last executing test programs: 7m23.065854965s ago: executing program 2 (id=3895): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x2}) 7m22.82626725s ago: executing program 2 (id=3899): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101041, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 7m22.662520584s ago: executing program 2 (id=3902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d40cb1bb2a268f2a8d772f533aea2b34553e9f72db9c5511f08bcecdcaa2e8e6002ac0b393efc0b6a935573c2904eeb4ba4fe120b91be17f83871c579c18e340af9c1e78107697d4b07549fa1e2dd39556687194d6108000840"], 0x288}}, 0x20050800) 7m22.339037391s ago: executing program 2 (id=3907): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 7m21.966433839s ago: executing program 2 (id=3913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x40004) 7m21.461270101s ago: executing program 2 (id=3921): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x100c, 0x0, 0x0, 0x4, 0x2000003, 0xfffffffc, 0x0, 0xffffffff, 0x3fffffc, 0xfffffffd, 0x0, 0xfffffffd]}) 7m21.117155838s ago: executing program 32 (id=3921): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x100c, 0x0, 0x0, 0x4, 0x2000003, 0xfffffffc, 0x0, 0xffffffff, 0x3fffffc, 0xfffffffd, 0x0, 0xfffffffd]}) 2.392038016s ago: executing program 0 (id=10635): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000100)) 2.324211918s ago: executing program 0 (id=10637): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 1.871069718s ago: executing program 4 (id=10645): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FITHAW(r0, 0xc0045878) 1.739630671s ago: executing program 4 (id=10647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in=@private=0xa010100, 0x2, 0x6, 0x10}}]}, 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) 1.522211106s ago: executing program 4 (id=10652): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)={0xe0, 0x10, 0x50b, 0x0, 0x200, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da201adfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d287a8dfeff963b29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a81e93ff163103c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d0e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1cca"}]}, 0xe0}], 0x1, 0x0, 0x0, 0x804}, 0x0) 1.209070073s ago: executing program 4 (id=10656): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x149a02, 0x31) sendfile(r0, r0, 0x0, 0x5) 961.280588ms ago: executing program 4 (id=10660): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) 851.171381ms ago: executing program 3 (id=10661): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) 850.720901ms ago: executing program 4 (id=10662): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x5, 0x55, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x8, 0x20, 0x1, 0xffffff2b}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001fc35510e1050804315901020301090212000100000000090400e5f701"], 0x0) 831.458401ms ago: executing program 1 (id=10663): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) 697.508085ms ago: executing program 1 (id=10664): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept$inet(r0, 0x0, 0x0) 696.793165ms ago: executing program 3 (id=10665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 601.205507ms ago: executing program 0 (id=10666): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) 587.619497ms ago: executing program 0 (id=10667): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) chmod(0x0, 0x1) 580.952847ms ago: executing program 1 (id=10668): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 506.779738ms ago: executing program 3 (id=10669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x27dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x8000000a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 469.575159ms ago: executing program 0 (id=10670): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wg1\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x4b, 0x25, "4372071e843000000002"}}) 419.899421ms ago: executing program 1 (id=10671): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x1d, 0x0}) 321.190223ms ago: executing program 0 (id=10672): futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) futex(&(0x7f000000cffc)=0x80000000, 0x5, 0x5, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) 321.038863ms ago: executing program 3 (id=10673): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) 279.738904ms ago: executing program 1 (id=10674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x2d, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x100000000000008, 0x0, 0x40, 0x0, 0x543}, {0x8, 0x7fffffffffffffff, 0x8000000000000b, 0xfffffffffffffffd}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 218.722525ms ago: executing program 3 (id=10675): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 164.744426ms ago: executing program 1 (id=10676): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1c3, &(0x7f0000000800)="$eJzsmb1O40AQx2f9qZxOyrV3zZ10kZIrzrGdO0QKCmoKkEAgOiJiooBDkHGRpEtPRUPNE1BHNHkPKICKAuioQDLa9TreJA6JRBBImV8x/nt3vDs7o0wkGxAEmVlurh+vzrKZFNVfIQM6H7+VYx9J8O+kn/5cVJfPT8yHy053qTi4HgGAIJh8fwUAuosy+Pw+CPqfzvDrGkiRVsX5DSBgcL0FEqxz7QCBTa53BV2n/oaxU3UdY7vulqkwqbGosakpDMZ33yZQFuIjwvxhs7VXcl3Hax+HA15vZGpiXP5ozRaE+MR6Rbkx4/yBBRJYXBeAwCrX86BHuQlTIpz/hxKvLyed/5MLOaEwKkxtC1qCEVPf02Men2IYMy6iH+YEziq8VxiErXyXmiiMBBEd4qOTOU4cKa93gLg/BacEskJ/UoT+kfdrB3m92fpbrZUqTsXZt+3CnPnPNP/bedaIQhu5q8P9L8X60xdh/SEnjkY0aJR837NC27u3Gzr4np3UcTXW/yTI/Q6jJmzsue9filXsG/lFLzlZG7E7giAIgiAIgiAIgiAIgiDIW/kJhL0F7aMYfljjX4aotleYfAkAAP//SkVbUQ==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc8000, 0x0) 0s ago: executing program 3 (id=10677): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): (512). [ 648.491522][ T5099] usb 2-1: USB disconnect, device number 48 [ 648.491522][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 648.491654][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 648.526904][T25092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8702'. [ 648.621078][T25086] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 649.085813][T25110] netlink: 'syz.0.8711': attribute type 2 has an invalid length. [ 649.102557][T25110] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8711'. [ 649.519594][T25129] netlink: 'syz.0.8723': attribute type 2 has an invalid length. [ 650.171228][T25162] loop3: detected capacity change from 0 to 64 [ 651.304468][ T5099] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 651.313599][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8762'. [ 651.350398][T25215] netlink: 'syz.3.8763': attribute type 21 has an invalid length. [ 651.491637][T25220] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 651.495754][ T5099] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 651.503094][T25220] overlayfs: missing 'lowerdir' [ 651.540765][ T5099] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 651.572734][ T5099] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 651.599502][ T5099] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 651.626681][ T5099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 651.650530][ T5099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 651.670634][ T5099] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 651.706580][ T5099] usb 1-1: string descriptor 0 read error: -22 [ 651.722587][ T5099] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 651.758533][ T5099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.790028][ T5099] usb 1-1: config 0 descriptor?? [ 651.810708][ T5099] hub 1-1:0.0: bad descriptor, ignoring hub [ 651.837251][ T5099] hub: probe of 1-1:0.0 failed with error -5 [ 651.864303][ T5099] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input47 [ 652.155625][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8777'. [ 652.165198][T25242] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 652.171376][ T5099] usb 1-1: USB disconnect, device number 59 [ 652.178525][T25242] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 652.180039][T25242] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8777'. [ 652.337004][T25247] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8780'. [ 652.731738][T25265] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 652.755191][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8787'. [ 652.976108][T25275] tmpfs: User quota inode hardlimit too large. [ 653.035997][T25271] loop3: detected capacity change from 0 to 4096 [ 653.080572][T25271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.182851][T25286] netlink: 'syz.1.8797': attribute type 8 has an invalid length. [ 653.195468][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.399182][T25295] loop1: detected capacity change from 0 to 512 [ 653.510781][T25295] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 653.539041][T25295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 653.610477][T25295] EXT4-fs (loop1): orphan cleanup on readonly fs [ 653.656547][T25295] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.8800: iget: bad i_size value: 12154761577498 [ 653.719000][T25295] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.8800: couldn't read orphan inode 13 (err -117) [ 653.772922][T25295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 653.854212][T25295] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.8800: dx entry: limit 65535 != root limit 120 [ 653.883090][T25295] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8800: Corrupt directory, running e2fsck is recommended [ 654.552276][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.284494][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8832'. [ 655.695184][T25351] loop1: detected capacity change from 0 to 32768 [ 655.713321][T25351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.8828 (25351) [ 655.756124][T25351] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 655.767842][T25351] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 655.789741][T25351] BTRFS info (device loop1): setting nodatacow, compression disabled [ 655.801610][T25351] BTRFS info (device loop1): force clearing of disk cache [ 655.811674][T25351] BTRFS info (device loop1): turning off barriers [ 655.820473][T25351] BTRFS info (device loop1): use no compression [ 655.827111][T25351] BTRFS info (device loop1): disabling free space tree [ 655.841644][T25351] BTRFS info (device loop1): enabling ssd optimizations [ 655.858057][T25351] BTRFS info (device loop1): using spread ssd allocation scheme [ 655.867936][T25351] BTRFS info (device loop1): not using ssd optimizations [ 655.875339][T25351] BTRFS info (device loop1): not using spread ssd allocation scheme [ 655.913242][ T967] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 655.991444][T25351] BTRFS info (device loop1): rebuilding free space tree [ 656.079531][T25351] BTRFS info (device loop1): disabling free space tree [ 656.088950][T25351] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 656.102126][T25351] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 656.115012][ T967] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 656.143219][ T967] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 656.159888][ T967] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 656.169348][ T967] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 656.185094][T25351] BTRFS info (device loop1): checking UUID tree [ 656.193048][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 656.210385][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 656.225306][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 656.265621][ T967] usb 4-1: string descriptor 0 read error: -22 [ 656.271973][ T967] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 656.291420][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.314851][ T967] usb 4-1: config 0 descriptor?? [ 656.324715][ T967] hub 4-1:0.0: bad descriptor, ignoring hub [ 656.330752][ T967] hub: probe of 4-1:0.0 failed with error -5 [ 656.353131][ T23] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 656.385411][ T967] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input48 [ 656.416978][ T5770] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 656.548989][ T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 656.588222][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.616198][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 656.644086][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.683199][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.707368][ T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 