last executing test programs: 4.272491735s ago: executing program 1 (id=4085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x99cb}]}]}, 0x28}}, 0x4800) 4.081995746s ago: executing program 3 (id=4087): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) fcntl$getflags(r0, 0x40a) 3.756746304s ago: executing program 1 (id=4088): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x14, 0xf, 0x0, 0x0, 0x0, {0xfffffffe}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) 3.504561523s ago: executing program 3 (id=4091): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') pread64(r0, &(0x7f0000019080)=""/102356, 0x18fd4, 0x200) 3.13584448s ago: executing program 3 (id=4094): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f00000bb000/0x2000)=nil, 0x2000, 0x3) 2.848625281s ago: executing program 2 (id=4096): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1, 0x1], 0x0, 0x0) 2.797997974s ago: executing program 4 (id=4097): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x15}) 2.520600196s ago: executing program 0 (id=4098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 2.424534112s ago: executing program 2 (id=4099): prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) mq_open(&(0x7f0000000400)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN\x93\x89\x9f\xbfX*\xec\x00\x00\x00\x00', 0x40, 0x44, 0x0) 2.410419485s ago: executing program 4 (id=4100): unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.125179785s ago: executing program 2 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2c0e}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x1bf}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) 1.8765272s ago: executing program 0 (id=4102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x4}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040082}, 0x4000080) 1.782988423s ago: executing program 1 (id=4103): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.596001623s ago: executing program 4 (id=4104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 1.502822161s ago: executing program 2 (id=4105): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='f2fs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 1.359344465s ago: executing program 1 (id=4106): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_TIOCINQ(r0, 0x5760, 0x0) 1.359108892s ago: executing program 0 (id=4107): r0 = fsopen(&(0x7f0000003180)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000031c0)='debug', &(0x7f0000003200)='./file1\x00', 0xffffffffffffff9c) 1.105022076s ago: executing program 4 (id=4108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffb6, &(0x7f0000000040)={&(0x7f0000000180)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "d45c637c63381ef54f7b939bb9aba5df6218e9ac"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0xff, 0x0, 0x0, 0x0, "150200"}, 0x2}}]}, 0x154}}, 0x0) 1.008270077s ago: executing program 3 (id=4109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 868.528598ms ago: executing program 1 (id=4110): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f0000000040)={0x0, 0x7, 0x2}) 868.172458ms ago: executing program 0 (id=4111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x5d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x192, 0x6, 0xffff, 0x1, 0xffffffffffffffff, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis128\x00'}, 0x0, 0x100}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 851.557122ms ago: executing program 2 (id=4112): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 672.683053ms ago: executing program 4 (id=4113): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000072c45a0000000059000000000000000062"]) 544.636828ms ago: executing program 3 (id=4114): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) 474.092603ms ago: executing program 0 (id=4115): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x4000085) 394.635905ms ago: executing program 1 (id=4116): r0 = syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000700)={0x9, @pix_mp={0xda, 0xf8d7, 0x44495658, 0x0, 0x7, [{0x8, 0x3}, {0x80, 0x8}, {0x7000000, 0x6}, {0x3, 0x8000}, {0x2}, {0x0, 0x6}, {0x14, 0xffffff40}, {0x401, 0x3}], 0x0, 0x3, 0x6, 0x1, 0x3}}) 280.126449ms ago: executing program 4 (id=4117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000c50000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 279.68497ms ago: executing program 2 (id=4118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0xffffffff], [0xff, 0x0, 0xff, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x160, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket1={{0x28}}, @common=@srh1={{0x90}, {0x16, 0x4, 0x49, 0x7, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0x0, 0xff], [0xff000000, 0xa2852287ebca19a9, 0xff000000], [0x0, 0x0, 0x0, 0xffffffff], 0x80, 0x4000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xff, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xffffff00], 'bond_slave_0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x0, 0x8, 0x8, 'pptp\x00', 'syz1\x00', {0x2c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 30.864557ms ago: executing program 0 (id=4119): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35}, {0x1d}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 3 (id=4120): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) kernel console output (not intermixed with test programs): ined pid=10619 comm="syz.1.2246" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 510.699136][ T29] audit: type=1326 audit(1782276554.879:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.1.2246" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 510.793529][ T29] audit: type=1326 audit(1782276554.879:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.1.2246" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 510.914283][T10631] netlink: 'syz.3.2251': attribute type 5 has an invalid length. [ 510.933840][ T29] audit: type=1326 audit(1782276554.919:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.1.2246" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 510.970403][T10631] netlink: 'syz.3.2251': attribute type 9 has an invalid length. [ 511.014953][T10631] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2251'. [ 511.045398][ T29] audit: type=1326 audit(1782276554.919:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.1.2246" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 511.276986][ T5685] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 511.476003][ T5685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.516576][ T5685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.552999][ T5685] usb 2-1: config 1 has no interface number 0 [ 511.571383][ T5685] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 511.601716][ T5685] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 511.630469][ T5685] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 511.652137][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.661250][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.699941][ T5685] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.720989][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.749277][ T5685] usb 2-1: Product: syz [ 511.769985][ T5685] usb 2-1: Manufacturer: syz [ 511.793174][ T5685] usb 2-1: SerialNumber: syz [ 511.818838][T10634] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 511.856315][ T5685] usb 2-1: selecting invalid altsetting 1 [ 512.067298][T10634] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 512.309037][ T5685] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 512.344329][ T5685] cdc_ncm 2-1:1.1: bind() failure [ 512.379711][ T5685] usb 2-1: USB disconnect, device number 8 [ 512.449901][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 514.686905][T10702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.215378][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 515.851282][T10728] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 516.039082][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2301'. [ 516.087849][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2301'. [ 516.301359][T10734] netlink: 'syz.2.2302': attribute type 228 has an invalid length. [ 516.515195][T10740] netlink: 'syz.0.2305': attribute type 1 has an invalid length. [ 517.085966][T10449] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 517.268990][T10449] usb 4-1: Using ep0 maxpacket: 8 [ 517.304248][T10449] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 517.343571][T10449] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 517.375537][T10449] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 517.410571][T10449] usb 4-1: Product: syz [ 517.428920][T10449] usb 4-1: Manufacturer: syz [ 517.468585][T10449] usb 4-1: SerialNumber: syz [ 517.723240][T10449] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 517.762639][T10449] usb 4-1: Handspring Visor / Palm OS: port 75, is for unknown use [ 517.795597][T10449] usb 4-1: Handspring Visor / Palm OS: port 220, is for unknown use [ 517.830136][T10449] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 517.895141][T10766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.928064][T10449] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 517.958620][T10449] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 518.019946][T10449] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 518.148308][T10449] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 518.208613][T10449] usb 4-1: USB disconnect, device number 8 [ 518.315486][T10449] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 518.391242][T10449] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 518.448950][T10449] visor 4-1:1.0: device disconnected [ 519.333560][T10788] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 519.388160][T10788] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 521.283960][T10812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2335'. [ 523.373057][T10837] SET target dimension over the limit! [ 523.886718][T10848] netlink: 'syz.0.2352': attribute type 3 has an invalid length. [ 524.671024][T10857] loop0: detected capacity change from 0 to 2048 [ 524.711236][T10857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.866648][T10857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.216683][T10871] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2362'. [ 525.289046][ T5593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.451400][T10876] loop4: detected capacity change from 0 to 512 [ 525.521444][T10876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.555086][T10876] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.776202][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.861526][T10885] loop3: detected capacity change from 0 to 16 [ 525.928612][T10885] erofs (device loop3): mounted with root inode @ nid 36. [ 525.993273][T10885] erofs (device loop3): invalid h_shared_count 243 @ nid 89 [ 526.033016][T10885] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 526.070142][T10885] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 526.107714][T10885] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 526.110908][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 526.135998][T10885] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 526.159261][T10885] erofs (device loop3): read error -117 @ 1 of nid 89 [ 526.201345][ T29] audit: type=1800 audit(1782276570.799:144): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2369" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 526.861358][T10903] kernel profiling enabled (shift: 63) [ 526.884039][T10903] profiling shift: 63 too large [ 527.115695][ T5685] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 527.320920][ T5685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.367774][ T5685] usb 3-1: config index 0 descriptor too short (expected 16305, got 120) [ 527.394590][ T5685] usb 3-1: config 161 has too many interfaces: 84, using maximum allowed: 32 [ 527.430239][ T5685] usb 3-1: config 161 contains an unexpected descriptor of type 0x1, skipping [ 527.461829][ T5685] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 527.504957][ T5685] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 84 [ 527.554647][ T5685] usb 3-1: config index 1 descriptor too short (expected 16305, got 120) [ 527.589422][ T5685] usb 3-1: config 161 has too many interfaces: 84, using maximum allowed: 32 [ 527.628681][ T5685] usb 3-1: config 161 contains an unexpected descriptor of type 0x1, skipping [ 527.671429][ T5685] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 527.713107][ T5685] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 84 [ 527.756355][ T5685] usb 3-1: config index 2 descriptor too short (expected 16305, got 120) [ 527.786683][ T5685] usb 3-1: config 161 has too many interfaces: 84, using maximum allowed: 32 [ 527.827169][ T5685] usb 3-1: config 161 contains an unexpected descriptor of type 0x1, skipping [ 527.850952][ T5685] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 527.886953][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2386'. [ 527.905839][ T5685] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 84 [ 527.936906][ T5685] usb 3-1: config index 3 descriptor too short (expected 16305, got 120) [ 527.966126][ T5685] usb 3-1: config 161 has too many interfaces: 84, using maximum allowed: 32 [ 527.993611][ T5685] usb 3-1: config 161 contains an unexpected descriptor of type 0x1, skipping [ 528.045572][ T5685] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 528.118618][ T5685] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 84 [ 528.188381][ T5685] usb 3-1: config index 4 descriptor too short (expected 16305, got 120) [ 528.209770][ T5685] usb 3-1: config 161 has too many interfaces: 84, using maximum allowed: 32 [ 528.284134][ T5685] usb 3-1: config 161 contains an unexpected descriptor of type 0x1, skipping [ 528.329164][ T5685] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 528.377852][ T5685] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 84 [ 528.422836][ T5685] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 528.481960][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.533228][ T5685] usb 3-1: Product: syz [ 528.551369][T10930] loop0: detected capacity change from 0 to 164 [ 528.558542][ T5685] usb 3-1: Manufacturer: syz [ 528.587597][ T5685] usb 3-1: SerialNumber: syz [ 528.702206][T10930] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 528.798931][T10924] loop1: detected capacity