x1780/0x26f0 [ 418.362062][T19049] ? z_erofs_onlinepage_end+0x360/0x360 [ 418.367639][T19049] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 418.373649][T19049] ? lock_chain_count+0x20/0x20 [ 418.378540][T19049] ? z_erofs_decompressqueue_endio+0x5a0/0x5a0 [ 418.384729][T19049] ? erofs_map_blocks+0x17b0/0x17b0 [ 418.389951][T19049] ? folio_unlock+0x118/0x2e0 [ 418.394671][T19049] z_erofs_runqueue+0x1a4e/0x1bf0 [ 418.399737][T19049] ? z_erofs_do_read_page+0x36b0/0x36b0 [ 418.405314][T19049] ? __lock_acquire+0x7d40/0x7d40 [ 418.410381][T19049] ? put_page+0xea/0x260 [ 418.414656][T19049] ? z_erofs_pcluster_readmore+0x39e/0x450 [ 418.420489][T19049] z_erofs_read_folio+0x323/0x5c0 [ 418.425555][T19049] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 418.431008][T19049] filemap_read_folio+0x172/0x760 [ 418.436066][T19049] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 418.441472][T19049] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 418.447047][T19049] ? down_read+0x1ac/0x2e0 [ 418.451496][T19049] filemap_get_pages+0x13c7/0x1e90 [ 418.456648][T19049] ? filemap_read+0xf00/0xf00 [ 418.461350][T19049] ? __might_sleep+0xe0/0xe0 [ 418.465965][T19049] ? deref_stack_reg+0x1bd/0x240 [ 418.470937][T19049] filemap_read+0x402/0xf00 [ 418.475472][T19049] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.481586][T19049] ? filemap_get_folios_tag+0x830/0x830 [ 418.487185][T19049] ? generic_file_read_iter+0x90/0x4f0 [ 418.492715][T19049] ? __asan_memset+0x22/0x40 [ 418.497358][T19049] ? iov_iter_kvec+0xd4/0x1b0 [ 418.502072][T19049] __kernel_read+0x2f3/0x710 [ 418.506713][T19049] ? rw_verify_area+0x1b0/0x1b0 [ 418.511606][T19049] integrity_kernel_read+0x8a/0xd0 [ 418.516753][T19049] ? integrity_inode_free+0x170/0x170 [ 418.522160][T19049] ? kernel_fpu_end+0x51/0x70 [ 418.526872][T19049] ? _sha256_update+0x129/0x1f0 [ 418.531749][T19049] ? sha256_transform_avx+0xcc0/0xcc0 [ 418.537150][T19049] ima_calc_file_hash+0x91d/0x1910 [ 418.542300][T19049] ? is_bpf_text_address+0x26/0x2a0 [ 418.547522][T19049] ? look_up_lock_class+0x75/0x140 [ 418.552672][T19049] ? ima_alloc_tfm+0x2f0/0x2f0 [ 418.557484][T19049] ? register_lock_class+0xc4/0x8a0 [ 418.562747][T19049] ? __lock_acquire+0x2b81/0x7d40 [ 418.567824][T19049] ? generic_fillattr+0x312/0x7b0 [ 418.572901][T19049] ? __asan_memcpy+0x40/0x70 [ 418.577601][T19049] ? generic_fillattr+0x4fc/0x7b0 [ 418.582707][T19049] ima_collect_measurement+0x4d4/0xa20 [ 418.588215][T19049] ? ima_get_action+0xb0/0xb0 [ 418.592961][T19049] ? erofs_getxattr+0x13e/0x460 [ 418.597898][T19049] ? rcu_is_watching+0x15/0xb0 [ 418.602725][T19049] ? ima_get_hash_algo+0x91/0x4a0 [ 418.607869][T19049] ? ima_get_cache_status+0x1e0/0x1e0 [ 418.613301][T19049] process_measurement+0x128e/0x1d70 [ 418.618662][T19049] ? ima_file_mmap+0x1d0/0x1d0 [ 418.623485][T19049] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 418.629681][T19049] ima_bprm_check+0xfb/0x200 [ 418.634306][T19049] ? common_file_perm+0x198/0x1f0 [ 418.639383][T19049] ? ima_file_mprotect+0x580/0x580 [ 418.644653][T19049] ? tomoyo_bprm_check_security+0xea/0x170 [ 418.650635][T19049] ? tomoyo_bprm_check_security+0x159/0x170 [ 418.656693][T19049] bprm_execve+0xa6e/0x1700 [ 418.661251][T19049] ? alloc_bprm+0x9b0/0x9b0 [ 418.665807][T19049] ? put_arg_page+0xea/0x260 [ 418.670468][T19049] ? copy_string_kernel+0x1e9/0x220 [ 418.675719][T19049] do_execveat_common+0x51b/0x6c0 [ 418.680806][T19049] __x64_sys_execveat+0xc4/0xe0 [ 418.685713][T19049] do_syscall_64+0x55/0xb0 [ 418.690191][T19049] ? clear_bhb_loop+0x40/0x90 [ 418.694931][T19049] ? clear_bhb_loop+0x40/0x90 [ 418.699641][T19049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.705580][T19049] RIP: 0033:0x7f4e7eb9ce59 [ 418.710021][T19049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.729656][T19049] RSP: 002b:00007f4e7fab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 418.738100][T19049] RAX: ffffffffffffffda RBX: 00007f4e7ee15fa0 RCX: 00007f4e7eb9ce59 [ 418.746103][T19049] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 418.754095][T19049] RBP: 00007f4e7ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 418.762095][T19049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.770091][T19049] R13: 00007f4e7ee16038 R14: 00007f4e7ee15fa0 R15: 00007fff477f7578 [ 418.778095][T19049] [ 418.781732][T19049] Kernel Offset: disabled [ 418.786104][T19049] Rebooting in 86400 seconds..