last executing test programs: 2.839124947s ago: executing program 2 (id=3714): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.453919628s ago: executing program 1 (id=3736): syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xffeb) 1.330321851s ago: executing program 3 (id=3738): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x328, 0x3a8, 0x3a8, 0x328, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x2, 0x19}, 0x0, 0x228, 0x250, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x103, 0x33, 0x871004, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @private1, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xffffffff], 'dvmrp0\x00', 'pimreg\x00', {}, {0xff}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x400000, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfff7) 1.244533773s ago: executing program 1 (id=3739): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 1.188536804s ago: executing program 0 (id=3740): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 1.113082046s ago: executing program 3 (id=3741): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000001c000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 1.074353017s ago: executing program 1 (id=3742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 1.067732747s ago: executing program 2 (id=3743): r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="b2", 0x1}], 0x1}, 0x1000000}], 0x2, 0x4004040) 958.387089ms ago: executing program 0 (id=3744): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, 0xffffffffffffffff, 0x111}}, 0x20) 900.33936ms ago: executing program 3 (id=3745): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r0, 0x4, 0x81, &(0x7f00000001c0)="1e00d462", 0x4) 887.38677ms ago: executing program 1 (id=3746): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r0, &(0x7f0000000000)=0x400, 0x8) 862.433821ms ago: executing program 2 (id=3747): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8940, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) 725.143704ms ago: executing program 0 (id=3748): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000900)=[{&(0x7f0000002280)=""/256, 0x100}], 0x1, 0x6, 0x0) 724.191604ms ago: executing program 3 (id=3749): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) 696.670225ms ago: executing program 2 (id=3750): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 630.200766ms ago: executing program 1 (id=3751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 543.365888ms ago: executing program 3 (id=3752): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000001f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYRES16], 0xfe, 0x1508, &(0x7f0000000a00)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 521.322439ms ago: executing program 0 (id=3753): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0xff, 0x7, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x67, 0x5, 0xfe, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010100}}}}) 487.15549ms ago: executing program 2 (id=3754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001"], 0x1c}}, 0x0) 405.067752ms ago: executing program 1 (id=3755): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x1c3, &(0x7f0000000800)="$eJzsmb1O40AQx2f9qZxOyrV3zZ10kZIrzrGdO0QKCmoKkEAgOiJiooBDkHGRpEtPRUPNE1BHNHkPKICKAuioQDLa9TreJA6JRBBImV8x/nt3vDs7o0wkGxAEmVlurh+vzrKZFNVfIQM6H7+VYx9J8O+kn/5cVJfPT8yHy053qTi4HgGAIJh8fwUAuosy+Pw+CPqfzvDrGkiRVsX5DSBgcL0FEqxz7QCBTa53BV2n/oaxU3UdY7vulqkwqbGosakpDMZ33yZQFuIjwvxhs7VXcl3Hax+HA15vZGpiXP5ozRaE+MR6Rbkx4/yBBRJYXBeAwCrX86BHuQlTIpz/hxKvLyed/5MLOaEwKkxtC1qCEVPf02Men2IYMy6iH+YEziq8VxiErXyXmiiMBBEd4qOTOU4cKa93gLg/BacEskJ/UoT+kfdrB3m92fpbrZUqTsXZt+3CnPnPNP/bedaIQhu5q8P9L8X60xdh/SEnjkY0aJR837NC27u3Gzr4np3UcTXW/yTI/Q6jJmzsue9filXsG/lFLzlZG7E7giAIgiAIgiAIgiAIgiDIW/kJhL0F7aMYfljjX4aotleYfAkAAP//SkVbUQ==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc8000, 0x0) 317.545533ms ago: executing program 0 (id=3756): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 304.640874ms ago: executing program 2 (id=3757): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0xfffffff2) 90.489238ms ago: executing program 3 (id=3758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x200, "004004", 0x5a, 0x40}) 0s ago: executing program 0 (id=3759): r0 = syz_open_dev$video(&(0x7f00000003c0), 0xa, 0xa000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x5, {0x8000, 0x1000, 0x4, 0x5}}) kernel console output (not intermixed with test programs): [ 221.335759][ T27] usb 4-1: Product: syz [ 221.342217][ T27] usb 4-1: Manufacturer: syz [ 221.349131][ T27] usb 4-1: SerialNumber: syz [ 221.358566][ T27] usb 4-1: config 0 descriptor?? [ 221.368003][ T27] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 221.375877][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 221.393838][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 221.406544][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 221.414381][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 221.423330][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 221.437673][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 221.448518][ T27] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 221.459836][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 221.467787][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 221.475542][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 221.483402][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 221.491259][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 221.509991][ T27] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 221.773983][ T5814] usb 4-1: USB disconnect, device number 7 [ 221.794085][ T5814] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 221.857043][ T5814] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 221.898870][ T5814] keyspan 4-1:0.0: device disconnected [ 221.908040][ T9942] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.920216][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'. [ 223.403121][ T9998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1892'. [ 223.570708][T10003] tmpfs: Bad value for 'mpol' [ 223.621522][T10007] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 223.666431][T10007] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 223.942996][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 223.976704][T10019] veth0_to_batadv: left promiscuous mode [ 223.982459][T10019] veth0_to_batadv: left allmulticast mode [ 224.004508][T10019] netlink: 'syz.2.1902': attribute type 2 has an invalid length. [ 224.587003][T10036] loop1: detected capacity change from 0 to 4096 [ 224.627289][T10036] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 224.776765][T10036] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 225.540203][T10074] loop2: detected capacity change from 0 to 2048 [ 225.611709][T10074] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 225.884064][T10088] netlink: 'syz.1.1938': attribute type 2 has an invalid length. [ 225.976329][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 226.052771][T10094] binder: 10093:10094 ioctl 400c620e 200000000040 returned -22 [ 226.151844][T10097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 226.163936][T10097] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 226.186470][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 226.198656][ T23] usb 3-1: config 7 has an invalid interface number: 143 but max is 1 [ 226.226342][ T23] usb 3-1: config 7 has an invalid interface number: 217 but max is 1 [ 226.254984][ T23] usb 3-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 226.284854][ T23] usb 3-1: config 7 has no interface number 0 [ 226.296670][ T23] usb 3-1: config 7 has no interface number 1 [ 226.302993][ T23] usb 3-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 226.324103][ T23] usb 3-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 226.341002][ T23] usb 3-1: config 7 interface 143 has no altsetting 0 [ 226.354946][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 226.367037][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.375182][ T23] usb 3-1: Product: syz [ 226.400390][ T23] usb 3-1: Manufacturer: syz [ 226.405152][ T23] usb 3-1: SerialNumber: syz [ 226.456305][ T969] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 226.611836][T10112] loop3: detected capacity change from 0 to 256 [ 226.623447][T10112] exfat: Deprecated parameter 'utf8' [ 226.635212][T10112] exfat: Deprecated parameter 'namecase' [ 226.643184][T10112] exfat: Deprecated parameter 'namecase' [ 226.648136][ T23] qmi_wwan: probe of 3-1:7.143 failed with error -22 [ 226.653384][ T969] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.673104][T10112] exfat: Deprecated parameter 'utf8' [ 226.688391][ T23] usb 3-1: USB disconnect, device number 12 [ 226.696055][ T969] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.751661][T10112] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 226.764290][ T969] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.790640][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.824454][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.869993][ T969] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.909749][ T969] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.930908][ T969] usb 1-1: Product: syz [ 226.935162][ T969] usb 1-1: Manufacturer: syz [ 226.961069][ T969] cdc_wdm 1-1:1.0: skipping garbage [ 226.967463][ T969] cdc_wdm 1-1:1.0: skipping garbage [ 226.991792][ T969] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 227.000106][ T969] cdc_wdm 1-1:1.0: Unknown control protocol [ 227.247919][T10100] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 227.279134][ T969] usb 1-1: USB disconnect, device number 11 [ 228.233438][T10160] loop3: detected capacity change from 0 to 8 [ 228.510917][T10166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.614643][T10168] loop3: detected capacity change from 0 to 4096 [ 228.647787][T10168] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 228.722214][T10168] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 228.743934][T10168] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 228.773484][T10168] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 228.829578][T10168] ntfs: volume version 3.1. [ 228.952243][T10156] loop2: detected capacity change from 0 to 32768 [ 228.999577][T10156] (syz.2.1972,10156,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.059757][ T5785] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 229.084700][T10156] (syz.2.1972,10156,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.198417][T10156] JBD2: Ignoring recovery information on journal [ 229.304701][T10156] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 229.634813][T10194] overlayfs: missing 'lowerdir' [ 229.712790][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 229.893951][T10203] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 230.067945][T10209] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.252357][T10216] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 230.311075][T10216] `: Cannot enslave team device to itself [ 230.496516][T10225] netlink: 'syz.1.2005': attribute type 8 has an