change from 0 to 4096 [ 528.893029][T10924] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 528.969859][ T5685] usb 3-1: USB disconnect, device number 14 [ 529.244687][T10924] ntfs3(loop1): ino=b, mi_enum_attr [ 529.284687][T10924] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 529.322889][T10924] ntfs3(loop1): Failed to load $Extend (-22). [ 529.348647][T10924] ntfs3(loop1): Failed to initialize $Extend. [ 529.396335][T10936] netlink: 'syz.0.2394': attribute type 1 has an invalid length. [ 529.445363][T10936] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2394'. [ 531.487959][ T5685] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 531.676185][ T5685] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 531.702391][ T5685] usb 3-1: config 0 has no interface number 0 [ 531.748376][ T5685] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.801371][ T5685] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 531.893631][ T5685] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 531.935679][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 531.979494][ T5685] usb 3-1: Product: syz [ 532.005978][ T5685] usb 3-1: SerialNumber: syz [ 532.050901][ T5685] usb 3-1: config 0 descriptor?? [ 532.105458][ T5685] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 532.323811][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.331569][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.339691][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.347238][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.355321][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.363072][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.373111][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.382189][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.392025][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.402475][T10449] usb 3-1: USB disconnect, device number 15 [ 532.403990][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 532.415556][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 532.478769][T10449] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 533.119127][T10449] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 533.340745][T10449] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 533.399569][T10449] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 533.442889][T10449] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 533.473942][T10449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 533.520305][T10449] usb 2-1: SerialNumber: syz [ 533.598707][T10449] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 533.647726][T10449] usb-storage 2-1:1.0: USB Mass Storage device detected [ 533.682475][T10449] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 533.709132][T10449] scsi host1: usb-storage 2-1:1.0 [ 534.121175][T11011] loop0: detected capacity change from 0 to 512 [ 534.209511][T10449] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 534.231049][T11011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.290725][T11011] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.412921][T11011] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.2430: corrupted xattr block 33: overlapping e_value [ 534.438864][T11011] EXT4-fs (loop0): Remounting filesystem read-only [ 534.460035][T10449] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 534.486453][T10449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.531841][T10449] usb 4-1: config 0 descriptor?? [ 534.585834][T10449] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 534.693969][ T5593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.009676][ T11] usb 2-1: USB disconnect, device number 9 [ 535.090358][T10449] gp8psk: usb in 128 operation failed. [ 535.144876][T10449] gp8psk: usb in 137 operation failed. [ 535.175334][T10449] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 535.232634][T10449] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 535.301698][T10449] usb 4-1: USB disconnect, device number 9 [ 535.457576][T11024] --map-set only usable from mangle table [ 536.530523][T11040] loop4: detected capacity change from 0 to 16 [ 536.556500][T11040] erofs (device loop4): mounted with root inode @ nid 36. [ 536.592949][T11040] erofs (device loop4): invalid h_shared_count 243 @ nid 89 [ 536.614670][T11040] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 536.659336][T11040] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 536.675783][T11040] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 536.707129][T11040] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 536.746506][T11040] erofs (device loop4): read error -117 @ 1 of nid 89 [ 536.781045][ T29] audit: type=1800 audit(1782276581.373:145): pid=11040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2443" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 537.948542][T11069] loop0: detected capacity change from 0 to 512 [ 538.119809][T11069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.215407][T11069] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.552711][T11080] loop1: detected capacity change from 0 to 16 [ 538.577240][T11080] erofs (device loop1): mounted with root inode @ nid 36. [ 538.629976][T11080] erofs (device loop1): invalid h_shared_count 243 @ nid 89 [ 538.674361][T11080] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 538.695460][ T5593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.718792][T11080] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 538.790670][T11080] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 538.819759][T11084] loop2: detected capacity change from 0 to 16 [ 538.849617][T11080] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 538.894614][T11080] erofs (device loop1): read error -117 @ 1 of nid 89 [ 538.929675][ T29] audit: type=1800 audit(1782276583.513:146): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2460" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 539.209463][T11090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2466'. [ 539.994378][T11103] IPv6: NLM_F_CREATE should be specified when creating new route [ 540.522557][T11116] loop0: detected capacity change from 0 to 16 [ 540.537629][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2479'. [ 540.572311][T11116] erofs (device loop0): mounted with root inode @ nid 36. [ 540.651119][T11116] erofs (device loop0): invalid h_shared_count 243 @ nid 89 [ 540.682700][T11116] erofs (device loop0): inconsistent algorithmtype 1 for nid 89 [ 540.715072][T11116] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 540.737946][T11120] loop4: detected capacity change from 0 to 256 [ 540.775007][T11116] erofs (device loop0): inconsistent algorithmtype 1 for nid 89 [ 540.784596][T11120] exfat: Deprecated parameter 'utf8' [ 540.797779][T11116] erofs (device loop0): inconsistent algorithmtype 1 for nid 89 [ 540.859997][T11116] erofs (device loop0): read error -117 @ 1 of nid 89 [ 540.897075][T11120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 540.921272][ T29] audit: type=1800 audit(1782276585.492:147): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2478" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 541.508678][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 541.530754][T11131] sctp: [Deprecated]: syz.3.2487 (pid 11131) Use of int in max_burst socket option. [ 541.530754][T11131] Use struct sctp_assoc_value instead [ 541.590720][T11133] loop1: detected capacity change from 0 to 256 [ 541.957981][T11133] FAT-fs (loop1): Directory bread(block 64) failed [ 542.006378][T11133] FAT-fs (loop1): Directory bread(block 65) failed [ 542.054674][T11133] FAT-fs (loop1): Directory bread(block 66) failed [ 542.061548][T11133] FAT-fs (loop1): Directory bread(block 67) failed [ 542.069746][T11133] FAT-fs (loop1): Directory bread(block 68) failed [ 542.118127][T11133] FAT-fs (loop1): Directory bread(block 69) failed [ 542.160696][T11133] FAT-fs (loop1): Directory bread(block 70) failed [ 542.199414][T11133] FAT-fs (loop1): Directory bread(block 71) failed [ 542.233180][T11133] FAT-fs (loop1): Directory bread(block 72) failed [ 542.265772][T11133] FAT-fs (loop1): Directory bread(block 73) failed [ 543.025762][T11152] loop2: detected capacity change from 0 to 16 [ 543.086128][T11152] erofs (device loop2): mounted with root inode @ nid 36. [ 543.117794][T11146] loop3: detected capacity change from 0 to 4096 [ 543.174477][T11146] EXT4-fs: inline encryption not supported [ 543.175721][T11152] erofs (device loop2): invalid h_shared_count 243 @ nid 89 [ 543.216837][T11146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 543.221881][T11152] erofs (device loop2): inconsistent algorithmtype 1 for nid 89 [ 543.276662][T11146] EXT4-fs (loop3): Test dummy encryption mode enabled [ 543.280806][T11152] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 543.331629][T11146] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 543.345287][T11152] erofs (device loop2): inconsistent algorithmtype 1 for nid 89 [ 543.386840][T11146] System zones: 0-5 [ 543.394140][T11152] erofs (device loop2): inconsistent algorithmtype 1 for nid 89 [ 543.408777][T11152] erofs (device loop2): read error -117 @ 1 of nid 89 [ 543.417269][ T29] audit: type=1800 audit(1782276588.011:148): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2495" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 543.485436][T11146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.533799][T11156] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 543.586094][T11156] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2497'. [ 543.851237][T11158] loop0: detected capacity change from 0 to 2048 [ 543.961580][ T5584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.969700][T11161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.016559][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 544.043202][T11160] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 544.101634][T11160] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 544.611857][T11168] loop1: detected capacity change from 0 to 2048 [ 544.753005][T11173] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 545.519744][T11186] loop3: detected capacity change from 0 to 16 [ 545.575038][T11186] erofs (device loop3): mounted with root inode @ nid 36. [ 545.607354][T11186] erofs (device loop3): invalid h_shared_count 243 @ nid 89 [ 545.621999][T11186] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 545.631319][T11186] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 545.649087][T11186] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 545.657601][T11186] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 545.674840][T11186] erofs (device loop3): read error -117 @ 1 of nid 89 [ 545.688484][ T29] audit: type=1800 audit(1782276590.271:149): pid=11186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2511" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 545.732008][T11185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.034422][T11190] comedi comedi4: commands at RT priority not supported in this driver [ 546.317121][T11192] loop2: detected capacity change from 0 to 2048 [ 546.453385][T11192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.590453][ T29] audit: type=1800 audit(1782276591.171:150): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2514" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 547.899935][T11219] loop2: detected capacity change from 0 to 16 [ 548.019741][T11219] erofs (device loop2): mounted with root inode @ nid 36. [ 548.097429][T11219] erofs (device loop2): invalid h_shared_count 243 @ nid 89 [ 548.124677][T11219] erofs (device loop2): inconsistent algorithmtype 1 for nid 89 [ 548.157914][T11219] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 548.202054][T11219] erofs (device loop2): inconsistent algorithmtype 1 for nid 89 [ 548.213920][T11219] erofs (device loop2): inconsistent algorithmtype 1 for nid 89 [ 548.224081][T11223] loop3: detected capacity change from 0 to 256 [ 548.240823][T11219] erofs (device loop2): read error -117 @ 1 of nid 89 [ 548.271110][ T29] audit: type=1800 audit(1782276592.850:151): pid=11219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2525" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 548.472682][T11223] syz.3.2528: attempt to access beyond end of device [ 548.472682][T11223] loop3: rw=0, sector=272, nr_sectors = 4 limit=256 [ 548.532553][T11223] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 548.597866][T11223] FAT-fs (loop3): Filesystem has been set read-only [ 548.637854][T11223] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 549.493985][ T11] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 549.718087][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.780690][ T11] usb 4-1: not running at top speed; connect to a high speed hub [ 549.876387][ T11] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 549.900581][ T11] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 549.930567][ T11] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 549.954178][ T11] usb 4-1: config 14 has no interface number 0 [ 549.971823][ T11] usb 4-1: config 14 has no interface number 1 [ 549.992810][T11250] loop1: detected capacity change from 0 to 16 [ 550.005478][ T11] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 550.047091][ T11] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 550.069223][T11250] erofs (device loop1): mounted with root inode @ nid 36. [ 550.087247][T11253] netlink: 1964 bytes leftover after parsing attributes in process `syz.0.2543'. [ 550.100538][ T11] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.139001][T11250] erofs (device loop1): invalid h_shared_count 243 @ nid 89 [ 550.158336][ T11] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.184076][T11250] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 550.192905][ T11] usb 4-1: config 14 interface 57 has no altsetting 0 [ 550.229263][ T11] usb 4-1: config 14 interface 228 has no altsetting 0 [ 550.254443][T11250] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 550.273016][ T11] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 550.300718][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.326077][T11250] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 550.337023][ T11] usb 4-1: Product: syz [ 550.354311][T11250] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 550.375794][ T11] usb 4-1: Manufacturer: syz [ 550.400627][T11250] erofs (device loop1): read error -117 @ 1 of nid 89 [ 550.409098][ T11] usb 4-1: SerialNumber: syz [ 550.431283][ T29] audit: type=1800 audit(1782276595.010:152): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2542" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 550.455471][ T5685] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 550.656091][ T5685] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 550.692901][ T5685] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 550.726812][ T11] legousbtower 4-1:14.57: interrupt endpoints not found [ 550.741633][ T5685] usb 5-1: config 220 has no interface number 2 [ 550.761971][ T5685] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 550.798650][ T11] legousbtower 4-1:14.228: get version request failed: -71 [ 550.807232][ T5685] usb 5-1: config 220 interface 0 has no altsetting 0 [ 550.826030][ T11] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 550.835804][ T5685] usb 5-1: config 220 interface 76 has no altsetting 0 [ 550.852473][ T5685] usb 5-1: config 220 interface 1 has no altsetting 0 [ 550.891436][ T5685] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 550.912699][ T11] usb 4-1: USB disconnect, device number 10 [ 550.925767][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.963229][ T5685] usb 5-1: Product: syz [ 550.978943][ T5685] usb 5-1: Manufacturer: syz [ 551.010754][ T5685] usb 5-1: SerialNumber: syz [ 551.036606][T11258] loop2: detected capacity change from 0 to 4096 [ 551.376382][ T5685] usb 5-1: selecting invalid altsetting 0 [ 551.396540][T11261] loop1: detected capacity change from 0 to 2048 [ 551.403927][ T5685] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 551.415259][ T5685] uvcvideo 5-1:220.0: No valid video chain found. [ 551.445373][T11261] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 551.535177][T11261] syz.1.2547: attempt to access beyond end of device [ 551.535177][T11261] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 551.557377][ T5685] usb 5-1: selecting invalid altsetting 0 [ 551.563865][T11264] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 551.619707][ T5685] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 551.675513][T11261] syz.1.2547: attempt to access beyond end of device [ 551.675513][T11261] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 551.693184][ T5685] usb 5-1: USB disconnect, device number 10 [ 551.782553][T11261] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 553.863561][T11292] loop3: detected capacity change from 0 to 2048 [ 553.943773][T11300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.377524][T11307] bond0: option arp_validate: invalid value (55553) [ 554.387034][ T14] bond0: (slave bond_slave_0): interface is now down [ 554.400262][ T14] bond0: (slave bond_slave_1): interface is now down [ 554.437312][ T14] bond0: now running without any active interface! [ 555.095617][ T5685] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 555.258899][T11319] vivid-000: disconnect [ 555.270735][T11318] vivid-000: reconnect [ 555.306872][ T5685] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 555.336828][ T5685] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 555.366242][ T5685] usb 1-1: config 0 has no interface number 0 [ 555.395106][ T5685] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 555.425615][ T5685] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.463230][ T5685] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 555.504309][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.566057][ T5685] usb 1-1: config 0 descriptor?? [ 556.106793][ T5685] usb 1-1: USB disconnect, device number 12 [ 556.644643][T10449] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 556.827984][T10449] usb 2-1: Using ep0 maxpacket: 32 [ 556.869358][T10449] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 556.904098][T10449] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 556.915429][T11346] ip6t_srh: unknown srh match flags 5F28 [ 556.946994][T10449] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.009750][T10449] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 557.037834][T10449] usb 2-1: config 1 has no interface number 0 [ 557.058943][T10449] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 557.105521][T10449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.183980][T10449] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 557.400381][T10449] snd_usb_pod 2-1:1.1: set_interface failed [ 557.430162][T10449] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 557.460019][T10449] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 557.536099][T10449] usb 2-1: USB disconnect, device number 10 [ 557.651026][T11350] loop0: detected capacity change from 0 to 4096 [ 557.921262][T11350] ntfs3(loop0): ino=18, mi_enum_attr [ 557.947359][T11350] ntfs3(loop0): ino=1a, mi_enum_attr [ 558.061240][T11350] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 558.061240][T11350] [ 559.101858][T11373] /dev/nullb0: Can't open blockdev [ 559.929500][T11385] loop3: detected capacity change from 0 to 2048 [ 560.034415][T11385] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.526415][ T5685] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 561.739108][ T5685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 561.769870][ T5685] usb 5-1: not running at top speed; connect to a high speed hub [ 561.814700][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.844140][ T5685] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 561.885907][ T5685] usb 5-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 561.960963][ T5685] usb 5-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 561.962329][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 562.036300][ T5685] usb 5-1: config 1 interface 1 has no altsetting 0 [ 562.082021][ T5685] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.121514][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 562.153824][ T5685] usb 5-1: Product: syz [ 562.183505][ T5685] usb 5-1: Manufacturer: syz [ 562.200313][ T5685] usb 5-1: SerialNumber: syz [ 562.240863][T11424] netlink: 'syz.3.2626': attribute type 41 has an invalid length. [ 562.245559][T11410] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.502469][T11428] program syz.2.2628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.580936][ T5685] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 562.661145][ T5685] usb 5-1: USB disconnect, device number 11 [ 563.117599][T11440] libceph: resolve '400' (ret=-3): failed [ 563.878944][T11445] loop0: detected capacity change from 0 to 4096 [ 563.950507][T11445] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 564.171387][T11445] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 565.679148][T11483] tmpfs: Bad value for 'mpol' [ 565.809456][T11487] loop3: detected capacity change from 0 to 256 [ 566.174045][T11487] FAT-fs (loop3): Directory bread(block 64) failed [ 566.185970][T11487] FAT-fs (loop3): Directory bread(block 65) failed [ 566.220486][T11487] FAT-fs (loop3): Directory bread(block 66) failed [ 566.262030][T11487] FAT-fs (loop3): Directory bread(block 67) failed [ 566.299156][T11487] FAT-fs (loop3): Directory bread(block 68) failed [ 566.349964][T11487] FAT-fs (loop3): Directory bread(block 69) failed [ 566.375315][T11487] FAT-fs (loop3): Directory bread(block 70) failed [ 566.394276][T11487] FAT-fs (loop3): Directory bread(block 71) failed [ 566.413504][T11487] FAT-fs (loop3): Directory bread(block 72) failed [ 566.428553][T11487] FAT-fs (loop3): Directory bread(block 73) failed [ 566.633844][T11501] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 567.306380][T11506] loop1: detected capacity change from 0 to 2048 [ 567.372956][T11507] loop2: detected capacity change from 0 to 2048 [ 567.441325][T11507] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=301129, location=301129 [ 567.469492][T11506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.548904][T11507] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.746950][ T29] audit: type=1800 audit(1782276612.338:153): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2667" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 568.698055][T11524] loop2: detected capacity change from 0 to 64 [ 568.922715][T11527] loop4: detected capacity change from 0 to 64 [ 571.276107][T11567] overlayfs: missing 'lowerdir' [ 572.580190][T11593] loop0: detected capacity change from 0 to 512 [ 572.586202][T11594] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 572.630316][T11594] overlayfs: conflicting options: userxattr,metacopy=on [ 572.709424][T11593] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 573.114165][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.121543][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.512506][T11605] loop0: detected capacity change from 0 to 1764 [ 573.558046][T11605] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 573.640148][T11612] netlink: 'syz.4.2718': attribute type 1 has an invalid length. [ 573.696412][T11612] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2718'. [ 574.459221][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 575.988168][T11652] syz.0.2737 (11652): /proc/11650/oom_adj is deprecated, please use /proc/11650/oom_score_adj instead. [ 576.641771][T11660] tc_dump_action: action bad kind [ 578.399508][T11680] loop4: detected capacity change from 0 to 4096 [ 578.453886][T11680] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 578.467616][T11688] loop2: detected capacity change from 0 to 512 [ 578.582809][T11688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.703773][T11688] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.777267][T11680] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 579.039334][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.500289][T11701] loop3: detected capacity change from 0 to 64 [ 580.097311][T11710] loop2: detected capacity change from 0 to 512 [ 580.186855][T11710] EXT4-fs (loop2): orphan cleanup on readonly fs [ 580.240127][T11710] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2763: ea_inode with extended attributes [ 580.306288][T11715] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2765'. [ 580.337282][T11710] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 580.340785][T11710] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2763: error while reading EA inode 11 err=-117 [ 580.350449][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 580.350543][ C0] EXT4-fs (loop2): initial error at time 1782276624: ext4_xattr_inode_iget:441: inode 11 [ 580.350800][ C0] EXT4-fs (loop2): last error at time 1782276624: ext4_xattr_inode_iget:441: inode 11 [ 580.466691][T11710] loop2: lost filesystem error report for type 5 error -117 [ 580.468408][T11710] EXT4-fs (loop2): 1 orphan inode deleted [ 580.527304][T11710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 580.675586][T11710] loop2: Can't mount, would change RO state [ 581.006975][T11723] loop4: detected capacity change from 0 to 1024 [ 581.022909][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.084436][T11723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.134103][T11723] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.2769: inode #12: comm syz.4.2769: iget: illegal inode # [ 581.281989][T11723] EXT4-fs (loop4): Remounting filesystem read-only [ 581.562168][T11734] bridge3: entered promiscuous mode [ 581.595191][T11734] bridge3: entered allmulticast mode [ 581.627628][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.271559][T11747] loop2: detected capacity change from 0 to 256 [ 582.381839][T11747] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 582.571477][T11752] overlayfs: workdir and upperdir must be separate subtrees [ 582.653849][T11753] loop4: detected capacity change from 0 to 1024 [ 583.646594][T11761] loop3: detected capacity change from 0 to 1764 [ 583.681361][T11748] vivid-000: kernel_thread() failed [ 583.795986][T11761] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 584.097785][T11767] loop2: detected capacity change from 0 to 1764 [ 584.214973][T11767] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 585.301724][T11783] syz.3.2797: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 585.354564][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.3.2797 Not tainted syzkaller #0 PREEMPT(lazy) [ 585.354704][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.354799][T11783] Call Trace: [ 585.354848][T11783] [ 585.354897][T11783] __dump_stack+0x26/0x30 [ 585.355116][T11783] dump_stack_lvl+0x14c/0x1c0 [ 585.355266][T11783] dump_stack+0x1e/0x25 [ 585.355403][T11783] warn_alloc+0x46f/0x6a0 [ 585.355592][T11783] ? kmsan_get_metadata+0xf1/0x160 [ 585.355778][T11783] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.355972][T11783] __vmalloc_node_range_noprof+0x148/0x2cd0 [ 585.356134][T11783] ? kmsan_get_metadata+0xf1/0x160 [ 585.356312][T11783] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.356514][T11783] ? should_fail_ex+0x45/0x8c0 [ 585.356684][T11783] ? kmsan_get_metadata+0xf1/0x160 [ 585.356858][T11783] ? kmsan_get_metadata+0xf1/0x160 [ 585.357035][T11783] ? kmsan_get_metadata+0xf1/0x160 [ 585.357215][T11783] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.357404][T11783] ? __kmalloc_cache_noprof+0x3b0/0x1240 [ 585.357539][T11783] ? kmsan_get_metadata+0xf1/0x160 [ 585.357722][T11783] vmalloc_user_noprof+0xce/0x140 [ 585.357861][T11783] ? xskq_create+0x11d/0x290 [ 585.358096][T11783] xskq_create+0x11d/0x290 [ 585.358248][T11783] xsk_init_queue+0xce/0x180 [ 585.358395][T11783] xsk_setsockopt+0x7f6/0xfe0 [ 585.358620][T11783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 585.358803][T11783] __sys_setsockopt+0x43e/0x580 [ 585.359089][T11783] __x64_sys_setsockopt+0xf4/0x1a0 [ 585.359281][T11783] x64_sys_call+0x2a65/0x3ea0 [ 585.359445][T11783] do_syscall_64+0x15d/0x3c0 [ 585.359608][T11783] ? clear_bhb_loop+0x50/0xa0 [ 585.359750][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.359922][T11783] RIP: 0033:0x7f8dec59ce59 [ 585.360041][T11783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.360157][T11783] RSP: 002b:00007f8ded468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 585.360288][T11783] RAX: ffffffffffffffda RBX: 00007f8dec815fa0 RCX: 00007f8dec59ce59 [ 585.360388][T11783] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 585.360469][T11783] RBP: 00007f8dec632d6f R08: 0000000000000004 R09: 0000000000000000 [ 585.360552][T11783] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.360637][T11783] R13: 