656.714989][ T5805] usb 4-1: USB disconnect, device number 48 [ 656.727008][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 656.756229][ T23] usb 5-1: Product: syz [ 656.763297][ T23] usb 5-1: Manufacturer: syz [ 656.802277][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 656.823102][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 656.862834][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 656.894460][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 656.997366][T25399] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 657.028556][ T23] usb 5-1: USB disconnect, device number 23 [ 657.264584][T25407] loop1: detected capacity change from 0 to 32768 [ 657.303865][T25407] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 657.472645][ T5762] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 657.936162][T25443] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8864'. [ 658.523179][ T5805] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 658.581974][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8877'. [ 658.609168][T25474] ieee802154 phy0 wpan0: encryption failed: -22 [ 658.743694][ T5805] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 658.783126][ T5805] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 658.796329][T25483] netlink: 'syz.1.8881': attribute type 21 has an invalid length. [ 658.823261][ T5805] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 658.843158][ T5805] usb 4-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.863750][ T5805] usb 4-1: config 16 interface 0 has no altsetting 0 [ 658.880726][ T5805] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 658.900400][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.150336][ T5805] usb 4-1: string descriptor 0 read error: -71 [ 659.190538][ T5805] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 659.211516][ T5805] imon 4-1:16.0: unable to initialize intf0, err -19 [ 659.218453][ T5805] imon:imon_probe: failed to initialize context! [ 659.241686][ T5805] imon 4-1:16.0: unable to register, err -19 [ 659.268382][ T5805] usb 4-1: USB disconnect, device number 49 [ 659.303136][ T787] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 659.337174][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8889'. [ 659.347822][T25498] netlink: 'syz.1.8889': attribute type 2 has an invalid length. [ 659.408286][T25482] loop4: detected capacity change from 0 to 32768 [ 659.445701][T25482] (syz.4.8883,25482,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 659.471212][T25482] (syz.4.8883,25482,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 659.498994][ T787] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 659.511395][ T787] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 659.523484][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 659.541051][ T787] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 659.551030][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.565363][T25482] JBD2: Ignoring recovery information on journal [ 659.568629][ T787] usb 1-1: Product: syz [ 659.579398][ T787] usb 1-1: Manufacturer: syz [ 659.589522][ T787] usb 1-1: SerialNumber: syz [ 659.612075][ T787] usb 1-1: config 0 descriptor?? [ 659.636340][ T787] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 659.649797][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 659.660710][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 659.669095][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 659.678003][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 659.687935][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 659.688217][T25482] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 659.701749][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 659.747603][ T787] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 659.782902][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 659.811254][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 659.846949][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 659.869792][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 659.892579][ T787] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 659.927164][ T787] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 659.981268][ T787] usb 1-1: USB disconnect, device number 60 [ 660.019083][ T787] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 660.035709][ T787] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 660.063722][T25510] loop3: detected capacity change from 0 to 1024 [ 660.067926][T14464] ocfs2: Unmounting device (7,4) on (node local) [ 660.099852][ T787] keyspan 1-1:0.0: device disconnected [ 660.164658][T25510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.304790][T25517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.336633][T25510] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.8894: Attempting to read directory block (623) that is past i_size (638464) [ 660.392542][T25510] EXT4-fs (loop3): Remounting filesystem read-only [ 660.540392][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.780862][T25534] kAFS: unparsable volume name [ 660.815880][T25536] netlink: 'syz.3.8904': attribute type 2 has an invalid length. [ 660.960697][T25542] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.8907'. [ 661.002890][T25544] tmpfs: Bad value for 'mpol' [ 661.141751][T25551] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 661.166111][T25551] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 662.746312][T25630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8951'. [ 663.205230][T25650] loop1: detected capacity change from 0 to 8 [ 663.269294][T25650] SQUASHFS error: Corrupted symlink [ 663.536759][T25665] loop3: detected capacity change from 0 to 256 [ 663.561032][T25666] loop1: detected capacity change from 0 to 8 [ 663.641023][T25662] loop4: detected capacity change from 0 to 4096 [ 663.694559][T25662] __ntfs_warning: 6 callbacks suppressed [ 663.694575][T25662] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 663.737410][T25662] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 663.749824][T25662] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 663.766544][T25662] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 663.806510][T25662] ntfs: volume version 3.1. [ 663.962789][T14464] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 664.218512][T25686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8979'. [ 664.239745][T25687] loop3: detected capacity change from 0 to 1024 [ 664.246562][T25686] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 664.684795][T25697] loop4: detected capacity change from 0 to 4096 [ 664.718649][T25697] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 664.760855][T25703] overlayfs: missing 'lowerdir' [ 664.803389][T25697] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 665.093177][ T967] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 665.233375][ T787] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 665.295657][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 665.319736][ T967] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 665.322688][T25725] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 665.353133][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.370430][ T967] usb 4-1: Product: syz [ 665.379377][ T967] usb 4-1: Manufacturer: syz [ 665.391758][ T967] usb 4-1: SerialNumber: syz [ 665.403516][ T967] usb 4-1: config 0 descriptor?? [ 665.419826][ T967] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 665.439993][T25729] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 665.448116][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 665.455103][ T787] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 665.465120][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.489795][ T787] usb 2-1: config 0 descriptor?? [ 665.510993][ T787] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 665.641747][ T967] gspca_ov534_9: reg_w failed -71 [ 665.731127][ T787] dvb-usb: bulk message failed: -22 (1/0) [ 665.747679][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.760051][ T787] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 665.772980][ T787] usb 2-1: media controller created [ 665.830113][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.900094][T25743] loop4: detected capacity change from 0 to 128 [ 665.973628][T14464] sysv_free_block: flc_count > flc_size [ 665.979241][T14464] sysv_free_block: flc_count > flc_size [ 665.987988][T14464] sysv_free_block: flc_count > flc_size [ 665.994223][ T787] DVB: Unable to find symbol lgdt330x_attach() [ 666.000466][T14464] sysv_free_block: flc_count > flc_size [ 666.006774][ T787] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 666.017627][T14464] sysv_free_block: flc_count > flc_size [ 666.024367][T14464] sysv_free_block: flc_count > flc_size [ 666.030209][ T787] dvb-usb: bulk message failed: -22 (1/0) [ 666.034083][T14464] sysv_free_block: flc_count > flc_size [ 666.036294][ T787] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 666.041790][T14464] sysv_free_block: flc_count > flc_size [ 666.064608][ T787] usb 2-1: USB disconnect, device number 49 [ 666.066557][T14464] sysv_free_block: flc_count > flc_size [ 666.076789][T14464] sysv_free_block: flc_count > flc_size [ 666.083440][T14464] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 666.156758][ T787] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 666.193141][ T967] gspca_ov534_9: Unknown sensor 0000 [ 666.193228][ T967] ov534_9: probe of 4-1:0.0 failed with error -22 [ 666.215872][ T967] usb 4-1: USB disconnect, device number 50 [ 666.306847][T25748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9009'. [ 666.316296][T25748] netlink: 'syz.4.9009': attribute type 1 has an invalid length. [ 666.324420][T25748] netlink: 'syz.4.9009': attribute type 2 has an invalid length. [ 666.332266][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9009'. [ 666.427674][T25750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.949236][T25774] netlink: 'syz.4.9022': attribute type 10 has an invalid length. [ 666.988848][T25774] team0: Cannot enslave team device to itself [ 667.033261][T25776] netlink: 'syz.1.9023': attribute type 5 has an invalid length. [ 667.063487][T25780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9025'. [ 667.072769][T25780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9025'. [ 667.771375][T25811] netlink: 'syz.3.9040': attribute type 8 has an invalid length. [ 668.009096][T25824] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.9047'. [ 668.020849][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9047'. [ 668.552212][T25843] bond3: entered promiscuous mode [ 668.560208][T25843] bond3: entered allmulticast mode [ 668.566264][T25843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 668.773955][ T23] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 668.897847][T25862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9065'. [ 668.929041][T25862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9065'. [ 668.981888][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 669.014885][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 669.032362][ T23] usb 2-1: config 86 has an invalid interface number: 78 but max is 0 [ 669.048610][ T23] usb 2-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 669.093132][ T23] usb 2-1: config 86 has no interface number 0 [ 669.107471][ T23] usb 2-1: config 86 interface 78 altsetting 128 endpoint 0x88 has invalid wMaxPacketSize 0 [ 669.128136][ T23] usb 2-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 0 [ 669.159733][ T23] usb 2-1: config 86 interface 78 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.188107][ T23] usb 2-1: config 86 interface 78 has no altsetting 0 [ 669.202318][ T23] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 669.222407][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.240795][ T23] usb 2-1: Product: syz [ 669.256590][ T23] usb 2-1: Manufacturer: syz [ 669.261232][ T23] usb 2-1: SerialNumber: syz [ 669.324634][T25874] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9071'. [ 669.550954][ T23] kvaser_usb 2-1:86.78: Cannot get usb endpoint(s) [ 669.568988][ T23] usb 2-1: USB disconnect, device number 50 [ 670.455892][T25917] loop3: detected capacity change from 0 to 8 [ 671.408593][T25963] comedi comedi4: bad chanlist[0]=0x0000c000 chan=49152 range length=2 [ 671.495122][ T23] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 671.524558][T25959] loop1: detected capacity change from 0 to 4096 [ 