invalid length. [ 230.596380][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.786482][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 230.801323][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.812421][ T5814] usb 3-1: config 86 has an invalid interface number: 78 but max is 0 [ 230.826618][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 230.827207][ T5814] usb 3-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 230.835694][T10237] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 230.835755][T10237] netlink: 'syz.1.2011': attribute type 2 has an invalid length. [ 230.850501][ T5814] usb 3-1: config 86 has no interface number 0 [ 230.866868][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 230.874309][ T5814] usb 3-1: config 86 interface 78 altsetting 128 endpoint 0x88 has invalid wMaxPacketSize 0 [ 230.900639][ T5814] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 0 [ 230.911112][ T5814] usb 3-1: config 86 interface 78 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.954973][ T5814] usb 3-1: config 86 interface 78 has no altsetting 0 [ 230.972190][ T5814] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 230.984063][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.993239][ T5814] usb 3-1: Product: syz [ 231.011074][ T5814] usb 3-1: Manufacturer: syz [ 231.020877][ T5814] usb 3-1: SerialNumber: syz [ 231.308093][ T5814] kvaser_usb 3-1:86.78: Cannot get usb endpoint(s) [ 231.342095][ T5814] usb 3-1: USB disconnect, device number 13 [ 231.794575][T10263] bond2: entered promiscuous mode [ 231.799769][T10263] bond2: entered allmulticast mode [ 231.805353][T10263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.889381][T10268] comedi comedi0: Minor 788529152 is invalid! [ 232.093535][T10272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2026'. [ 232.121935][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2026'. [ 232.937208][T10305] netlink: 'syz.1.2043': attribute type 5 has an invalid length. [ 232.988959][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 233.008811][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2045'. [ 233.760336][T10340] loop3: detected capacity change from 0 to 8 [ 233.985322][T10346] Unsupported ieee802154 address type: 0 [ 234.274780][T10353] loop2: detected capacity change from 0 to 4096 [ 234.295196][T10353] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 234.346507][T10353] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 234.395116][T10353] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 234.426637][T10353] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 234.473035][T10353] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 234.508844][T10353] ntfs: volume version 3.1. [ 234.560298][T10353] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 234.592278][T10353] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 234.627997][T10353] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 234.657672][T10353] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 234.686348][T10353] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 234.877447][T10372] comedi comedi4: bad chanlist[0]=0x0000c000 chan=49152 range length=2 [ 235.926585][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.136295][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 236.143830][ T8] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 236.166488][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.192645][ T8] usb 3-1: config 0 descriptor?? [ 236.225434][ T8] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 236.440672][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 236.473307][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.496977][ T8] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 236.519848][ T8] usb 3-1: media controller created [ 236.532980][T10408] loop1: detected capacity change from 0 to 32768 [ 236.592936][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.611616][T10408] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.895519][ T8] DVB: Unable to find symbol lgdt330x_attach() [ 236.903751][ T8] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 236.903784][T10408] XFS (loop1): Ending clean mount [ 236.936957][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 236.942822][ T8] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 236.945268][T10408] XFS (loop1): Quotacheck needed: Please wait. [ 236.983261][ T8] usb 3-1: USB disconnect, device number 14 [ 237.106908][T10408] XFS (loop1): Quotacheck: Done. [ 237.157053][ T8] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 237.289771][T10445] xt_nfacct: accounting object `syz1' does not exist [ 237.331986][T10422] loop3: detected capacity change from 0 to 40427 [ 237.340967][T10422] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 237.366074][T10422] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 237.404015][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.418835][T10422] F2FS-fs (loop3): invalid crc value [ 237.465034][T10422] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.684436][T10422] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 237.708528][T10422] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 237.752631][T10457] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 239.120783][T10490] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 239.149349][T10490] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2129'. [ 239.376499][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2134'. [ 239.397590][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2134'. [ 239.639630][T10508] netlink: 'syz.1.2138': attribute type 24 has an invalid length. [ 239.893798][T10522] overlayfs: missing 'workdir' [ 240.840969][T10561] netlink: 'syz.0.2164': attribute type 30 has an invalid length. [ 241.600552][T10583] loop1: detected capacity change from 0 to 512 [ 241.617577][T10583] EXT4-fs: inline encryption not supported [ 241.638704][T10583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.661055][T10583] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.757776][T10583] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 241.782228][T10583] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2175: bg 0: block 248: padding at end of block bitmap is not set [ 241.818596][T10565] loop3: detected capacity change from 0 to 32768 [ 241.838298][T10583] __quota_error: 4 callbacks suppressed [ 241.838317][T10583] Quota error (device loop1): write_blk: dquota write failed [ 241.895952][T10583] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 241.908071][T10565] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.963122][T10583] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2175: Failed to acquire dquot type 1 [ 242.029294][T10604] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.037790][T10583] EXT4-fs (loop1): 1 truncate cleaned up [ 242.073818][T10583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 242.119973][T10604] CIFS mount error: No usable UNC path provided in device string! [ 242.119973][T10604] [ 242.190200][T10604] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 242.200506][T10565] XFS (loop3): Ending clean mount [ 242.221829][T10565] XFS (loop3): Quotacheck needed: Please wait. [ 242.337659][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 242.349649][ T3540] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 242.359273][ T3540] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 1 [ 242.368197][T10565] XFS (loop3): Quotacheck: Done. [ 242.426403][ T5814] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 242.606771][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.621725][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 242.635262][ T5814] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 242.683793][ T5814] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 242.731743][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.770081][ T5814] usb 3-1: Product: syz [ 242.783700][ T5814] usb 3-1: Manufacturer: syz [ 242.798636][ T5814] usb 3-1: SerialNumber: syz [ 242.817404][ T5814] usb 3-1: config 0 descriptor?? [ 242.839637][ T5814] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 242.857968][ T5814] usb 3-1: Detected FT232R [ 243.177995][T10626] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 243.198642][T10626] hsr0: entered promiscuous mode [ 243.248043][T10626] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.291948][ T5814] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 243.305075][T10626] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 243.315822][ T5814] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 243.323778][T10626] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 243.344689][ T5814] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 243.354776][T10626] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 243.383422][ T5814] usb 3-1: USB disconnect, device number 15 [ 243.429901][T10632] tmpfs: Unknown parameter 'func' [ 243.430276][ T5814] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 243.473018][ T5814] ftdi_sio 3-1:0.0: device disconnected [ 243.838286][T10642] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 243.850260][T10642] netlink: 'syz.3.2199': attribute type 2 has an invalid length. [ 243.861233][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2199'. [ 244.382015][T10638] loop0: detected capacity change from 0 to 32768 [ 244.396362][ T5844] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 244.467691][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 244.510264][T10638] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.598701][ T5844] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 244.612010][ T5844] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 244.622063][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.630652][ T5844] usb 3-1: Product: syz [ 244.635091][ T5844] usb 3-1: Manufacturer: syz [ 244.640432][ T5844] usb 3-1: SerialNumber: syz [ 244.721362][T10638] XFS (loop0): Ending clean mount [ 244.744793][T10638] XFS (loop0): Quotacheck needed: Please wait. [ 244.834302][T10638] XFS (loop0): Quotacheck: Done. [ 244.899312][ T5844] usb 3-1: Cannot retrieve CPort count: -71 [ 244.920604][ T5844] usb 3-1: Cannot retrieve CPort count: -71 [ 244.927390][ T5844] es2_ap_driver: probe of 3-1:246.0 failed with error -71 [ 244.949211][ T5844] usb 3-1: USB disconnect, device number 16 [ 245.095044][ T5780] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.291059][T10665] loop1: detected capacity change from 0 to 32768 [ 245.974999][T10697] loop0: detected capacity change from 0 to 512 [ 245.981750][T10691] loop3: detected capacity change from 0 to 4096 [ 246.025089][T10697] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.049690][T10691] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.058196][T10691] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 246.071986][T10697] EXT4-fs (loop0): orphan cleanup on readonly fs [ 246.086742][T10697] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 246.128732][T10697] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2221: attempt to clear invalid blocks 2 len 1 [ 246.147970][ T5157] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 246.202604][T10697] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 246.269913][T10697] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2221: invalid indirect mapped block 1819239214 (level 0) [ 246.302908][T10697] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2221: invalid indirect mapped block 1819239214 (level 1) [ 246.356654][ T5157] usb 3-1: Using ep0 maxpacket: 32 [ 246.370235][T10697] EXT4-fs (loop0): 1 truncate cleaned up [ 246.373470][ T5157] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.378622][T10697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.405179][ T5844] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 246.428905][ T5157] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 246.459267][ T5157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.496105][ T5157] usb 3-1: Product: syz [ 246.503278][ T5157] usb 3-1: Manufacturer: syz [ 246.531647][ T5157] usb 3-1: SerialNumber: syz [ 246.560717][ T5157] usb 3-1: config 0 descriptor?? [ 246.593728][ T5157] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 246.622094][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.647498][ T5844] usb 4-1: config 0 has an invalid interface number: 42 but max is 8 [ 246.666247][ T5844] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.696293][ T5844] usb 4-1: config 0 has no interface number 0 [ 246.702519][ T5844] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 246.746445][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.791653][ T5844] usb 4-1: config 0 descriptor?? [ 246.821208][ T5157] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 246.836964][ T5157] quatech2: probe of 3-1:0.0 failed with error -8 [ 246.949412][T10717] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2229'. [ 247.050746][ T5844] usb 4-1: string descriptor 0 read error: -71 [ 247.088810][ T5844] usb-storage 4-1:0.42: USB Mass Storage device detected [ 247.113658][ T23] usb 3-1: USB disconnect, device number 17 [ 247.122313][ T5844] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 247.139623][ T5844] usb-storage 4-1:0.42: This device (04cb,0100,00bb S 04 P 61) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 247.139623][ T5844] Please send a copy of this message to and [ 247.228434][ T5844] usb 4-1: USB disconnect, device number 8 [ 247.797983][T10742] xt_hashlimit: max too large, truncated to 1048576 [ 247.805070][T10742] xt_hashlimit: overflow, try lower: 1125899906842624/0 [ 248.142983][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 248.252211][T10760] loop2: detected capacity change from 0 to 16 [ 248.297416][T10760] erofs: (device loop2): mounted with root inode @ nid 36. [ 248.347437][T10760] erofs: (device loop2): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 250.039279][T10828] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 250.056372][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 250.192367][T10834] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.243770][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.260641][ T8] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 250.263752][T10836] loop2: detected capacity change from 0 to 256 [ 250.271038][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.317941][ T8] usb 4-1: config 0 descriptor?? [ 250.338862][ T8] gspca_main: spca501-2.14.0 probing 0000:0000 [ 250.757858][ T8] gspca_spca501: reg write: error -71 [ 250.781223][ T8] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 250.794863][ T8] spca501: probe of 4-1:0.0 failed with error -22 [ 250.826498][ T8] usb 4-1: USB disconnect, device number 9 [ 251.294956][T10864] Unknown options in mask 5 [ 251.516489][T10874] [U] ^R [ 251.586321][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 251.766403][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 251.788244][ T27] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 251.794865][T10879] loop3: detected capacity change from 0 to 4096 [ 251.806358][ T27] usb 1-1: config 252 has no interface number 0 [ 251.825195][ T27] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 251.855681][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.883100][ T27] usb 1-1: Product: syz [ 251.893465][T10879] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 251.897329][ T27] usb 1-1: Manufacturer: syz [ 251.926962][ T27] usb 1-1: SerialNumber: syz [ 251.930434][T10879] ntfs3: loop3: Failed to load $Extend (-22). [ 251.952284][T10879] ntfs3: loop3: Failed to initialize $Extend. [ 251.984705][ T27] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 252.261177][ T2953] usb 1-1: Failed to submit usb control message: -71 [ 252.276342][ T8] usb 1-1: USB disconnect, device number 12 [ 252.282643][ T2953] usb 1-1: unable to send the bmi data to the device: -71 [ 252.290002][ T2953] usb 1-1: unable to get target info from device [ 252.296788][ T2953] usb 1-1: could not get target info (-71) [ 252.302917][ T2953] usb 1-1: could not probe fw (-71) [ 252.666483][ T28] audit: type=1326 audit(1783428317.167:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10905 comm="syz.3.2320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8b3b9de59 code=0x0 [ 252.838723][T10910] netlink: 'syz.1.2321': attribute type 5 has an invalid length. [ 252.912151][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2323'. [ 252.945438][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2323'. [ 252.950701][T10914] loop0: detected capacity change from 0 to 256 [ 253.025288][T10914] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 253.425559][T10929] cgroup: subsys name conflicts with all [ 253.788474][T10942] netlink: 'syz.0.2338': attribute type 2 has an invalid length. [ 253.828704][T10942] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 253.908072][T10948] fuse: blksize only supported for fuseblk [ 254.086459][ T8] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 254.303937][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.326744][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 254.362016][ T8] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.382217][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 254.402332][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 254.432224][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.455101][ T8] usb 2-1: Product: syz [ 254.460475][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 254.470099][ T8] usb 2-1: Manufacturer: syz [ 254.475415][ T8] usb 2-1: SerialNumber: syz [ 254.480883][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'. [ 254.517430][T10968] veth0_vlan: left promiscuous mode [ 254.522850][T10968] vlan0: entered promiscuous mode [ 254.531523][T10968] veth0_vlan: entered promiscuous mode [ 254.731100][ T8] usbhid 2-1:1.0: can't add hid device: -71 [ 254.747186][ T8] usbhid: probe of 2-1:1.0 failed with error -71 [ 254.775926][ T8] usb 2-1: USB disconnect, device number 11 [ 254.920891][T10975] loop2: detected capacity change from 0 to 4096 [ 254.924982][T10982] loop0: detected capacity change from 0 to 256 [ 254.967057][T10982] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012a20, chksum : 0xf9fb3df0, utbl_chksum : 0xe619d30d) [ 255.034826][T10975] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 255.066505][ T28] audit: type=1800 audit(1783428319.557:95): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2358" name="file2" dev="loop0" ino=1048611 res=0 errno=0 [ 255.092979][T10975] ntfs3: loop2: Failed to load $Extend (-22). [ 255.127617][T10975] ntfs3: loop2: Failed to initialize $Extend. [ 255.274673][T10984] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2359'. [ 255.857802][T10998] tunl0: entered promiscuous mode [ 255.885630][T10998] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 255.906566][T10998] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2366'. [ 255.927747][T10981] loop3: detected capacity change from 0 to 32768 [ 255.957851][T10981] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2357 (10981) [ 256.016089][T10981] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.025902][T11002] sctp: [Deprecated]: syz.1.2368 (pid 11002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.025902][T11002] Use struct sctp_sack_info instead [ 256.055887][T10981] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 256.096154][T10981] BTRFS info (device loop3): setting nodatasum [ 256.106340][T10981] BTRFS info (device loop3): force zlib compression, level 3 [ 256.113997][T10981] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.150021][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.164877][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.167766][T10981] BTRFS info (device loop3): use lzo compression, level 0 [ 256.216481][T10981] BTRFS info (device loop3): turning on flush-on-commit [ 256.246943][T10981] BTRFS info (device loop3): enabling auto defrag [ 256.253682][T10981] BTRFS info (device loop3): max_inline at 4096 [ 256.289978][T10981] BTRFS info (device loop3): using free space tree [ 256.490116][T11008] loop1: detected capacity change from 0 to 4096 [ 256.497596][T10981] BTRFS info (device loop3): enabling ssd optimizations [ 256.536919][T11008] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 256.595333][T11008] ntfs3: loop1: Failed to load $Extend (-22). [ 256.622313][T11008] ntfs3: loop1: Failed to initialize $Extend. [ 256.863774][T11030] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 257.033747][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.048899][T11035] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2377'. [ 257.143709][T11037] syz.1.2376 uses old SIOCAX25GETINFO [ 257.200528][T11041] loop2: detected capacity change from 0 to 256 [ 258.220595][T11069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2393'. [ 258.651677][T11083] loop0: detected capacity change from 0 to 256 [ 258.667267][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.686297][T11081] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.746535][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.755712][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.815976][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2402'. [ 258.848169][T11081] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.877288][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.912482][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 258.930557][T11081] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2399'. [ 259.150011][T11065] loop3: detected capacity change from 0 to 32768 [ 259.202590][T11065] JBD2: Ignoring recovery information on journal [ 259.361899][T11101] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 259.391128][T11065] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.748682][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 259.836417][ T5844] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 260.046341][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 260.062635][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.107152][ T5844] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 260.131240][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.146325][ T5844] usb 3-1: Product: syz [ 260.156618][ T5844] usb 3-1: Manufacturer: syz [ 260.161971][ T5844] usb 3-1: SerialNumber: syz [ 260.183119][ T5844] usb 3-1: config 0 descriptor?? [ 260.199459][ T5844] usb 3-1: bad CDC descriptors [ 260.215253][ T5844] usb 3-1: unsupported MDLM descriptors [ 260.465808][ T5844] usb 3-1: USB disconnect, device number 18 [ 260.645633][T11111] loop1: detected capacity change from 0 to 32768 [ 260.719999][T11111] blkno = 8ed2c, nblocks = 1 [ 260.738858][T11111] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 260.738858][T11111] [ 260.770693][T11111] ERROR: (device loop1): remounting filesystem as read-only [ 260.793045][T11111] ialloc: diAlloc returned -17! [ 260.864813][T11115] loop0: detected capacity change from 0 to 40427 [ 260.873534][T11115] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 260.889375][T11115] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.927522][T11115] F2FS-fs (loop0): invalid crc value [ 260.944475][T11115] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=1048575 w/o reserve_root [ 260.962046][T11115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.041258][T11115] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 261.053424][T11115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 261.243092][T11115] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=1048575 w/o reserve_root [ 262.127443][T11155] loop2: detected capacity change from 0 to 256 [ 262.527630][T11169] loop0: detected capacity change from 0 to 512 [ 262.535526][T11169] EXT4-fs: Ignoring removed nobh option [ 262.619893][T11169] EXT4-fs (loop0): orphan cleanup on readonly fs [ 262.678166][T11178] netlink: 'syz.3.2443': attribute type 8 has an invalid length. [ 262.704907][T11169] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2439: corrupted inode contents [ 262.801816][T11169] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 262.841107][T11169] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.2439: corrupted inode contents [ 262.846389][ T5814] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 262.913244][T11169] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.2439: mark_inode_dirty error [ 262.927673][T11169] EXT4-fs (loop0): 1 orphan inode deleted [ 262.935047][T11169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 263.046943][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 263.054912][ T5814] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 263.068244][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.077940][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.094629][ T5814] usb 2-1: config 0 has no interface number 0 [ 263.109063][ T5814] usb 2-1: config 0 interface 52 has no altsetting 0 [ 263.133811][ T5814] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 263.176336][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.227905][ T5814] usb 2-1: config 0 descriptor?? [ 263.730526][ T5814] usb 2-1: USB disconnect, device number 12 [ 264.186661][ T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 264.402813][ T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 264.411679][ T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 264.425937][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 264.451178][ T8] usb 3-1: config 1 has no interface number 0 [ 264.478764][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 264.498603][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 264.535557][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 264.562215][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.600993][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 264.839090][ T8] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 264.857214][ T8] snd_usb_pod 3-1:1.1: invalid control EP [ 264.876765][ T8] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 264.884161][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 264.906707][ T8] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 265.006649][T11251] netlink: 'syz.3.2479': attribute type 10 has an invalid length. [ 265.014659][T11251] __nla_validate_parse: 27 callbacks suppressed [ 265.014674][T11251] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2479'. [ 265.032458][T11251] openvswitch: netlink: Flow key attr not present in new flow. [ 265.092533][ T8] usb 3-1: USB disconnect, device number 19 [ 265.665791][T11270] netlink: 'syz.0.2489': attribute type 21 has an invalid length. [ 265.684664][T11270] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.082578][T11262] loop3: detected capacity change from 0 to 32768 [ 266.122784][T11266] loop1: detected capacity change from 0 to 32768 [ 266.165028][T11266] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.209775][T11262] blkno = 8ed2c, nblocks = 1 [ 266.218670][T11262] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 266.218670][T11262] [ 266.253249][T11262] ERROR: (device loop3): remounting filesystem as read-only [ 266.277605][T11262] ialloc: diAlloc returned -17! [ 266.322865][T11266] XFS (loop1): Ending clean mount [ 266.341542][T11266] XFS (loop1): Quotacheck needed: Please wait. [ 266.441796][T11266] XFS (loop1): Quotacheck: Done. [ 266.736473][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 267.217137][T11308] netlink: 'syz.0.2504': attribute type 20 has an invalid length. [ 267.575457][T11316] team0: entered promiscuous mode [ 267.616453][T11316] team_slave_0: entered promiscuous mode [ 267.624156][T11316] team_slave_1: entered promiscuous mode [ 267.630960][T11316] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.671628][T11322] loop2: detected capacity change from 0 to 2048 [ 267.777249][T11322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.790365][T11322] ext4 filesystem being mounted at /585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.843963][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 267.856670][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2512'. [ 267.881858][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2512'. [ 267.998514][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.390451][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 268.756754][T11359] loop3: detected capacity change from 0 to 512 [ 268.777528][T11359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.824899][T11359] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 268.850863][T11359] System zones: 0-2, 18-18, 34-34 [ 268.863982][T11359] EXT4-fs (loop3): orphan cleanup on readonly fs [ 268.881700][T11359] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #4: comm syz.3.2526: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 268.886311][ T5814] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 268.965798][T11359] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.2526: Bad quota inode: 4, type: 1 [ 269.021435][T11359] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.086722][T11359] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 269.094934][T11359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.098110][ T5814] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 269.152876][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.174771][ T5814] usb 3-1: config 0 descriptor?? [ 269.182808][T11359] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 269.219821][T11359] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 269.562041][T11359] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 269.562041][T11359] [ 269.612446][ T5814] ath6kl: Failed to read usb control message: -71 [ 269.619197][ T5814] ath6kl: Unable to read the bmi data from the device: -71 [ 269.630941][ T5814] ath6kl: Unable to recv target info: -71 [ 269.640788][ T5814] ath6kl: Failed to init ath6kl core: -71 [ 269.648152][ T5814] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 269.660882][ T5814] usb 3-1: USB disconnect, device number 20 [ 269.719103][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.935683][T11381] loop0: detected capacity change from 0 to 64 [ 270.116415][T11386] netlink: 368 bytes leftover after parsing attributes in process `syz.1.2539'. [ 270.125681][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2539'. [ 270.141742][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2539'. [ 270.156603][T11386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2539'. [ 270.327528][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 270.520191][T11400] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 271.131287][T11424] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2558'. [ 271.277552][T11430] netlink: 'syz.1.2561': attribute type 3 has an invalid length. [ 271.316130][T11430] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2561'. [ 272.148996][T11459] tmpfs: Bad value for 'mpol' [ 272.481226][T11468] loop0: detected capacity change from 0 to 2048 [ 272.525565][T11468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.548396][T11470] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 274.243915][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 274.276350][T11529] netlink: 'syz.0.2610': attribute type 1 has an invalid length. [ 274.284366][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 274.304797][T11529] netlink: 'syz.0.2610': attribute type 2 has an invalid length. [ 274.689012][T11542] syz.2.2616 uses obsolete (PF_INET,SOCK_PACKET) [ 274.750373][T11547] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 274.800520][T11547] netlink: 'syz.1.2619': attribute type 2 has an invalid length. [ 274.890796][T11551] loop2: detected capacity change from 0 to 256 [ 274.937660][T11553] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2622'. [ 275.571634][ T28] audit: type=1326 audit(1783428340.067:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 275.675660][ T28] audit: type=1326 audit(1783428340.067:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 275.766324][ T28] audit: type=1326 audit(1783428340.067:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 275.790368][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.859363][ T28] audit: type=1326 audit(1783428340.097:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 275.934115][ T28] audit: type=1326 audit(1783428340.097:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 276.003077][ T28] audit: type=1326 audit(1783428340.097:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 276.080450][ T28] audit: type=1326 audit(1783428340.097:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 276.104661][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.169622][ T28] audit: type=1326 audit(1783428340.097:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 276.206470][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'. [ 276.215568][T11587] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 276.235821][T11587] netlink: 'syz.2.2639': attribute type 2 has an invalid length. [ 276.250126][ T28] audit: type=1326 audit(1783428340.097:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 276.274500][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.276278][T11587] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2639'. [ 276.395144][T11573] loop3: detected capacity change from 0 to 32768 [ 276.496350][ T5157] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 276.726282][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 276.743369][ T5157] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 276.766495][ T5157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.790638][ T5157] usb 2-1: Product: syz [ 276.794961][ T5157] usb 2-1: Manufacturer: syz [ 276.811416][ T5157] usb 2-1: SerialNumber: syz [ 276.823631][ T5157] usb 2-1: config 0 descriptor?? [ 277.067423][ T5157] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 277.130934][T11605] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2648'. [ 277.285122][ T5157] usb write operation failed. (-71) [ 277.309023][ T5157] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.335933][ T5157] dvbdev: DVB: registering new adapter (Terratec H7) [ 277.353199][ T5157] usb 2-1: media controller created [ 277.363741][ T5157] usb read operation failed. (-71) [ 277.392757][ T5157] usb write operation failed. (-71) [ 277.415283][ T5157] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 277.437570][ T5157] usb 2-1: USB disconnect, device number 13 [ 277.542514][T11597] loop3: detected capacity change from 0 to 32768 [ 277.576814][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 277.585495][T11597] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.2644 (11597) [ 277.622648][T11597] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 277.639976][T11597] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 277.649374][T11597] BTRFS info (device loop3): enabling ssd optimizations [ 277.656784][T11597] BTRFS info (device loop3): not using ssd optimizations [ 277.664299][T11613] comedi comedi4: commands at RT priority not supported in this driver [ 277.673931][T11597] BTRFS info (device loop3): turning off barriers [ 277.681626][T11597] BTRFS info (device loop3): use no compression [ 277.688389][T11597] BTRFS info (device loop3): using free space tree [ 277.796907][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 277.820617][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.840482][ T28] audit: type=1326 audit(1783428342.337:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.2.2653" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 277.865190][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.896630][ T23] usb 1-1: Product: syz [ 277.911207][ T23] usb 1-1: Manufacturer: syz [ 277.915900][ T23] usb 1-1: SerialNumber: syz [ 277.957248][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 278.072784][ T5785] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 278.241293][ T6062] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (6062) [ 278.319150][T11638] loop1: detected capacity change from 0 to 256 [ 278.484718][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 278.541318][ T23] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 278.744686][T11649] program syz.3.2660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.801097][T11644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.279858][T11660] loop2: detected capacity change from 0 to 4096 [ 279.319085][T11660] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 279.666778][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 280.372634][T11663] loop3: detected capacity change from 0 to 32768 [ 280.428049][T11663] JBD2: Ignoring recovery information on journal [ 280.497620][T11663] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 280.619490][T11663] (syz.3.2668,11663,0):ocfs2_mknod:502 ERROR: status = -31 [ 280.636462][T11663] (syz.3.2668,11663,0):ocfs2_mkdir:659 ERROR: status = -31 [ 280.797836][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 281.106516][T11714] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 281.206583][ T5814] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 281.424562][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.433601][ T5814] usb 4-1: not running at top speed; connect to a high speed hub [ 281.454545][ T5814] usb 4-1: config 4 has an invalid interface number: 175 but max is 0 [ 281.474738][ T5814] usb 4-1: config 4 has no interface number 0 [ 281.494298][ T5814] usb 4-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.17 [ 281.522802][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.536295][ T5814] usb 4-1: Product: syz [ 281.540532][ T5814] usb 4-1: Manufacturer: syz [ 281.548819][ T5814] usb 4-1: SerialNumber: syz [ 281.787286][ T5814] usb 4-1: NDI device with a latency value of 1 [ 281.804134][ T5814] ftdi_sio 4-1:4.175: FTDI USB Serial Device converter detected [ 281.815321][ T5814] ftdi_sio ttyUSB0: unknown device type: 0xdc17 [ 281.832933][ T5814] usb 4-1: USB disconnect, device number 10 [ 281.843519][T11720] loop0: detected capacity change from 0 to 32768 [ 281.849836][ T5814] ftdi_sio 4-1:4.175: device disconnected [ 281.909737][T11720] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.209965][T11720] XFS (loop0): Ending clean mount [ 282.225539][T11744] netlink: 'syz.2.2703': attribute type 49 has an invalid length. [ 282.547691][ T5780] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.687962][T11744] ip6gretap0: entered promiscuous mode [ 282.693590][T11744] ip6gretap0: entered allmulticast mode [ 283.036560][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 283.173683][T11760] loop3: detected capacity change from 0 to 512 [ 283.246489][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 283.257998][ T5844] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 283.290743][ T5844] usb 2-1: config 0 has no interface number 0 [ 283.319780][T11760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.353552][ T5844] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 283.364796][T11760] ext4 filesystem being mounted at /702/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.435314][ T5844] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.476366][ T5844] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 283.534495][ T5844] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 283.556570][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.564669][ T5844] usb 2-1: Product: syz [ 283.574336][ T5844] usb 2-1: Manufacturer: syz [ 283.579721][ T5844] usb 2-1: SerialNumber: syz [ 283.603855][ T5844] usb 2-1: config 0 descriptor?? [ 283.613252][T11752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 283.661417][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.806920][ T5814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 283.887891][ T5844] usb 2-1: USB disconnect, device number 14 [ 284.017361][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 284.033568][ T5814] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 284.049549][ T5814] usb 1-1: config 0 has no interface number 0 [ 284.065978][ T5814] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.086430][ T5814] usb 1-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 284.114655][ T5814] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 284.146362][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.154545][ T5814] usb 1-1: Product: syz [ 284.205837][ T5814] usb 1-1: Manufacturer: syz [ 284.215259][T11791] bridge3: entered promiscuous mode [ 284.217992][ T5814] usb 1-1: SerialNumber: syz [ 284.240239][ T5814] usb 1-1: config 0 descriptor?? [ 284.259616][ T5814] redrat3 1-1:0.83: Couldn't find all endpoints [ 284.513402][ T23] usb 1-1: USB disconnect, device number 14 [ 285.505674][T11837] loop3: detected capacity change from 0 to 512 [ 285.587053][T11837] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000103) [ 285.777846][T11843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2742'. [ 285.948325][T11850] loop0: detected capacity change from 0 to 1024 [ 286.248121][T11858] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 286.256027][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 286.301859][T11858] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 286.544356][T11868] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2754'. [ 286.723331][T11875] loop3: detected capacity change from 0 to 164 [ 286.826370][T11875] Unsupported NM flag settings (240) [ 287.060619][T11885] netlink: 'syz.2.2763': attribute type 6 has an invalid length. [ 287.290089][T11894] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 287.329848][T11894] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 287.352812][T11894] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 287.367813][T11894] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 287.387186][T11894] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 287.412783][T11894] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 287.438626][T11894] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 287.451580][T11894] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 287.460194][T11894] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 287.469981][T11894] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 287.479928][T11894] ALSA: mixer_oss: invalid OSS volume 'î[' [ 287.494254][T11894] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 287.509856][T11894] ALSA: mixer_oss: invalid OSS volume '·$>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 334.418898][T13360] ufs: ufstype=old is supported read-only [ 334.448362][T13360] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 334.627100][T13366] PM: Enabling pm_trace changes system date and time during resume. [ 334.627100][T13366] PM: Correct system time has to be restored manually after resume. [ 335.138423][T13387] No such timeout policy "syz1" [ 335.156281][ T5844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 335.376284][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 335.383687][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.407748][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 335.458640][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 335.479769][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 335.491409][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 335.505771][T13400] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 335.522420][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.552239][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.583608][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.620350][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.644071][ T5844] usb 4-1: config 0 descriptor?? [ 335.836261][ T5844] rc_core: IR keymap rc-hauppauge not found [ 335.851317][ T5844] Registered IR keymap rc-empty [ 335.875417][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.918448][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.957599][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 336.008718][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 336.069167][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.076595][ C1] mceusb 4-1:0.0: Error: urb status = -75 [ 336.118464][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.179318][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.256793][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.296349][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.337987][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.376781][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.436289][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.480091][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.516552][ T5844] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.558579][ T5844] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 336.579156][ T5844] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 336.632532][ T5844] usb 4-1: USB disconnect, device number 16 [ 336.656310][ T786] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 336.861186][ T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 336.880750][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.906407][ T786] usb 1-1: Product: syz [ 336.927152][ T786] usb 1-1: Manufacturer: syz [ 336.934876][ T786] usb 1-1: SerialNumber: syz [ 336.954207][ T786] usb 1-1: config 0 descriptor?? [ 336.987242][ T786] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 337.191793][T13446] 9pnet: Could not find request transport: tcp ƒg]‘H`÷+ n½¤‘1áÎo²«H&TÐxZ];£‚@ÔfIS\TsVó ÌEµž8Mj&}âø£s$¤å¡) æ‰LtyÉOÙÔ§V2³ß}ʦûXKPá[³ : ð+(Ÿ°wÑü [ 337.268125][T13432] loop1: detected capacity change from 0 to 32768 [ 337.475895][ T786] usb 1-1: USB disconnect, device number 17 [ 337.906442][T13462] netlink: 'syz.2.3463': attribute type 3 has an invalid length. [ 337.914347][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3463'. [ 338.351910][T13476] sctp: [Deprecated]: syz.3.3470 (pid 13476) Use of int in max_burst socket option. [ 338.351910][T13476] Use struct sctp_assoc_value instead [ 338.525020][T13484] loop0: detected capacity change from 0 to 256 [ 338.665535][T13484] FAT-fs (loop0): Directory bread(block 64) failed [ 338.689083][T13484] FAT-fs (loop0): Directory bread(block 65) failed [ 338.714722][T13484] FAT-fs (loop0): Directory bread(block 66) failed [ 338.731858][T13484] FAT-fs (loop0): Directory bread(block 67) failed [ 338.745651][T13484] FAT-fs (loop0): Directory bread(block 68) failed [ 338.773753][T13484] FAT-fs (loop0): Directory bread(block 69) failed [ 338.782078][T13492] veth0_to_hsr: entered allmulticast mode [ 338.794540][T13484] FAT-fs (loop0): Directory bread(block 70) failed [ 338.823718][T13484] FAT-fs (loop0): Directory bread(block 71) failed [ 338.857883][T13484] FAT-fs (loop0): Directory bread(block 72) failed [ 338.864949][T13484] FAT-fs (loop0): Directory bread(block 73) failed [ 338.937669][T13496] xt_ecn: cannot match TCP bits for non-tcp packets [ 339.852494][T13531] netlink: 'syz.3.3497': attribute type 10 has an invalid length. [ 339.899794][T13531] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.3497'. [ 340.196723][ T28] audit: type=1326 audit(1783428404.687:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.276449][ T28] audit: type=1326 audit(1783428404.687:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.361910][ T28] audit: type=1326 audit(1783428404.717:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.450465][ T28] audit: type=1326 audit(1783428404.717:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.561443][T13549] loop3: detected capacity change from 0 to 4096 [ 340.568118][ T28] audit: type=1326 audit(1783428404.727:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.603540][T13549] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 340.659775][ T28] audit: type=1326 audit(1783428404.727:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.722717][T13549] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 340.742398][T13549] ntfs3: loop3: Failed to load $Extend (-22). [ 340.750673][ T28] audit: type=1326 audit(1783428404.727:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.796925][T13549] ntfs3: loop3: Failed to initialize $Extend. [ 340.852531][ T28] audit: type=1326 audit(1783428404.727:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 340.927720][ T28] audit: type=1326 audit(1783428404.727:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.2.3504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb66659de59 code=0x7ffc0000 [ 341.318200][T13577] program syz.2.3520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.917638][T13599] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.019323][T13601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3532'. [ 342.476625][ T786] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 342.707615][ T786] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 342.715903][ T786] usb 4-1: config 0 has no interface number 0 [ 342.763289][ T786] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 342.794709][ T786] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 342.809535][ T786] usb 4-1: config 0 interface 255 has no altsetting 0 [ 342.820299][ T786] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 342.830302][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.844192][ T786] usb 4-1: Product: syz [ 342.864934][ T786] usb 4-1: Manufacturer: syz [ 342.871413][T13628] loop1: detected capacity change from 0 to 8192 [ 342.876198][ T786] usb 4-1: SerialNumber: syz [ 342.891801][ T786] usb 4-1: config 0 descriptor?? [ 342.933668][T13628] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.936306][T13636] netlink: 'syz.0.3549': attribute type 5 has an invalid length. [ 343.211964][ T786] usb 4-1: USB disconnect, device number 17 [ 343.929053][T13666] autofs4:pid:13666:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 344.220926][T13675] loop3: detected capacity change from 0 to 128 [ 344.256312][T13675] EXT4-fs (loop3): Test dummy encryption mode enabled [ 344.305013][T13675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.336413][T13681] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3565'. [ 344.358120][T13675] ext4 filesystem being mounted at /908/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.561485][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.616857][T13687] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3567'. [ 344.844324][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 345.063873][T13704] usb usb8: check_ctrlrecip: process 13704 (syz.3.3576) requesting ep 01 but needs 81 [ 345.082489][T13704] usb usb8: usbfs: process 13704 (syz.3.3576) did not claim interface 0 before use [ 346.032072][T13739] tc_dump_action: action bad kind [ 346.916904][T13776] bridge0: port 3(batadv0) entered blocking state [ 346.961038][T13776] bridge0: port 3(batadv0) entered disabled state [ 346.990773][T13776] batadv0: entered allmulticast mode [ 347.019846][T13776] batadv0: entered promiscuous mode [ 347.038731][T13776] bridge0: port 3(batadv0) entered blocking state [ 347.045330][T13781] loop2: detected capacity change from 0 to 256 [ 347.046832][T13776] bridge0: port 3(batadv0) entered forwarding state [ 347.127022][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 347.137088][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 347.188899][T13781] FAT-fs (loop2): Directory bread(block 64) failed [ 347.196002][T13781] FAT-fs (loop2): Directory bread(block 65) failed [ 347.210304][T13784] loop1: detected capacity change from 0 to 16 [ 347.227058][T13784] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 347.266789][T13781] FAT-fs (loop2): Directory bread(block 66) failed [ 347.273628][T13781] FAT-fs (loop2): Directory bread(block 67) failed [ 347.317796][T13781] FAT-fs (loop2): Directory bread(block 68) failed [ 347.326431][T13781] FAT-fs (loop2): Directory bread(block 69) failed [ 347.333133][T13781] FAT-fs (loop2): Directory bread(block 70) failed [ 347.371036][T13781] FAT-fs (loop2): Directory bread(block 71) failed [ 347.398602][T13781] FAT-fs (loop2): Directory bread(block 72) failed [ 347.408225][T13781] FAT-fs (loop2): Directory bread(block 73) failed [ 347.637562][T13784] erofs: DAX unsupported by block device. Turning off DAX. [ 347.645627][T13784] erofs: (device loop1): mounted with root inode @ nid 36. [ 348.103719][T13799] netlink: 'syz.3.3622': attribute type 32 has an invalid length. [ 348.656330][ T5844] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 348.862789][ T5844] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 348.894555][ T5844] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 348.925825][ T5844] usb 3-1: config 220 has no interface number 2 [ 348.930227][T13826] loop0: detected capacity change from 0 to 136 [ 348.941212][ T5844] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 348.941252][ T5844] usb 3-1: config 220 interface 0 has no altsetting 0 [ 348.941272][ T5844] usb 3-1: config 220 interface 76 has no altsetting 0 [ 348.941292][ T5844] usb 3-1: config 220 interface 1 has no altsetting 0 [ 348.944413][ T5844] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 348.944447][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.944469][ T5844] usb 3-1: Product: syz [ 348.944486][ T5844] usb 3-1: Manufacturer: syz [ 348.944503][ T5844] usb 3-1: SerialNumber: syz [ 348.965914][T13826] Attempt to read inode for relocated directory [ 349.188058][ T5844] usb 3-1: selecting invalid altsetting 0 [ 349.204447][ T5844] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 349.204485][ T5844] usb 3-1: No valid video chain found. [ 349.237763][ T5844] usb 3-1: selecting invalid altsetting 0 [ 349.237798][ T5844] usbtest: probe of 3-1:220.1 failed with error -22 [ 349.256830][ T5844] usb 3-1: USB disconnect, device number 24 [ 349.940305][T13851] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3648'. [ 349.996808][T13851] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3648'. [ 350.032296][ T28] audit: type=1326 audit(1783428414.527:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b3b9de59 code=0x7ffc0000 [ 350.104388][ T28] audit: type=1326 audit(1783428414.527:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b3b9de59 code=0x7ffc0000 [ 350.148028][ T28] audit: type=1326 audit(1783428414.557:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8b3b5e68e code=0x7ffc0000 [ 350.193917][ T28] audit: type=1326 audit(1783428414.557:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.244609][ T28] audit: type=1326 audit(1783428414.557:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.278658][ T28] audit: type=1326 audit(1783428414.567:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.326723][T13859] loop2: detected capacity change from 0 to 64 [ 350.338423][ T5157] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 350.361414][T13859] MINIX-fs: mounting file system with errors, running fsck is recommended [ 350.373606][ T28] audit: type=1326 audit(1783428414.567:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.411042][ T28] audit: type=1326 audit(1783428414.847:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.469411][ T28] audit: type=1326 audit(1783428414.847:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.529285][ T5157] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.565423][ T5157] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.586305][ T28] audit: type=1326 audit(1783428415.027:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.3649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8b3b9daeb code=0x7ffc0000 [ 350.621807][ T5157] usb 4-1: config 1 interface 1 has no altsetting 0 [ 350.646521][ T5157] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.666888][ T5157] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 350.685821][ T5157] usb 4-1: Product: syz [ 350.695243][ T5157] usb 4-1: SerialNumber: syz [ 350.741609][T13843] loop0: detected capacity change from 0 to 32768 [ 350.783415][ T5157] usb 4-1: selecting invalid altsetting 1 [ 350.807964][ T5157] usb 4-1: selecting invalid altsetting 0 [ 350.826718][ T5157] usb 4-1: selecting invalid altsetting 0 [ 350.836566][ T5157] cdc_ncm 4-1:1.0: bind() failure [ 350.888496][ T5157] usb 4-1: selecting invalid altsetting 0 [ 350.903585][ T5157] usbtest: probe of 4-1:1.1 failed with error -22 [ 350.922798][T13871] netlink: 'syz.2.3658': attribute type 1 has an invalid length. [ 350.935920][T13871] openvswitch: netlink: Actions may not be safe on all matching packets [ 351.066362][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'. [ 351.096287][ T5777] usb 4-1: USB disconnect, device number 18 [ 351.234930][T13873] team_slave_0: left promiscuous mode [ 351.322206][T13873] team0 (unregistering): Port device team_slave_0 removed [ 351.345059][T13873] team_slave_1: left promiscuous mode [ 351.382906][T13873] team0 (unregistering): Port device team_slave_1 removed [ 352.370311][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 352.399937][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 352.457685][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3679'. [ 352.917045][ T5814] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 353.028967][T13936] binfmt_misc: register: failed to install interpreter file ./file0 [ 353.129115][ T5814] usb 3-1: config 2 has an invalid interface number: 112 but max is 0 [ 353.150157][ T5814] usb 3-1: config 2 has no interface number 0 [ 353.162541][ T5814] usb 3-1: config 2 interface 112 has no altsetting 0 [ 353.189450][ T5814] usb 3-1: New USB device found, idVendor=9171, idProduct=32e3, bcdDevice=91.99 [ 353.215429][T13942] loop0: detected capacity change from 0 to 2048 [ 353.222296][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.254515][ T5814] usb 3-1: Product: syz [ 353.275084][ T5814] usb 3-1: Manufacturer: syz [ 353.280185][T13947] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.296474][ T5814] usb 3-1: SerialNumber: syz [ 353.313519][T13946] loop1: detected capacity change from 0 to 1024 [ 353.413314][T13942] syz.0.3693: attempt to access beyond end of device [ 353.413314][T13942] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 353.507141][T13942] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 353.544630][ T5814] usb 3-1: bad CDC descriptors [ 353.552154][T13942] NILFS (loop0): error -5 truncating bmap (ino=16) [ 353.575035][ T5814] usb 3-1: USB disconnect, device number 25 [ 353.581395][ T2953] hfsplus: b-tree write err: -5, ino 25 [ 353.603454][ T2953] hfsplus: b-tree write err: -5, ino 4 [ 353.603540][T13949] xt_CT: No such helper "snmp_trap" [ 353.624746][ T2953] hfsplus: b-tree write err: -5, ino 2 [ 354.590370][T13980] binder: 13979:13980 ioctl c018620c 2000000001c0 returned -22 [ 354.592555][T13984] loop1: detected capacity change from 0 to 128 [ 354.655756][T13984] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 354.696253][T13984] hpfs: filesystem error: improperly stopped [ 354.736830][T13984] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 354.767620][T13984] hpfs: You really don't want any checks? You are crazy... [ 354.775901][T13984] hpfs: Code page index out of array [ 354.815887][T13984] hpfs: code page support is disabled [ 354.838383][T13984] hpfs: hpfs_map_4sectors(): unaligned read [ 354.853687][T13984] hpfs: hpfs_map_4sectors(): unaligned read [ 354.859994][T13984] hpfs: filesystem error: unable to find root dir [ 355.096489][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 355.164741][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3721'. [ 355.308648][ T8] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 355.330145][ T8] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 355.345958][ T8] usb 3-1: config 220 has no interface number 2 [ 355.366303][ T8] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 355.386498][ T8] usb 3-1: config 220 interface 0 has no altsetting 0 [ 355.397611][ T8] usb 3-1: config 220 interface 76 has no altsetting 0 [ 355.405188][ T8] usb 3-1: config 220 interface 1 has no altsetting 0 [ 355.427675][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 355.446383][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.466553][ T8] usb 3-1: Product: syz [ 355.470788][ T8] usb 3-1: Manufacturer: syz [ 355.475609][ T8] usb 3-1: SerialNumber: syz [ 355.595627][T14014] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 355.728555][ T8] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 355.775850][ T8] usb 3-1: No valid video chain found. [ 355.813207][ T8] usb 3-1: selecting invalid altsetting 0 [ 355.888118][ T8] usb 3-1: selecting invalid altsetting 0 [ 355.894132][ T8] usbtest: probe of 3-1:220.1 failed with error -22 [ 355.965185][ T8] usb 3-1: USB disconnect, device number 26 [ 356.266752][T14038] xt_hashlimit: size too large, truncated to 1048576 [ 356.274042][T14038] xt_hashlimit: max too large, truncated to 1048576 [ 357.050159][T14066] loop3: detected capacity change from 0 to 256 [ 357.087403][T14066] exfat: Deprecated parameter 'utf8' [ 357.107909][T14066] exfat: Deprecated parameter 'namecase' [ 357.132004][T14066] exfat: Deprecated parameter 'namecase' [ 357.146557][T14066] exfat: Deprecated parameter 'utf8' [ 357.200015][T14066] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 357.223480][T14072] loop1: detected capacity change from 0 to 16 [ 357.286939][T14072] erofs: (device loop1): mounted with root inode @ nid 36. [ 357.399869][T14072] syz.1.3755: attempt to access beyond end of device [ 357.399869][T14072] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 357.464557][T14072] syz.1.3755: attempt to access beyond end of device [ 357.464557][T14072] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 357.520141][T14072] ================================================================== [ 357.528321][T14072] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x3ab/0x4a0 [ 357.536895][T14072] Read of size 4096 at addr ffff88801cbe2000 by task syz.1.3755/14072 [ 357.545097][T14072] [ 357.547457][T14072] CPU: 1 PID: 14072 Comm: syz.1.3755 Not tainted syzkaller #0 [ 357.555048][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.565327][T14072] Call Trace: [ 357.568738][T14072] [ 357.571893][T14072] dump_stack_lvl+0x18c/0x250 [ 357.576636][T14072] ? __lock_acquire+0x7d80/0x7d80 [ 357.582244][T14072] ? show_regs_print_info+0x20/0x20 [ 357.587812][T14072] ? load_image+0x420/0x420 [ 357.592766][T14072] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 357.599358][T14072] ? __virt_addr_valid+0x10c/0x380 [ 357.604809][T14072] ? __virt_addr_valid+0x10c/0x380 [ 357.610021][T14072] ? __virt_addr_valid+0x10c/0x380 [ 357.615277][T14072] ? __virt_addr_valid+0x10c/0x380 [ 357.620477][T14072] print_report+0xa8/0x210 [ 357.625174][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 357.630861][T14072] kasan_report+0x117/0x150 [ 357.635420][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 357.641093][T14072] kasan_check_range+0x241/0x290 [ 357.646062][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 357.651736][T14072] __asan_memcpy+0x29/0x70 [ 357.656362][T14072] z_erofs_transform_plain+0x3ab/0x4a0 [ 357.661869][T14072] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 357.668710][T14072] z_erofs_decompress_queue+0x1705/0x2670 [ 357.674625][T14072] ? z_erofs_onlinepage_end+0x360/0x360 [ 357.680363][T14072] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 357.686361][T14072] ? lock_chain_count+0x20/0x20 [ 357.691237][T14072] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 357.697424][T14072] ? erofs_map_blocks+0x17b0/0x17b0 [ 357.702748][T14072] ? folio_unlock+0x118/0x2f0 [ 357.707507][T14072] z_erofs_runqueue+0x1993/0x1b20 [ 357.712693][T14072] ? z_erofs_do_read_page+0x3500/0x3500 [ 357.719156][T14072] ? __lock_acquire+0x7d80/0x7d80 [ 357.724242][T14072] ? put_page+0xea/0x260 [ 357.728522][T14072] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 357.734365][T14072] z_erofs_read_folio+0x321/0x5c0 [ 357.739439][T14072] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 357.744868][T14072] ? up_read+0x20/0x20 [ 357.748966][T14072] ? __might_sleep+0xe0/0xe0 [ 357.753576][T14072] ? filemap_add_folio+0x190/0x3d0 [ 357.758725][T14072] filemap_read_folio+0x16b/0x790 [ 357.764428][T14072] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 357.769848][T14072] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 357.775438][T14072] ? down_read+0x1ac/0x2e0 [ 357.779993][T14072] filemap_get_pages+0x13ac/0x1f10 [ 357.785589][T14072] ? filemap_read+0xf20/0xf20 [ 357.790551][T14072] ? __might_sleep+0xe0/0xe0 [ 357.795154][T14072] ? folio_mark_accessed+0x203/0x14a0 [ 357.800654][T14072] ? folio_activate_fn+0x2000/0x2000 [ 357.805992][T14072] ? page_copy_sane+0x4e/0x270 [ 357.810792][T14072] filemap_read+0x409/0xf20 [ 357.815350][T14072] ? filemap_get_folios_tag+0x840/0x840 [ 357.821024][T14072] ? generic_file_read_iter+0x9b/0x550 [ 357.826696][T14072] ? iov_iter_kvec+0xd4/0x1b0 [ 357.831492][T14072] __kernel_read+0x2e5/0x730 [ 357.836945][T14072] ? rw_verify_area+0x1b0/0x1b0 [ 357.841955][T14072] integrity_kernel_read+0x8a/0xd0 [ 357.847208][T14072] ? integrity_inode_free+0x170/0x170 [ 357.852714][T14072] ? _sha256_update+0x127/0x1e0 [ 357.857864][T14072] ? sha256_transform_avx+0xcc0/0xcc0 [ 357.863600][T14072] ima_calc_file_hash+0xb1f/0x1960 [ 357.868920][T14072] ? deref_stack_reg+0x1ab/0x230 [ 357.874137][T14072] ? is_bpf_text_address+0x26/0x2a0 [ 357.879631][T14072] ? look_up_lock_class+0x75/0x140 [ 357.886191][T14072] ? ima_alloc_tfm+0x2f0/0x2f0 [ 357.891268][T14072] ? register_lock_class+0xc4/0x8a0 [ 357.896589][T14072] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 357.902920][T14072] ? generic_fillattr+0x2b5/0x690 [ 357.909800][T14072] ? __asan_memcpy+0x40/0x70 [ 357.915226][T14072] ? generic_fillattr+0x451/0x690 [ 357.920738][T14072] ima_collect_measurement+0x4d4/0xa30 [ 357.926937][T14072] ? ima_get_action+0xb0/0xb0 [ 357.931628][T14072] ? erofs_getxattr+0x13f/0x450 [ 357.936784][T14072] ? rcu_is_watching+0x15/0xb0 [ 357.941759][T14072] ? ima_get_hash_algo+0x91/0x4a0 [ 357.947416][T14072] ? ima_get_cache_status+0xd0/0xd0 [ 357.952671][T14072] process_measurement+0x123a/0x1d50 [ 357.958084][T14072] ? ima_file_mmap+0x1d0/0x1d0 [ 357.963330][T14072] ? tomoyo_check_open_permission+0x384/0x460 [ 357.969417][T14072] ? tomoyo_check_open_permission+0x1cf/0x460 [ 357.975496][T14072] ? tomoyo_check_path_number_acl+0x280/0x280 [ 357.981665][T14072] ? get_cached_acl+0x4fb/0x540 [ 357.986546][T14072] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 357.992954][T14072] ima_file_check+0xcc/0x110 [ 357.998078][T14072] ? ima_bprm_check+0x200/0x200 [ 358.003393][T14072] path_openat+0x2910/0x3270 [ 358.008282][T14072] ? do_filp_open+0x430/0x430 [ 358.013060][T14072] do_filp_open+0x1f2/0x430 [ 358.017678][T14072] ? vfs_tmpfile+0x480/0x480 [ 358.022290][T14072] ? _raw_spin_unlock+0x28/0x40 [ 358.027259][T14072] ? alloc_fd+0x590/0x640 [ 