00007f8dec816038 R14: 00007f8dec815fa0 R15: 00007ffdecdac1d8 [ 585.360765][T11783] [ 585.705143][T11783] Mem-Info: [ 585.708596][T11783] active_anon:6686 inactive_anon:0 isolated_anon:0 [ 585.708596][T11783] active_file:3188 inactive_file:40512 isolated_file:0 [ 585.708596][T11783] unevictable:768 dirty:143 writeback:0 [ 585.708596][T11783] slab_reclaimable:4918 slab_unreclaimable:22638 [ 585.708596][T11783] mapped:30357 shmem:1294 pagetables:1650 [ 585.708596][T11783] sec_pagetables:0 bounce:0 [ 585.708596][T11783] kernel_misc_reclaimable:0 [ 585.708596][T11783] free:350791 free_pcp:15036 free_cma:0 [ 585.792877][T11783] Node 0 active_anon:26744kB inactive_anon:0kB active_file:12752kB inactive_file:161856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121428kB dirty:572kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5136kB pagetables:6124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 585.932417][T11783] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 585.966816][T11783] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.997561][T11783] lowmem_reserve[]: 0 927 1241 1241 1241 [ 586.022951][T11783] Node 0 DMA32 free:489176kB boost:0kB min:36852kB low:46064kB high:55276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4640kB inactive_anon:0kB active_file:10064kB inactive_file:90480kB unevictable:0kB writepending:340kB zspages:0kB present:3129332kB managed:949816kB mlocked:0kB bounce:0kB free_pcp:37156kB local_pcp:22316kB free_cma:0kB [ 586.069756][T11783] lowmem_reserve[]: 0 0 313 313 313 [ 586.083589][T11783] Node 0 Normal free:16292kB boost:0kB min:13056kB low:16320kB high:19584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22072kB inactive_anon:0kB active_file:2688kB inactive_file:71376kB unevictable:1536kB writepending:296kB zspages:0kB present:1048580kB managed:321492kB mlocked:0kB bounce:0kB free_pcp:12516kB local_pcp:4368kB free_cma:0kB [ 586.152636][T11783] lowmem_reserve[]: 0 0 0 0 0 [ 586.158502][T11783] Node 1 Normal free:910092kB boost:0kB min:40036kB low:50044kB high:60052kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:985800kB mlocked:0kB bounce:0kB free_pcp:2192kB local_pcp:0kB free_cma:0kB [ 586.199793][T11783] lowmem_reserve[]: 0 0 0 0 0 [ 586.217966][T11783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 586.247273][T11783] Node 0 DMA32: 948*4kB (UM) 440*8kB (UM) 276*16kB (UME) 128*32kB (UM) 56*64kB (U) 26*128kB (UM) 15*256kB (UM) 11*512kB (UME) 7*1024kB (UM) 7*2048kB (UME) 107*4096kB (UM) = 491984kB [ 586.313123][T11783] Node 0 Normal: 69*4kB (ME) 14*8kB (M) 8*16kB (UME) 7*32kB (ME) 3*64kB (ME) 4*128kB (UM) 2*256kB (UM) 2*512kB (UE) 1*1024kB (M) 2*2048kB (UM) 2*4096kB (M) = 16292kB [ 586.358153][T11783] Node 1 Normal: 5*4kB (UM) 11*8kB (UM) 10*16kB (UM) 8*32kB (UM) 10*64kB (UM) 1*128kB (U) 6*256kB (UM) 0*512kB 4*1024kB (UM) 1*2048kB (M) 220*4096kB (M) = 910092kB [ 586.420956][T11783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.450819][T11783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.470811][T11790] loop1: detected capacity change from 0 to 256 [ 586.483618][T11783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.516849][T11790] exfat: Deprecated parameter 'utf8' [ 586.528832][T11783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.542009][T11790] exfat: Deprecated parameter 'utf8' [ 586.557579][T11783] 44945 total pagecache pages [ 586.563210][T11790] exfat: Deprecated parameter 'namecase' [ 586.572131][T11783] 0 pages in swap cache [ 586.595433][T11790] exfat: Deprecated parameter 'namecase' [ 586.601849][T11783] Free swap = 124996kB [ 586.607727][T11783] Total swap = 124996kB [ 586.623652][T11783] 2097051 pages RAM [ 586.633936][T11783] 0 pages HighMem/MovableOnly [ 586.648606][T11783] 1531750 pages reserved [ 586.666148][T11783] 0 pages cma reserved [ 586.690443][T11790] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 588.048401][T11806] loop4: detected capacity change from 0 to 2048 [ 588.173189][T11806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.330753][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.556172][T10449] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 588.743340][T10449] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.775786][T10449] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.827134][T10449] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.857435][T10449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.884772][T10449] usb 2-1: Product: syz [ 588.911831][T10449] usb 2-1: Manufacturer: syz [ 588.928142][T10449] usb 2-1: SerialNumber: syz [ 589.017704][T10449] usb 2-1: 0:2 : does not exist [ 589.587296][T10449] usb 2-1: USB disconnect, device number 11 [ 589.605229][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2819'. [ 589.887624][ T7052] udevd[7052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.666656][ T5685] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 591.847201][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 591.881868][ T5685] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 591.916727][ T5685] usb 1-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 591.951162][T11868] loop2: detected capacity change from 0 to 256 [ 591.970052][ T5685] usb 1-1: config 0 has no interface number 0 [ 591.994268][ T5685] usb 1-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4 [ 592.040783][ T5685] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x4 has an invalid bInterval 68, changing to 10 [ 592.086255][ T5685] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x4 has invalid maxpacket 16706, setting to 1024 [ 592.128636][ T5685] usb 1-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 592.183896][ T5685] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 592.211691][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.241605][ T5685] usb 1-1: Product: syz [ 592.265291][ T5685] usb 1-1: Manufacturer: syz [ 592.275027][T11868] FAT-fs (loop2): Directory bread(block 64) failed [ 592.287843][ T5685] usb 1-1: SerialNumber: syz [ 592.300873][T11868] FAT-fs (loop2): Directory bread(block 65) failed [ 592.333535][T11868] FAT-fs (loop2): Directory bread(block 66) failed [ 592.335506][ T5685] usb 1-1: config 0 descriptor?? [ 592.377277][T11868] FAT-fs (loop2): Directory bread(block 67) failed [ 592.422208][T11868] FAT-fs (loop2): Directory bread(block 68) failed [ 592.449987][T11868] FAT-fs (loop2): Directory bread(block 69) failed [ 592.482865][T11868] FAT-fs (loop2): Directory bread(block 70) failed [ 592.502512][T11868] FAT-fs (loop2): Directory bread(block 71) failed [ 592.557465][T11868] FAT-fs (loop2): Directory bread(block 72) failed [ 592.584838][T11868] FAT-fs (loop2): Directory bread(block 73) failed [ 592.618635][ T5685] usb 1-1: probing VID:PID(0424:012C) [ 592.649431][ T5685] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 04 [ 592.667536][ T5685] usb 1-1: vub300 ignoring EndPoint(0) 04 [ 592.689869][ T5685] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 592.736343][ T5685] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 592.776182][T10449] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 592.815755][ T5685] usb 1-1: USB disconnect, device number 13 [ 592.986248][T10449] usb 2-1: Using ep0 maxpacket: 16 [ 593.062344][T10449] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 593.104591][T10449] usb 2-1: config 254 has no interface number 0 [ 593.163889][T10449] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 593.247195][T10449] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 593.303250][T10449] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 593.368258][T10449] usb 2-1: config 254 interface 235 has no altsetting 0 [ 593.449007][T10449] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 593.499858][T10449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 593.536367][T10449] usb 2-1: Product: syz [ 593.551693][T10449] usb 2-1: Manufacturer: syz [ 593.580791][T10449] usb 2-1: SerialNumber: syz [ 593.624373][T11877] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 593.941892][T11877] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 593.984047][T10449] usbtest 2-1:254.235: Linux gadget zero [ 594.017722][T10449] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 594.232246][ T5685] usb 2-1: USB disconnect, device number 12 [ 594.770328][T11903] loop0: detected capacity change from 0 to 1024 [ 595.522836][T11912] loop1: detected capacity change from 0 to 2048 [ 595.632299][T11912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.725785][T11912] EXT4-fs error (device loop1): ext4_find_extent:904: inode #2: comm syz.1.2855: inode has invalid extent depth: 9 [ 595.795864][T10449] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 595.930326][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.056381][T10449] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 596.093477][T10449] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 596.128215][T10449] usb 4-1: Product: syz [ 596.146113][T10449] usb 4-1: Manufacturer: syz [ 596.157971][T10449] usb 4-1: SerialNumber: syz [ 596.242005][T10449] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 596.376334][ T11] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 596.416745][T11935] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 596.455488][T11935] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 596.565986][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 596.611523][ T11] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 596.652443][T10449] vp7045: USB control message 'in' went wrong. [ 596.672324][ T11] usb 1-1: config 4 has no interface number 0 [ 596.711064][T10449] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 596.723504][ T11] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.784123][T10449] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 596.799865][ T11] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.855244][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 596.859746][T10449] usb 4-1: USB disconnect, device number 11 [ 596.908418][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.034885][ T11] hub 1-1:4.128: USB hub found [ 597.298813][ T11] hub 1-1:4.128: 2 ports detected [ 597.329109][ T11] hub 1-1:4.128: Using single TT (err -22) [ 597.516815][ T11] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 597.554405][ T11] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 597.621596][ T11] usb 1-1: USB disconnect, device number 14 [ 598.514945][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 598.620152][T11957] loop0: detected capacity change from 0 to 16 [ 598.687144][T11957] erofs (device loop0): mounted with root inode @ nid 36. [ 599.679923][T11972] loop1: detected capacity change from 0 to 512 [ 599.818880][T11972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.929534][T11972] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.340420][T11984] loop4: detected capacity change from 0 to 256 [ 600.364097][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.580387][T11984] FAT-fs (loop4): Directory bread(block 64) failed [ 600.599216][T11984] FAT-fs (loop4): Directory bread(block 65) failed [ 600.633742][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 600.646784][T11984] FAT-fs (loop4): Directory bread(block 66) failed [ 600.661705][T11984] FAT-fs (loop4): Directory bread(block 67) failed [ 600.688081][T11984] FAT-fs (loop4): Directory bread(block 68) failed [ 600.732821][T11984] FAT-fs (loop4): Directory bread(block 69) failed [ 600.786676][T11984] FAT-fs (loop4): Directory bread(block 70) failed [ 600.813570][T11984] FAT-fs (loop4): Directory bread(block 71) failed [ 600.852936][T11984] FAT-fs (loop4): Directory bread(block 72) failed [ 600.890800][T11984] FAT-fs (loop4): Directory bread(block 73) failed [ 602.890914][T12025] loop2: detected capacity change from 0 to 8 [ 602.983635][T12025] SQUASHFS error: Unable to read inode 0xe3 [ 605.174101][T12065] vlan1: entered allmulticast mode [ 605.219999][T12065] veth0_vlan: entered allmulticast mode [ 605.444587][T12070] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 12070 comm: syz.3.2930) [ 605.482886][ T29] audit: type=1800 audit(1782276650.068:154): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2930" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27647 res=0 errno=0 [ 606.574769][T12090] nbd: must specify at least one socket [ 607.223987][T12103] loop2: detected capacity change from 0 to 512 [ 607.361283][T12107] cgroup: name respecified [ 607.498630][T12110] loop1: detected capacity change from 0 to 128 [ 607.625855][T12110] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 607.965055][ T5583] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.047545][T12121] loop2: detected capacity change from 0 to 512 [ 608.087917][T12121] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 608.175984][T12121] EXT4-fs (loop2): 1 truncate cleaned up [ 608.238590][T12121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.668742][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.733867][T12135] xt_hashlimit: max too large, truncated to 1048576 [ 609.137217][T12140] loop1: detected capacity change from 0 to 512 [ 609.181340][T12140] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.208246][T12140] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 609.232482][T12145] No such timeout policy "syz1" [ 609.245314][T12140] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 58368 [ 609.544351][T12147] loop4: detected capacity change from 0 to 512 [ 609.714542][T12147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.804131][T12158] dlm: no locking on control device [ 609.819915][T12147] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.936777][T10449] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 610.116570][T10449] usb 1-1: Using ep0 maxpacket: 16 [ 610.147409][T10449] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 610.163263][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.186706][T10449] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 610.242968][T10449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 610.289606][T10449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 610.370552][T10449] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 610.396250][T10449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.432546][T10449] usb 1-1: Product: syz [ 610.451274][T10449] usb 1-1: Manufacturer: syz [ 610.471817][T10449] usb 1-1: SerialNumber: syz [ 610.494450][T10449] usb 