last executing test programs: 8m3.781546428s ago: executing program 1 (id=6923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050c00000900010073797a300000000008000540000000001c0008800c00026e8377c100000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x48001}, 0x4000010) 8m3.576138814s ago: executing program 1 (id=6927): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x143201, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) 8m3.39330826s ago: executing program 1 (id=6929): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0xf, "437207383000000002000000000000"}}) 8m3.242872124s ago: executing program 1 (id=6931): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 8m2.811142867s ago: executing program 1 (id=6933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c"], 0x90}}, 0x0) 8m2.112908348s ago: executing program 1 (id=6940): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x8, 0xf, 0x3, 0x20000000], [0x0, 0xfffffffc, 0x0, 0x3], [0x400000000000000, 0x0, 0x0, 0x4]}) 8m1.660239132s ago: executing program 32 (id=6940): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x8, 0xf, 0x3, 0x20000000], [0x0, 0xfffffffc, 0x0, 0x3], [0x400000000000000, 0x0, 0x0, 0x4]}) 1.875135733s ago: executing program 0 (id=13032): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, 0x0) 1.722894536s ago: executing program 0 (id=13035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 1.543484521s ago: executing program 0 (id=13039): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f007, 0x2}) 1.394544155s ago: executing program 0 (id=13042): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000001080)="0bbb268dd6ffa80800000000002a16000000210d0000aaa8fa0172429a9380d41000000000000000290000003b000000", 0x30) 1.21022811s ago: executing program 0 (id=13047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x78, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xd4}, 0x0) 1.030943394s ago: executing program 2 (id=13051): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90006"], 0x124}}, 0x44040) 990.428725ms ago: executing program 0 (id=13052): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="120110030000004082053b004aa5dbe2030109027d00030105a009080b00010107208c0904000000010120000924010040041d000708240a00dffe23000c2403020101000400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 899.616197ms ago: executing program 3 (id=13055): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0xa0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x100000}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff62, 0x0, 0x0, 0x9}) 847.876708ms ago: executing program 3 (id=13056): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4053, 0x36, 0xfd5, 0x1}, 0x28) 822.948919ms ago: executing program 2 (id=13058): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x8917) 730.105232ms ago: executing program 4 (id=13059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000100)="b3", 0x0}, 0x20) 662.934013ms ago: executing program 2 (id=13060): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x7, 0xfefffffc, 0x9, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x1, 0x5e55b37311de6d89, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@ssrr={0x89, 0x3, 0xd3}]}}}}}) 662.332143ms ago: executing program 3 (id=13061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) 622.136524ms ago: executing program 4 (id=13062): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) 572.723525ms ago: executing program 2 (id=13063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040), 0x2000000}, 0x20) 507.357258ms ago: executing program 3 (id=13064): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) 507.260198ms ago: executing program 4 (id=13065): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x891c) 425.68672ms ago: executing program 2 (id=13066): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 396.52494ms ago: executing program 3 (id=13067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) 366.674671ms ago: executing program 4 (id=13068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) 291.422023ms ago: executing program 2 (id=13069): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x1c3, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc8000, 0x0) 159.292326ms ago: executing program 4 (id=13070): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15955565060608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) 132.691457ms ago: executing program 3 (id=13071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265746170"], 0x54}}, 0x0) 0s ago: executing program 4 (id=13072): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1) kernel console output (not intermixed with test programs): 36'. [ 1296.647247][T30282] netlink: 'syz.2.11136': attribute type 5 has an invalid length. [ 1296.909207][T30292] netlink: 'syz.2.11141': attribute type 3 has an invalid length. [ 1296.945269][T30292] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11141'. [ 1297.499828][T30311] netlink: 'syz.2.11150': attribute type 29 has an invalid length. [ 1297.532968][T30311] netlink: 'syz.2.11150': attribute type 29 has an invalid length. [ 1297.541557][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1297.729590][T30321] loop3: detected capacity change from 0 to 64 [ 1297.741776][ T10] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 1297.758528][ T10] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 1297.777316][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1297.795968][ T5812] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1297.817242][ T10] usb 5-1: config 0 has no interface number 0 [ 1297.823435][ T10] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 1297.850600][ T10] usb 5-1: config 0 interface 104 has no altsetting 1 [ 1297.863680][ T10] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1297.873399][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.882337][ T10] usb 5-1: Product: syz [ 1297.886683][ T10] usb 5-1: Manufacturer: syz [ 1297.891553][ T10] usb 5-1: SerialNumber: syz [ 1297.918272][ T10] usb 5-1: config 0 descriptor?? [ 1297.938808][ T10] asix: probe of 5-1:0.104 failed with error -22 [ 1297.991695][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 1298.000751][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1298.034139][ T5812] usb 1-1: config 42 has an invalid interface number: 178 but max is 0 [ 1298.059771][ T5812] usb 1-1: config 42 has no interface number 0 [ 1298.075111][ T5812] usb 1-1: config 42 interface 178 has no altsetting 0 [ 1298.088020][ T5812] usb 1-1: string descriptor 0 read error: -22 [ 1298.103306][ T5812] usb 1-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 1298.128130][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.156660][ T5812] uvcvideo 1-1:42.178: Found multiple Units with ID 1 [ 1298.170949][ T5812] usb 1-1: Found UVC 0.00 device (045e:00f8) [ 1298.186575][ T5812] usb 1-1: No valid video chain found. [ 1298.213570][ T5812] usb 5-1: USB disconnect, device number 29 [ 1298.257730][T30331] netlink: 'syz.2.11159': attribute type 1 has an invalid length. [ 1298.265899][T30331] netlink: 'syz.2.11159': attribute type 2 has an invalid length. [ 1298.291216][T30331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11159'. [ 1298.369508][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1298.647747][T30337] loop2: detected capacity change from 0 to 4096 [ 1298.720089][T30337] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1298.741809][T30337] ntfs3: loop2: Failed to load $Extend (-22). [ 1298.754377][T30337] ntfs3: loop2: Failed to initialize $Extend. [ 1298.910621][T30345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1298.940296][T30343] misc userio: The device must be registered before sending interrupts [ 1299.299322][T30357] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1300.080431][T30383] loop2: detected capacity change from 0 to 8 [ 1300.119837][T30383] SQUASHFS error: Failed to read block 0x636: -5 [ 1300.128274][T30383] SQUASHFS error: Unable to read metadata cache entry [634] [ 1300.373075][ T10] usb 1-1: USB disconnect, device number 78 [ 1300.657279][T30398] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1300.722040][ T5816] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1300.871506][T30405] loop3: detected capacity change from 0 to 8 [ 1300.892511][ T5816] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1300.917724][ T5816] usb 5-1: config 8 has no interface number 0 [ 1300.933624][T30405] SQUASHFS error: Failed to read block 0x636: -5 [ 1300.943384][ T5816] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1300.959531][T30405] SQUASHFS error: Unable to read metadata cache entry [634] [ 1300.973645][ T5816] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1300.995116][ T5816] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1301.011010][ T5816] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1301.022363][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.043059][T30392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1301.065040][T30392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1301.117867][ C1] ir_toy 5-1:8.177: out urb status: -71 [ 1301.123791][ T5812] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1301.313786][ T5812] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1301.339003][ T5812] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1301.384120][ T5812] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1301.403933][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.433188][T30406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1301.452081][ T5812] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1301.616715][ T5816] ir_toy 5-1:8.177: could not write reset command: -110 [ 1301.624264][ T5816] ir_toy: probe of 5-1:8.177 failed with error -110 [ 1301.663879][ T5816] usb 5-1: USB disconnect, device number 30 [ 1301.783671][ T5812] usb 3-1: USB disconnect, device number 78 [ 1301.994748][T30431] loop4: detected capacity change from 0 to 64 [ 1302.069743][T30431] Trying to free block not in datazone [ 1302.084976][T30431] Trying to free block not in datazone [ 1302.091932][T30431] Trying to free block not in datazone [ 1302.107755][T30431] Trying to free block not in datazone [ 1302.119936][T30431] Trying to free block not in datazone [ 1302.125757][T30431] Trying to free block not in datazone [ 1302.139503][T30431] Trying to free block not in datazone [ 1302.145210][T30431] Trying to free block not in datazone [ 1302.166610][T30431] Trying to free block not in datazone [ 1302.180120][T30431] Trying to free block not in datazone [ 1302.188435][T30431] Trying to free block not in datazone [ 1302.194072][T30431] Trying to free block not in datazone [ 1302.203828][T30431] minix_free_block (loop4:6): bit already cleared [ 1302.211250][T30431] Trying to free block not in datazone [ 1302.225490][T30431] Trying to free block not in datazone [ 1302.235425][T30431] Trying to free block not in datazone [ 1302.241576][T30431] minix_free_block (loop4:7): bit already cleared [ 1302.248233][T30431] Trying to free block not in datazone [ 1302.258790][T30431] Trying to free block not in datazone [ 1302.267588][T30431] Trying to free block not in datazone [ 1302.280728][T30431] Trying to free block not in datazone [ 1302.292241][T30431] Trying to free block not in datazone [ 1302.302144][T30431] minix_free_block (loop4:6): bit already cleared [ 1302.679591][T30449] xt_TCPMSS: Only works on TCP SYN packets [ 1303.099584][T30465] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1303.149773][ T28] audit: type=1326 audit(1783912262.550:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.3.11227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1303.235884][ T28] audit: type=1326 audit(1783912262.550:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.3.11227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1303.327533][ T28] audit: type=1326 audit(1783912262.550:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.3.11227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1303.374301][ T28] audit: type=1326 audit(1783912262.550:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.3.11227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1304.074358][ T28] audit: type=1326 audit(1783912263.526:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30497 comm="syz.2.11241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1304.116586][ T28] audit: type=1326 audit(1783912263.526:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30497 comm="syz.2.11241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1304.161753][ T28] audit: type=1326 audit(1783912263.526:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30497 comm="syz.2.11241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1304.266285][ T28] audit: type=1326 audit(1783912263.537:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30497 comm="syz.2.11241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1304.290553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.325594][ T28] audit: type=1326 audit(1783912263.537:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30497 comm="syz.2.11241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1304.450938][ T28] audit: type=1326 audit(1783912263.537:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30497 comm="syz.2.11241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1304.560265][T30509] loop3: detected capacity change from 0 to 4096 [ 1304.662301][T30509] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1304.670143][T30509] ntfs3: loop3: Failed to load $Extend (-22). [ 1304.676975][T30509] ntfs3: loop3: Failed to initialize $Extend. [ 1304.846539][T30518] ip6tnl2: entered allmulticast mode [ 1304.896114][ T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1304.946811][ T8] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1304.956213][ T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1305.007040][T30523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11254'. [ 1305.159893][T30528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11255'. [ 1305.214414][ T8] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1305.619193][ T8] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1305.707994][T30551] loop3: detected capacity change from 0 to 256 [ 1305.781338][T30551] FAT-fs (loop3): Directory bread(block 64) failed [ 1305.811806][T30551] FAT-fs (loop3): Directory bread(block 65) failed [ 1305.818560][T30551] FAT-fs (loop3): Directory bread(block 66) failed [ 1305.862794][T30551] FAT-fs (loop3): Directory bread(block 67) failed [ 1305.895341][T30551] FAT-fs (loop3): Directory bread(block 68) failed [ 1305.901967][T30551] FAT-fs (loop3): Directory bread(block 69) failed [ 1305.936253][T30551] FAT-fs (loop3): Directory bread(block 70) failed [ 1305.963835][T30551] FAT-fs (loop3): Directory bread(block 71) failed [ 1305.974607][T30551] FAT-fs (loop3): Directory bread(block 72) failed [ 1306.003928][T30551] FAT-fs (loop3): Directory bread(block 73) failed [ 1306.517753][T30541] loop2: detected capacity change from 0 to 32768 [ 1306.574784][T30541] JBD2: Ignoring recovery information on journal [ 1306.691067][T30541] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1306.996826][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 1307.614158][T30595] misc userio: Invalid payload size [ 1307.829811][T30579] loop4: detected capacity change from 0 to 32768 [ 1307.848295][T30599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11290'. [ 1307.955990][T30579] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1308.096408][T30579] XFS (loop4): Ending clean mount [ 1308.213851][T21045] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1308.218491][T30616] binder: 30615:30616 unknown command 0 [ 1308.233103][T30616] binder: 30615:30616 ioctl c0306201 200000000480 returned -22 [ 1308.275593][ T56] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1308.460434][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.505203][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1308.514705][ T56] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1308.559792][ T56] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1308.583546][ T56] usb 3-1: string descriptor 0 read error: -22 [ 1308.591713][ T56] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1308.606963][ T56] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1308.647444][ T56] usb 3-1: 0:2 : does not exist [ 1308.697003][ T56] usb-storage 3-1:1.1: USB Mass Storage device detected [ 1309.085101][ T56] us122l: couldn't allocate write buffer [ 1309.091706][ T56] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 1309.141433][ T56] usb 3-1: USB disconnect, device number 79 [ 1309.256831][T30638] loop3: detected capacity change from 0 to 256 [ 1309.427684][ T5812] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1309.616631][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1309.627586][ T5812] usb 5-1: not running at top speed; connect to a high speed hub [ 1309.643418][ T5812] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1309.662631][ T5812] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1309.673510][ T5812] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 1309.686633][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.698827][ T5812] usb 5-1: Product: syz [ 1309.703082][ T5812] usb 5-1: Manufacturer: syz [ 1309.708445][ T5812] usb 5-1: SerialNumber: syz [ 1309.934109][ T5812] usbhid 5-1:1.0: can't add hid device: -71 [ 1309.951212][ T5812] usbhid: probe of 5-1:1.0 failed with error -71 [ 1309.990268][ T5812] usb 5-1: USB disconnect, device number 31 [ 1310.388781][T30666] netlink: 'syz.0.11319': attribute type 4 has an invalid length. [ 1310.682977][T30675] loop3: detected capacity change from 0 to 1024 [ 1310.810329][T30675] hfsplus: unknown catalog record type 0 [ 1310.908798][T30684] netlink: 284 bytes leftover after parsing attributes in process `syz.2.11327'. [ 1310.988843][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1311.019272][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1311.041393][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1311.202783][T30692] netlink: 'syz.0.11331': attribute type 1 has an invalid length. [ 1312.108739][T30694] loop2: detected capacity change from 0 to 32768 [ 1312.127092][T30694] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1312.307207][ T5973] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1312.353688][ T5812] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1312.531332][ T5812] usb 5-1: Using ep0 maxpacket: 16 [ 1312.566609][ T5812] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1312.601481][ T5812] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1312.626295][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1312.668075][ T5812] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1312.698970][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.707060][ T5812] usb 5-1: Product: syz [ 1312.734432][ T5812] usb 5-1: Manufacturer: syz [ 1312.745717][ T5812] usb 5-1: SerialNumber: syz [ 1312.756659][ T5812] usb 5-1: config 0 descriptor?? [ 1312.835371][T30728] netlink: 'syz.0.11347': attribute type 3 has an invalid length. [ 1313.130070][T30734] loop2: detected capacity change from 0 to 512 [ 1313.159984][T30734] EXT4-fs: Ignoring removed oldalloc option [ 1313.219359][T30734] EXT4-fs: Ignoring removed i_version option [ 1313.241812][ T56] usb 5-1: USB disconnect, device number 32 [ 1313.269825][T30734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1313.299636][T30738] netlink: 'syz.3.11353': attribute type 11 has an invalid length. [ 1313.336517][T30734] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1313.359221][T30734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11351: invalid indirect mapped block 4294967295 (level 1) [ 1313.403083][T30734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11351: invalid indirect mapped block 4294967295 (level 1) [ 1313.474353][T30734] EXT4-fs (loop2): 2 truncates cleaned up [ 1313.500493][T30734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1313.667308][T30745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11355'. [ 1313.676931][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11355'. [ 1313.730982][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.773585][T30781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11374'. [ 1314.853822][T30785] loop2: detected capacity change from 0 to 512 [ 1315.296573][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11382'. [ 1316.091369][T30826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11396'. [ 1316.259302][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1316.330625][T30836] usb usb7: usbfs: process 30836 (syz.0.11401) did not claim interface 0 before use [ 1316.413086][T30840] loop4: detected capacity change from 0 to 2048 [ 1316.501841][T30840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1316.647000][T30840] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 1316.761229][T21045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.975312][T30858] sctp: [Deprecated]: syz.3.11411 (pid 30858) Use of int in max_burst socket option deprecated. [ 1316.975312][T30858] Use struct sctp_assoc_value instead [ 1317.053611][T30861] loop2: detected capacity change from 0 to 8 [ 1317.208197][T30861] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1317.266151][ T5812] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1317.273087][T30861] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1317.322503][T30861] SQUASHFS error: Unable to read directory block [247:26] [ 1317.480579][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 1317.498941][ T5812] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.536264][ T5812] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.562460][ T5812] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1317.585016][ T5812] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1317.607435][ T5812] usb 5-1: Product: syz [ 1317.633504][ T5812] usb 5-1: Manufacturer: syz [ 1317.659006][ T5812] hub 5-1:4.0: USB hub found [ 1317.871842][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1317.873202][ T5812] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1317.932234][T30880] nftables ruleset with unbound chain [ 1318.096447][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1318.118800][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1318.134482][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.151447][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1318.170609][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1318.198139][ T5812] usb 5-1: USB disconnect, device number 33 [ 1318.211679][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1318.233185][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1318.260034][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.288609][ T10] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1318.334891][T30888] netlink: 'syz.3.11425': attribute type 12 has an invalid length. [ 1318.556284][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.564067][ T10] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 1318.652499][T30894] tmpfs: Unknown parameter 'func' [ 1318.793106][ T10] usb 1-1: USB disconnect, device number 79 [ 1318.941640][T30902] netlink: 'syz.4.11431': attribute type 2 has an invalid length. [ 1319.006940][T30902] netlink: 'syz.4.11431': attribute type 1 has an invalid length. [ 1319.036047][T30902] netlink: 'syz.4.11431': attribute type 1 has an invalid length. [ 1319.387709][T30874] Process accounting paused [ 1319.501045][T30916] program syz.3.11438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1320.293499][T30937] loop3: detected capacity change from 0 to 256 [ 1320.840092][T30954] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11456'. [ 1320.920015][T30954] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1320.945917][T30954] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1321.056690][T30954] Process accounting paused [ 1321.438536][T30974] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1321.506656][T30975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11468'. [ 1321.555246][T30975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11468'. [ 1321.628047][T30923] Bluetooth: hci2: command 0x0406 tx timeout [ 1321.997866][T30989] tmpfs: Group quota block hardlimit too large. [ 1322.023794][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1322.243520][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1322.279784][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.318169][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1322.342815][ T10] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.388342][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1322.417433][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1322.456425][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.486231][ T10] usb 3-1: Product: syz [ 1322.494686][ T10] usb 3-1: Manufacturer: syz [ 1322.513866][ T10] usb 3-1: SerialNumber: syz [ 1322.552846][ T10] usb 3-1: config 0 descriptor?? [ 1322.621805][ T10] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1322.873126][ T10] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1322.902865][ T10] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1322.928194][ T10] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1322.978111][T31016] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11488'. [ 1323.247658][ T10] usb 3-1: USB disconnect, device number 80 [ 1323.451483][T31030] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 1323.561047][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11496'. [ 1323.903676][T31044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11502'. [ 1323.916895][T31044] netlink: ct family unspecified [ 1323.931817][T31044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.152645][T31055] loop4: detected capacity change from 0 to 256 [ 1324.380502][T31061] netlink: 'syz.2.11510': attribute type 10 has an invalid length. [ 1324.420519][T31061] team0: Port device virt_wifi0 added [ 1324.526249][T31062] loop3: detected capacity change from 0 to 4096 [ 1324.651269][T31062] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1324.725267][T31062] ntfs3: loop3: Failed to load $Extend (-22). [ 1324.731528][T31062] ntfs3: loop3: Failed to initialize $Extend. [ 1325.439805][ T56] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1325.440035][T27656] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1325.628352][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1325.659693][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1325.675262][T27656] usb 4-1: Using ep0 maxpacket: 8 [ 1325.687984][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1325.697440][T27656] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1325.701386][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1325.733386][ T56] usb 1-1: SerialNumber: syz [ 1325.748321][T27656] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 1325.756481][T27656] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1325.760220][ T56] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1325.791935][T27656] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1325.811169][ T56] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1325.815588][T27656] usb 4-1: config 1 has no interface number 3 [ 1325.824905][T27656] usb 4-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 1325.840174][T27656] usb 4-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 1325.853383][ T56] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1325.867281][ T56] scsi host1: usb-storage 1-1:1.0 [ 1325.875125][T27656] usb 4-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 1325.936010][T27656] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 1325.990585][T27656] usb 4-1: config 1 interface 6 has no altsetting 0 [ 1326.036081][T27656] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1326.065323][T27656] usb 4-1: string descriptor 0 read error: -22 [ 1326.072043][T27656] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1326.088864][T27656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.145998][T27656] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1326.162631][T27656] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1326.177277][T27656] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1326.405553][T31119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11538'. [ 1326.519734][T31123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11540'. [ 1326.626843][T27656] usb 4-1: USB disconnect, device number 51 [ 1327.002954][T31137] x_tables: unsorted underflow at hook 3 [ 1327.051798][ T56] usb 1-1: USB disconnect, device number 80 [ 1328.239895][T31172] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11563'. [ 1328.422756][ T56] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1328.609144][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 1328.616991][ T56] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1328.627618][ T56] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1328.646734][ T56] usb 5-1: config 1 has no interface number 1 [ 1328.665297][ T56] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1328.693215][ T56] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1328.716476][ T56] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1328.751645][ T56] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1328.767797][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.786955][ T56] usb 5-1: Product: syz [ 1328.791215][ T56] usb 5-1: Manufacturer: syz [ 1328.805465][ T56] usb 5-1: SerialNumber: syz [ 1328.851451][T31170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1328.921133][T31182] netlink: 'syz.0.11568': attribute type 3 has an invalid length. [ 1329.071959][T31184] loop3: detected capacity change from 0 to 2048 [ 1329.094934][ T56] aqc111: probe of 5-1:1.105 failed with error -22 [ 1329.138339][T31184] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1329.193184][T31187] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1329.208899][T31184] syz.3.11570: attempt to access beyond end of device [ 1329.208899][T31184] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1329.312581][T31184] syz.3.11570: attempt to access beyond end of device [ 1329.312581][T31184] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1329.345346][T27656] usb 5-1: USB disconnect, device number 34 [ 1329.403102][T31184] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 1329.420187][T31177] loop2: detected capacity change from 0 to 32768 [ 1329.428377][T31184] NILFS (loop3): error -5 reading inode: ino=12 [ 1329.442483][T31177] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1329.507526][T12764] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1329.707979][T31193] delete_channel: no stack [ 1329.922406][T31197] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 1329.950897][T31197] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 1330.029376][T31196] loop3: detected capacity change from 0 to 8192 [ 1330.083114][T31197] bond6: entered allmulticast mode [ 1330.228456][T31196] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1330.303100][T31206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11580'. [ 1330.318995][T31206] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1330.347083][T31206] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11580'. [ 1330.886278][T31223] netlink: 'syz.2.11587': attribute type 2 has an invalid length. [ 1331.103668][T31229] loop4: detected capacity change from 0 to 2048 [ 1331.145521][T31229] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1331.174132][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1331.230888][T31229] syz.4.11590: attempt to access beyond end of device [ 1331.230888][T31229] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1331.246718][T31233] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1331.333985][T31229] syz.4.11590: attempt to access beyond end of device [ 1331.333985][T31229] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1331.387313][T31228] veth0_macvtap: left promiscuous mode [ 1331.409600][T31229] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 1331.424194][T31229] NILFS (loop4): error -5 reading inode: ino=12 [ 1331.695707][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1331.695724][ T28] audit: type=1326 audit(1783912293.181:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1331.769245][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1331.889798][ T28] audit: type=1326 audit(1783912293.203:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1331.986580][ T28] audit: type=1326 audit(1783912293.203:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1332.069989][ T28] audit: type=1326 audit(1783912293.203:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1332.183807][ T28] audit: type=1326 audit(1783912293.224:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1332.272067][ T28] audit: type=1326 audit(1783912293.224:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1332.376523][ T28] audit: type=1326 audit(1783912293.224:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1332.474393][ T28] audit: type=1326 audit(1783912293.224:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1332.570352][ T28] audit: type=1326 audit(1783912293.224:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31241 comm="syz.3.11598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1333.152195][T31287] netlink: 'syz.3.11614': attribute type 7 has an invalid length. [ 1333.223567][T31252] loop4: detected capacity change from 0 to 32768 [ 1333.277847][T31252] JBD2: Ignoring recovery information on journal [ 1333.293416][T31252] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1333.318127][T31252] JBD2: bad block at offset 32 [ 1333.342336][T31252] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1333.765821][T21045] ocfs2: Unmounting device (7,4) on (node local) [ 1334.222186][T31320] loop4: detected capacity change from 0 to 256 [ 1334.386189][T31320] FAT-fs (loop4): Directory bread(block 64) failed [ 1334.434955][T31320] FAT-fs (loop4): Directory bread(block 65) failed [ 1334.471767][T31320] FAT-fs (loop4): Directory bread(block 66) failed [ 1334.478410][T31320] FAT-fs (loop4): Directory bread(block 67) failed [ 1334.521611][T31320] FAT-fs (loop4): Directory bread(block 68) failed [ 1334.575528][T31320] FAT-fs (loop4): Directory bread(block 69) failed [ 1334.582352][T31320] FAT-fs (loop4): Directory bread(block 70) failed [ 1334.611670][T31320] FAT-fs (loop4): Directory bread(block 71) failed [ 1334.649596][T31320] FAT-fs (loop4): Directory bread(block 72) failed [ 1334.695676][T31320] FAT-fs (loop4): Directory bread(block 73) failed [ 1334.715803][T31335] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1334.907610][ T28] audit: type=1800 audit(1783912296.593:292): pid=31320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11627" name="file1" dev="loop4" ino=1048644 res=0 errno=0 [ 1335.283479][T31353] xt_cgroup: xt_cgroup: no path or classid specified [ 1336.893590][T31411] loop3: detected capacity change from 0 to 8 [ 1336.923259][ T56] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1336.953742][T31411] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1336.970423][T31411] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1337.122353][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1337.152745][ T56] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1337.207496][ T56] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1337.237455][ T56] usb 1-1: string descriptor 0 read error: -22 [ 1337.244073][ T56] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1337.258138][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.309414][T31422] loop3: detected capacity change from 0 to 512 [ 1337.344352][T31422] EXT4-fs: inline encryption not supported [ 1337.442814][T31422] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.11666: missing EA_INODE flag [ 1337.481262][T31422] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.11666: error while reading EA inode 11 err=-117 [ 1337.520993][T31422] EXT4-fs (loop3): 1 orphan inode deleted [ 1337.546136][T31422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.744508][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.894298][ T56] usb 1-1: USB disconnect, device number 81 [ 1337.966507][T31439] loop3: detected capacity change from 0 to 512 [ 1338.024981][T31439] EXT4-fs (loop3): filesystem is read-only [ 1338.046590][T31439] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1338.098379][T31439] EXT4-fs (loop3): filesystem is read-only [ 1338.122711][T31439] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1338.129921][T31439] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.11672: bg 0: block 64: padding at end of block bitmap is not set [ 1338.154115][T31439] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1338.170746][T31439] EXT4-fs (loop3): 1 orphan inode deleted [ 1338.179135][T31439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1338.356285][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.761798][T31461] loop2: detected capacity change from 0 to 64 [ 1338.889948][T31461] MINIX-fs: deleted inode referenced: 5 [ 1338.916551][T31461] MINIX-fs: deleted inode referenced: 5 [ 1339.328652][T31478] loop3: detected capacity change from 0 to 512 [ 1339.329851][T31479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11693'. [ 1339.374852][T31478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1339.460236][T31478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 1339.486230][T31478] System zones: 0-2, 18-18, 34-34 [ 1339.491738][T31478] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1339.500991][T31484] SET target dimension over the limit! [ 1339.530865][T31478] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #4: comm syz.3.11691: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1339.581159][T31478] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.11691: Bad quota inode: 4, type: 1 [ 1339.616002][T31478] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1339.654874][T31478] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1339.670401][T31478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1339.756918][T31478] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1339.813070][T31478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 1340.046954][T31496] loop2: detected capacity change from 0 to 4096 [ 1340.067911][T31478] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 1340.067911][T31478] [ 1340.154986][T31502] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1340.178108][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.273794][T31496] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1340.339615][T31496] Remounting filesystem read-only [ 1341.123418][T31530] loop4: detected capacity change from 0 to 4096 [ 1341.182288][T31535] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1341.245830][T31530] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1341.280553][T31530] Remounting filesystem read-only [ 1341.548666][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1342.120303][T31565] netlink: 'syz.4.11732': attribute type 3 has an invalid length. [ 1342.193098][T31567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11734'. [ 1342.248200][ T28] audit: type=1326 audit(1783912304.537:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31568 comm="syz.3.11735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1342.317929][ T28] audit: type=1326 audit(1783912304.537:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31568 comm="syz.3.11735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1342.411163][ T28] audit: type=1326 audit(1783912304.558:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31568 comm="syz.3.11735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1342.487504][ T28] audit: type=1326 audit(1783912304.558:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31568 comm="syz.3.11735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1342.559566][ T28] audit: type=1326 audit(1783912304.580:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31568 comm="syz.3.11735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37b9de59 code=0x7ffc0000 [ 1342.595600][T31579] gre1: entered promiscuous mode [ 1342.782026][T31583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11743'. [ 1344.324347][T31634] netlink: 'syz.3.11766': attribute type 9 has an invalid length. [ 1344.349141][T31634] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11766'. [ 1344.482424][T31636] MTD: Couldn't look up './file0': -15 [ 1344.912300][T31654] loop2: detected capacity change from 0 to 24 [ 1344.997669][T31654] romfs: read error for inode 0x8000 [ 1345.499730][T27656] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1345.723597][T27656] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1345.754472][T27656] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.785871][T27656] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1345.838270][T27656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1345.878864][T27656] usb 4-1: SerialNumber: syz [ 1346.144563][T27656] usb 4-1: 0:2 : does not exist [ 1346.176103][T27656] usb 4-1: USB disconnect, device number 52 [ 1346.224670][ T28] audit: type=1326 audit(1783912308.796:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31690 comm="syz.4.11790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1346.289586][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1346.350106][ T28] audit: type=1326 audit(1783912308.796:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31690 comm="syz.4.11790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1346.485502][ T28] audit: type=1326 audit(1783912308.839:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31690 comm="syz.4.11790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1346.566960][ T28] audit: type=1326 audit(1783912308.839:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31690 comm="syz.4.11790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1346.660448][ T28] audit: type=1326 audit(1783912308.839:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31690 comm="syz.4.11790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1346.956392][T31716] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 1347.007036][T31713] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1347.540723][T31728] Process accounting resumed [ 1347.580943][ T28] audit: type=1326 audit(1783912310.255:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1347.688924][ T28] audit: type=1326 audit(1783912310.255:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1347.828887][ T28] audit: type=1326 audit(1783912310.255:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1347.940172][ T28] audit: type=1326 audit(1783912310.277:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1348.070645][ T28] audit: type=1326 audit(1783912310.277:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1348.176642][ T28] audit: type=1326 audit(1783912310.277:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1348.282739][ T28] audit: type=1326 audit(1783912310.288:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1348.307100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.353383][T31763] ±ÿ: renamed from lo (while UP) [ 1348.401810][ T28] audit: type=1326 audit(1783912310.288:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1348.415467][ T5812] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1348.487813][ T28] audit: type=1326 audit(1783912310.288:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31738 comm="syz.2.11809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1348.512209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.620635][ T28] audit: type=1326 audit(1783912310.577:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31746 comm="syz.4.11811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1348.676733][T31766] loop2: detected capacity change from 0 to 4096 [ 1348.695540][ T5812] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1348.703716][ T5812] usb 5-1: config 0 has no interface number 0 [ 1348.715827][T31766] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1348.757002][ T5812] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1348.795469][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.838252][ T5812] usb 5-1: Product: syz [ 1348.842515][ T5812] usb 5-1: Manufacturer: syz [ 1348.881750][ T5812] usb 5-1: SerialNumber: syz [ 1348.889561][T31766] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1348.916402][ T5812] usb 5-1: config 0 descriptor?? [ 1349.137671][T31766] Process accounting resumed [ 1349.177220][ T5812] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 1349.210296][ T5812] usb 5-1: No valid video chain found. [ 1349.289431][ T5812] usb 5-1: USB disconnect, device number 35 [ 1349.685672][T31792] loop3: detected capacity change from 0 to 1024 [ 1349.718839][T31792] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1349.748638][T31795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11830'. [ 1349.816457][T31792] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 5: comm syz.3.11829: lblock 5 mapped to illegal pblock 5 (length 1) [ 1349.841293][T31792] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.11829: Failed to acquire dquot type 0 [ 1349.911381][T31792] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 5: comm syz.3.11829: lblock 5 mapped to illegal pblock 5 (length 1) [ 1349.964716][T31792] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.11829: Failed to acquire dquot type 0 [ 1350.019304][T31792] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.11829: Freeing blocks not in datazone - block = 0, count = 4096 [ 1350.041074][T31792] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 5: comm syz.3.11829: lblock 5 mapped to illegal pblock 5 (length 1) [ 1350.094114][T31792] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.11829: Failed to acquire dquot type 0 [ 1350.132933][T31792] EXT4-fs (loop3): 1 orphan inode deleted [ 1350.171320][T31792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.282106][T31792] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 5: comm syz.3.11829: lblock 5 mapped to illegal pblock 5 (length 1) [ 1350.480782][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.860010][T31819] netlink: 'syz.4.11841': attribute type 1 has an invalid length. [ 1350.904606][T31819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11841'. [ 1351.397745][T31836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11850'. [ 1351.841142][T31849] netlink: 'syz.4.11855': attribute type 13 has an invalid length. [ 1351.892019][ T5816] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1352.103990][ T5816] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1352.125939][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.153139][ T5816] usb 3-1: config 0 has no interface number 0 [ 1352.159352][ T5816] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1352.190226][ T5816] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1352.216364][ T5816] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1352.245726][ T5816] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1352.283960][ T5816] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1352.297644][ T5816] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1352.357980][ T5816] usb 3-1: Manufacturer: syz [ 1352.377666][ T5816] usb 3-1: config 0 descriptor?? [ 1352.393210][ T5816] hub 3-1:0.52: bad descriptor, ignoring hub [ 1352.412670][ T5816] hub: probe of 3-1:0.52 failed with error -5 [ 1352.611326][ T5816] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1352.626319][T31875] netlink: 'syz.0.11867': attribute type 4 has an invalid length. [ 1352.639064][ T5816] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 1352.700101][T31877] netlink: 180 bytes leftover after parsing attributes in process `syz.4.11868'. [ 1352.877009][T31883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1352.884378][T31883] IPv6: NLM_F_CREATE should be set when creating new route [ 1352.891775][T31883] IPv6: NLM_F_CREATE should be set when creating new route [ 1352.955419][ T8] usb 3-1: USB disconnect, device number 81 [ 1353.049630][T31888] autofs4:pid:31888:autofs_fill_super: called with bogus options [ 1353.426700][T31899] netlink: 'syz.0.11879': attribute type 1 has an invalid length. [ 1353.943424][T31916] ip6t_srh: unknown srh match flags 4000 [ 1354.186382][T31922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11890'. [ 1354.425044][T31930] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11894'. [ 1354.473984][T31902] loop2: detected capacity change from 0 to 32768 [ 1354.538521][T31902] [ 1354.538521][T31902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1354.538521][T31902] [ 1354.727654][ T5772] [ 1354.727654][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1354.727654][ T5772] [ 1354.746187][ T5772] [ 1354.746187][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1354.746187][ T5772] [ 1355.340084][T31954] netlink: 'syz.4.11906': attribute type 20 has an invalid length. [ 1355.598812][T31966] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1355.634935][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.035609][T31976] loop4: detected capacity change from 0 to 2048 [ 1356.079663][T31976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1356.200709][T31984] comedi comedi0: aio_aio12_8: I/O port conflict (0x3,32) [ 1356.882483][T32009] netlink: 'syz.3.11932': attribute type 10 has an invalid length. [ 1356.903211][T32008] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.11933'. [ 1356.906593][ T5816] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1356.999916][T32011] Cannot find add_set index 0 as target [ 1357.101647][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 1357.129259][ T5816] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1357.148069][ T5816] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1357.155363][ T5816] usb 3-1: config 0 has no interface number 0 [ 1357.187434][ T5816] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1357.196891][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.214217][ T5816] usb 3-1: Product: syz [ 1357.218609][ T5816] usb 3-1: Manufacturer: syz [ 1357.228812][ T5816] usb 3-1: SerialNumber: syz [ 1357.253347][ T5816] usb 3-1: config 0 descriptor?? [ 1357.273479][ T5816] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1357.304563][ T5816] usb 3-1: No valid video chain found. [ 1357.510682][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.523435][ T5816] usb 3-1: USB disconnect, device number 82 [ 1357.541648][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.583105][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.602726][T32026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1357.643006][T32026] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1357.840698][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.853050][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.871674][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.879983][T32026] wg1 speed is unknown, defaulting to 1000 [ 1357.924745][T32035] pimreg: entered allmulticast mode [ 1358.422828][T32052] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1359.318050][T32054] loop2: detected capacity change from 0 to 32768 [ 1359.362616][T32054] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1359.425840][ T5973] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1359.481927][T32060] loop3: detected capacity change from 0 to 32768 [ 1359.521198][T32060] jfs_strtoUCS: char2uni returned -22. [ 1359.535913][T32060] charset = cp949, char = 0xd4 [ 1360.288372][T32098] xt_CONNSECMARK: invalid mode: 129 [ 1360.411885][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1360.436217][T32101] netlink: 'syz.4.11978': attribute type 1 has an invalid length. [ 1360.709993][T32112] cgroup: noprefix used incorrectly [ 1360.851484][T32119] netlink: 'syz.4.11987': attribute type 10 has an invalid length. [ 1360.914244][ T8] wg1 speed is unknown, defaulting to 1000 [ 1360.930893][T32118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11986'. [ 1360.951140][ T5816] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1360.959697][T32118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11986'. [ 1361.143971][ T5816] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1361.156306][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.178559][ T5816] usb 4-1: config 0 has no interface number 0 [ 1361.193713][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1361.207681][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.230635][ T5816] usb 4-1: Product: syz [ 1361.234908][ T5816] usb 4-1: Manufacturer: syz [ 1361.259188][ T5816] usb 4-1: SerialNumber: syz [ 1361.293288][ T5816] usb 4-1: config 0 descriptor?? [ 1361.520286][ T5816] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 1361.527133][ T5816] usb 4-1: No valid video chain found. [ 1361.635136][T32140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11997'. [ 1361.694391][ T5816] usb 4-1: USB disconnect, device number 53 [ 1362.380405][T32166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12010'. [ 1362.823467][T32178] loop4: detected capacity change from 0 to 64 [ 1363.304081][T32161] loop2: detected capacity change from 0 to 32768 [ 1363.370538][T32161] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1363.595387][T32208] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1363.675435][T32161] XFS (loop2): Ending clean mount [ 1363.684490][T32207] loop3: detected capacity change from 0 to 4096 [ 1363.745237][T32207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.994419][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1364.137225][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.941522][T32236] netlink: 'syz.3.12040': attribute type 27 has an invalid length. [ 1365.025728][T32240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.153345][T32244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1365.326042][T32220] syz.4.12033 (32220): drop_caches: 2 [ 1365.425031][T32250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12046'. [ 1365.499153][T32254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12049'. [ 1365.560761][T32255] netlink: 'syz.0.12048': attribute type 1 has an invalid length. [ 1366.123600][T32271] loop3: detected capacity change from 0 to 4096 [ 1366.144865][T32277] overlayfs: missing 'lowerdir' [ 1366.241661][T32282] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1366.332569][T32271] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 1366.413477][T32271] Remounting filesystem read-only [ 1366.962818][ T56] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1367.170868][ T56] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1367.194763][ T56] usb 4-1: not running at top speed; connect to a high speed hub [ 1367.214505][ T56] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 1367.233231][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.258997][ T56] usb 4-1: config 1 has no interface number 0 [ 1367.282833][ T56] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1367.307726][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.330793][ T56] usb 4-1: Product: syz [ 1367.335088][ T56] usb 4-1: Manufacturer: syz [ 1367.353106][ T56] usb 4-1: SerialNumber: syz [ 1367.639704][ T56] peak_usb 4-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1367.662915][ T56] peak_usb 4-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1367.739018][ T56] peak_usb: probe of 4-1:1.93 failed with error -22 [ 1367.772606][ T56] usb 4-1: USB disconnect, device number 54 [ 1367.781923][T32323] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1367.820877][T32323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1368.626854][T32338] netlink: 'syz.3.12089': attribute type 2 has an invalid length. [ 1368.662450][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1368.662468][ T28] audit: type=1400 audit(1783912332.872:320): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=32339 comm="syz.2.12090" [ 1369.126361][ T8] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1369.354600][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.384698][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1369.417364][ T8] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1369.442808][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.454096][T32361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.458151][ T8] usb 3-1: Product: syz [ 1369.475952][ T8] usb 3-1: Manufacturer: syz [ 1369.486024][ T8] usb 3-1: SerialNumber: syz [ 1369.717612][ T8] usb 3-1: unit 4 not found! [ 1369.777861][ T8] usb 3-1: USB disconnect, device number 83 [ 1369.815577][T32372] netlink: 'syz.0.12105': attribute type 5 has an invalid length. [ 1369.847371][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1369.892747][T32370] loop4: detected capacity change from 0 to 1764 [ 1369.950950][T29675] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1369.991849][T32370] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1370.160317][T29675] usb 4-1: Using ep0 maxpacket: 16 [ 1370.172565][T29675] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1370.190216][T29675] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1370.199767][T29675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.215980][T29675] usb 4-1: Product: syz [ 1370.220242][T29675] usb 4-1: Manufacturer: syz [ 1370.224883][T29675] usb 4-1: SerialNumber: syz [ 1370.247935][T29675] r8152-cfgselector 4-1: config 0 descriptor?? [ 1370.299956][T27656] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1370.468384][T29675] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1370.497203][T27656] usb 1-1: Using ep0 maxpacket: 8 [ 1370.513378][T27656] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1370.525921][T27656] usb 1-1: config 179 has no interface number 0 [ 1370.534369][T27656] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1370.559594][T27656] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1370.590539][T32382] usb usb7: usbfs: process 32382 (syz.4.12111) did not claim interface 0 before use [ 1370.602778][T27656] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1370.635561][T27656] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1370.652366][T27656] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1370.690734][ T10] usb 4-1: USB disconnect, device number 55 [ 1370.707044][T27656] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1370.719144][T27656] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1370.739356][T27656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.791340][T27656] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input93 [ 1371.095460][T27656] usb 1-1: USB disconnect, device number 82 [ 1371.107827][T27656] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1371.406795][T32396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12118'. [ 1371.427588][T32396] openvswitch: netlink: Actions may not be safe on all matching packets [ 1371.807980][ T28] audit: type=1400 audit(1783912336.252:321): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=32411 comm="syz.4.12126" [ 1371.837781][T27656] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1372.033367][T27656] usb 4-1: Using ep0 maxpacket: 16 [ 1372.051372][T27656] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1372.060784][ T8] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1372.077778][T27656] usb 4-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1372.089705][T27656] usb 4-1: config 0 has no interface number 0 [ 1372.112827][T27656] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1372.123298][T27656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.131821][T27656] usb 4-1: Product: syz [ 1372.136248][T27656] usb 4-1: Manufacturer: syz [ 1372.140963][T27656] usb 4-1: SerialNumber: syz [ 1372.149103][T27656] usb 4-1: config 0 descriptor?? [ 1372.266840][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1372.295929][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.309775][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.379662][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.411012][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.419301][ T8] usb 1-1: Product: syz [ 1372.423543][ T8] usb 1-1: Manufacturer: syz [ 1372.438448][ T8] usb 1-1: SerialNumber: syz [ 1372.446397][T29675] usb 4-1: USB disconnect, device number 56 [ 1372.858998][ T8] usb 1-1: cannot find UAC_HEADER [ 1372.891899][ T8] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1372.912047][ T8] usb 1-1: USB disconnect, device number 83 [ 1372.965365][T12764] udevd[12764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.993103][T29675] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1373.188951][T29675] usb 3-1: Using ep0 maxpacket: 16 [ 1373.212438][T29675] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1373.226966][T29675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.237180][T29675] usb 3-1: Product: syz [ 1373.241616][T29675] usb 3-1: Manufacturer: syz [ 1373.246844][T29675] usb 3-1: SerialNumber: syz [ 1373.254661][T29675] usb 3-1: config 0 descriptor?? [ 1373.262955][T29675] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1373.281987][ T5812] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1373.462802][ T5812] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 1373.488771][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.518164][ T5812] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1373.537558][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.555592][ T5812] usb 5-1: Product: syz [ 1373.567587][ T5812] usb 5-1: Manufacturer: syz [ 1373.580327][ T5812] usb 5-1: SerialNumber: syz [ 1373.608373][ T5812] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input94 [ 1373.677236][T29675] ssu100: probe of 3-1:0.0 failed with error -71 [ 1373.707298][T29675] usb 3-1: USB disconnect, device number 84 [ 1373.776960][T32450] loop3: detected capacity change from 0 to 32768 [ 1373.792627][ T5123] bcm5974 5-1:1.0: could not read from device [ 1373.819552][ T5812] bcm5974 5-1:1.0: could not read from device [ 1373.856440][ T28] audit: type=1800 audit(1783912338.451:322): pid=32450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12145" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 1373.889705][ T5123] bcm5974 5-1:1.0: could not read from device [ 1373.921261][ T5812] input: failed to attach handler mousedev to device input94, error: -5 [ 1373.946369][ T5123] bcm5974 5-1:1.0: could not read from device [ 1373.964168][ T5123] bcm5974 5-1:1.0: could not read from device [ 1373.970701][ T5812] usb 5-1: USB disconnect, device number 36 [ 1374.497870][ T8] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1374.667918][T32473] loop4: detected capacity change from 0 to 1024 [ 1374.682131][T32473] EXT4-fs: Ignoring removed orlov option [ 1374.699962][T32473] EXT4-fs: inline encryption not supported [ 1374.717757][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1374.733644][T32473] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1374.745451][ T8] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1374.753654][ T8] usb 1-1: config 0 has no interface number 0 [ 