671.555835][T25959] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 671.590102][T25959] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 671.618972][T25959] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 671.669772][T25959] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 671.674817][T25969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9118'. [ 671.703273][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 671.709179][T25959] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 671.712045][T25969] openvswitch: netlink: Missing key (keys=40, expected=80) [ 671.727785][ T23] usb 4-1: config 3 has an invalid interface number: 160 but max is 0 [ 671.744753][ T23] usb 4-1: config 3 has no interface number 0 [ 671.753280][ T23] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 671.766064][T25959] ntfs: volume version 3.1. [ 671.780006][ T23] usb 4-1: config 3 interface 160 has no altsetting 0 [ 671.800911][T25959] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 671.837670][T25959] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 671.854015][ T23] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 671.869476][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.885296][ T23] usb 4-1: Product: syz [ 671.893374][ T23] usb 4-1: Manufacturer: syz [ 671.898144][ T23] usb 4-1: SerialNumber: syz [ 671.910007][T25959] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 671.932823][T25959] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 671.956165][T25951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 671.983080][T25959] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 672.070062][T25979] netlink: 'syz.0.9123': attribute type 32 has an invalid length. [ 672.206008][ T23] usbhid 4-1:3.160: couldn't find an input interrupt endpoint [ 672.260689][ T23] usb 4-1: USB disconnect, device number 51 [ 672.617607][T26000] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 672.667634][T26003] loop1: detected capacity change from 0 to 256 [ 673.557364][T26039] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9153'. [ 673.586778][T26039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9153'. [ 673.982431][T26060] xt_nfacct: accounting object `syz1' does not exist [ 674.552727][T26085] netlink: 'syz.4.9174': attribute type 1 has an invalid length. [ 674.572124][T26085] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9174'. [ 674.598202][T26085] NCSI netlink: No device for ifindex 0 [ 674.634020][T26087] loop1: detected capacity change from 0 to 4096 [ 674.686693][T26087] EXT4-fs (loop1): Test dummy encryption mode enabled [ 674.703095][T26087] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 675.043227][ T967] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 675.244861][ T967] usb 2-1: config 0 has an invalid interface number: 42 but max is 8 [ 675.261010][ T967] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.279376][ T967] usb 2-1: config 0 has no interface number 0 [ 675.292366][ T967] usb 2-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 675.311863][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.332742][ T967] usb 2-1: config 0 descriptor?? [ 675.552241][ T967] usb 2-1: string descriptor 0 read error: -71 [ 675.570922][ T967] usb-storage 2-1:0.42: USB Mass Storage device detected [ 675.604813][ T967] usb-storage 2-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 675.612590][ T967] usb-storage 2-1:0.42: This device (04cb,0100,00bb S 04 P 61) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 675.612590][ T967] Please send a copy of this message to and [ 675.699503][ T967] usb 2-1: USB disconnect, device number 51 [ 675.703366][ T787] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 675.894001][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 675.911091][ T787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 675.922807][T26124] loop4: detected capacity change from 0 to 32768 [ 675.925536][ T787] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 675.952591][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.971246][ T787] usb 1-1: Product: syz [ 675.986401][ T787] usb 1-1: Manufacturer: syz [ 675.987784][T26124] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 675.991063][ T787] usb 1-1: SerialNumber: syz [ 676.068883][ T787] usb 1-1: config 0 descriptor?? [ 676.085863][ T787] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 676.101216][ T787] usb 1-1: Detected FT232R [ 676.210801][T26124] XFS (loop4): Ending clean mount [ 676.256015][T26124] XFS (loop4): Quotacheck needed: Please wait. [ 676.288572][T26144] loop3: detected capacity change from 0 to 512 [ 676.311939][T26144] EXT4-fs: inline encryption not supported [ 676.359538][T26124] XFS (loop4): Quotacheck: Done. [ 676.392800][T26146] netlink: 'syz.1.9199': attribute type 30 has an invalid length. [ 676.421212][T26144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 676.462183][T26144] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 676.506204][ T787] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 676.540215][ T787] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 676.550200][T26144] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 676.557605][ T787] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 676.597507][ T787] usb 1-1: USB disconnect, device number 61 [ 676.601703][T14464] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 676.621278][T26144] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.9197: bg 0: block 248: padding at end of block bitmap is not set [ 676.676444][ T787] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 676.695832][T26144] __quota_error: 4 callbacks suppressed [ 676.695848][T26144] Quota error (device loop3): write_blk: dquota write failed [ 676.704250][ T787] ftdi_sio 1-1:0.0: device disconnected [ 676.716122][T26144] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 676.726973][T26144] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.9197: Failed to acquire dquot type 1 [ 676.754966][T26144] EXT4-fs (loop3): 1 truncate cleaned up [ 676.797895][T26144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 676.962655][T26155] netlink: 'syz.1.9203': attribute type 1 has an invalid length. [ 676.989685][T26155] netlink: 'syz.1.9203': attribute type 2 has an invalid length. [ 676.998056][T26155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9203'. [ 677.021749][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 677.073480][ T11] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 677.087913][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 677.227094][T26161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9204'. [ 677.398869][T26169] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 677.646889][T26179] netlink: 'syz.0.9214': attribute type 24 has an invalid length. [ 678.467468][T26217] loop0: detected capacity change from 0 to 512 [ 678.487028][T26217] EXT4-fs: Ignoring removed mblk_io_submit option [ 678.534590][T26217] EXT4-fs (loop0): orphan cleanup on readonly fs [ 678.546417][T26217] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 678.561335][T26217] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.9233: attempt to clear invalid blocks 2 len 1 [ 678.579991][T26217] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 678.595777][T26217] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.9233: invalid indirect mapped block 1819239214 (level 0) [ 678.654000][T26217] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.9233: invalid indirect mapped block 1819239214 (level 1) [ 678.693479][T26217] EXT4-fs (loop0): 1 truncate cleaned up [ 678.700583][T26217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 678.814618][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.910398][T26231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9240'. [ 679.109929][T26238] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 679.190902][T26238] CIFS mount error: No usable UNC path provided in device string! [ 679.190902][T26238] [ 679.248867][T26238] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 679.533150][ T23] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 679.726908][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 679.734709][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.757673][ T23] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 679.769163][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.813493][ T23] usb 5-1: Product: syz [ 679.817714][ T23] usb 5-1: Manufacturer: syz [ 679.838568][ T23] usb 5-1: SerialNumber: syz [ 679.851233][ T23] usb 5-1: config 0 descriptor?? [ 679.866512][ T23] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 680.052374][T26279] netlink: 'syz.3.9264': attribute type 10 has an invalid length. [ 680.078324][ T23] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 680.093658][T26279] hsr0: entered promiscuous mode [ 680.094092][T26280] tmpfs: Unknown parameter 'func' [ 680.099520][ T23] quatech2: probe of 5-1:0.0 failed with error -8 [ 680.405318][ T23] usb 5-1: USB disconnect, device number 24 [ 680.733260][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 680.882312][T26312] netlink: 'syz.0.9279': attribute type 2 has an invalid length. [ 681.014714][T26317] syz.4.9284: attempt to access beyond end of device [ 681.014714][T26317] nbd4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 681.089042][T26317] F2FS-fs (nbd4): Unable to read 1th superblock [ 681.109613][T26317] syz.4.9284: attempt to access beyond end of device [ 681.109613][T26317] nbd4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 681.137607][T26317] F2FS-fs (nbd4): Unable to read 2th superblock [ 681.354428][ T5099] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 681.545709][ T5099] usb 4-1: Using ep0 maxpacket: 16 [ 681.555534][ T5099] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 681.564515][ T5099] usb 4-1: config 252 has no interface number 0 [ 681.581151][ T5099] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 681.613139][ T5099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.639320][ T5099] usb 4-1: Product: syz [ 681.662581][ T5099] usb 4-1: Manufacturer: syz [ 681.687718][ T5099] usb 4-1: SerialNumber: syz [ 681.740301][ T5099] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 681.922744][T14573] usb 4-1: Failed to submit usb control message: -71 [ 681.923082][ T787] usb 4-1: USB disconnect, device number 52 [ 681.936479][T14573] usb 4-1: unable to send the bmi data to the device: -71 [ 681.936537][T14573] usb 4-1: unable to get target info from device [ 681.936554][T14573] usb 4-1: could not get target info (-71) [ 681.936667][T14573] usb 4-1: could not probe fw (-71) [ 682.003432][ T23] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 682.093282][ T5099] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 682.214890][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.225262][ T23] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 682.234474][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.249833][ T23] usb 5-1: config 0 descriptor?? [ 682.261750][ T23] gspca_main: spca501-2.14.0 probing 0000:0000 [ 682.274915][ T5099] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 682.284211][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.299634][ T5099] usb 2-1: config 0 descriptor?? [ 682.308578][ T5099] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 682.669195][ T23] gspca_spca501: reg write: error -71 [ 682.674830][ T23] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 682.681967][ T23] spca501: probe of 5-1:0.0 failed with error -22 [ 682.690623][ T23] usb 5-1: USB disconnect, device number 25 [ 682.712664][ T5099] gp8psk: usb out operation failed. [ 682.720450][ T5099] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 682.731297][ T5099] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 682.743804][ T5099] usb 2-1: USB disconnect, device number 52 [ 683.429246][ T27] audit: type=1326 audit(2000000689.438:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26362 comm="syz.4.9303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe68b9de59 code=0x0 [ 683.927982][T26358] loop0: detected capacity change from 0 to 32768 [ 683.941673][T26358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.9308 (26358) [ 683.985153][T26358] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 684.003939][T26358] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 684.012710][T26358] BTRFS info (device loop0): setting nodatasum [ 684.024899][T26358] BTRFS info (device loop0): force zlib compression, level 3 [ 684.043399][ T23] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 684.052171][T26358] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 684.075826][T26358] BTRFS info (device loop0): use lzo compression, level 0 [ 684.093982][T26358] BTRFS info (device loop0): turning on flush-on-commit [ 684.102711][T26358] BTRFS info (device loop0): enabling auto defrag [ 684.106924][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9312'. [ 684.120521][T26358] BTRFS info (device loop0): max_inline at 4096 [ 684.133118][T26358] BTRFS info (device loop0): using free space tree [ 684.150397][T26365] loop3: detected capacity change from 0 to 32768 [ 684.235064][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 684.255725][ T23] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 684.264446][ T23] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 684.276068][ T23] usb 2-1: config 0 has no interface number 0 [ 684.284965][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 684.294198][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.302285][ T23] usb 2-1: Product: syz [ 684.306342][T26358] BTRFS info (device loop0): enabling ssd optimizations [ 684.307020][ T23] usb 2-1: Manufacturer: syz [ 684.318126][ T23] usb 2-1: SerialNumber: syz [ 684.334604][ T23] usb 2-1: config 0 descriptor?? [ 684.346314][ T23] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 684.363113][ T23] usb 2-1: No valid video chain found. [ 684.510579][ T5767] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 684.511718][ T27] audit: type=1326 audit(2000000690.538:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26398 comm="syz.4.9314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe68b9de59 code=0x7ffc0000 [ 684.545178][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.586402][ T23] usb 2-1: USB disconnect, device number 53 [ 684.624853][ T27] audit: type=1326 audit(2000000690.578:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26398 comm="syz.4.9314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe68b9de59 code=0x7ffc0000 [ 684.651077][ T27] audit: type=1326 audit(2000000690.608:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26398 comm="syz.4.9314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7efe68b9de59 code=0x7ffc0000 [ 684.675266][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.689492][ T27] audit: type=1326 audit(2000000690.608:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26398 comm="syz.4.9314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe68b9de59 code=0x7ffc0000 [ 684.713652][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.721081][ T27] audit: type=1326 audit(2000000690.608:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26398 comm="syz.4.9314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe68b9de59 code=0x7ffc0000 [ 684.745423][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.855465][T26447] loop0: detected capacity change from 0 to 16 [ 685.859047][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.889082][T26447] erofs: (device loop0): mounted with root inode @ nid 36. [ 685.961677][T26447] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 686.106898][T26451] Unknown options in mask 5 [ 686.698420][T26477] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 686.847620][T26479] loop0: detected capacity change from 0 to 4096 [ 686.883159][ T27] audit: type=1326 audit(2000000692.908:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.1.9355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x0 [ 686.890942][T26479] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 687.018002][T26479] ntfs3: loop0: Failed to load $Extend (-22). [ 687.048509][T26489] loop4: detected capacity change from 0 to 256 [ 687.054944][T26479] ntfs3: loop0: Failed to initialize $Extend. [ 687.951448][T26522] netlink: 'syz.3.9373': attribute type 5 has an invalid length. [ 688.066243][T26502] loop4: detected capacity change from 0 to 40427 [ 688.080775][T26502] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 688.097093][T26502] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 688.105542][ T787] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 688.115662][T26502] F2FS-fs (loop4): invalid crc value [ 688.121034][T26502] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=1048575 w/o reserve_root [ 688.136589][T26502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 688.239567][T26502] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 688.251940][T26502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 688.297130][ T787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 688.338014][ T787] usb 1-1: not running at top speed; connect to a high speed hub [ 688.368476][ T787] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.384486][T26502] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=1048575 w/o reserve_root [ 688.389410][ T787] usb 1-1: config 1 interface 0 has no altsetting 0 [ 688.403866][ T787] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 688.429060][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.453336][ T787] usb 1-1: Product: syz [ 688.457560][ T787] usb 1-1: Manufacturer: syz [ 688.475447][ T787] usb 1-1: SerialNumber: syz [ 688.750116][ T787] usbhid 1-1:1.0: can't add hid device: -71 [ 688.761902][ T787] usbhid: probe of 1-1:1.0 failed with error -71 [ 688.810091][ T787] usb 1-1: USB disconnect, device number 62 [ 689.190054][T26557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9388'. [ 689.217188][T26559] netlink: 'syz.1.9389': attribute type 2 has an invalid length. [ 689.230485][T26559] netlink: 'syz.1.9389': attribute type 1 has an invalid length. [ 689.894861][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 689.936902][T26585] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9401'. [ 689.950536][T26588] loop1: detected capacity change from 0 to 256 [ 689.982745][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.009383][T26588] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012a20, chksum : 0xf9fb3df0, utbl_chksum : 0xe619d30d) [ 690.032488][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.054127][T26586] loop0: detected capacity change from 0 to 4096 [ 690.081191][T26585] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.105714][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.118441][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.122372][ T27] audit: type=1800 audit(2000000696.158:6208): pid=26588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9403" name="file2" dev="loop1" ino=1048691 res=0 errno=0 [ 690.128454][T26585] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.168364][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 690.220917][T26586] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 690.356309][T26586] ntfs3: loop0: Failed to load $Extend (-22). [ 690.362483][T26586] ntfs3: loop0: Failed to initialize $Extend. [ 690.372540][T26592] cgroup: subsys name conflicts with all [ 690.968591][T26616] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 691.103119][ T787] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 691.230099][T26626] vlan0: entered promiscuous mode [ 691.314873][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.339475][ T787] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 691.357061][T26630] loop0: detected capacity change from 0 to 256 [ 691.372453][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.394520][ T787] usb 2-1: config 0 descriptor?? [ 691.412165][ T787] gspca_main: spca501-2.14.0 probing 0000:0000 [ 691.636980][T26640] loop0: detected capacity change from 0 to 256 [ 691.734609][T26640] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 691.820021][ T787] gspca_spca501: reg write: error -71 [ 691.831805][ T787] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 691.870183][ T787] spca501: probe of 2-1:0.0 failed with error -22 [ 691.934198][ T787] usb 2-1: USB disconnect, device number 54 [ 692.205083][ T967] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 692.403458][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 692.415473][ T967] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 692.433080][ T967] usb 4-1: config 0 has no interface number 0 [ 692.449421][ T967] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 692.483406][ T967] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 692.525932][ T967] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 692.555682][ T967] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 692.580872][ T967] usb 4-1: Product: syz [ 692.603087][ T967] usb 4-1: SerialNumber: syz [ 692.615395][ T967] usb 4-1: config 0 descriptor?? [ 692.644256][ T967] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 692.673209][ T967] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input51 [ 693.086684][T26684] lo: entered allmulticast mode [ 693.158599][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 693.159281][ T787] usb 4-1: USB disconnect, device number 53 [ 693.165597][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 693.215796][ T787] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 693.247958][T26666] loop1: detected capacity change from 0 to 32768 [ 693.314219][T26666] JBD2: Ignoring recovery information on journal [ 693.406782][T26666] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 693.540430][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 693.593148][ T5099] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 693.734286][T26702] sctp: [Deprecated]: syz.4.9458 (pid 26702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.734286][T26702] Use struct sctp_sack_info instead [ 693.803114][ T5099] usb 1-1: Using ep0 maxpacket: 32 [ 693.819428][ T5099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.840432][ T5099] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 693.853262][ T5099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.881659][ T5099] usb 1-1: Product: syz [ 693.891774][ T5099] usb 1-1: Manufacturer: syz [ 693.901890][ T5099] usb 1-1: SerialNumber: syz [ 693.949407][ T5099] usb 1-1: config 0 descriptor?? [ 693.962906][ T5099] usb 1-1: bad CDC descriptors [ 693.974612][ T5099] usb 1-1: unsupported MDLM descriptors [ 694.175709][ T5099] usb 1-1: USB disconnect, device number 63 [ 694.458522][T26722] tunl0: entered promiscuous mode [ 694.493593][T26722] netlink: 'syz.4.9468': attribute type 4 has an invalid length. [ 694.508147][T26722] __nla_validate_parse: 28 callbacks suppressed [ 694.508166][T26722] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9468'. [ 694.659138][T26708] loop1: detected capacity change from 0 to 32768 [ 694.741721][T26708] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 694.886812][T26708] XFS (loop1): Ending clean mount [ 694.911201][T26744] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9475'. [ 695.070235][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 695.228974][T26751] loop4: detected capacity change from 0 to 512 [ 695.266347][T26751] EXT4-fs: Ignoring removed nobh option [ 695.363911][T26751] EXT4-fs (loop4): orphan cleanup on readonly fs [ 695.434688][T26751] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.9479: corrupted inode contents [ 695.543475][T26751] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 695.601194][T26751] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.9479: corrupted inode contents [ 695.644633][T26751] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.9479: mark_inode_dirty error [ 695.697490][T26751] EXT4-fs (loop4): 1 orphan inode deleted [ 695.733643][T26751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 695.868600][T14464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.376480][T26782] loop1: detected capacity change from 0 to 256 [ 696.453163][ T787] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 696.533932][T26764] loop0: detected capacity change from 0 to 32768 [ 696.598822][T26764] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 696.648213][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 696.712389][ T787] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 696.743154][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.754997][T26764] XFS (loop0): Ending clean mount [ 696.761914][ T787] usb 4-1: config 0 has no interface number 0 [ 696.768956][T26764] XFS (loop0): Quotacheck needed: Please wait. [ 696.783989][ T787] usb 4-1: config 0 interface 52 has no altsetting 0 [ 696.790815][ T787] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 696.854578][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.903122][T26764] XFS (loop0): Quotacheck: Done. [ 696.909365][ T787] usb 4-1: config 0 descriptor?? [ 697.082427][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 697.455008][ T23] usb 4-1: USB disconnect, device number 54 [ 697.604358][T26815] macvtap0: entered allmulticast mode [ 697.627700][T26815] veth0_macvtap: entered allmulticast mode [ 698.668812][T26824] loop4: detected capacity change from 0 to 32768 [ 698.824698][T26824] blkno = 8ed2c, nblocks = 1 [ 698.843120][T26824] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 698.843120][T26824] [ 698.903589][T26824] ERROR: (device loop4): remounting filesystem as read-only [ 698.932304][T26824] ialloc: diAlloc returned -17! [ 699.393175][T26878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9536'. [ 699.440899][T26878] netlink: 'syz.4.9536': attribute type 8 has an invalid length. [ 699.590434][T26880] loop0: detected capacity change from 0 to 4096 [ 699.615144][T26880] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 699.661104][T26886] team0: entered promiscuous mode [ 699.673364][T26886] team_slave_0: entered promiscuous mode [ 699.680287][T26886] team_slave_1: entered promiscuous mode [ 699.706907][T26886] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.724124][T26886] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 699.726619][T26890] loop1: detected capacity change from 0 to 256 [ 699.771903][T26880] ntfs: volume version 3.1. [ 699.893430][T26890] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 700.105279][ T5770] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 700.256292][T26907] netlink: 'syz.0.9550': attribute type 10 has an invalid length. [ 700.293092][T26907] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.9550'. [ 700.302459][T26907] openvswitch: netlink: Flow key attr not present in new flow. [ 701.314869][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9571'. [ 701.334572][T26949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9571'. [ 701.354110][T26949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9571'. [ 701.849567][T26974] loop1: detected capacity change from 0 to 512 [ 701.894763][T26974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 701.956277][T26974] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 701.988968][T26974] System zones: 0-2, 18-18, 34-34 [ 702.033440][T26974] EXT4-fs (loop1): orphan cleanup on readonly fs [ 702.040000][T26974] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #4: comm syz.1.9583: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 702.140308][T26974] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.9583: Bad quota inode: 4, type: 1 [ 702.190803][T26974] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 702.229149][T26992] x_tables: unsorted entry at hook 3 [ 702.250022][T26974] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 702.283698][T26994] tmpfs: Bad value for 'mpol' [ 702.289658][T26974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 702.375969][T26974] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 702.396550][T26974] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 702.452918][T26998] netlink: 'syz.0.9595': attribute type 21 has an invalid length. [ 702.489513][T26998] IPv6: NLM_F_CREATE should be specified when creating new route [ 702.664079][T26974] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 702.664079][T26974] [ 702.730558][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.753091][ T967] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 702.944808][ T967] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 702.963498][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.007040][ T967] usb 5-1: config 0 descriptor?? [ 703.038173][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9604'. [ 703.095691][T27001] loop3: detected capacity change from 0 to 32768 [ 703.166806][T27001] [ 703.166806][T27001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 703.166806][T27001] [ 703.295690][T27001] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 703.295690][T27001] [ 703.359370][T27001] ERROR: (device loop3): remounting filesystem as read-only [ 703.457423][ T967] ath6kl: Failed to read usb control message: -71 [ 703.468430][ T967] ath6kl: Unable to read the bmi data from the device: -71 [ 703.499043][ T967] ath6kl: Unable to recv target info: -71 [ 703.534204][ T967] ath6kl: Failed to init ath6kl core: -71 [ 703.545375][ T967] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 703.566418][ T967] usb 5-1: USB disconnect, device number 26 [ 704.200930][T27042] netlink: 'syz.4.9615': attribute type 1 has an invalid length. [ 704.223229][T27042] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9615'. [ 704.427834][T27052] netlink: 'syz.4.9620': attribute type 20 has an invalid length. [ 704.606111][T27058] loop0: detected capacity change from 0 to 2048 [ 704.649550][ T27] audit: type=1326 audit(2000000710.678:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 704.704014][ T27] audit: type=1326 audit(2000000710.678:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 704.728668][ T27] audit: type=1326 audit(2000000710.678:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 704.732114][T27058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.754326][ T27] audit: type=1326 audit(2000000710.678:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 704.834734][ T27] audit: type=1326 audit(2000000710.718:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 704.868660][ T27] audit: type=1326 audit(2000000710.758:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3a0b5e68e code=0x7ffc0000 [ 704.890897][T27058] ext4 filesystem being mounted at /2551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 704.894014][ T27] audit: type=1326 audit(2000000710.788:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3a0b5e68e code=0x7ffc0000 [ 705.028265][ T27] audit: type=1326 audit(2000000710.808:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3a0b5e68e code=0x7ffc0000 [ 705.075475][ T27] audit: type=1326 audit(2000000710.808:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3a0b5e68e code=0x7ffc0000 [ 705.117258][ T27] audit: type=1326 audit(2000000710.808:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27061 comm="syz.1.9624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3a0b5e68e code=0x7ffc0000 [ 705.157248][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.263565][T27080] netlink: 'syz.0.9632': attribute type 3 has an invalid length. [ 705.282915][T27080] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9632'. [ 705.343254][ T967] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 705.556179][ T967] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 705.583417][ T967] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 705.608566][ T967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 705.626577][T27092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9637'. [ 705.643219][ T967] usb 5-1: config 1 has no interface number 0 [ 705.649467][ T967] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 705.678239][ T967] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 705.701591][ T967] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 705.742700][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.781567][ T967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 705.919735][T27103] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 705.982351][ T967] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 706.026179][ T967] snd_usb_pod 5-1:1.1: invalid control EP [ 706.053153][ T967] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 706.059999][ T967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 706.084359][ T967] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 706.268856][T27113] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 706.277704][ T787] usb 5-1: USB disconnect, device number 27 [ 707.265617][T27159] loop1: detected capacity change from 0 to 64 [ 707.521501][T27169] netlink: 368 bytes leftover after parsing attributes in process `syz.1.9676'. [ 707.553569][T27169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9676'. [ 707.562651][T27169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9676'. [ 707.579679][T27169] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9676'. [ 707.594605][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9677'. [ 708.274785][T27194] loop4: detected capacity change from 0 to 128 [ 708.322928][T27194] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 708.366947][T27194] ext4 filesystem being mounted at /1342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 708.525098][T14464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.243744][T27234] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 709.421913][T27240] loop3: detected capacity change from 0 to 2048 [ 709.505186][T27240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.829031][T27257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9718'. [ 710.145154][T27269] loop4: detected capacity change from 0 to 256 [ 710.340957][ T27] kauditd_printk_skb: 202 callbacks suppressed [ 710.340973][ T27] audit: type=1400 audit(2000000716.368:6421): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(2000000717.038:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.269776][ T27] audit: type=1326 audit(2000000717.038:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.367057][ T27] audit: type=1326 audit(2000000717.048:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.430400][ T27] audit: type=1326 audit(2000000717.048:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.590721][ T27] audit: type=1326 audit(2000000717.048:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.649888][ T27] audit: type=1326 audit(2000000717.048:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.674121][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.723281][T27323] comedi comedi4: commands at RT priority not supported in this driver [ 711.739646][ T27] audit: type=1326 audit(2000000717.048:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.812584][ T27] audit: type=1326 audit(2000000717.048:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 711.851433][T27325] program syz.0.9752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.922856][ T27] audit: type=1326 audit(2000000717.048:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27300 comm="syz.0.9740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb12039de59 code=0x7ffc0000 [ 712.283137][ T787] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 712.307301][T27315] loop4: detected capacity change from 0 to 32768 [ 712.341841][T27315] JBD2: Ignoring recovery information on journal [ 712.363220][T27346] netlink: 'syz.0.9762': attribute type 1 has an invalid length. [ 712.376336][T27346] netlink: 'syz.0.9762': attribute type 2 has an invalid length. [ 712.409018][T27315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 712.473374][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 712.480473][ T787] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 712.490015][ T787] usb 4-1: config 0 has no interface number 0 [ 712.501826][ T787] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 712.528788][ T787] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.558493][ T787] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 712.589437][ T787] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 712.608795][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.623212][T27315] (syz.4.9748,27315,0):ocfs2_mknod:502 ERROR: status = -31 [ 712.630546][T27315] (syz.4.9748,27315,0):ocfs2_mkdir:659 ERROR: status = -31 [ 712.643065][ T787] usb 4-1: Product: syz [ 712.647514][ T787] usb 4-1: Manufacturer: syz [ 712.663141][ T787] usb 4-1: SerialNumber: syz [ 712.704331][ T787] usb 4-1: config 0 descriptor?? [ 712.710354][T27333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.826137][T14464] ocfs2: Unmounting device (7,4) on (node local) [ 712.963346][ T787] usb 4-1: USB disconnect, device number 55 [ 713.217807][T27367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 713.673276][T27388] netlink: 'syz.3.9781': attribute type 49 has an invalid length. [ 713.826636][T27395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9785'. [ 713.836920][T27395] netlink: 'syz.4.9785': attribute type 1 has an invalid length. [ 713.845257][T27395] netlink: 'syz.4.9785': attribute type 2 has an invalid length. [ 713.854369][T27395] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9785'. [ 713.923922][T27388] ip6gretap0: entered promiscuous mode [ 713.929651][T27388] ip6gretap0: entered allmulticast mode [ 714.120205][T27402] loop4: detected capacity change from 0 to 4096 [ 714.174178][T27402] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 714.909582][T27434] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9801'. [ 715.043757][ T967] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 715.051568][T27439] loop4: detected capacity change from 0 to 256 [ 715.083601][ T5805] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 715.243852][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 715.257448][ T967] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 715.273065][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.282599][ T967] usb 4-1: Product: syz [ 715.287641][ T967] usb 4-1: Manufacturer: syz [ 715.295739][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 715.305669][ T967] usb 4-1: SerialNumber: syz [ 715.323891][ T967] usb 4-1: config 0 descriptor?? [ 715.334370][ T5805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.363066][ T5805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.401763][ T5805] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 715.413076][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.438113][ T5805] usb 2-1: Product: syz [ 715.442314][ T5805] usb 2-1: Manufacturer: syz [ 715.467474][ T5805] usb 2-1: SerialNumber: syz [ 715.503737][ T5805] usb 2-1: selecting invalid altsetting 1 [ 715.533699][ T5805] usb 2-1: unit 6 not found! [ 715.570142][ T967] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 715.575286][ T5805] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 715.618464][T27432] loop0: detected capacity change from 0 to 32768 [ 715.643689][T27432] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.9800 (27432) [ 715.690103][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.729181][T27432] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 715.750637][T27432] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 715.769305][ T967] usb write operation failed. (-71) [ 715.809340][T27432] BTRFS info (device loop0): enabling ssd optimizations [ 715.810856][ T967] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 715.832033][T27432] BTRFS info (device loop0): not using ssd optimizations [ 715.863119][T27432] BTRFS info (device loop0): turning off barriers [ 715.863718][ T967] dvbdev: DVB: registering new adapter (Terratec H7) [ 715.869660][T27432] BTRFS info (device loop0): use no compression [ 715.869684][T27432] BTRFS info (device loop0): using free space tree [ 715.878916][ T5805] usb 2-1: USB disconnect, device number 55 [ 715.924087][T27455] loop4: detected capacity change from 0 to 256 [ 715.932346][ T967] usb 4-1: media controller created [ 715.947837][ T967] usb read operation failed. (-71) [ 715.965611][ T967] usb write operation failed. (-71) [ 716.019417][ T967] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 716.094623][ T967] usb 4-1: USB disconnect, device number 56 [ 716.138357][ T5767] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 717.300749][T27477] loop0: detected capacity change from 0 to 32768 [ 717.636915][T27514] netlink: 'syz.0.9826': attribute type 1 has an invalid length. [ 717.662924][T27514] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9826'. [ 717.739561][T27516] loop3: detected capacity change from 0 to 512 [ 717.871891][T27516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.903335][T27516] ext4 filesystem being mounted at /2470/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.258735][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.492901][T27547] loop3: detected capacity change from 0 to 512 [ 718.935358][T27565] bridge7: entered promiscuous mode [ 719.210634][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 719.210649][ T27] audit: type=1326 audit(2000000725.238:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.313202][ T27] audit: type=1326 audit(2000000725.238:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.373839][ T27] audit: type=1326 audit(2000000725.298:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.445205][ T27] audit: type=1326 audit(2000000725.298:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.519158][ T27] audit: type=1326 audit(2000000725.308:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.610758][ T27] audit: type=1326 audit(2000000725.308:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.671132][ T27] audit: type=1326 audit(2000000725.308:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.770283][ T27] audit: type=1326 audit(2000000725.308:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 719.853451][ T27] audit: type=1326 audit(2000000725.308:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27575 comm="syz.1.9856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 720.074329][T27570] loop0: detected capacity change from 0 to 32768 [ 720.139566][T27570] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 720.285011][T27570] XFS (loop0): Ending clean mount [ 720.468475][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 720.663175][T27623] netlink: 'syz.0.9872': attribute type 1 has an invalid length. [ 720.694900][T27600] loop3: detected capacity change from 0 to 32768 [ 720.713402][T27623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9872'. [ 720.722341][T27623] netlink: 'syz.0.9872': attribute type 1 has an invalid length. [ 720.830971][T27600] JBD2: Ignoring recovery information on journal [ 721.056018][T27636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9879'. [ 721.110325][T27600] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 721.319132][T27600] (syz.3.9867,27600,0):ocfs2_mknod:502 ERROR: status = -31 [ 721.353878][T27600] (syz.3.9867,27600,0):ocfs2_mkdir:659 ERROR: status = -31 [ 721.593426][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 721.785773][T27661] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9888'. [ 721.956649][T27668] loop1: detected capacity change from 0 to 164 [ 722.021057][T27668] Unsupported NM flag settings (240) [ 722.174441][ T5805] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 722.359740][T27673] loop3: detected capacity change from 0 to 8192 [ 722.384352][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 722.398326][ T5805] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 722.420717][ T5805] usb 1-1: config 0 has no interface number 0 [ 722.456859][ T5805] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.498562][ T5805] usb 1-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 722.563135][ T5805] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 722.572246][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.613811][ T5805] usb 1-1: Product: syz [ 722.633550][ T5805] usb 1-1: Manufacturer: syz [ 722.638205][ T5805] usb 1-1: SerialNumber: syz [ 722.684057][ T5805] usb 1-1: config 0 descriptor?? [ 722.707932][ T5805] redrat3 1-1:0.83: Couldn't find all endpoints [ 722.869619][T27694] loop4: detected capacity change from 0 to 1024 [ 723.024419][ T5805] usb 1-1: USB disconnect, device number 64 [ 723.044134][T27694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.108055][T27708] IPv6: NLM_F_REPLACE set, but no existing node found! [ 723.254634][T14464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.277276][T27711] loop3: detected capacity change from 0 to 1024 [ 723.441533][T27718] loop4: detected capacity change from 0 to 512 [ 723.496945][T27718] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000103) [ 724.083130][ T787] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 724.224069][T27744] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9917'. [ 724.253637][T27744] openvswitch: netlink: Flow key attribute not present in set flow. [ 724.295779][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 724.314030][ T787] usb 4-1: not running at top speed; connect to a high speed hub [ 724.331825][ T787] usb 4-1: config 4 has an invalid interface number: 175 but max is 0 [ 724.340283][ T787] usb 4-1: config 4 has no interface number 0 [ 724.369487][ T787] usb 4-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.17 [ 724.390542][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.412077][ T787] usb 4-1: Product: syz [ 724.421188][ T787] usb 4-1: Manufacturer: syz [ 724.433681][ T787] usb 4-1: SerialNumber: syz [ 724.439876][T27750] loop1: detected capacity change from 0 to 512 [ 724.490226][T27729] loop0: detected capacity change from 0 to 32768 [ 724.493506][T27750] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000103) [ 724.513970][T27729] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 724.684372][ T787] usb 4-1: NDI device with a latency value of 1 [ 724.703488][ T787] ftdi_sio 4-1:4.175: FTDI USB Serial Device converter detected [ 724.731061][ T787] ftdi_sio ttyUSB0: unknown device type: 0xdc17 [ 724.732832][ T5954] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 724.780679][ T787] usb 4-1: USB disconnect, device number 57 [ 724.833282][ T787] ftdi_sio 4-1:4.175: device disconnected [ 725.419379][ T27] audit: type=1326 audit(2000000731.448:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.3.9934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 725.519698][ T27] audit: type=1326 audit(2000000731.448:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.3.9934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 725.641040][ T27] audit: type=1326 audit(2000000731.478:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.3.9934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 725.713300][ T27] audit: type=1326 audit(2000000731.478:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.3.9934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 726.158118][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9950'. [ 726.470733][T27828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9957'. [ 726.502311][T27828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9957'. [ 726.532258][T27828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9957'. [ 726.656724][T27833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9960'. [ 726.694951][T27838] netlink: 'syz.0.9962': attribute type 153 has an invalid length. [ 726.718134][T27838] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9962'. [ 727.033407][T27851] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 727.068618][T27851] bridge6: entered promiscuous mode [ 727.086922][T27851] bridge6: entered allmulticast mode [ 727.368285][T27866] gre1: entered promiscuous mode [ 727.706603][T27874] block device autoloading is deprecated and will be removed. [ 727.925010][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9986'. [ 728.303306][ T967] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 728.490715][ T967] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 728.503468][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.511494][ T967] usb 4-1: Product: syz [ 728.533390][ T967] usb 4-1: Manufacturer: syz [ 728.538035][ T967] usb 4-1: SerialNumber: syz [ 728.569354][ T967] r8152-cfgselector 4-1: config 0 descriptor?? [ 728.785525][ T27] audit: type=1326 audit(2000000734.818:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.1.9999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 728.850321][ T27] audit: type=1326 audit(2000000734.848:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.1.9999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 728.937407][ T27] audit: type=1326 audit(2000000734.848:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.1.9999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 729.016006][ T967] r8152-cfgselector 4-1: Unknown version 0x0000 [ 729.046637][ T27] audit: type=1326 audit(2000000734.848:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.1.9999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 729.052211][ T967] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 729.154398][ T27] audit: type=1326 audit(2000000734.848:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.1.9999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 729.181080][T27940] netlink: 'syz.0.10003': attribute type 1 has an invalid length. [ 729.206034][T27940] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10003'. [ 729.227612][T27943] loop1: detected capacity change from 0 to 8 [ 729.260652][ T27] audit: type=1326 audit(2000000734.848:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.1.9999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a0b9de59 code=0x7ffc0000 [ 729.283686][T27943] SQUASHFS error: Failed