1-1: config 0 descriptor?? [ 610.788501][T10449] appledisplay: Apple Cinema Display connected [ 611.003046][ T11] usb 1-1: USB disconnect, device number 15 [ 611.003275][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 611.084418][ T11] appledisplay: Apple Cinema Display disconnected [ 611.321894][T12177] loop2: detected capacity change from 0 to 1024 [ 611.417377][T12177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.457060][T12177] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.873357][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 612.136002][T12190] loop3: detected capacity change from 0 to 512 [ 612.244313][T12190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.279427][T12190] ext4 filesystem being mounted at /621/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.017058][ T5584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.195371][T12205] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 614.159962][T12218] loop4: detected capacity change from 0 to 164 [ 614.292641][T12218] Symlink component flag not implemented [ 614.317704][T12218] Symlink component flag not implemented (7) [ 614.775238][T12225] loop2: detected capacity change from 0 to 256 [ 614.964838][T12225] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 615.612909][T12232] netlink: 'syz.4.3004': attribute type 10 has an invalid length. [ 615.671036][T12234] 9p: Unknown access argument J: -22 [ 615.708145][T12232] team0: Cannot enslave team device to itself [ 615.797192][T12236] loop1: detected capacity change from 0 to 512 [ 615.834018][T12236] EXT4-fs: Ignoring removed oldalloc option [ 615.862370][T12236] EXT4-fs: Ignoring removed nobh option [ 615.925629][T12236] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.3006: ea_inode file size=7 entry size=6 [ 615.981189][T12236] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 616.028094][T12236] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.3006: iget: bad extra_isize 90 (inode size 256) [ 616.056361][T12236] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 616.061203][T12236] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3006: error while reading EA inode 11 err=-117 [ 616.071093][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 616.071187][ C1] EXT4-fs (loop1): initial error at time 1782276660: ext4_xattr_inode_iget:441: inode 11 [ 616.071348][ C1] EXT4-fs (loop1): last error at time 1782276660: ext4_xattr_inode_iget:441: inode 11 [ 616.114241][T12236] loop1: lost filesystem error report for type 5 error -117 [ 616.117049][T12236] EXT4-fs (loop1): 1 orphan inode deleted [ 616.133677][T12236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.300589][T12236] EXT4-fs error (device loop1): __ext4_iget:5481: inode #14: block 1886221359: comm syz.1.3006: invalid block [ 616.624249][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.646780][T12250] netlink: 'syz.4.3012': attribute type 3 has an invalid length. [ 616.659362][T12250] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 616.693090][T12250] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3012'. [ 617.014290][ T29] audit: type=1326 audit(1782276661.598:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.1.3013" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 617.164602][ T29] audit: type=1326 audit(1782276661.648:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.1.3013" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 617.305445][ T29] audit: type=1326 audit(1782276661.708:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.1.3013" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 617.425414][T12262] xt_socket: unknown flags 0xc [ 617.429002][ T29] audit: type=1326 audit(1782276661.708:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.1.3013" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 617.562302][ T29] audit: type=1326 audit(1782276661.718:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.1.3013" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 618.157812][T12276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3024'. [ 619.209351][T12293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3033'. [ 620.662655][T12320] loop4: detected capacity change from 0 to 256 [ 620.693206][T12323] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 620.701831][T12320] exfat: Deprecated parameter 'utf8' [ 620.705444][T12320] exfat: Deprecated parameter 'namecase' [ 620.806107][T12320] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 621.220528][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3052'. [ 621.258779][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3052'. [ 623.254171][T12369] loop2: detected capacity change from 0 to 256 [ 623.313226][T12369] exfat: Deprecated parameter 'namecase' [ 623.364402][T12369] exfat: Deprecated parameter 'namecase' [ 623.533447][T12369] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 624.913248][T12393] loop2: detected capacity change from 0 to 16 [ 625.710568][T12405] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.719032][T12405] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.770923][T12405] bridge0: entered promiscuous mode [ 625.831800][T12405] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 627.264034][T12433] netlink: 'syz.2.3103': attribute type 11 has an invalid length. [ 628.051493][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3110'. [ 628.245913][ T5685] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 628.440117][ T5685] usb 1-1: Using ep0 maxpacket: 8 [ 628.474927][ T5685] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 628.527277][ T5685] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.601910][ T5685] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 628.636545][T12456] loop4: detected capacity change from 0 to 1024 [ 628.646751][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.728283][T12456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.761142][ T5685] usbtmc 1-1:16.0: bulk endpoints not found [ 628.805173][T12456] ext4 filesystem being mounted at /634/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 628.946956][ T11] usb 1-1: USB disconnect, device number 16 [ 629.087978][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 629.468167][T12471] loop3: detected capacity change from 0 to 256 [ 629.519604][T12473] loop2: detected capacity change from 0 to 512 [ 629.585335][T12473] EXT4-fs: Ignoring removed i_version option [ 629.624743][T12473] EXT4-fs: Ignoring removed bh option [ 629.633387][T12471] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 629.693849][T12471] exFAT-fs (loop3): failed to load alloc-bitmap [ 629.719958][T12471] exFAT-fs (loop3): failed to recognize exfat type [ 629.765673][T12473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.861189][T12473] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.917484][T12471] exFAT-fs (loop3): unable to read boot sector [ 629.966035][T12471] exFAT-fs (loop3): failed to read boot sector [ 630.006757][T12471] exFAT-fs (loop3): failed to recognize exfat type [ 630.364534][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.034030][T12495] loop1: detected capacity change from 0 to 1024 [ 631.135577][T12495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.217198][T12495] ext4 filesystem being mounted at /628/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 631.684143][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 631.812393][T12512] batadv1: entered promiscuous mode [ 631.846620][T12512] batadv1: entered allmulticast mode [ 632.105940][T12516] loop1: detected capacity change from 0 to 128 [ 632.163279][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3142'. [ 632.173076][T12516] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.198951][T12519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3142'. [ 632.223294][T12516] ext4 filesystem being mounted at /629/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 632.544827][ T5583] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 632.946372][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3148'. [ 633.396116][T12540] loop0: detected capacity change from 0 to 1024 [ 633.522944][T12540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.574703][T12540] ext4 filesystem being mounted at /626/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.776400][ T5593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 634.396084][T12555] cgroup: none used incorrectly [ 634.553048][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.560249][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.805547][T12561] loop4: detected capacity change from 0 to 1024 [ 634.835197][T12564] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3161'. [ 634.901038][T12564] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3161'. [ 636.060051][T12587] loop2: detected capacity change from 0 to 8 [ 636.171300][T12587] cramfs: bad data blocksize 3959421443 [ 636.186715][ T11] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 636.194941][T12587] cramfs: bad data blocksize 4294965915 [ 636.218721][T12587] cramfs: bad data blocksize 802397048 [ 636.249770][T12587] cramfs: bad data blocksize 4294742353 [ 636.286228][T12587] cramfs: bad data blocksize 4227854340 [ 636.321060][T12587] cramfs: bad data blocksize 859179927 [ 636.336329][T12587] cramfs: bad data blocksize 3436389781 [ 636.360745][T12587] cramfs: bad data blocksize 4294365136 [ 636.377970][T12587] cramfs: bad data blocksize 4294967040 [ 636.403799][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.414864][T12587] cramfs: bad data blocksize 3959421443 [ 636.434563][ T29] audit: type=1800 audit(1782276681.018:160): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3172" name="file2" dev="loop2" ino=268 res=0 errno=0 [ 636.438767][ T11] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 636.541537][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 636.558408][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 636.573208][T12593] loop3: detected capacity change from 0 to 16 [ 636.600799][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 636.613203][T12593] erofs (device loop3): invalid ishare xattr prefix id 0 [ 636.623908][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.751322][ T11] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 636.764165][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.773311][ T11] usb 1-1: Product: syz [ 636.778609][ T11] usb 1-1: Manufacturer: syz [ 636.783674][ T11] usb 1-1: SerialNumber: syz [ 636.804605][T12593] loop3: detected capacity change from 0 to 512 [ 636.838149][T12593] EXT4-fs: inline encryption not supported [ 636.860652][ T11] usb 1-1: config 0 descriptor?? [ 636.890544][T12584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.906687][T12593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 636.915560][T12593] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 636.953522][ T11] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 637.053137][T12593] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 637.098457][T12593] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 637.111504][T12593] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3174: Failed to acquire dquot type 1 [ 637.129145][T12593] loop3: lost filesystem error report for type 5 error -5 [ 637.135876][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 637.149897][ C0] EXT4-fs (loop3): initial error at time 1782276681: ext4_acquire_dquot:7034 [ 637.159007][ C0] EXT4-fs (loop3): last error at time 1782276681: ext4_acquire_dquot:7034 [ 637.168505][T12593] EXT4-fs (loop3): Remounting filesystem read-only [ 637.187000][ T11] usb 1-1: USB disconnect, device number 17 [ 637.196483][T12593] EXT4-fs (loop3): 1 truncate cleaned up [ 637.278583][T12593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.529366][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 637.825126][ T5584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.420498][T12609] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3180'. [ 639.176421][T12623] trusted_key: encrypted_key: keylen parameter is missing [ 640.490150][T12648] loop0: detected capacity change from 0 to 256 [ 640.523525][T12648] exfat: Deprecated parameter 'utf8' [ 640.560733][T12648] exfat: Deprecated parameter 'utf8' [ 640.714916][T12648] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 641.740681][T12671] tmpfs: Bad value for 'mpol' [ 642.922995][T12691] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 643.483786][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 644.008698][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.895341][T12721] loop0: detected capacity change from 0 to 8 [ 645.070585][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.162472][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.640560][T12725] loop3: detected capacity change from 0 to 4096 [ 646.080203][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 646.155356][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.202515][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.245560][T12731] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 646.264260][T12731] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 646.315064][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.373252][ T55] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.426858][ T55] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 646.438956][ T55] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 646.518201][ T55] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 646.565408][ T55] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 646.848903][T12741] loop2: detected capacity change from 0 to 64 [ 646.903435][T12741] MINIX-fs: mounting file system with errors, running fsck is recommended [ 647.795954][ T29] audit: type=1326 audit(1782276692.378:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.4.3251" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaa59ce59 code=0x7ffc0000 [ 647.870877][T12749] xt_CT: No such helper "syz0" [ 647.904992][ T29] audit: type=1326 audit(1782276692.418:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.4.3251" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaa59ce59 code=0x7ffc0000 [ 648.023219][ T29] audit: type=1326 audit(1782276692.438:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.4.3251" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fcfaa59ce59 code=0x7ffc0000 [ 648.140399][ T29] audit: type=1326 