1374.772648][T32473] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1374.790781][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1374.809170][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.818653][T32473] EXT4-fs (loop4): invalid journal inode [ 1374.828890][ T8] usb 1-1: Product: syz [ 1374.837439][ T8] usb 1-1: Manufacturer: syz [ 1374.847228][ T8] usb 1-1: SerialNumber: syz [ 1374.859744][ T8] usb 1-1: config 0 descriptor?? [ 1374.875922][T32473] EXT4-fs (loop4): can't get journal size [ 1374.916074][T32473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1375.003614][T32473] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 1375.003614][T32473] [ 1375.078794][ T8] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1375.088883][ T8] usb 1-1: No valid video chain found. [ 1375.101772][ T8] usb 1-1: USB disconnect, device number 84 [ 1375.162800][T21045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.228701][T32485] xt_bpf: check failed: parse error [ 1375.366064][T32491] loop2: detected capacity change from 0 to 64 [ 1375.596808][ T28] audit: type=1326 audit(1783912340.318:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.2.12167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1375.664465][T32459] Process accounting paused [ 1375.686738][ T28] audit: type=1326 audit(1783912340.318:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.2.12167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1375.795263][ T28] audit: type=1326 audit(1783912340.361:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.2.12167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1375.865511][T32501] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12170'. [ 1375.892313][ T28] audit: type=1326 audit(1783912340.361:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.2.12167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1375.917330][T32501] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12170'. [ 1375.944839][ T28] audit: type=1326 audit(1783912340.361:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.2.12167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1376.161037][T32489] loop4: detected capacity change from 0 to 32768 [ 1376.455582][ T2956] read_mapping_page failed! [ 1376.480892][ T2956] ERROR: (device loop4): txCommit: [ 1376.480892][ T2956] [ 1376.507380][T32512] netlink: 23 bytes leftover after parsing attributes in process `syz.0.12175'. [ 1376.529517][ T2956] ERROR: (device loop4): remounting filesystem as read-only [ 1376.553550][ T2956] jfs_write_inode: jfs_commit_inode failed! [ 1376.979703][T32525] loop3: detected capacity change from 0 to 256 [ 1377.136370][T32525] FAT-fs (loop3): Directory bread(block 64) failed [ 1377.166523][T32525] FAT-fs (loop3): Directory bread(block 65) failed [ 1377.196161][T32525] FAT-fs (loop3): Directory bread(block 66) failed [ 1377.216717][T32525] FAT-fs (loop3): Directory bread(block 67) failed [ 1377.223489][T32525] FAT-fs (loop3): Directory bread(block 68) failed [ 1377.276824][T32525] FAT-fs (loop3): Directory bread(block 69) failed [ 1377.306488][T32525] FAT-fs (loop3): Directory bread(block 70) failed [ 1377.314140][T32530] Process accounting paused [ 1377.337143][T32525] FAT-fs (loop3): Directory bread(block 71) failed [ 1377.343900][T32525] FAT-fs (loop3): Directory bread(block 72) failed [ 1377.373856][T32525] FAT-fs (loop3): Directory bread(block 73) failed [ 1377.614710][T32539] bridge3: entered promiscuous mode [ 1377.626356][T32541] loop4: detected capacity change from 0 to 64 [ 1379.158687][T32551] loop2: detected capacity change from 0 to 40427 [ 1379.202316][T32551] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1379.210102][T32551] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1379.234705][T32551] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 1379.249577][T32551] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1379.268037][T32551] F2FS-fs (loop2): invalid crc value [ 1379.282979][T32551] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1379.522274][T32551] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1379.566089][T32551] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1379.648890][T32598] netlink: 'syz.4.12216': attribute type 21 has an invalid length. [ 1379.683788][T32598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12216'. [ 1379.712368][T32598] netlink: 'syz.4.12216': attribute type 1 has an invalid length. [ 1379.739104][T32601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12218'. [ 1379.898046][ T5772] syz-executor: attempt to access beyond end of device [ 1379.898046][ T5772] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1379.945128][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1379.963038][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1380.189186][ T8] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1380.217734][T32611] loop4: detected capacity change from 0 to 128 [ 1380.252714][T32611] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1380.282479][T32611] FAT-fs (loop4): Filesystem has been set read-only [ 1380.366033][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1380.373915][ T8] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1380.386549][ T8] usb 1-1: config 0 has no interface number 0 [ 1380.392742][ T8] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 65519, setting to 1024 [ 1380.449462][ T8] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1380.476024][ T8] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1380.498315][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.514425][ T8] usb 1-1: Product: syz [ 1380.520580][ T8] usb 1-1: Manufacturer: syz [ 1380.530155][ T8] usb 1-1: SerialNumber: syz [ 1380.540861][ T8] usb 1-1: config 0 descriptor?? [ 1380.552179][T32603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1380.579466][ T8] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1380.605149][T32618] loop4: detected capacity change from 0 to 512 [ 1380.608646][ T8] em28xx 1-1:0.132: Video interface 132 found: bulk [ 1380.703583][T32618] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1380.776688][T32618] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1380.818235][T32618] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1380.828012][T32618] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.12227: Failed to acquire dquot type 1 [ 1380.844233][T32618] EXT4-fs (loop4): 1 truncate cleaned up [ 1380.852062][T32618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1380.870901][ T8] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1380.942013][T21045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.980229][ T8] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1381.029190][ T8] em28xx 1-1:0.132: board has no eeprom [ 1381.065587][ T5812] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1381.115011][ T8] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1381.138683][ T8] em28xx 1-1:0.132: analog set to bulk mode. [ 1381.152366][T27656] em28xx 1-1:0.132: Registering V4L2 extension [ 1381.177066][ T8] usb 1-1: USB disconnect, device number 85 [ 1381.206149][ T8] em28xx 1-1:0.132: Disconnecting em28xx [ 1381.253682][ T5812] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1381.270241][ T5812] usb 4-1: config 0 has no interface number 0 [ 1381.318867][ T5812] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1381.356935][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.372621][ T5812] usb 4-1: Product: syz [ 1381.377122][ T5812] usb 4-1: Manufacturer: syz [ 1381.391448][ T5812] usb 4-1: SerialNumber: syz [ 1381.421183][ T5812] usb 4-1: config 0 descriptor?? [ 1381.745039][T27656] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1381.762064][T27656] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1381.779829][T27656] em28xx 1-1:0.132: No AC97 audio processor [ 1381.825636][ T5812] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1381.854512][ T5812] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1381.880642][T27656] usb 1-1: Decoder not found [ 1381.889152][ T5812] asix: probe of 4-1:0.251 failed with error -5 [ 1381.898464][T27656] em28xx 1-1:0.132: failed to create media graph [ 1381.926464][T27656] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1381.933477][ T5812] usb 4-1: USB disconnect, device number 57 [ 1382.014070][T27656] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1382.051190][T32648] overlayfs: conflicting options: nfs_export=on,index=off [ 1382.078524][ T8] em28xx 1-1:0.132: Closing input extension [ 1382.227225][ T8] em28xx 1-1:0.132: Freeing device [ 1382.522700][T32659] syz.4.12244 uses old SIOCAX25GETINFO [ 1382.807743][T32667] bond5: entered promiscuous mode [ 1382.813839][T32667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1382.914614][T32670] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 1383.051214][T32676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12252'. [ 1383.091228][T32676] netlink: 540 bytes leftover after parsing attributes in process `syz.4.12252'. [ 1383.638041][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1383.844247][ T8] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1383.866095][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.896886][ T8] usb 4-1: config 0 has no interface number 0 [ 1383.903606][ T8] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1383.926026][ T8] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1383.963306][ T8] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1383.972446][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.993242][ T8] usb 4-1: Product: syz [ 1383.997507][ T8] usb 4-1: Manufacturer: syz [ 1384.012214][ T8] usb 4-1: SerialNumber: syz [ 1384.062457][ T8] usb 4-1: config 0 descriptor?? [ 1384.439257][T27656] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1384.489977][ T8] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 1384.521268][ T8] usb 4-1: USB disconnect, device number 58 [ 1384.648186][T27656] usb 5-1: Using ep0 maxpacket: 8 [ 1384.659019][T27656] usb 5-1: config 0 has an invalid interface number: 88 but max is 3 [ 1384.672230][T27656] usb 5-1: config 0 has an invalid interface number: 250 but max is 3 [ 1384.680519][T27656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.700235][T27656] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1384.709279][T27656] usb 5-1: config 0 has no interface number 0 [ 1384.749925][T27656] usb 5-1: config 0 has no interface number 1 [ 1384.758847][T27656] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1384.775403][T27656] usb 5-1: config 0 interface 250 has no altsetting 0 [ 1384.782302][T27656] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1384.807726][T27656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.830754][T27656] usb 5-1: config 0 descriptor?? [ 1384.845975][T32728] program syz.2.12275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.017915][ T28] audit: type=1107 audit(1783912350.414:328): pid=32731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1385.035280][T27656] usb 5-1: string descriptor 0 read error: -71 [ 1385.293515][T27656] usb 5-1: USB disconnect, device number 37 [ 1385.492234][T32743] netlink: 'syz.2.12281': attribute type 15 has an invalid length. [ 1385.635863][T32747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12284'. [ 1385.969345][T32753] bond4: entered promiscuous mode [ 1386.009173][T32753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1386.834797][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12301'. [ 1386.912584][ T327] nfs: Unknown parameter 'ntext' [ 1387.051967][ T331] loop4: detected capacity change from 0 to 256 [ 1387.522676][ T343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12309'. [ 1387.784722][ T320] loop3: detected capacity change from 0 to 32768 [ 1387.810145][ T320] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1387.833850][ T320] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1387.865786][ T320] BTRFS info (device loop3): setting nodatasum [ 1387.873549][ T320] BTRFS info (device loop3): force zlib compression, level 3 [ 1387.881801][ T320] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1387.891617][ T320] BTRFS info (device loop3): use lzo compression, level 0 [ 1387.905561][ T320] BTRFS info (device loop3): turning on flush-on-commit [ 1387.914250][ T320] BTRFS info (device loop3): enabling auto defrag [ 1387.937513][ T320] BTRFS info (device loop3): max_inline at 4096 [ 1387.951151][ T320] BTRFS info (device loop3): using free space tree [ 1388.115713][ T320] BTRFS info (device loop3): enabling ssd optimizations [ 1388.552953][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1388.731152][ T388] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1389.154220][ T5973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5973) [ 1389.397882][ T409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12333'. [ 1389.472479][ T409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12333'. [ 1389.517357][ T409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12333'. [ 1389.834803][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1390.131005][ T429] netlink: 'syz.4.12343': attribute type 1 has an invalid length. [ 1390.180266][ T429] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.12343'. [ 1390.428210][ T439] loop2: detected capacity change from 0 to 256 [ 1390.600282][ T439] FAT-fs (loop2): Directory bread(block 64) failed [ 1390.609815][ T5812] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1390.617937][ T439] FAT-fs (loop2): Directory bread(block 65) failed [ 1390.641247][ T439] FAT-fs (loop2): Directory bread(block 66) failed [ 1390.650204][ T445] netlink: 'syz.4.12351': attribute type 12 has an invalid length. [ 1390.658436][ T439] FAT-fs (loop2): Directory bread(block 67) failed [ 1390.665201][ T445] netlink: 120 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1390.678727][ T439] FAT-fs (loop2): Directory bread(block 68) failed [ 1390.693239][ T439] FAT-fs (loop2): Directory bread(block 69) failed [ 1390.700223][ T439] FAT-fs (loop2): Directory bread(block 70) failed [ 1390.708193][ T439] FAT-fs (loop2): Directory bread(block 71) failed [ 1390.716258][ T439] FAT-fs (loop2): Directory bread(block 72) failed [ 1390.723333][ T439] FAT-fs (loop2): Directory bread(block 73) failed [ 1390.795488][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1390.854469][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1390.892513][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12353'. [ 1390.901978][ T5812] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1390.947090][ T5812] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1390.976022][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.003614][ T5812] usb 1-1: Product: syz [ 1391.018001][ T5812] usb 1-1: Manufacturer: syz [ 1391.027766][ T5812] usb 1-1: SerialNumber: syz [ 1391.064136][ T5812] usb 1-1: config 0 descriptor?? [ 1391.530684][ T5812] usb 1-1: USB disconnect, device number 86 [ 1391.652831][ T471] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1391.787428][ T478] vivid-000: ================= START STATUS ================= [ 1391.807874][ T478] vivid-000: Test Pattern: 100% White [ 1391.808251][ T477] netlink: 'syz.2.12366': attribute type 1 has an invalid length. [ 1391.817085][ T478] vivid-000: Fill Percentage of Frame: 100 [ 1391.834956][ T478] vivid-000: Horizontal Movement: Move Right Fast [ 1391.843767][ T478] vivid-000: Vertical Movement: No Movement [ 1391.856753][ T478] vivid-000: OSD Text Mode: All [ 1391.862403][ T478] vivid-000: Show Border: false [ 1391.867901][ T478] vivid-000: Show Square: true [ 1391.872951][ T478] vivid-000: Sensor Flipped Horizontally: true [ 1391.884860][ T478] vivid-000: Sensor Flipped Vertically: false [ 1391.891648][ T478] vivid-000: Insert SAV Code in Image: true [ 1391.907773][ T478] vivid-000: Insert EAV Code in Image: false [ 1391.923914][ T478] vivid-000: Insert Video Guard Band: true [ 1391.935723][ T478] vivid-000: Reduced Framerate: false [ 1391.949390][ T478] vivid-000: Enable Capture Cropping: true [ 1391.956647][ T478] vivid-000: Enable Capture Composing: true [ 1391.967331][ T478] vivid-000: Enable Capture Scaler: true [ 1391.973623][ T478] vivid-000: Timestamp Source: End of Frame [ 1391.984851][ T478] vivid-000: Colorspace: Rec. 709 [ 1391.990554][ T478] vivid-000: Transfer Function: Rec. 709 [ 1391.996293][ T478] vivid-000: Y'CbCr Encoding: Default [ 1392.007374][ T478] vivid-000: HSV Encoding: Hue 0-179 [ 1392.012912][ T478] vivid-000: Quantization: Limited Range [ 1392.045051][ T478] vivid-000: Apply Alpha To Red Only: false [ 1392.051077][ T478] vivid-000: Standard Aspect Ratio: 4x3 [ 1392.076958][ T483] loop2: detected capacity change from 0 to 16 [ 1392.091921][ T478] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1392.108048][ T483] erofs: (device loop2): mounted with root inode @ nid 36. [ 1392.123402][ T478] vivid-000: DV Timings: 640x480p59 inactive [ 1392.142687][ T478] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1392.175120][ T478] vivid-000: Maximum EDID Blocks: 2 [ 1392.188700][ T478] vivid-000: Limited RGB Range (16-235): true [ 1392.210753][ T478] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 1392.210884][ T478] vivid-000: Power Present: 0x00000001 [ 1392.210956][ T478] tpg source WxH: 1280x720 (R'G'B) [ 1392.211072][ T478] tpg field: 1 [ 1392.211082][ T478] tpg crop: 16x16@0x8 [ 1392.211099][ T478] tpg compose: 16x16@0x0 [ 1392.211115][ T478] tpg colorspace: 3 [ 1392.211125][ T478] tpg transfer function: 1/0 [ 1392.211136][ T478] tpg quantization: 2/0 [ 1392.211148][ T478] tpg RGB range: 2/1 [ 1392.211159][ T478] vivid-000: ================== END STATUS ================== [ 1392.261110][ T487] netlink: 'syz.0.12370': attribute type 10 has an invalid length. [ 1392.261138][ T487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12370'. [ 1392.264290][ T487] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1392.264309][ T487] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.264351][ T487] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1393.246124][ T518] macvtap0: entered allmulticast mode [ 1393.275766][ T518] veth0_macvtap: entered allmulticast mode [ 1394.078003][ T544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12397'. [ 1394.107009][ T544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12397'. [ 1394.500411][ T558] loop2: detected capacity change from 0 to 512 [ 1394.531992][ T558] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1394.559340][ T558] EXT4-fs (loop2): Remounting filesystem read-only [ 1394.570489][ T558] EXT4-fs (loop2): 1 truncate cleaned up [ 1394.577613][ T558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.699714][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.214300][ T586] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12416'. [ 1395.244139][ T586] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1395.264895][ T586] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1395.918687][ T613] loop4: detected capacity change from 0 to 1024 [ 1396.052329][ T176] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1396.251349][ T176] usb 3-1: Using ep0 maxpacket: 16 [ 1396.269409][ T176] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1396.271984][ T623] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1396.285524][ T623] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1396.305298][ T176] usb 3-1: config 0 has no interface number 0 [ 1396.332374][ T176] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1396.359401][ T176] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1396.369126][ T176] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1396.377276][ T176] usb 3-1: Product: syz [ 1396.416007][ T176] usb 3-1: SerialNumber: syz [ 1396.441758][ T176] usb 3-1: config 0 descriptor?? [ 1396.475123][ T176] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input96 [ 1396.695826][ T5812] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1396.787954][ T635] loop4: detected capacity change from 0 to 164 [ 1396.809046][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1396.816208][ T5816] usb 3-1: USB disconnect, device number 85 [ 1396.824011][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1396.831056][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1396.872243][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 1396.880389][ T5812] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1396.890630][ T5816] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1396.914189][ T5812] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1396.933649][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.961697][ T5812] usb 4-1: Product: syz [ 1396.971537][ T5812] usb 4-1: Manufacturer: syz [ 1396.980267][ T5812] usb 4-1: SerialNumber: syz [ 1397.002291][ T5812] r8152-cfgselector 4-1: config 0 descriptor?? [ 1397.455822][ T5812] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1397.491576][ T5812] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 1397.798761][ T662] netlink: 'syz.4.12452': attribute type 1 has an invalid length. [ 1397.807545][ T660] libceph: resolve '‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1398.094183][ T671] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 1398.158185][ T673] overlayfs: conflicting options: nfs_export=on,index=off [ 1398.828104][ T699] loop2: detected capacity change from 0 to 128 [ 1398.868753][ T699] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1398.939087][ T699] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1399.470442][ T719] loop4: detected capacity change from 0 to 256 [ 1399.519994][ T719] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1399.547515][ T719] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1399.609956][ T719] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d) [ 1399.954557][ T732] loop4: detected capacity change from 0 to 512 [ 1400.056123][ T732] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.12486: bad orphan inode 11862016 [ 1400.078562][ T732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1400.092848][ T732] ext4 filesystem being mounted at /1308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.271848][ T745] loop3: detected capacity change from 0 to 512 [ 1400.322847][ T745] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1400.398103][ T745] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.12490: bad orphan inode 13 [ 1400.435794][T21045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1400.457428][ T745] ext4_test_bit(bit=12, block=18) = 1 [ 1400.491270][ T745] is_bad_inode(inode)=0 [ 1400.502511][ T745] NEXT_ORPHAN(inode)=0 [ 1400.506670][ T745] max_ino=32 [ 1400.527990][ T745] i_nlink=1 [ 1400.532819][ T745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1400.624412][ T745] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1400.700184][ T757] loop4: detected capacity change from 0 to 8 [ 1400.709792][ T745] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.12490: bg 0: block 248: padding at end of block bitmap is not set [ 1400.787930][ T745] Quota error (device loop3): write_blk: dquota write failed [ 1400.796351][ T745] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1400.852779][ T745] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.12490: Failed to acquire dquot type 1 [ 1401.017499][ T766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12500'. [ 1401.063223][ T766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12500'. [ 1401.082272][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1401.605432][ T780] bond5: entered promiscuous mode [ 1402.257519][ T28] audit: type=1326 audit(1783912368.922:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.281559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.346193][ T28] audit: type=1326 audit(1783912368.922:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.370239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.422794][ T28] audit: type=1326 audit(1783912368.922:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.446946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.483036][ T28] audit: type=1326 audit(1783912368.922:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.508151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.582676][ T28] audit: type=1326 audit(1783912368.922:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.606729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.695402][ T28] audit: type=1326 audit(1783912368.922:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.789742][ T28] audit: type=1326 audit(1783912368.922:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1402.822965][ T28] audit: type=1326 audit(1783912368.922:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=811 comm="syz.4.12522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f650779de59 code=0x7ffc0000 [ 1403.283893][ T842] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1403.434476][T29673] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1403.467925][ T814] bridge0: port 1(hsr0) entered disabled state [ 1403.474461][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.625152][T29673] usb 1-1: Using ep0 maxpacket: 32 [ 1403.640384][T29673] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.673707][T29673] usb 1-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 1403.691691][T29673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.706379][T29673] usb 1-1: Product: syz [ 1403.710616][T29673] usb 1-1: Manufacturer: syz [ 1403.715936][T29673] usb 1-1: SerialNumber: syz [ 1403.731927][T29673] usb 1-1: config 0 descriptor?? [ 1403.740767][T29673] ums-datafab 1-1:0.0: USB Mass Storage device detected [ 1403.758242][T29673] ums-datafab 1-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 1403.823320][T29673] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 1403.991774][ T8] usb 1-1: USB disconnect, device number 87 [ 1404.255528][ T850] loop4: detected capacity change from 0 to 32768 [ 1404.274739][ T850] [ 1404.274739][ T850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1404.274739][ T850] [ 1404.310296][ T814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.378916][T21045] [ 1404.378916][T21045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1404.378916][T21045] [ 1404.401622][T21045] [ 1404.401622][T21045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1404.401622][T21045] [ 1404.435269][ T814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.549832][ T836] Process accounting resumed [ 1405.075392][ T814] veth1_macvtap: left allmulticast mode [ 1405.281269][ T814] netdevsim netdevsim3 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.290268][ T814] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.299451][ T814] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.308491][ T814] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.345767][ T814] netdevsim netdevsim3 ªªªªªª: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1405.355431][ T814] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1405.365262][ T814] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1405.374851][ T814] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1405.578860][ T852] Process accounting resumed [ 1405.754878][ T875] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1406.008578][ T882] netlink: 'syz.2.12552': attribute type 10 has an invalid length. [ 1406.017838][ T882] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.12552'. [ 1406.154795][ T887] loop4: detected capacity change from 0 to 512 [ 1406.166264][ T887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1406.213008][ T887] EXT4-fs (loop4): 1 truncate cleaned up [ 1406.245867][ T887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1406.419364][T21045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.992658][ T907] block device autoloading is deprecated and will be removed. [ 1407.922048][ T961] loop2: detected capacity change from 0 to 128 [ 1408.019731][ T961] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1408.106410][ T961] ext4 filesystem being mounted at /3107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.204051][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1408.459788][ T981] loop3: detected capacity change from 0 to 512 [ 1408.492431][ T981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1408.529224][ T981] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.12591: invalid block [ 1408.565379][ T981] EXT4-fs (loop3): Remounting filesystem read-only [ 1408.572617][ T981] EXT4-fs (loop3): 2 truncates cleaned up [ 1408.581295][ T981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.830413][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.936936][ T998] qrtr: Invalid version 15 [ 1409.187381][ T1008] netlink: 'syz.2.12602': attribute type 63 has an invalid length. [ 1409.343603][ T1014] deleting an unspecified loop device is not supported. [ 1409.613863][ T1027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1409.646172][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1409.679531][ T1027] vlan0: entered promiscuous mode [ 1410.011859][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12616'. [ 1410.255343][ T1060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12622'. [ 1410.409525][ T1065] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1410.520026][ T5816] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1410.704175][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 1410.716337][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.746536][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1410.779329][ T5816] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1410.807216][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.835072][ T5816] usb 1-1: Product: syz [ 1410.839504][ T5816] usb 1-1: Manufacturer: syz [ 1410.872071][ T5816] usb 1-1: SerialNumber: syz [ 1411.134487][ T5816] usb 1-1: 0:2 : does not exist [ 1411.165035][ T5816] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1411.237565][ T5816] usb 1-1: USB disconnect, device number 88 [ 1411.362881][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.664143][ T1101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12640'. [ 1412.596169][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1412.596188][ T28] audit: type=1326 audit(1783912380.005:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1412.699086][ T28] audit: type=1326 audit(1783912380.015:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1412.723217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.760784][ T28] audit: type=1326 audit(1783912380.080:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1412.785049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.900510][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1412.913522][ T28] audit: type=1326 audit(1783912380.080:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1412.937661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.012252][ T28] audit: type=1326 audit(1783912380.090:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1413.036325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.070395][ T1152] netlink: 'syz.0.12664': attribute type 13 has an invalid length. [ 1413.119270][ T1152] netlink: 172 bytes leftover after parsing attributes in process `syz.0.12664'. [ 1413.120491][ T28] audit: type=1326 audit(1783912380.090:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1413.187489][ T28] audit: type=1326 audit(1783912380.090:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1413.213698][ T28] audit: type=1326 audit(1783912380.090:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1413.237842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.258281][ T1152] erspan0: refused to change device tx_queue_len [ 1413.388213][ T28] audit: type=1326 