to read block 0x1ec: -5 [ 729.292776][T27943] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 730.130912][T27978] loop3: detected capacity change from 0 to 256 [ 730.172261][T27978] FAT-fs (loop3): Directory bread(block 1285) failed [ 730.184463][T27978] FAT-fs (loop3): Directory bread(block 1286) failed [ 730.213201][T27978] FAT-fs (loop3): Directory bread(block 1287) failed [ 730.220182][T27978] FAT-fs (loop3): Directory bread(block 1288) failed [ 730.291861][T27978] FAT-fs (loop3): Directory bread(block 1285) failed [ 730.301878][T27978] FAT-fs (loop3): Directory bread(block 1286) failed [ 730.351788][T27978] FAT-fs (loop3): Directory bread(block 1287) failed [ 730.368885][T27978] FAT-fs (loop3): Directory bread(block 1288) failed [ 730.397359][T27978] FAT-fs (loop3): Directory bread(block 1285) failed [ 730.405163][T27990] xt_CONNSECMARK: invalid mode: 129 [ 730.428407][T27978] FAT-fs (loop3): Directory bread(block 1286) failed [ 730.570060][T27997] loop0: detected capacity change from 0 to 16 [ 730.601295][T27997] erofs: (device loop0): mounted with root inode @ nid 36. [ 730.651966][T27997] cifs: Unknown parameter 'cache_strategy' [ 730.953196][ T967] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 731.078852][T28015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10034'. [ 731.173816][ T967] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.201127][ T967] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.215001][T28021] netlink: 'syz.0.10037': attribute type 7 has an invalid length. [ 731.224262][ T967] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 731.241605][T28021] netlink: 'syz.0.10037': attribute type 5 has an invalid length. [ 731.243399][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.265925][ T967] usb 2-1: Product: syz [ 731.270116][T28021] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10037'. [ 731.270129][ T967] usb 2-1: Manufacturer: syz [ 731.303653][ T967] usb 2-1: SerialNumber: syz [ 731.555330][ T967] usb 2-1: 0:1 : does not exist [ 731.560320][ T967] usb 2-1: unit 4 not found! [ 731.573185][ T967] usb 2-1: unit 51 not found! [ 731.626669][ T967] usb 2-1: USB disconnect, device number 56 [ 731.711247][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.911892][T28047] loop4: detected capacity change from 0 to 512 [ 731.987749][T28047] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.10049: casefold flag without casefold feature [ 732.066821][T28047] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.10049: couldn't read orphan inode 15 (err -117) [ 732.141834][T28047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 732.184487][T28047] ext4 filesystem being mounted at /1447/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 732.270343][T28047] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.10049: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 732.439831][T14464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 732.932562][T28085] loop4: detected capacity change from 0 to 8 [ 732.990488][T28085] SQUASHFS error: Failed to read block 0x1ec: -5 [ 733.048132][T28085] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 733.180045][T28069] loop3: detected capacity change from 0 to 32768 [ 733.262642][T28069] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 733.329952][T28069] XFS (loop3): Ending clean mount [ 733.406532][T28105] loop0: detected capacity change from 0 to 2048 [ 733.449507][T28105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.513135][T28110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 733.533104][T28105] EXT4-fs error (device loop0): ext4_find_extent:945: inode #2: comm syz.0.10074: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 733.613716][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 733.710701][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.933748][T28122] loop0: detected capacity change from 0 to 256 [ 733.961113][T28122] exfat: Deprecated parameter 'utf8' [ 734.021365][T28122] exfat: Deprecated parameter 'utf8' [ 734.117344][T28122] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 734.183258][T28129] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 734.987925][T28157] loop3: detected capacity change from 0 to 1024 [ 735.079208][T28160] TCP: TCP_TX_DELAY enabled [ 735.085713][T28157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 735.098071][T28157] ext4 filesystem being mounted at /2520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.119109][T28157] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.10096: corrupted xattr block 128: invalid size in ea xattr [ 735.296961][T28135] loop1: detected capacity change from 0 to 32768 [ 735.333393][T28135] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.10086 (28135) [ 735.382948][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 735.444807][T28135] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 735.477872][T28135] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 735.515926][T28135] BTRFS info (device loop1): enabling ssd optimizations [ 735.573797][T28135] BTRFS info (device loop1): not using ssd optimizations [ 735.607498][T28135] BTRFS info (device loop1): turning off barriers [ 735.632017][T28135] BTRFS info (device loop1): using free space tree [ 736.111417][T28215] misc userio: The device must be registered before sending interrupts [ 736.169474][ T5770] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 737.080996][T28252] loop4: detected capacity change from 0 to 128 [ 737.168769][T28252] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 737.235629][T28252] ext4 filesystem being mounted at /1466/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 737.343123][ T5805] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 737.445280][T14464] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 737.534768][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 737.582322][ T5805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.609887][ T5805] usb 1-1: config 0 has no interface number 0 [ 737.642417][ T5805] usb 1-1: config 0 interface 1 has no altsetting 0 [ 737.682072][ T5805] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 737.719706][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.738258][ T5805] usb 1-1: Product: syz [ 737.746147][ T5805] usb 1-1: Manufacturer: syz [ 737.750876][ T5805] usb 1-1: SerialNumber: syz [ 737.796609][ T5805] usb 1-1: config 0 descriptor?? [ 738.042430][ T5805] i2c-cp2615: probe of 1-1:0.1 failed with error -22 [ 738.102876][T28296] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 738.263158][ T787] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 738.302588][ T5805] usb 1-1: USB disconnect, device number 65 [ 738.380790][T28306] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 738.392755][T28306] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 738.413130][T28306] overlayfs: missing 'lowerdir' [ 738.471053][ T787] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 738.497191][ T787] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 738.508892][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.533421][ T787] usb 5-1: Product: syz [ 738.539188][ T787] usb 5-1: Manufacturer: syz [ 738.544297][ T787] usb 5-1: SerialNumber: syz [ 738.565935][ T787] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 738.613467][T28312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10148'. [ 738.749853][T28318] loop3: detected capacity change from 0 to 512 [ 738.765573][T28318] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 738.805714][T28320] netlink: 'syz.1.10152': attribute type 1 has an invalid length. [ 738.889340][T28318] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 739.014471][ T787] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 739.086687][ T787] usb 5-1: USB disconnect, device number 28 [ 739.160944][T28330] geneve1: entered allmulticast mode [ 739.943323][ T787] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 740.112293][T28372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10177'. [ 740.155398][ T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.183280][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.215766][ T787] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 740.225195][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.248148][ T787] usb 1-1: Product: syz [ 740.252374][ T787] usb 1-1: Manufacturer: syz [ 740.265475][ T787] usb 1-1: SerialNumber: syz [ 740.497049][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 740.497063][ T27] audit: type=1326 audit(2000000746.528:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28383 comm="syz.3.10183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 740.529196][ T787] usb 1-1: 0:1 : does not exist [ 740.543622][ T787] usb 1-1: unit 4 not found! [ 740.560694][ T787] usb 1-1: unit 51 not found! [ 740.593291][ T27] audit: type=1326 audit(2000000746.578:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28383 comm="syz.3.10183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 740.621343][ T787] usb 1-1: USB disconnect, device number 66 [ 740.680106][ T27] audit: type=1326 audit(2000000746.578:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28383 comm="syz.3.10183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 740.717622][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.781241][ T27] audit: type=1326 audit(2000000746.578:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28383 comm="syz.3.10183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 740.873430][ T27] audit: type=1326 audit(2000000746.578:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28383 comm="syz.3.10183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5899de59 code=0x7ffc0000 [ 741.599815][T28428] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 741.757341][T28436] loop1: detected capacity change from 0 to 256 [ 741.897384][T28436] FAT-fs (loop1): Directory bread(block 64) failed [ 741.908670][T28436] FAT-fs (loop1): Directory bread(block 65) failed [ 741.955995][T28436] FAT-fs (loop1): Directory bread(block 66) failed [ 741.962578][T28436] FAT-fs (loop1): Directory bread(block 67) failed [ 742.022193][T28436] FAT-fs (loop1): Directory bread(block 68) failed [ 742.048049][T28436] FAT-fs (loop1): Directory bread(block 69) failed [ 742.073454][T28436] FAT-fs (loop1): Directory bread(block 70) failed [ 742.080032][T28436] FAT-fs (loop1): Directory bread(block 71) failed [ 742.121883][T28436] FAT-fs (loop1): Directory bread(block 72) failed [ 742.133623][T28436] FAT-fs (loop1): Directory bread(block 73) failed [ 742.603329][T28466] netlink: 'syz.4.10223': attribute type 3 has an invalid length. [ 742.686569][T28469] loop1: detected capacity change from 0 to 512 [ 742.715752][T28469] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 742.937267][T28469] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 744.051447][T28528] netlink: 'syz.3.10254': attribute type 5 has an invalid length. [ 744.080393][T28528] netlink: 'syz.3.10254': attribute type 11 has an invalid length. [ 744.191942][T28534] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 744.316352][T28539] dlm: no locking on control device [ 744.938045][T28553] loop3: detected capacity change from 0 to 8192 [ 745.136897][T28553] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 745.290455][T28575] program syz.1.10278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 745.372201][T28578] netlink: 'syz.4.10281': attribute type 2 has an invalid length. [ 745.403317][T28578] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10281'. [ 745.517037][T28583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10282'. [ 745.563452][T28583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10282'. [ 745.575978][T28586] loop3: detected capacity change from 0 to 16 [ 745.617732][T28586] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 746.040442][T28605] loop0: detected capacity change from 0 to 1024 [ 746.137396][ T27] audit: type=1400 audit(2000000752.168:6462): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=28606 comm="syz.1.10294" [ 746.165097][T28605] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 746.199809][T28605] hfsplus: xattr searching failed [ 746.227609][T28605] syz.0.10293: attempt to access beyond end of device [ 746.227609][T28605] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 746.288198][T28605] Buffer I/O error on dev loop0, logical block 458752, async page read [ 746.307347][T28605] hfsplus: unable to mark blocks free: error -5 [ 746.329270][T28605] hfsplus: can't