audit(1782276692.438:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.4.3251" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaa59ce59 code=0x7ffc0000 [ 648.272942][ T29] audit: type=1326 audit(1782276692.438:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.4.3251" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfaa59ce59 code=0x7ffc0000 [ 648.360316][T12755] loop1: detected capacity change from 0 to 4096 [ 648.411507][T12755] ntfs3(loop1): ino=0, mi_enum_attr [ 648.511515][T12755] ntfs3(loop1): ino=0, mi_enum_attr [ 648.533117][T12755] ntfs3(loop1): ino=0, mi_enum_attr [ 649.057143][ C1] sd 0:0:1:0: [sda] tag#7856 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 649.068494][ C1] sd 0:0:1:0: [sda] tag#7856 CDB: Write(6) 0a 00 72 47 43 76 [ 649.438953][T12770] loop4: detected capacity change from 0 to 4096 [ 649.502698][T12770] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 650.888453][T12799] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.3273'. [ 651.154061][T12794] loop1: detected capacity change from 0 to 4096 [ 651.389940][T12807] loop0: detected capacity change from 0 to 64 [ 651.400035][T12794] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 651.687356][T10449] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 651.897994][T10449] usb 4-1: Using ep0 maxpacket: 16 [ 651.942032][T10449] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.991283][T10449] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.074933][T10449] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.102711][T10449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.131667][T10449] usb 4-1: Product: syz [ 652.153250][T10449] usb 4-1: Manufacturer: syz [ 652.165321][T10449] usb 4-1: SerialNumber: syz [ 652.291750][T10449] usb 4-1: 0:2 : does not exist [ 652.310140][T10449] usb 4-1: unit 6 not found! [ 652.669745][T10449] usb 4-1: USB disconnect, device number 12 [ 653.215205][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.533816][T12857] comedi comedi0: comedi_parport: I/O port conflict (0x10000,3) [ 655.060945][T12868] loop3: detected capacity change from 0 to 256 [ 655.104551][ T5685] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 655.286805][T12868] FAT-fs (loop3): Directory bread(block 64) failed [ 655.288048][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 655.316492][T12868] FAT-fs (loop3): Directory bread(block 65) failed [ 655.363414][T12868] FAT-fs (loop3): Directory bread(block 66) failed [ 655.368392][ T5685] usb 3-1: config 254 has an invalid interface number: 52 but max is 0 [ 655.397368][ T5685] usb 3-1: config 254 has no interface number 0 [ 655.403941][T12868] FAT-fs (loop3): Directory bread(block 67) failed [ 655.424277][ T5685] usb 3-1: config 254 interface 52 has no altsetting 0 [ 655.442646][T12868] FAT-fs (loop3): Directory bread(block 68) failed [ 655.460960][ T5685] usb 3-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 655.496433][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.508068][T12868] FAT-fs (loop3): Directory bread(block 69) failed [ 655.536208][ T5685] usb 3-1: Product: syz [ 655.553352][ T5685] usb 3-1: Manufacturer: syz [ 655.558499][T12868] FAT-fs (loop3): Directory bread(block 70) failed [ 655.577059][ T5685] usb 3-1: SerialNumber: syz [ 655.581372][T12868] FAT-fs (loop3): Directory bread(block 71) failed [ 655.620855][T12868] FAT-fs (loop3): Directory bread(block 72) failed [ 655.651485][T12868] FAT-fs (loop3): Directory bread(block 73) failed [ 655.877913][T12868] syz.3.3306: attempt to access beyond end of device [ 655.877913][T12868] loop3: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 655.882690][ T5685] usb-storage 3-1:254.52: USB Mass Storage device detected [ 655.940893][T12868] syz.3.3306: attempt to access beyond end of device [ 655.940893][T12868] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.989235][ T5685] usb-storage 3-1:254.52: This device (04e6,000a,0200 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 655.989235][ T5685] Please send a copy of this message to and [ 656.049244][ T29] audit: type=1800 audit(1782276700.638:166): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3306" name="file1" dev="loop3" ino=1048631 res=0 errno=0 [ 656.404366][ T5685] usb 3-1: USB disconnect, device number 16 [ 657.032818][T12891] overlayfs: missing 'workdir' [ 657.276633][ T5685] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 657.492511][ T5685] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.530090][ T5685] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 657.571557][ T5685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.638275][ T5685] usb 5-1: config 0 descriptor?? [ 657.699196][ T5685] option 5-1:0.0: GSM modem (1-port) converter detected [ 657.730593][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 657.756406][T12904] netlink: 944 bytes leftover after parsing attributes in process `syz.3.3324'. [ 657.926589][T10449] usb 5-1: USB disconnect, device number 12 [ 657.947944][T10449] option 5-1:0.0: device disconnected [ 658.164260][T12910] loop2: detected capacity change from 0 to 64 [ 659.564191][T12928] loop2: detected capacity change from 0 to 2048 [ 659.643608][T12928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 660.042729][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'. [ 660.470658][T12947] loop0: detected capacity change from 0 to 256 [ 660.498299][T12947] exfat: Deprecated parameter 'utf8' [ 660.515425][T12947] exfat: Deprecated parameter 'utf8' [ 660.524887][T12947] exfat: Deprecated parameter 'utf8' [ 660.589040][T12947] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 660.634717][T12952] veth0_macvtap: left promiscuous mode [ 660.661903][T12952] veth0_macvtap: entered promiscuous mode [ 661.688007][T12972] xt_CONNSECMARK: invalid mode: 254 [ 662.162488][ T29] audit: type=1326 audit(1782276706.738:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.280241][ T29] audit: type=1326 audit(1782276706.778:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.368613][ T29] audit: type=1326 audit(1782276706.788:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.454420][ T29] audit: type=1326 audit(1782276706.798:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.557814][ T29] audit: type=1326 audit(1782276706.798:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.654212][ T29] audit: type=1326 audit(1782276706.808:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.721145][ T29] audit: type=1326 audit(1782276706.808:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.816202][ T29] audit: type=1326 audit(1782276706.798:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.890352][ T29] audit: type=1326 audit(1782276706.808:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.2.3363" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 662.937846][T10449] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 662.946654][T12995] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 662.979762][T12995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 663.116477][T10449] usb 3-1: Using ep0 maxpacket: 8 [ 663.138818][T10449] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.175302][T10449] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 663.190627][T10449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.230547][T10449] usb 3-1: Product: syz [ 663.265296][T10449] usb 3-1: Manufacturer: syz [ 663.322931][T10449] usb 3-1: SerialNumber: syz [ 663.384991][T10449] usb 3-1: config 0 descriptor?? [ 663.669599][T10449] cdc_phonet 3-1:0.0: skipping garbage [ 663.719762][T10449] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 663.790931][T10449] usb 3-1: USB disconnect, device number 17 [ 663.884089][T13009] loop0: detected capacity change from 0 to 64 [ 663.973468][T13010] openvswitch: netlink: IP tunnel attribute has 1620 unknown bytes. [ 664.542578][T13014] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 664.591161][T13014] bond3 (unregistering): Released all slaves [ 664.636145][ T5685] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 664.734620][T13022] loop2: detected capacity change from 0 to 764 [ 664.815467][ T5685] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.863193][ T5685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 664.923456][ T5685] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 664.953366][ T5685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.994507][ T5685] usb 5-1: config 0 descriptor?? [ 665.023295][T13017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 665.091896][ T5685] hub 5-1:0.0: USB hub found [ 665.300311][ T5685] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 665.462278][T13026] loop0: detected capacity change from 0 to 4096 [ 665.528779][ T5685] usbhid 5-1:0.0: can't add hid device: -71 [ 665.546986][T13026] ntfs3(loop0): ino=3, mi_enum_attr [ 665.563063][ T5685] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 665.683592][ T5685] usb 5-1: USB disconnect, device number 13 [ 665.972498][T13026] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 666.637493][T13040] loop2: detected capacity change from 0 to 256 [ 666.761052][ T29] audit: type=1326 audit(1782276711.348:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.1.3394" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2b99ce59 code=0x7ffc0000 [ 667.416372][T13052] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 669.416154][ T5685] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 669.587582][ T5685] usb 5-1: Using ep0 maxpacket: 16 [ 669.597380][ T5685] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 669.672284][ T5685] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 669.681733][ T5685] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 669.690915][ T5685] usb 5-1: Product: syz [ 669.703043][ T5685] usb 5-1: Manufacturer: syz [ 669.733089][ T5685] r8152-cfgselector 5-1: Unknown version 0x0000 [ 669.750306][ T5685] r8152-cfgselector 5-1: config 0 descriptor?? [ 669.773006][ T5685] cdc_acm 5-1:0.0: Zero length descriptor references [ 669.783807][ T5685] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 669.831978][T13074] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.017181][T10347] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 670.293254][T13074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.346983][T13074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.754460][T13087] žÿ: renamed from team_slave_1 [ 670.785263][ T55] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.818286][ T55] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.848829][ T55] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.883790][ T55] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.690858][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3425'. [ 672.029330][T13111] bond3: entered allmulticast mode [ 672.946331][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.954639][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.676993][T13115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.705677][T13115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.022425][T13140] batadv1: entered promiscuous mode [ 674.031188][T13140] batadv1: entered allmulticast mode [ 674.138990][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.177486][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.223578][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.277759][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.517682][T10449] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 674.696656][T10449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 674.739413][T10449] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 674.769097][T10449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.819203][T10449] usb 5-1: config 0 descriptor?? [ 674.841630][T13144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 675.093678][T10449] ath6kl: Failed to submit usb control message: -71 [ 675.107512][T10449] ath6kl: unable to send the bmi data to the device: -71 [ 675.114861][T10449] ath6kl: Unable to send get target info: -71 [ 675.123621][T10449] ath6kl: Failed to init ath6kl core: -71 [ 675.167771][T10449] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 675.334383][T10449] usb 5-1: USB disconnect, device number 15 [ 676.632107][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 676.632182][ T29] audit: type=1326 audit(1782276721.218:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.2.3460" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 676.752551][ T29] audit: type=1326 audit(1782276721.268:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.2.3460" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 676.884192][ T29] audit: type=1326 audit(1782276721.288:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.2.3460" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 677.007934][ T29] audit: type=1326 audit(1782276721.288:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.2.3460" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 677.129210][ T29] audit: type=1326 audit(1782276721.288:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.2.3460" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4014b9ce59 code=0x7ffc0000 [ 677.179419][T13187] netlink: 'syz.3.3463': attribute type 1 has an invalid length. [ 677.307821][T13167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.407978][T13167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.622926][T13193] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3466'. [ 677.699705][T13194] ALSA: mixer_oss: invalid OSS volume 'u' [ 677.847176][T13197] netlink: 'syz.4.3468': attribute type 2 has an invalid length. [ 678.158678][T13193] 0·: renamed from veth1_vlan [ 678.165599][T13185] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 678.203001][T13185] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 678.239210][T13185] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 678.257198][T13193] 0·: left promiscuous mode [ 678.262083][T13193] 0·: entered allmulticast mode [ 678.319162][T13193] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 678.414402][ T1016] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.440731][ T1016] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 678.495920][ T1016] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.536383][ T1016] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 678.572838][ T1016] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.606534][ T1016] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 678.659870][ T1016] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.699607][ T1016] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 679.232849][T13211] batadv1: entered promiscuous mode [ 679.261588][T13211] batadv1: entered allmulticast mode [ 680.441209][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.449626][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.097773][T13229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.162682][T13229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.277228][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 681.450219][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 681.473870][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 681.492643][ T24] usb 4-1: Product: syz [ 681.500034][ T24] usb 4-1: SerialNumber: syz [ 681.527186][ T24] usb 4-1: config 0 descriptor?? [ 681.694483][ T1016] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.705540][ T1016] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.727684][ T1016] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.776278][ T24] hso 4-1:0.0: Failed to find BULK eps [ 681.782360][ T1016] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.980005][ T24] usb 4-1: USB disconnect, device number 13 [ 682.396612][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 683.006637][T13272] loop1: detected capacity change from 0 to 512 [ 683.053384][T13272] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 683.143100][T13272] EXT4-fs (loop1): 1 truncate cleaned up [ 683.198855][T13272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.289567][T13272] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.1.3505: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 683.337856][T13272] EXT4-fs (loop1): Remounting filesystem read-only [ 683.344847][T13272] EXT4-fs warning (device loop1): ext4_rename_delete:3739: inode #2: comm syz.1.3505: Deleting old file: nlink 4, error=-117 [ 683.493921][T13275] loop0: detected capacity change from 0 to 4096 [ 683.542839][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.915430][T13290] batadv1: entered promiscuous mode [ 683.940269][T13290] batadv1: entered allmulticast mode [ 684.070393][T13289] netlink: 'syz.3.3512': attribute type 11 has an invalid length. [ 685.531207][T13320] comedi comedi0: pcl726: I/O base address or length out of range [ 685.729160][T13315] bond0: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 685.774389][T13315] bond0: entered promiscuous mode [ 686.325431][T13332] netlink: 'syz.3.3532': attribute type 11 has an invalid length. [ 687.388584][T13354] netlink: 'syz.1.3543': attribute type 3 has an invalid length. [ 688.566438][T13378] loop3: detected capacity change from 0 to 24 [ 690.078951][T13412] loop4: detected capacity change from 0 to 512 [ 690.099159][T13412] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 690.144273][T13412] EXT4-fs (loop4): 1 truncate cleaned up [ 690.185618][T13412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.282223][T13412] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.3570: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 690.307464][ T5686] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 690.356832][T13412] EXT4-fs (loop4): Remounting filesystem read-only [ 690.374090][T13412] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.3570: Deleting old file: nlink 4, error=-117 [ 690.509641][ T5686] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 690.528197][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 690.554568][ T5686] usb 4-1: Product: syz [ 690.571825][ T5686] usb 4-1: SerialNumber: syz [ 690.607287][ T5686] usb 4-1: config 0 descriptor?? [ 690.655410][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.881721][ T5686] hso 4-1:0.0: Failed to find INT IN ep [ 691.097373][ T5686] usb 4-1: USB disconnect, device number 14 [ 692.487566][T13450] loop2: detected capacity change from 0 to 512 [ 692.518282][T13450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 692.596820][T13450] EXT4-fs (loop2): 1 truncate cleaned up [ 692.646689][T13450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.773621][T13450] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.2.3588: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 692.801813][T13450] EXT4-fs (loop2): Remounting filesystem read-only [ 692.817475][T13450] EXT4-fs warning (device loop2): ext4_rename_delete:3739: inode #2: comm syz.2.3588: Deleting old file: nlink 4, error=-117 [ 693.089864][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.957657][T13482] loop3: detected capacity change from 0 to 256 [ 693.983229][T13482] exfat: Deprecated parameter 'utf8' [ 694.007859][T13482] exfat: Deprecated parameter 'utf8' [ 694.030262][T13482] exfat: Deprecated parameter 'utf8' [ 694.044031][T13484] usb usb8: usbfs: process 13484 (syz.1.3604) did not claim interface 0 before use [ 694.127714][T13482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 694.358512][T13487] loop2: detected capacity change from 0 to 1024 [ 694.711433][T13496] loop3: detected capacity change from 0 to 256 [ 694.807445][T13496] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 694.944976][T13496] exFAT-fs (loop3): error, data valid size is invalid(-281474976706560) [ 695.131296][T13498] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 695.233198][T13498] bond3 (unregistering): Released all slaves [ 695.933181][T13518] loop1: detected capacity change from 0 to 256 [ 695.995433][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.008176][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.655544][T13547] loop2: detected capacity change from 0 to 512 [ 697.689351][T13547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 697.722721][T13547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 697.806892][T13547] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3636: bad orphan inode 131083 [ 697.871373][T13547] loop2: lost filesystem error report for type 5 error -117 [ 697.875018][T13547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.961813][T13547] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.3636: Logical block already allocated [ 697.985942][T13556] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3639'. [ 698.354311][ T5587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.492393][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'. [ 699.154831][T13577] IPv6: sit1: Disabled Multicast RS [ 699.220638][T13577] sit1: entered allmulticast mode [ 699.394575][T13581] misc userio: Invalid payload size [ 700.126748][T13595] loop0: detected capacity change from 0 to 256 [ 701.191770][T13604] loop4: detected capacity change from 0 to 4096 [ 701.484159][T13604] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 701.539602][T13621] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 701.992991][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 704.747403][T13680] loop2: detected capacity change from 0 to 1764 [ 705.888972][T13704] binfmt_misc: register: failed to install interpreter file ./file7 [ 707.964315][T13746] netlink: zone id is out of range [ 708.003891][T13746] netlink: zone id is out of range [ 708.041081][T13746] netlink: zone id is out of range [ 708.060506][T13746] netlink: zone id is out of range [ 708.088396][T13746] netlink: zone id is out of range [ 708.112357][T13746] netlink: zone id is out of range [ 708.148367][T13746] netlink: zone id is out of range [ 708.173180][T13746] netlink: zone id is out of range [ 708.196992][T13746] netlink: zone id is out of range [ 708.236442][T13746] netlink: zone id is out of range [ 709.065359][T13769] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 709.090248][T13769] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 711.062541][T13815] loop1: detected capacity change from 0 to 512 [ 711.156737][T13815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.225664][T13815] ext4 filesystem being mounted at /751/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.469076][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.632280][T13849] netlink: 'syz.3.3781': attribute type 3 has an invalid length. [ 713.146106][T13858] loop3: detected capacity change from 0 to 256 [ 713.230094][T13863] loop0: detected capacity change from 0 to 512 [ 713.270140][T13863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 713.312845][T13858] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 713.328389][T13863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 713.371258][T13863] System zones: 1-12 [ 713.381677][T13863] EXT4-fs (loop0): 1 truncate cleaned up [ 713.393909][T13863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.439105][T13863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.480363][T13867] netlink: 'syz.2.3790': attribute type 3 has an invalid length. [ 715.339220][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3809'. [ 715.465167][T13907] loop0: detected capacity change from 0 to 64 [ 715.639179][T13907] syz.0.3810: attempt to access beyond end of device [ 715.639179][T13907] loop0: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 715.720486][T13907] Buffer I/O error on dev loop0, logical block 22533, async page read [ 715.772339][T13907] syz.0.3810: attempt to access beyond end of device [ 715.772339][T13907] loop0: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 715.815578][T13907] Buffer I/O error on dev loop0, logical block 22533, async page read [ 716.433615][T13911] loop1: detected capacity change from 0 to 4096 [ 716.498777][T13911] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 716.754459][T13911] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 716.802094][T13911] ntfs3(loop1): Failed to load $Extend (-22). [ 716.821463][T13911] ntfs3(loop1): Failed to initialize $Extend. [ 717.553821][T13929] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3820'. [ 717.566910][T13929] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3820'. [ 718.563898][T13947] net_ratelimit: 2 callbacks suppressed [ 718.563969][T13947] openvswitch: netlink: Actions may not be safe on all matching packets [ 719.953035][T13950] syz.0.3830 (13950): drop_caches: 2 [ 720.957597][T13988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3849'. [ 721.051486][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3850'. [ 721.051821][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3850'. [ 721.500465][T13996] loop0: detected capacity change from 0 to 64 [ 722.487373][T14012] netlink: 'syz.4.3860': attribute type 3 has an invalid length. [ 722.527145][T14012] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3860'. [ 722.757267][T14018] loop2: detected capacity change from 0 to 256 [ 724.004869][T14044] gre1: entered allmulticast mode [ 724.096508][ T5686] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 724.267731][ T5686] usb 3-1: Using ep0 maxpacket: 32 [ 724.325498][ T5686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.424831][ T5686] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 724.482911][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.512802][ T5686] usb 3-1: Product: syz [ 724.535472][ T5686] usb 3-1: Manufacturer: syz [ 724.558779][ T5686] usb 3-1: SerialNumber: syz [ 724.600893][ T5686] usb 3-1: config 0 descriptor?? [ 724.646945][ T5686] usb 3-1: No union descriptors [ 724.683725][ T5686] usb 3-1: unsupported MDLM descriptors [ 724.810908][T14056] netlink: 'syz.1.3883': attribute type 3 has an invalid length. [ 724.884788][ T5686] usb 3-1: USB disconnect, device number 18 [ 724.901501][T14056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3883'. [ 725.392734][T14066] netlink: 'syz.1.3888': attribute type 2 has an invalid length. [ 726.579848][T14090] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3900'. [ 727.190794][T14102] loop0: detected capacity change from 0 to 256 [ 727.237742][T14102] exfat: Deprecated parameter 'namecase' [ 727.270073][T14102] exfat: Deprecated parameter 'namecase' [ 727.344540][T14102] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 727.586764][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3910'. [ 727.637003][T14114] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 727.710597][T14116] loop2: detected capacity change from 0 to 128 [ 727.823192][T14116] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 52, start 000000ff) [ 727.884273][T14116] FAT-fs (loop2): Filesystem has been set read-only [ 728.094601][T14122] tipc: Can't bind to reserved service type 0 [ 728.125484][ T5587] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 52, start 000000ff) [ 728.718797][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 729.279747][T14143] loop0: detected capacity change from 0 to 256 [ 729.467557][T14143] FAT-fs (loop0): Directory bread(block 64) failed [ 729.490947][T14143] FAT-fs (loop0): Directory bread(block 65) failed [ 729.515396][T14143] FAT-fs (loop0): Directory bread(block 66) failed [ 729.543569][T14143] FAT-fs (loop0): Directory bread(block 67) failed [ 729.566504][T14143] FAT-fs (loop0): Directory bread(block 68) failed [ 729.582176][T14143] FAT-fs (loop0): Directory bread(block 69) failed [ 729.612282][T14143] FAT-fs (loop0): Directory bread(block 70) failed [ 729.638609][T14143] FAT-fs (loop0): Directory bread(block 71) failed [ 729.664340][T14143] FAT-fs (loop0): Directory bread(block 72) failed [ 729.689893][T14143] FAT-fs (loop0): Directory bread(block 73) failed [ 729.924997][T14151] loop1: detected capacity change from 0 to 4096 [ 730.040453][T14158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.084236][T14151] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77 [ 730.172714][T14151] Remounting filesystem read-only [ 730.259501][T14156] veth3: entered promiscuous mode [ 730.976571][T14171] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3939'. [ 731.103815][T14173] loop0: detected capacity change from 0 to 256 [ 731.389579][T14173] FAT-fs (loop0): Directory bread(block 64) failed [ 731.399832][T14173] FAT-fs (loop0): Directory bread(block 65) failed [ 731.421726][T14173] FAT-fs (loop0): Directory bread(block 66) failed [ 731.455580][T14173] FAT-fs (loop0): Directory bread(block 67) failed [ 731.485643][T14173] FAT-fs (loop0): Directory bread(block 68) failed [ 731.510604][T14173] FAT-fs (loop0): Directory bread(block 69) failed [ 731.532653][T14173] FAT-fs (loop0): Directory bread(block 70) failed [ 731.572919][T14173] FAT-fs (loop0): Directory bread(block 71) failed [ 731.599326][T14173] FAT-fs (loop0): Directory bread(block 72) failed [ 731.606568][ T5686] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 731.638060][T14173] FAT-fs (loop0): Directory bread(block 73) failed [ 731.776302][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 731.821063][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 731.858880][ T5686] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 731.899502][ T5686] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 731.942724][ T5686] usb 2-1: config 14 has no interface number 0 [ 731.980334][ T5686] usb 2-1: config 14 has no interface number 1 [ 732.006127][ T5686] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 732.050751][ T5686] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 732.105394][ T5686] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 732.146830][ T5686] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 732.183079][ T5686] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 732.208440][ T5686] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.276271][ T5686] usb 2-1: config 14 interface 57 has no altsetting 0 [ 732.310868][ T5686] usb 2-1: config 14 interface 228 has no altsetting 0 [ 732.357227][ T5686] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 732.389790][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.425508][ T5686] usb 2-1: Product: syz [ 732.448609][ T5686] usb 2-1: Manufacturer: syz [ 732.469573][ T5686] usb 2-1: SerialNumber: syz [ 732.497846][T14193] netlink: 'syz.3.3950': attribute type 10 has an invalid length. [ 732.610597][T14193] bond0: (slave wlan0): Opening slave failed [ 732.804311][ T5686] legousbtower 2-1:14.57: interrupt endpoints not found [ 732.881245][ T5686] legousbtower 2-1:14.228: get version request failed: -71 [ 732.902037][ T5686] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 732.959084][ T5686] usb 2-1: USB disconnect, device number 13 [ 733.619482][ T5686] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 733.829234][ T5686] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 733.864914][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.906677][ T5686] usb 1-1: config 0 descriptor?? [ 734.033312][T14221] ieee802154 phy0 wpan0: encryption failed: -22 [ 734.387562][ T5686] ath6kl: Failed to submit usb control message: -71 [ 734.397710][ T5686] ath6kl: unable to send the bmi data to the device: -71 [ 734.416721][ T5686] ath6kl: Unable to send get target info: -71 [ 734.443234][ T5686] ath6kl: Failed to init ath6kl core: -71 [ 734.489951][ T5686] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 734.541801][ T5686] usb 1-1: USB disconnect, device number 18 [ 735.476171][ T5686] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 735.660423][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 735.707629][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.754795][ T5686] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 735.776210][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.811828][ T5686] usb 5-1: config 0 descriptor?? [ 735.865408][ T5686] xbox_remote_probe: Unexpected endpoint_in [ 735.892997][ T5686] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 736.036289][T14258] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 736.074564][ T5686] usb 5-1: USB disconnect, device number 16 [ 736.106582][T14258] CIFS: VFS: Malformed UNC in devname [ 736.121558][T14260] ptrace attach of "ci-upstream-kmsan-gce-root/syz-executor exec"[5593] was attempted by ""[14260] [ 736.877573][T14273] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 737.244636][T14281] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 737.814356][T14292] netlink: 'syz.3.3996': attribute type 10 has an invalid length. [ 737.950224][T14297] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 738.595491][T14306] ip6tnl3: entered allmulticast mode [ 738.629920][ T59] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 738.670369][ T59] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 738.678848][T10449] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 738.937550][T10449] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 739.427287][T10449] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 740.329208][T14339] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4019'. [ 740.672333][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 741.126898][ T5686] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 741.329830][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 741.412503][ T5686] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 741.438195][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.448420][ T5686] usb 5-1: Product: syz [ 741.452912][ T5686] usb 5-1: Manufacturer: syz [ 741.466516][T10449] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 741.468296][ T5686] usb 5-1: SerialNumber: syz [ 741.521881][ T5686] usb 5-1: config 0 descriptor?? [ 741.551326][ T5686] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 741.654951][T10449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 741.668306][T10449] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 741.679646][T10449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 741.690361][T10449] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 741.711502][T10449] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 741.721747][T10449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.743709][T10449] usb 1-1: Product: syz [ 741.765269][ T5686] usb 5-1: USB disconnect, device number 17 [ 741.767312][T10449] usb 1-1: Manufacturer: syz [ 741.812217][T10449] usb 1-1: SerialNumber: syz [ 741.860914][T10449] usb 1-1: config 0 descriptor?? [ 741.912328][T10449] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 741.992095][T14374] loop2: detected capacity change from 0 to 128 [ 742.108743][T14374] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 742.122739][T14374] ext4 filesystem being mounted at /781/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 742.181904][T10449] scsi host1: usb-storage 1-1:0.0 [ 742.267087][T10449] usb 1-1: USB disconnect, device number 19 [ 742.466312][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 742.488887][ T5587] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 742.551020][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4037'. [ 743.643725][T14408] overlayfs: missing 'lowerdir' [ 744.222192][T14422] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.4055'. [ 744.938588][T14433] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4060'. [ 744.979385][T14434] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4061'. [ 745.033698][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4061'. [ 745.094199][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4061'. [ 745.581051][T14446] netlink: 'syz.0.4067': attribute type 1 has an invalid length. [ 746.100365][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4072'. [ 746.797684][T10449] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 746.986809][T10449] usb 1-1: Using ep0 maxpacket: 8 [ 747.022951][T10449] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 747.075921][T10449] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 747.100444][T10449] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 747.143708][T10449] usb 1-1: Product: syz [ 747.154980][T10449] usb 1-1: Manufacturer: syz [ 747.179614][T10449] usb 1-1: SerialNumber: syz [ 747.463625][T10449] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 747.496660][T10449] usb 1-1: Handspring Visor / Palm OS: port 6, is for Remote File System use [ 747.541377][T10449] usb 1-1: Handspring Visor / Palm OS: port 217, is for unknown use [ 747.578499][T10449] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 747.690852][T10449] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 747.729112][T10449] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 747.790040][T10449] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 747.853489][T10449] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 747.926424][T10449] usb 1-1: USB disconnect, device number 20 [ 747.959459][T10449] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 748.019592][T10449] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 748.064875][T10449] visor 1-1:1.0: device disconnected [ 748.148457][ T5686] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 748.369044][ T5686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.427542][ T5686] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.489268][ T5686] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.516401][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.538909][ T5686] usb 2-1: Product: syz [ 748.543405][ T5686] usb 2-1: Manufacturer: syz [ 748.566201][ T5686] usb 2-1: SerialNumber: syz [ 748.615487][ T5686] cdc_ncm 2-1:1.0: skipping garbage [ 748.639008][ T5686] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 748.664544][ T5686] cdc_ncm 2-1:1.0: bind() failure [ 748.721913][ T5686] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 748.730419][ T5686] cdc_ncm 2-1:1.1: bind() failure [ 748.834117][ T5686] usb 2-1: USB disconnect, device number 14 [ 749.746392][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 750.160053][T14525] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 750.201729][T14525] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 750.234634][T14525] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 750.279461][T14525] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 751.092183][T14543] loop3: detected capacity change from 0 to 128 [ 751.324516][T14550] ip6t_srh: unknown srh invflags 4000 [ 751.398917][T11881] ===================================================== [ 751.406411][T11881] BUG: KMSAN: uninit-value in put_cmsg+0x534/0xbc0 [ 751.413113][T11881] put_cmsg+0x534/0xbc0 [ 751.418343][T11881] __scm_recv_common+0x2fb/0x910 [ 751.424243][T11881] scm_recv+0x55/0xe0 [ 751.429043][T11881] netlink_recvmsg+0xd45/0xfe0 [ 751.434175][T11881] sock_recvmsg+0x27b/0x310 [ 751.438919][T11881] ____sys_recvmsg+0x193/0x620 [ 751.443869][T11881] ___sys_recvmsg+0x20b/0x850 [ 751.448855][T11881] __x64_sys_recvmsg+0x20e/0x3d0 [ 751.454235][T11881] x64_sys_call+0x35cc/0x3ea0 [ 751.459301][T11881] do_syscall_64+0x15d/0x3c0 [ 751.464035][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.470412][T11881] [ 751.472810][T11881] Local variable ucreds created at: [ 751.478169][T11881] __scm_recv_common+0x1bb/0x910 [ 751.483315][T11881] scm_recv+0x55/0xe0 [ 751.487505][T11881] [ 751.489923][T11881] CPU: 0 UID: 0 PID: 11881 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 751.499190][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 751.509530][T11881] ===================================================== [ 751.517296][T11881] Disabling lock debugging due to kernel taint [ 751.673003][T11881] Kernel panic - not syncing: kmsan.panic set ... [ 751.679584][T11881] CPU: 0 UID: 0 PID: 11881 Comm: udevd Tainted: G B syzkaller #0 PREEMPT(lazy) [ 751.690362][T11881] Tainted: [B]=BAD_PAGE [ 751.694587][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 751.704736][T11881] Call Trace: [ 751.708122][T11881] [ 751.711151][T11881] __dump_stack+0x26/0x30 [ 751.715652][T11881] dump_stack_lvl+0x50/0x1c0 [ 751.720377][T11881] ? dump_stack+0x12/0x25 [ 751.724854][T11881] dump_stack+0x1e/0x25 [ 751.729149][T11881] vpanic+0x7b4/0x1430 [ 751.733420][T11881] panic+0x15d/0x160 [ 751.737504][T11881] kmsan_report+0x31a/0x320 [ 751.742181][T11881] ? __msan_warning+0x1b/0x30 [ 751.747006][T11881] ? put_cmsg+0x534/0xbc0 [ 751.751445][T11881] ? __scm_recv_common+0x2fb/0x910 [ 751.756682][T11881] ? scm_recv+0x55/0xe0 [ 751.760948][T11881] ? netlink_recvmsg+0xd45/0xfe0 [ 751.766020][T11881] ? sock_recvmsg+0x27b/0x310 [ 751.770830][T11881] ? ____sys_recvmsg+0x193/0x620 [ 751.775932][T11881] ? ___sys_recvmsg+0x20b/0x850 [ 751.780944][T11881] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 751.786225][T11881] ? x64_sys_call+0x35cc/0x3ea0 [ 751.791238][T11881] ? do_syscall_64+0x15d/0x3c0 [ 751.796132][T11881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.802344][T11881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.808551][T11881] ? skb_free_datagram+0x1e/0x30 [ 751.813733][T11881] ? kmsan_get_metadata+0xf1/0x160 [ 751.819111][T11881] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 751.825608][T11881] ? kmsan_get_metadata+0xf1/0x160 [ 751.830901][T11881] ? __scm_recv_common+0x2fb/0x910 [ 751.836157][T11881] ? __msan_warning+0x1b/0x30 [ 751.840990][T11881] ? filter_irq_stacks+0x13f/0x190 [ 751.846275][T11881] ? stack_depot_save_flags+0x35/0x790 [ 751.851899][T11881] ? kmsan_get_metadata+0xf1/0x160 [ 751.857189][T11881] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 751.863688][T11881] ? kmsan_get_metadata+0xf1/0x160 [ 751.868981][T11881] __msan_warning+0x1b/0x30 [ 751.873642][T11881] put_cmsg+0x534/0xbc0 [ 751.877945][T11881] __scm_recv_common+0x2fb/0x910 [ 751.883061][T11881] scm_recv+0x55/0xe0 [ 751.887190][T11881] netlink_recvmsg+0xd45/0xfe0 [ 751.892150][T11881] ? __pfx_netlink_recvmsg+0x10/0x10 [ 751.897588][T11881] sock_recvmsg+0x27b/0x310 [ 751.902277][T11881] ____sys_recvmsg+0x193/0x620 [ 751.907271][T11881] ___sys_recvmsg+0x20b/0x850 [ 751.912166][T11881] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.918166][T11881] ? kmsan_get_metadata+0xf1/0x160 [ 751.923454][T11881] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.929442][T11881] __x64_sys_recvmsg+0x20e/0x3d0 [ 751.934575][T11881] ? kmsan_get_metadata+0xf1/0x160 [ 751.939885][T11881] x64_sys_call+0x35cc/0x3ea0 [ 751.944723][T11881] do_syscall_64+0x15d/0x3c0 [ 751.949443][T11881] ? clear_bhb_loop+0x50/0xa0 [ 751.954270][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.960304][T11881] RIP: 0033:0x7fa5590a7407 [ 751.964831][T11881] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 751.984690][T11881] RSP: 002b:00007ffce48eebb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 751.993255][T11881] RAX: ffffffffffffffda RBX: 00007fa559794880 RCX: 00007fa5590a7407 [ 752.001433][T11881] RDX: 0000000000000000 RSI: 00007ffce48eec40 RDI: 000000000000000c [ 752.009526][T11881] RBP: 000055a2fafb6910 R08: 0000000000000000 R09: 0000000000000000 [ 752.017626][T11881] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a2fb015e90 [ 752.025707][T11881] R13: 00007ffce48eed00 R14: 00007ffce48eec4c R15: 0000000000000000 [ 752.033831][T11881] [ 752.037226][T11881] Kernel Offset: disabled [ 752.041603][T11881] Rebooting in 86400 seconds..