358.032040][T14072] do_sys_openat2+0x134/0x1d0 [ 358.036746][T14072] ? do_sys_open+0xe0/0xe0 [ 358.041181][T14072] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 358.047264][T14072] ? lock_chain_count+0x20/0x20 [ 358.052124][T14072] __x64_sys_openat+0x139/0x160 [ 358.057016][T14072] do_syscall_64+0x55/0xb0 [ 358.061546][T14072] ? clear_bhb_loop+0x40/0x90 [ 358.067100][T14072] ? clear_bhb_loop+0x40/0x90 [ 358.073058][T14072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.079308][T14072] RIP: 0033:0x7fba1eb9de59 [ 358.083877][T14072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.104756][T14072] RSP: 002b:00007fba1fb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.114790][T14072] RAX: ffffffffffffffda RBX: 00007fba1ee25fa0 RCX: 00007fba1eb9de59 [ 358.123354][T14072] RDX: 00000000000c8000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 358.131470][T14072] RBP: 00007fba1ec33e6f R08: 0000000000000000 R09: 0000000000000000 [ 358.140172][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.148610][T14072] R13: 00007fba1ee26038 R14: 00007fba1ee25fa0 R15: 00007fffb98b14b8 [ 358.156858][T14072] [ 358.159920][T14072] [ 358.162252][T14072] Allocated by task 5525: [ 358.167274][T14072] kasan_set_track+0x4e/0x70 [ 358.172025][T14072] __kasan_slab_alloc+0x6c/0x80 [ 358.176905][T14072] slab_post_alloc_hook+0x6a/0x4d0 [ 358.182038][T14072] kmem_cache_alloc+0x17e/0x2c0 [ 358.186903][T14072] anon_vma_fork+0xe5/0x520 [ 358.191436][T14072] copy_mm+0x12c7/0x1e30 [ 358.195694][T14072] copy_process+0x171d/0x3df0 [ 358.200380][T14072] kernel_clone+0x24b/0x8a0 [ 358.205416][T14072] __x64_sys_clone+0x1b7/0x230 [ 358.210396][T14072] do_syscall_64+0x55/0xb0 [ 358.214917][T14072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.220911][T14072] [ 358.223255][T14072] The buggy address belongs to the object at ffff88801cbe2000 [ 358.223255][T14072] which belongs to the cache anon_vma of size 208 [ 358.237153][T14072] The buggy address is located 0 bytes inside of [ 358.237153][T14072] allocated 208-byte region [ffff88801cbe2000, ffff88801cbe20d0) [ 358.251157][T14072] [ 358.253502][T14072] The buggy address belongs to the physical page: [ 358.260128][T14072] page:ffffea000072f880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cbe2 [ 358.270530][T14072] memcg:ffff88802462a001 [ 358.274869][T14072] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 358.282859][T14072] page_type: 0xffffffff() [ 358.287372][T14072] raw: 00fff00000000800 ffff888019e5b140 0000000000000000 dead000000000001 [ 358.296254][T14072] raw: 0000000000000000 00000000000f000f 00000001ffffffff ffff88802462a001 [ 358.304868][T14072] page dumped because: kasan: bad access detected [ 358.311293][T14072] page_owner tracks the page as allocated [ 358.317012][T14072] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5520, tgid 5520 (dhcpcd-run-hook), ts 55365761969, free_ts 54614457222 [ 358.335815][T14072] post_alloc_hook+0x1c1/0x200 [ 358.340606][T14072] get_page_from_freelist+0x2181/0x22a0 [ 358.346255][T14072] __alloc_pages+0x1f0/0x460 [ 358.350942][T14072] alloc_slab_page+0x5d/0x180 [ 358.355631][T14072] new_slab+0x87/0x2d0 [ 358.359780][T14072] ___slab_alloc+0xc5c/0x12f0 [ 358.364475][T14072] kmem_cache_alloc+0x109/0x2c0 [ 358.369365][T14072] anon_vma_fork+0xe5/0x520 [ 358.373967][T14072] copy_mm+0x12c7/0x1e30 [ 358.378221][T14072] copy_process+0x171d/0x3df0 [ 358.383030][T14072] kernel_clone+0x24b/0x8a0 [ 358.387654][T14072] __x64_sys_clone+0x1b7/0x230 [ 358.392519][T14072] do_syscall_64+0x55/0xb0 [ 358.397083][T14072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.403026][T14072] page last free stack trace: [ 358.407900][T14072] free_unref_page_prepare+0x7d7/0x8f0 [ 358.413482][T14072] free_unref_page_list+0xbe/0x860 [ 358.418915][T14072] release_pages+0x208a/0x2300 [ 358.423730][T14072] tlb_flush_mmu+0x379/0x510 [ 358.428365][T14072] tlb_finish_mmu+0xf4/0x220 [ 358.432998][T14072] exit_mmap+0x428/0xb90 [ 358.437262][T14072] __mmput+0x118/0x3a0 [ 358.441338][T14072] exit_mm+0x23f/0x340 [ 358.445417][T14072] do_exit+0x909/0x2530 [ 358.449586][T14072] do_group_exit+0x22d/0x2f0 [ 358.454216][T14072] __x64_sys_exit_group+0x3f/0x40 [ 358.459264][T14072] do_syscall_64+0x55/0xb0 [ 358.463885][T14072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.469896][T14072] [ 358.472680][T14072] Memory state around the buggy address: [ 358.478361][T14072] ffff88801cbe1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.486440][T14072] ffff88801cbe2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.494591][T14072] >ffff88801cbe2080: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 358.502662][T14072] ^ [ 358.509355][T14072] ffff88801cbe2100: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.517432][T14072] ffff88801cbe2180: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 358.526316][T14072] ================================================================== [ 358.596851][T14072] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 358.604212][T14072] CPU: 0 PID: 14072 Comm: syz.1.3755 Not tainted syzkaller #0 [ 358.611807][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.621996][T14072] Call Trace: [ 358.625323][T14072] [ 358.628295][T14072] dump_stack_lvl+0x18c/0x250 [ 358.633494][T14072] ? show_regs_print_info+0x20/0x20 [ 358.638835][T14072] ? load_image+0x420/0x420 [ 358.643387][T14072] panic+0x2ca/0x720 [ 358.647417][T14072] ? bpf_jit_dump+0xd0/0xd0 [ 358.652400][T14072] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 358.659362][T14072] ? _raw_spin_unlock+0x40/0x40 [ 358.664278][T14072] ? print_memory_metadata+0x314/0x400 [ 358.669775][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 358.676004][T14072] check_panic_on_warn+0x84/0xa0 [ 358.681077][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 358.686737][T14072] end_report+0x6f/0x130 [ 358.690997][T14072] kasan_report+0x128/0x150 [ 358.695724][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 358.701485][T14072] kasan_check_range+0x241/0x290 [ 358.706635][T14072] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 358.712308][T14072] __asan_memcpy+0x29/0x70 [ 358.716744][T14072] z_erofs_transform_plain+0x3ab/0x4a0 [ 358.722239][T14072] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 358.728079][T14072] z_erofs_decompress_queue+0x1705/0x2670 [ 358.733950][T14072] ? z_erofs_onlinepage_end+0x360/0x360 [ 358.739519][T14072] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 358.745511][T14072] ? lock_chain_count+0x20/0x20 [ 358.750384][T14072] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 358.756662][T14072] ? erofs_map_blocks+0x17b0/0x17b0 [ 358.761891][T14072] ? folio_unlock+0x118/0x2f0 [ 358.766581][T14072] z_erofs_runqueue+0x1993/0x1b20 [ 358.771649][T14072] ? z_erofs_do_read_page+0x3500/0x3500 [ 358.777322][T14072] ? __lock_acquire+0x7d80/0x7d80 [ 358.782538][T14072] ? put_page+0xea/0x260 [ 358.786798][T14072] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 358.792818][T14072] z_erofs_read_folio+0x321/0x5c0 [ 358.797883][T14072] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 358.803306][T14072] ? up_read+0x20/0x20 [ 358.807390][T14072] ? __might_sleep+0xe0/0xe0 [ 358.812005][T14072] ? filemap_add_folio+0x190/0x3d0 [ 358.817128][T14072] filemap_read_folio+0x16b/0x790 [ 358.822280][T14072] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 358.827667][T14072] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 358.833257][T14072] ? down_read+0x1ac/0x2e0 [ 358.837819][T14072] filemap_get_pages+0x13ac/0x1f10 [ 358.842988][T14072] ? filemap_read+0xf20/0xf20 [ 358.847691][T14072] ? __might_sleep+0xe0/0xe0 [ 358.852469][T14072] ? folio_mark_accessed+0x203/0x14a0 [ 358.857854][T14072] ? folio_activate_fn+0x2000/0x2000 [ 358.863263][T14072] ? page_copy_sane+0x4e/0x270 [ 358.868162][T14072] filemap_read+0x409/0xf20 [ 358.872803][T14072] ? filemap_get_folios_tag+0x840/0x840 [ 358.878468][T14072] ? generic_file_read_iter+0x9b/0x550 [ 358.884829][T14072] ? iov_iter_kvec+0xd4/0x1b0 [ 358.889741][T14072] __kernel_read+0x2e5/0x730 [ 358.895618][T14072] ? rw_verify_area+0x1b0/0x1b0 [ 358.901112][T14072] integrity_kernel_read+0x8a/0xd0 [ 358.906372][T14072] ? integrity_inode_free+0x170/0x170 [ 358.911775][T14072] ? _sha256_update+0x127/0x1e0 [ 358.916657][T14072] ? sha256_transform_avx+0xcc0/0xcc0 [ 358.922062][T14072] ima_calc_file_hash+0xb1f/0x1960 [ 358.927309][T14072] ? deref_stack_reg+0x1ab/0x230 [ 358.932267][T14072] ? is_bpf_text_address+0x26/0x2a0 [ 358.937511][T14072] ? look_up_lock_class+0x75/0x140 [ 358.942636][T14072] ? ima_alloc_tfm+0x2f0/0x2f0 [ 358.947405][T14072] ? register_lock_class+0xc4/0x8a0 [ 358.952636][T14072] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 358.958380][T14072] ? generic_fillattr+0x2b5/0x690 [ 358.963862][T14072] ? __asan_memcpy+0x40/0x70 [ 358.968466][T14072] ? generic_fillattr+0x451/0x690 [ 358.973612][T14072] ima_collect_measurement+0x4d4/0xa30 [ 358.979174][T14072] ? ima_get_action+0xb0/0xb0 [ 358.983874][T14072] ? erofs_getxattr+0x13f/0x450 [ 358.988744][T14072] ? rcu_is_watching+0x15/0xb0 [ 358.993533][T14072] ? ima_get_hash_algo+0x91/0x4a0 [ 358.998567][T14072] ? ima_get_cache_status+0xd0/0xd0 [ 359.003777][T14072] process_measurement+0x123a/0x1d50 [ 359.009076][T14072] ? ima_file_mmap+0x1d0/0x1d0 [ 359.013878][T14072] ? tomoyo_check_open_permission+0x384/0x460 [ 359.019956][T14072] ? tomoyo_check_open_permission+0x1cf/0x460 [ 359.026029][T14072] ? tomoyo_check_path_number_acl+0x280/0x280 [ 359.032207][T14072] ? get_cached_acl+0x4fb/0x540 [ 359.037152][T14072] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 359.043347][T14072] ima_file_check+0xcc/0x110 [ 359.048015][T14072] ? ima_bprm_check+0x200/0x200 [ 359.052910][T14072] path_openat+0x2910/0x3270 [ 359.057538][T14072] ? do_filp_open+0x430/0x430 [ 359.062319][T14072] do_filp_open+0x1f2/0x430 [ 359.066867][T14072] ? vfs_tmpfile+0x480/0x480 [ 359.072008][T14072] ? _raw_spin_unlock+0x28/0x40 [ 359.076871][T14072] ? alloc_fd+0x590/0x640 [ 359.081217][T14072] do_sys_openat2+0x134/0x1d0 [ 359.086392][T14072] ? do_sys_open+0xe0/0xe0 [ 359.090848][T14072] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 359.096928][T14072] ? lock_chain_count+0x20/0x20 [ 359.101792][T14072] __x64_sys_openat+0x139/0x160 [ 359.106835][T14072] do_syscall_64+0x55/0xb0 [ 359.111274][T14072] ? clear_bhb_loop+0x40/0x90 [ 359.115956][T14072] ? clear_bhb_loop+0x40/0x90 [ 359.120641][T14072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.126730][T14072] RIP: 0033:0x7fba1eb9de59 [ 359.131155][T14072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.150961][T14072] RSP: 002b:00007fba1fb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.159583][T14072] RAX: ffffffffffffffda RBX: 00007fba1ee25fa0 RCX: 00007fba1eb9de59 [ 359.167590][T14072] RDX: 00000000000c8000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 359.175591][T14072] RBP: 00007fba1ec33e6f R08: 0000000000000000 R09: 0000000000000000 [ 359.183577][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.191577][T14072] R13: 00007fba1ee26038 R14: 00007fba1ee25fa0 R15: 00007fffb98b14b8 [ 359.199564][T14072] [ 359.202847][T14072] Kernel Offset: disabled [ 359.207259][T14072] Rebooting in 86400 seconds..