audit(1783912380.090:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1141 comm="syz.2.12659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faae119de59 code=0x7ffc0000 [ 1413.475668][ T1164] netlink: 'syz.4.12668': attribute type 6 has an invalid length. [ 1413.785844][ T1177] netlink: 216 bytes leftover after parsing attributes in process `syz.3.12676'. [ 1413.798254][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12676'. [ 1414.584525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.608756][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12688'. [ 1414.804351][ T1208] loop4: detected capacity change from 0 to 512 [ 1414.828127][ T1208] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1414.842260][ T1208] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1414.870929][ T1208] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 1414.889643][ T1208] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.12690: Failed to acquire dquot type 1 [ 1414.992775][ T1208] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.12690: bg 0: block 40: padding at end of block bitmap is not set [ 1415.071908][ T1208] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1415.127177][ T1208] EXT4-fs (loop4): 1 truncate cleaned up [ 1415.140042][ T1208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1415.207094][ T1208] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.12690: bad symlink. [ 1415.310449][ T1223] loop3: detected capacity change from 0 to 8 [ 1415.332401][T21045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.605849][ T1229] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12698'. [ 1415.663022][ T1229] netlink: 'syz.4.12698': attribute type 3 has an invalid length. [ 1415.691279][ T1229] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12698'. [ 1417.311365][ T1249] loop3: detected capacity change from 0 to 32768 [ 1417.355729][ T1249] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1417.406531][ T1249] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 1417.535311][ T1249] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1417.576611][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1417.583668][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1417.608032][ T1302] tmpfs: Bad value for 'mpol' [ 1417.620475][ T10] kworker/0:1: attempt to access beyond end of device [ 1417.620475][ T10] loop3: rw=0, sector=43980465111760, nr_sectors = 8 limit=32768 [ 1417.803311][ T10] gfs2: fsid=syz:syz.0: jid=0: Failed [ 1417.829676][ T1249] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 1419.534171][ T1333] loop2: detected capacity change from 0 to 32768 [ 1419.583890][ T1333] (syz.2.12746,1333,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1419.654038][ T1333] (syz.2.12746,1333,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1419.761810][ T1333] JBD2: Ignoring recovery information on journal [ 1419.907280][ T1333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1420.395202][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 1420.751058][ T1385] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1421.164725][T27656] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1421.377407][T27656] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1421.392700][T27656] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1421.414115][T27656] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1421.436945][T27656] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1421.459934][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1421.486300][T27656] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1421.519800][T27656] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1421.533442][T27656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.576327][T27656] usb 3-1: Product: syz [ 1421.580592][T27656] usb 3-1: Manufacturer: syz [ 1421.593794][T27656] usb 3-1: SerialNumber: syz [ 1421.701615][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1421.736027][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1421.767385][ T10] usb 5-1: Product: syz [ 1421.785071][ T10] usb 5-1: SerialNumber: syz [ 1421.793613][ T10] usb 5-1: config 0 descriptor?? [ 1421.929720][T27656] usb 3-1: USB disconnect, device number 86 [ 1422.068313][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1422.231856][ T10] usb 5-1: USB disconnect, device number 38 [ 1422.448534][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1422.570121][ T1435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12797'. [ 1422.593231][ T1435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12797'. [ 1423.735480][ T1480] netlink: 'syz.3.12818': attribute type 21 has an invalid length. [ 1424.477316][ T1502] netlink: 'syz.3.12829': attribute type 4 has an invalid length. [ 1424.510834][ T1502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12829'. [ 1425.390317][ T1534] futex_wake_op: syz.3.12844 tries to shift op by 32; fix this program [ 1425.578125][ T1540] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1426.055647][ T5816] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1426.242060][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 1426.250002][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1426.262421][ T5816] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1426.275094][ T5816] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.316417][ T5816] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1426.344355][ T5816] usb 4-1: config 128 has no interface number 0 [ 1426.350750][ T5816] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1426.387713][ T1565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12859'. [ 1426.397795][ T5816] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1426.428581][ T5816] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1426.445040][ T5816] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1426.482338][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.500644][ T5816] usb 4-1: Product: syz [ 1426.510786][ T5816] usb 4-1: Manufacturer: syz [ 1426.525884][ T5816] usb 4-1: SerialNumber: syz [ 1426.838395][ T1577] netlink: 'syz.4.12865': attribute type 1 has an invalid length. [ 1426.847293][ T5816] usb 4-1: USB disconnect, device number 60 [ 1426.930599][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.015185][ T1613] loop4: detected capacity change from 0 to 256 [ 1428.025358][ T1613] exfat: Deprecated parameter 'utf8' [ 1428.030917][ T1613] exfat: Deprecated parameter 'namecase' [ 1428.047174][ T1613] exfat: Deprecated parameter 'namecase' [ 1428.089500][ T1613] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1428.518777][ T1623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12888'. [ 1428.822749][ T1606] loop3: detected capacity change from 0 to 32768 [ 1428.850386][ T1606] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1429.108085][ T5973] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1429.815544][ T1657] netlink: 388 bytes leftover after parsing attributes in process `syz.0.12903'. [ 1430.043092][ T1663] Cannot find del_set index 2 as target [ 1430.302717][ T1669] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1430.341168][ T1669] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1430.992705][ T1687] netlink: 'syz.0.12918': attribute type 46 has an invalid length. [ 1431.023506][ T1687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12918'. [ 1431.435882][ T1696] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12922'. Stopping sshd: [ 1432.776911][ T1724] Process accounting paused stopped /usr/sbin/sshd (pid 5529) OK [ 1433.027357][ T1693] loop2: detected capacity change from 0 to 32768 [ 1433.131533][ T1693] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 Stopping crond: [ 1433.511587][ T1693] XFS (loop2): Ending clean mount stopped /usr/sbin/crond (pid 5513) OK [ 1433.725936][ T1693] Process accounting paused [ 1433.809108][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5433) [ 1435.011748][ T1795] netlink: 'syz.0.12960': attribute type 29 has an invalid length. [ 1435.038113][ T1797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12961'. [ 1435.077138][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12960'. [ 1435.139526][ T1795] netlink: 'syz.0.12960': attribute type 29 has an invalid length. Stopping network: [ 1435.190067][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12960'. [ 1436.621870][ T1848] netlink: 276 bytes leftover after parsing attributes in process `syz.2.12979'. OK Stopping iptables: OK [ 1437.440446][ T1873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12987'. [ 1437.479815][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12987'. Stopping system message bus: [ 1437.881834][ T1878] loop3: detected capacity change from 0 to 4096 [ 1437.948667][ T1878] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1437.959343][ T1837] loop4: detected capacity change from 0 to 40427 [ 1438.081364][ T1878] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1438.089766][ T1837] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1438.135447][ T1837] F2FS-fs (loop4): Image doesn't support compression [ 1438.142575][ T1837] F2FS-fs (loop4): Image doesn't support compression [ 1438.198587][ T1837] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 1438.249756][ T1837] F2FS-fs (loop4): invalid crc value [ 1438.345192][ T1837] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1438.549038][ T1837] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1438.684255][ T1901] usb usb8: usbfs: process 1901 (syz.2.12997) did not claim interface 0 before use [ 1438.701373][ T1837] syz.4.12975: attempt to access beyond end of device [ 1438.701373][ T1837] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1438.962340][T21045] syz-executor: attempt to access beyond end of device [ 1438.962340][T21045] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1439.013629][ T1908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12999'. [ 1439.026514][T21045] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1439.049802][ T1908] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12999'. done [ 1439.989723][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1440.000320][ T1933] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1440.007199][ T1933] [U] J"—e:ÀÆ" [ 1440.218254][ T10] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1440.230558][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.260863][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.338911][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.382592][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.439937][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.462290][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.487312][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.522768][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.558189][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 1440.567329][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.626617][ T10] pwc: Logitech QuickCam detected (reserved ID). [ 1440.642544][ T10] pwc: Warning: more than 1 configuration available. [ 1441.057899][ T10] pwc: send_video_command error -71 [ 1441.080076][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1441.096897][ T10] Philips webcam: probe of 3-1:250.0 failed with error -71 [ 1441.169702][ T10] usb 3-1: USB disconnect, device number 87 Stopping klogd: OK Stopping acpid: [ 1442.486677][ T2022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13047'. [ 1442.691049][ T2033] openvswitch: netlink: Actions may not be safe on all matching packets [ 1442.925905][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1443.123590][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1443.140940][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.160919][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1443.186161][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1443.195321][ T10] usb 1-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1443.207508][ T10] usb 1-1: Product: syz [ 1443.212149][ T10] usb 1-1: Manufacturer: syz [ 1443.223608][ T10] usb 1-1: SerialNumber: syz OK [ 1443.348359][ T2065] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13067'. [ 1443.374142][ T2065] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13067'. [ 1443.424761][ T2067] loop2: detected capacity change from 0 to 16 Stopping syslogd: [ 1443.460468][ T2067] erofs: (device loop2): mounted with root inode @ nid 36. [ 1443.468215][ T10] usb 1-1: unit 4 not found! [ 1443.503753][ T10] usb 1-1: USB disconnect, device number 89 [ 1443.511121][ T2067] syz.2.13069: attempt to access beyond end of device [ 1443.511121][ T2067] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1443.578705][ T2067] syz.2.13069: attempt to access beyond end of device [ 1443.578705][ T2067] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1443.599388][ T2072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13071'. stopped /sbin/syslogd (pid 5120) [ 1443.632531][ T2072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13071'. [ 1443.643054][ T2067] ================================================================== [ 1443.651184][ T2067] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x3ab/0x4a0 [ 1443.659581][ T2067] Read of size 4096 at addr ffff888060b15000 by task syz.2.13069/2067 [ 1443.667862][ T2067] [ 1443.670228][ T2067] CPU: 1 PID: 2067 Comm: syz.2.13069 Not tainted syzkaller #0 [ 1443.677756][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1443.687868][ T2067] Call Trace: [ 1443.691216][ T2067] [ 1443.694197][ T2067] dump_stack_lvl+0x18c/0x250 [ 1443.698949][ T2067] ? __lock_acquire+0x7d80/0x7d80 [ 1443.704047][ T2067] ? show_regs_print_info+0x20/0x20 [ 1443.709319][ T2067] ? load_image+0x420/0x420 [ 1443.713899][ T2067] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1443.719524][ T2067] ? __virt_addr_valid+0x10c/0x380 [ 1443.724736][ T2067] ? __virt_addr_valid+0x10c/0x380 [ 1443.729920][ T2067] ? __virt_addr_valid+0x10c/0x380 [ 1443.735103][ T2067] ? __virt_addr_valid+0x10c/0x380 [ 1443.740282][ T2067] print_report+0xa8/0x210 [ 1443.744762][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1443.750470][ T2067] kasan_report+0x117/0x150 [ 1443.755046][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1443.760748][ T2067] kasan_check_range+0x241/0x290 [ 1443.765749][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1443.771463][ T2067] __asan_memcpy+0x29/0x70 [ 1443.775955][ T2067] z_erofs_transform_plain+0x3ab/0x4a0 [ 1443.781490][ T2067] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 1443.787280][ T2067] z_erofs_decompress_queue+0x1705/0x2670 [ 1443.793090][ T2067] ? z_erofs_onlinepage_end+0x360/0x360 [ 1443.798710][ T2067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1443.804762][ T2067] ? lock_chain_count+0x20/0x20 [ 1443.809692][ T2067] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 1443.815921][ T2067] ? erofs_map_blocks+0x17b0/0x17b0 [ 1443.821188][ T2067] ? folio_unlock+0x118/0x2f0 [ 1443.825924][ T2067] z_erofs_runqueue+0x1993/0x1b20 [ 1443.831032][ T2067] ? z_erofs_do_read_page+0x3500/0x3500 [ 1443.836660][ T2067] ? __lock_acquire+0x7d80/0x7d80 [ 1443.841772][ T2067] ? put_page+0xea/0x260 [ 1443.846092][ T2067] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 1443.851967][ T2067] z_erofs_read_folio+0x321/0x5c0 [ 1443.857069][ T2067] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 1443.862543][ T2067] ? up_read+0x20/0x20 [ 1443.866676][ T2067] ? __might_sleep+0xe0/0xe0 [ 1443.871326][ T2067] ? filemap_add_folio+0x190/0x3d0 [ 1443.876510][ T2067] filemap_read_folio+0x16b/0x790 [ 1443.881602][ T2067] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 1443.887052][ T2067] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 1443.892652][ T2067] ? down_read+0x1ac/0x2e0 [ 1443.897123][ T2067] filemap_get_pages+0x13ac/0x1f10 [ 1443.902313][ T2067] ? filemap_read+0xf20/0xf20 [ 1443.907056][ T2067] ? __might_sleep+0xe0/0xe0 [ 1443.911706][ T2067] ? folio_mark_accessed+0x203/0x14a0 [ 1443.917146][ T2067] ? folio_activate_fn+0x2000/0x2000 [ 1443.922485][ T2067] ? page_copy_sane+0x4e/0x270 [ 1443.927359][ T2067] filemap_read+0x409/0xf20 [ 1443.931924][ T2067] ? filemap_get_folios_tag+0x840/0x840 [ 1443.937524][ T2067] ? generic_file_read_iter+0x9b/0x550 [ 1443.943033][ T2067] ? iov_iter_kvec+0xd4/0x1b0 [ 1443.947776][ T2067] __kernel_read+0x2e5/0x730 [ 1443.952454][ T2067] ? rw_verify_area+0x1b0/0x1b0 [ 1443.957377][ T2067] integrity_kernel_read+0x8a/0xd0 [ 1443.962590][ T2067] ? integrity_inode_free+0x170/0x170 [ 1443.968030][ T2067] ? _sha256_update+0x127/0x1e0 [ 1443.972940][ T2067] ? sha256_transform_avx+0xcc0/0xcc0 [ 1443.978383][ T2067] ima_calc_file_hash+0xb1f/0x1960 [ 1443.983581][ T2067] ? deref_stack_reg+0x1ab/0x230 [ 1443.988576][ T2067] ? is_bpf_text_address+0x26/0x2a0 [ 1443.993858][ T2067] ? look_up_lock_class+0x75/0x140 [ 1443.999037][ T2067] ? ima_alloc_tfm+0x2f0/0x2f0 [ 1444.003861][ T2067] ? register_lock_class+0xc4/0x8a0 [ 1444.009149][ T2067] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 1444.014858][ T2067] ? generic_fillattr+0x2b5/0x690 [ 1444.019971][ T2067] ? __asan_memcpy+0x40/0x70 [ 1444.024629][ T2067] ? generic_fillattr+0x451/0x690 [ 1444.029724][ T2067] ima_collect_measurement+0x4d4/0xa30 [ 1444.035250][ T2067] ? ima_get_action+0xb0/0xb0 [ 1444.039972][ T2067] ? erofs_getxattr+0x13f/0x450 [ 1444.044886][ T2067] ? rcu_is_watching+0x15/0xb0 [ 1444.049708][ T2067] ? ima_get_hash_algo+0x91/0x4a0 [ 1444.054775][ T2067] ? ima_get_cache_status+0xd0/0xd0 [ 1444.060019][ T2067] process_measurement+0x123a/0x1d50 [ 1444.065343][ T2067] ? ima_file_mmap+0x1d0/0x1d0 [ 1444.070159][ T2067] ? tomoyo_check_open_permission+0x384/0x460 [ 1444.076264][ T2067] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1444.082372][ T2067] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1444.088476][ T2067] ? get_cached_acl+0x4fb/0x540 [ 1444.093385][ T2067] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1444.099568][ T2067] ima_file_check+0xcc/0x110 [ 1444.104198][ T2067] ? ima_bprm_check+0x200/0x200 [ 1444.109090][ T2067] path_openat+0x2910/0x3270 [ 1444.113722][ T2067] ? do_filp_open+0x430/0x430 [ 1444.118429][ T2067] do_filp_open+0x1f2/0x430 [ 1444.122984][ T2067] ? vfs_tmpfile+0x480/0x480 [ 1444.127608][ T2067] ? _raw_spin_unlock+0x28/0x40 [ 1444.132488][ T2067] ? alloc_fd+0x590/0x640 [ 1444.136875][ T2067] do_sys_openat2+0x134/0x1d0 [ 1444.141600][ T2067] ? do_sys_open+0xe0/0xe0 [ 1444.146053][ T2067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1444.152099][ T2067] ? lock_chain_count+0x20/0x20 [ 1444.156987][ T2067] __x64_sys_openat+0x139/0x160 [ 1444.161893][ T2067] do_syscall_64+0x55/0xb0 [ 1444.166359][ T2067] ? clear_bhb_loop+0x40/0x90 [ 1444.171061][ T2067] ? clear_bhb_loop+0x40/0x90 [ 1444.175766][ T2067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1444.181723][ T2067] RIP: 0033:0x7faae119de59 [ 1444.186174][ T2067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.205810][ T2067] RSP: 002b:00007faae20b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1444.214257][ T2067] RAX: ffffffffffffffda RBX: 00007faae1425fa0 RCX: 00007faae119de59 [ 1444.222261][ T2067] RDX: 00000000000c8000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1444.230293][ T2067] RBP: 00007faae1233e6f R08: 0000000000000000 R09: 0000000000000000 [ 1444.238296][ T2067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.246298][ T2067] R13: 00007faae1426038 R14: 00007faae1425fa0 R15: 00007fff2e1ce848 [ 1444.254309][ T2067] [ 1444.257375][ T2067] [ 1444.259728][ T2067] Allocated by task 21598: [ 1444.264197][ T2067] kasan_set_track+0x4e/0x70 [ 1444.268821][ T2067] __kasan_slab_alloc+0x6c/0x80 [ 1444.273709][ T2067] slab_post_alloc_hook+0x6a/0x4d0 [ 1444.278855][ T2067] kmem_cache_alloc+0x17e/0x2c0 [ 1444.283742][ T2067] __kernfs_new_node+0xe5/0x7f0 [ 1444.288676][ T2067] kernfs_new_node+0x14c/0x260 [ 1444.293472][ T2067] __kernfs_create_file+0x4b/0x2e0 [ 1444.298616][ T2067] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1444.304041][ T2067] internal_create_group+0x431/0xd10 [ 1444.309362][ T2067] sysfs_create_groups+0x59/0x120 [ 1444.314416][ T2067] kobject_add_internal+0x65e/0xc90 [ 1444.319649][ T2067] kobject_init_and_add+0x12c/0x1a0 [ 1444.324886][ T2067] net_rx_queue_update_kobjects+0x1e0/0x590 [ 1444.330920][ T2067] netdev_register_kobject+0x235/0x320 [ 1444.336405][ T2067] register_netdevice+0x12aa/0x1ba0 [ 1444.341642][ T2067] veth_newlink+0x807/0xc70 [ 1444.346200][ T2067] rtnl_newlink+0x15a0/0x2170 [ 1444.350971][ T2067] rtnetlink_rcv_msg+0x843/0xf90 [ 1444.355932][ T2067] netlink_rcv_skb+0x235/0x4c0 [ 1444.360812][ T2067] netlink_unicast+0x7b1/0x930 [ 1444.365615][ T2067] netlink_sendmsg+0x8d0/0xbf0 [ 1444.370412][ T2067] ____sys_sendmsg+0x61b/0x980 [ 1444.375214][ T2067] ___sys_sendmsg+0x2a6/0x360 [ 1444.379942][ T2067] __se_sys_sendmsg+0x1d0/0x2c0 [ 1444.384835][ T2067] do_syscall_64+0x55/0xb0 [ 1444.389299][ T2067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1444.395235][ T2067] [ 1444.397585][ T2067] Last potentially related work creation: [ 1444.403327][ T2067] kasan_save_stack+0x3e/0x60 [ 1444.408031][ T2067] __kasan_record_aux_stack+0xaf/0xc0 [ 1444.413428][ T2067] call_rcu+0x153/0x900 [ 1444.417615][ T2067] kernfs_put+0x1d3/0x360 [ 1444.421978][ T2067] kernfs_remove_by_name_ns+0xe4/0x150 [ 1444.427470][ T2067] sysfs_remove_group+0x101/0x290 [ 1444.432519][ T2067] sysfs_remove_groups+0x54/0xa0 [ 1444.437487][ T2067] __kobject_del+0x83/0x2e0 [ 1444.442024][ T2067] kobject_put+0x233/0x450 [ 1444.446476][ T2067] netdev_queue_update_kobjects+0x3e9/0x480 [ 1444.452427][ T2067] netdev_unregister_kobject+0x108/0x250 [ 1444.458088][ T2067] unregister_netdevice_many_notify+0x1449/0x1910 [ 1444.464542][ T2067] default_device_exit_batch+0x962/0xa00 [ 1444.470211][ T2067] cleanup_net+0x792/0xbb0 [ 1444.474666][ T2067] process_scheduled_works+0xa60/0x1600 [ 1444.480248][ T2067] worker_thread+0xa5e/0xfe0 [ 1444.484869][ T2067] kthread+0x2fa/0x390 [ 1444.488960][ T2067] ret_from_fork+0x48/0x80 [ 1444.493403][ T2067] ret_from_fork_asm+0x11/0x20 [ 1444.498197][ T2067] [ 1444.500545][ T2067] The buggy address belongs to the object at ffff888060b15000 [ 1444.500545][ T2067] which belongs to the cache kernfs_node_cache of size 184 [ 1444.515140][ T2067] The buggy address is located 0 bytes inside of [ 1444.515140][ T2067] allocated 184-byte region [ffff888060b15000, ffff888060b150b8) [ 1444.529136][ T2067] [ 1444.531489][ T2067] The buggy address belongs to the physical page: [ 1444.538002][ T2067] page:ffffea000182c540 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60b15 [ 1444.548194][ T2067] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1444.556114][ T2067] page_type: 0xffffffff() [ 1444.560471][ T2067] raw: 00fff00000000800 ffff888019e5cdc0 ffffea000182cc00 dead000000000003 [ 1444.569090][ T2067] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1444.577703][ T2067] page dumped because: kasan: bad access detected [ 1444.584145][ T2067] page_owner tracks the page as allocated [ 1444.589897][ T2067] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5773, tgid 5773 (syz-executor), ts 86086722270, free_ts 29232907406 [ 1444.608253][ T2067] post_alloc_hook+0x1c1/0x200 [ 1444.613069][ T2067] get_page_from_freelist+0x2181/0x22a0 [ 1444.618664][ T2067] __alloc_pages+0x1f0/0x460 [ 1444.623305][ T2067] alloc_slab_page+0x5d/0x180 [ 1444.628035][ T2067] new_slab+0x87/0x2d0 [ 1444.632150][ T2067] ___slab_alloc+0xc5c/0x12f0 [ 1444.636871][ T2067] kmem_cache_alloc+0x109/0x2c0 [ 1444.641755][ T2067] __kernfs_new_node+0xe5/0x7f0 [ 1444.646640][ T2067] kernfs_new_node+0x14c/0x260 [ 1444.651438][ T2067] __kernfs_create_file+0x4b/0x2e0 [ 1444.656581][ T2067] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1444.661992][ T2067] internal_create_group+0x431/0xd10 [ 1444.667310][ T2067] sysfs_create_groups+0x59/0x120 [ 1444.672367][ T2067] kobject_add_internal+0x65e/0xc90 [ 1444.677603][ T2067] kobject_init_and_add+0x12c/0x1a0 [ 1444.682841][ T2067] netdev_queue_update_kobjects+0x1fd/0x480 [ 1444.688778][ T2067] page last free stack trace: [ 1444.693483][ T2067] free_unref_page_prepare+0x7d7/0x8f0 [ 1444.698985][ T2067] free_unref_page+0x32/0x2e0 [ 1444.703699][ T2067] free_contig_range+0xa1/0x150 [ 1444.708589][ T2067] destroy_args+0x7d/0x840 [ 1444.713122][ T2067] debug_vm_pgtable+0x411/0x440 [ 1444.718015][ T2067] do_one_initcall+0x242/0x790 [ 1444.722827][ T2067] do_initcall_level+0x13d/0x1f0 [ 1444.727819][ T2067] do_initcalls+0x69/0xd0 [ 1444.732179][ T2067] kernel_init_freeable+0x3d9/0x560 [ 1444.737482][ T2067] kernel_init+0x1d/0x1c0 [ 1444.741844][ T2067] ret_from_fork+0x48/0x80 [ 1444.746311][ T2067] ret_from_fork_asm+0x11/0x20 [ 1444.751123][ T2067] [ 1444.753473][ T2067] Memory state around the buggy address: [ 1444.759129][ T2067] ffff888060b14f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1444.767223][ T2067] ffff888060b15000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1444.775312][ T2067] >ffff888060b15080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 [ 1444.783481][ T2067] ^ [ 1444.789574][ T2067] ffff888060b15100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1444.797663][ T2067] ffff888060b15180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 [ 1444.805847][ T2067] ================================================================== OK [ 1444.817786][ T2067] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1444.825052][ T2067] CPU: 0 PID: 2067 Comm: syz.2.13069 Not tainted syzkaller #0 [ 1444.832560][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1444.842660][ T2067] Call Trace: [ 1444.845980][ T2067] [ 1444.848950][ T2067] dump_stack_lvl+0x18c/0x250 [ 1444.853701][ T2067] ? show_regs_print_info+0x20/0x20 [ 1444.858954][ T2067] ? load_image+0x420/0x420 [ 1444.863495][ T2067] panic+0x2ca/0x720 [ 1444.867433][ T2067] ? bpf_jit_dump+0xd0/0xd0 [ 1444.871968][ T2067] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1444.877979][ T2067] ? _raw_spin_unlock+0x40/0x40 [ 1444.882860][ T2067] ? print_memory_metadata+0x314/0x400 [ 1444.888356][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1444.894027][ T2067] check_panic_on_warn+0x84/0xa0 [ 1444.899005][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1444.904689][ T2067] end_report+0x6f/0x130 [ 1444.908974][ T2067] kasan_report+0x128/0x150 [ 1444.913516][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1444.919186][ T2067] kasan_check_range+0x241/0x290 [ 1444.924158][ T2067] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 1444.929829][ T2067] __asan_memcpy+0x29/0x70 [ 1444.934279][ T2067] z_erofs_transform_plain+0x3ab/0x4a0 [ 1444.939782][ T2067] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 1444.945534][ T2067] z_erofs_decompress_queue+0x1705/0x2670 [ 1444.951399][ T2067] ? z_erofs_onlinepage_end+0x360/0x360 [ 1444.956980][ T2067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1444.962993][ T2067] ? lock_chain_count+0x20/0x20 [ 1444.967909][ T2067] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 1444.974124][ T2067] ? erofs_map_blocks+0x17b0/0x17b0 [ 1444.979360][ T2067] ? folio_unlock+0x118/0x2f0 [ 1444.984063][ T2067] z_erofs_runqueue+0x1993/0x1b20 [ 1444.989131][ T2067] ? z_erofs_do_read_page+0x3500/0x3500 [ 1444.994730][ T2067] ? __lock_acquire+0x7d80/0x7d80 [ 1444.999803][ T2067] ? put_page+0xea/0x260 [ 1445.004085][ T2067] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 1445.010018][ T2067] z_erofs_read_folio+0x321/0x5c0 [ 1445.015084][ T2067] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 1445.020513][ T2067] ? up_read+0x20/0x20 [ 1445.024613][ T2067] ? __might_sleep+0xe0/0xe0 [ 1445.029235][ T2067] ? filemap_add_folio+0x190/0x3d0 [ 1445.034374][ T2067] filemap_read_folio+0x16b/0x790 [ 1445.039425][ T2067] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 1445.044831][ T2067] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 1445.050402][ T2067] ? down_read+0x1ac/0x2e0 [ 1445.054860][ T2067] filemap_get_pages+0x13ac/0x1f10 [ 1445.060035][ T2067] ? filemap_read+0xf20/0xf20 [ 1445.064769][ T2067] ? __might_sleep+0xe0/0xe0 [ 1445.069419][ T2067] ? folio_mark_accessed+0x203/0x14a0 [ 1445.074835][ T2067] ? folio_activate_fn+0x2000/0x2000 [ 1445.080154][ T2067] ? page_copy_sane+0x4e/0x270 [ 1445.084958][ T2067] filemap_read+0x409/0xf20 [ 1445.089500][ T2067] ? filemap_get_folios_tag+0x840/0x840 [ 1445.095074][ T2067] ? generic_file_read_iter+0x9b/0x550 [ 1445.100562][ T2067] ? iov_iter_kvec+0xd4/0x1b0 [ 1445.105271][ T2067] __kernel_read+0x2e5/0x730 [ 1445.109930][ T2067] ? rw_verify_area+0x1b0/0x1b0 [ 1445.114845][ T2067] integrity_kernel_read+0x8a/0xd0 [ 1445.119997][ T2067] ? integrity_inode_free+0x170/0x170 [ 1445.125431][ T2067] ? _sha256_update+0x127/0x1e0 [ 1445.130313][ T2067] ? sha256_transform_avx+0xcc0/0xcc0 [ 1445.135712][ T2067] ima_calc_file_hash+0xb1f/0x1960 [ 1445.140871][ T2067] ? deref_stack_reg+0x1ab/0x230 [ 1445.145842][ T2067] ? is_bpf_text_address+0x26/0x2a0 [ 1445.151072][ T2067] ? look_up_lock_class+0x75/0x140 [ 1445.156220][ T2067] ? ima_alloc_tfm+0x2f0/0x2f0 [ 1445.161010][ T2067] ? register_lock_class+0xc4/0x8a0 [ 1445.166255][ T2067] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 1445.171936][ T2067] ? generic_fillattr+0x2b5/0x690 [ 1445.176985][ T2067] ? __asan_memcpy+0x40/0x70 [ 1445.181625][ T2067] ? generic_fillattr+0x451/0x690 [ 1445.186678][ T2067] ima_collect_measurement+0x4d4/0xa30 [ 1445.192170][ T2067] ? ima_get_action+0xb0/0xb0 [ 1445.196869][ T2067] ? erofs_getxattr+0x13f/0x450 [ 1445.201754][ T2067] ? rcu_is_watching+0x15/0xb0 [ 1445.206554][ T2067] ? ima_get_hash_algo+0x91/0x4a0 [ 1445.211607][ T2067] ? ima_get_cache_status+0xd0/0xd0 [ 1445.216840][ T2067] process_measurement+0x123a/0x1d50 [ 1445.222159][ T2067] ? ima_file_mmap+0x1d0/0x1d0 [ 1445.226972][ T2067] ? tomoyo_check_open_permission+0x384/0x460 [ 1445.233071][ T2067] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1445.239248][ T2067] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1445.245346][ T2067] ? get_cached_acl+0x4fb/0x540 [ 1445.250248][ T2067] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1445.256442][ T2067] ima_file_check+0xcc/0x110 [ 1445.261066][ T2067] ? ima_bprm_check+0x200/0x200 [ 1445.265948][ T2067] path_openat+0x2910/0x3270 [ 1445.270589][ T2067] ? do_filp_open+0x430/0x430 [ 1445.275299][ T2067] do_filp_open+0x1f2/0x430 [ 1445.279832][ T2067] ? vfs_tmpfile+0x480/0x480 [ 1445.284453][ T2067] ? _raw_spin_unlock+0x28/0x40 [ 1445.289334][ T2067] ? alloc_fd+0x590/0x640 [ 1445.293698][ T2067] do_sys_openat2+0x134/0x1d0 [ 1445.298407][ T2067] ? do_sys_open+0xe0/0xe0 [ 1445.302857][ T2067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1445.308869][ T2067] ? lock_chain_count+0x20/0x20 [ 1445.313857][ T2067] __x64_sys_openat+0x139/0x160 [ 1445.318741][ T2067] do_syscall_64+0x55/0xb0 [ 1445.323189][ T2067] ? clear_bhb_loop+0x40/0x90 [ 1445.327889][ T2067] ? clear_bhb_loop+0x40/0x90 [ 1445.332593][ T2067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.338523][ T2067] RIP: 0033:0x7faae119de59 [ 1445.342965][ T2067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.362600][ T2067] RSP: 002b:00007faae20b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1445.371040][ T2067] RAX: ffffffffffffffda RBX: 00007faae1425fa0 RCX: 00007faae119de59 [ 1445.379041][ T2067] RDX: 00000000000c8000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1445.387039][ T2067] RBP: 00007faae1233e6f R08: 0000000000000000 R09: 0000000000000000 [ 1445.395029][ T2067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.403025][ T2067] R13: 00007faae1426038 R14: 00007faae1425fa0 R15: 00007fff2e1ce848 [ 1445.411026][ T2067] [ 1445.414632][ T2067] Kernel Offset: disabled [ 1445.418969][ T2067] Rebooting in 86400 seconds..