free extent [ 746.366868][T28613] openvswitch: netlink: Actions may not be safe on all matching packets [ 747.236704][T28642] netlink: 'syz.1.10310': attribute type 2 has an invalid length. [ 747.253210][T28642] netlink: 'syz.1.10310': attribute type 1 has an invalid length. [ 747.261301][T28642] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10310'. [ 747.309044][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.461294][T28596] loop4: detected capacity change from 0 to 65536 [ 747.587653][T28596] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 747.697789][T28596] XFS (loop4): Ending clean mount [ 747.863064][ T42] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 747.938334][T14464] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 748.111658][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.130729][ T42] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 748.153091][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 748.168859][ T42] usb 4-1: string descriptor 0 read error: -22 [ 748.175505][ T42] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 748.187938][T28676] loop0: detected capacity change from 0 to 64 [ 748.193050][ T42] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 748.215733][ T42] usb 4-1: 0:2 : does not exist [ 748.253957][ T42] usb-storage 4-1:1.1: USB Mass Storage device detected [ 748.431131][T28680] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10325'. [ 748.629579][ T42] us122l: couldn't allocate write buffer [ 748.653719][ T42] snd-usb-us122l: probe of 4-1:1.1 failed with error -22 [ 748.689144][ T42] usb 4-1: USB disconnect, device number 59 [ 749.832565][T28718] loop0: detected capacity change from 0 to 4096 [ 749.881162][T28724] loop3: detected capacity change from 0 to 2048 [ 749.889084][T28718] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 749.930633][T28727] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.753256][T28752] loop4: detected capacity change from 0 to 64 [ 750.758761][T28754] devpts: called with bogus options [ 751.004895][T28761] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10364'. [ 751.300796][T28772] ceph: No source [ 751.726948][T28791] C: renamed from team_slave_0 (while UP) [ 751.753236][T28791] netlink: 'syz.1.10379': attribute type 3 has an invalid length. [ 751.785835][T28791] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10379'. [ 751.803491][T28791] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 752.245968][T28782] loop3: detected capacity change from 0 to 32768 [ 752.306209][T28782] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 752.553447][T28782] XFS (loop3): Ending clean mount [ 752.589987][T28827] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 752.608055][T28782] XFS (loop3): Quotacheck needed: Please wait. [ 752.763660][T28782] XFS (loop3): Quotacheck: Done. [ 752.883581][T28838] loop1: detected capacity change from 0 to 512 [ 752.996626][ T5773] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 753.037463][T28838] syz.1.10396: attempt to access beyond end of device [ 753.037463][T28838] loop1: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 753.126954][T28838] syz.1.10396: attempt to access beyond end of device [ 753.126954][T28838] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 753.173420][ T27] audit: type=1800 audit(2000000759.208:6463): pid=28838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10396" name="file2" dev="loop1" ino=1048707 res=0 errno=0 [ 753.322153][T28846] loop4: detected capacity change from 0 to 4096 [ 753.324590][T28848] loop0: detected capacity change from 0 to 512 [ 753.346268][T28846] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 753.465491][T28848] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 753.487062][T28848] EXT4-fs (loop0): 1 truncate cleaned up [ 753.494587][T28848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.520357][T28848] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 753.530790][T28846] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 753.579525][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.713377][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10405'. [ 754.541235][T28888] netlink: 'syz.3.10419': attribute type 8 has an invalid length. [ 754.593428][T28892] netlink: 'syz.4.10421': attribute type 4 has an invalid length. [ 754.601373][T28892] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10421'. [ 755.116267][T28879] loop1: detected capacity change from 0 to 32768 [ 755.145381][T28879] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 755.329152][ T5952] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 755.443155][ T5099] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 755.654749][ T5099] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.683576][ T5099] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.727666][ T5099] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 755.756634][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 755.796497][ T5099] usb 1-1: SerialNumber: syz [ 755.828815][ T5099] usb 1-1: 0:2 : does not exist [ 756.158030][T28939] netlink: 'syz.4.10443': attribute type 12 has an invalid length. [ 756.193302][T28939] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 756.324702][ T5099] usb 1-1: USB disconnect, device number 67 [ 756.390948][T28946] loop1: detected capacity change from 0 to 64 [ 756.474872][T28951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10449'. [ 756.681446][T28960] loop1: detected capacity change from 0 to 1024 [ 756.700441][T28960] EXT4-fs: Ignoring removed mblk_io_submit option [ 756.739926][T28960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 756.762681][T28960] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 756.807761][T28960] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #11: comm syz.1.10451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 756.899451][T28960] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.10451: couldn't read orphan inode 11 (err -117) [ 756.989340][T28960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.205331][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.310443][T28983] loop3: detected capacity change from 0 to 512 [ 757.369965][T28983] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 757.384987][T28983] EXT4-fs (loop3): 1 truncate cleaned up [ 757.428332][T28983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.564437][T28983] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 757.776218][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.043325][ T42] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 758.290103][ T42] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 758.309796][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.334444][ T42] usb 5-1: Product: syz [ 758.338665][ T42] usb 5-1: Manufacturer: syz [ 758.376149][ T42] usb 5-1: SerialNumber: syz [ 758.400483][ T42] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 758.456167][ T967] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 758.888022][ T5805] usb 5-1: USB disconnect, device number 29 [ 759.543811][ T967] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 759.550887][ T967] ath9k_htc: Failed to initialize the device [ 759.574657][ T5805] usb 5-1: ath9k_htc: USB layer deinitialized [ 759.593515][T29022] loop1: detected capacity change from 0 to 65536 [ 759.674093][T29022] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 759.792581][T29022] XFS (loop1): Ending clean mount [ 759.995128][ T5770] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 760.459013][T29072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10501'. [ 760.499517][T29072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10501'. [ 760.523270][T29072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10501'. [ 760.809204][T29086] loop4: detected capacity change from 0 to 512 [ 760.911011][T29086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.954248][T29093] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 761.005256][T29086] ext4 filesystem being mounted at /1549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.078570][T29086] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10507: corrupted xattr block 33: overlapping e_value [ 761.110926][T29086] EXT4-fs (loop4): Remounting filesystem read-only [ 761.118226][ T27] audit: type=1800 audit(2000000767.158:6464): pid=29086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10507" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 761.182546][T29102] loop3: detected capacity change from 0 to 256 [ 761.214422][T29102] exfat: Deprecated parameter 'namecase' [ 761.240920][T29102] exfat: Deprecated parameter 'namecase' [ 761.256394][T14464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.261406][T29102] exfat: Deprecated parameter 'utf8' [ 761.297295][T29102] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xa814ff10, utbl_chksum : 0xe619d30d) [ 761.317083][T29106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:bb) already exists on: batadv_slave_0 [ 761.373251][T29106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.403744][T29106] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 761.431608][T29109] loop0: detected capacity change from 0 to 512 [ 761.477170][T29109] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 761.532889][T29109] EXT4-fs (loop0): Remounting filesystem read-only [ 761.593238][T29109] EXT4-fs (loop0): 1 truncate cleaned up [ 761.600317][T29109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.681763][T29117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10519'. [ 761.710916][T29115] loop4: detected capacity change from 0 to 4096 [ 761.755787][T29115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.880085][T14464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.894153][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.635647][T29154] netlink: 'syz.1.10536': attribute type 1 has an invalid length. [ 763.083173][ T23] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 763.159101][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10549'. [ 763.283150][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 763.299924][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.333068][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 763.361811][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 763.403031][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 763.441134][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 763.463129][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.479165][T29186] loop4: detected capacity change from 0 to 4096 [ 763.484603][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 763.498027][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.508825][ T23] usb 2-1: config 0 descriptor?? [ 763.528416][T29186] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 763.544378][T29186] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 763.559453][T29186] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 763.639383][T29186] ntfs: volume version 3.1. [ 763.651996][T29186] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 763.661833][T29186] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 763.676324][T29186] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 763.686677][T29186] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 763.687848][ T23] rc_core: IR keymap rc-hauppauge not found [ 763.697901][ T5805] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 763.728334][ T23] Registered IR keymap rc-empty [ 763.735150][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 763.767166][T29186] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is an extent inode! [ 763.776977][T29186] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 763.782532][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 763.844623][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 763.881078][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 763.883588][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 763.926872][ T5805] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 763.960838][ C1] mceusb 2-1:0.0: Error: urb status = -75 [ 763.967775][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 763.972019][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.003086][ T5805] usb 1-1: Product: syz [ 764.007317][ T5805] usb 1-1: Manufacturer: syz [ 764.021088][ T5805] usb 1-1: SerialNumber: syz [ 764.022913][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.043768][ T5805] usb 1-1: config 0 descriptor?? [ 764.070819][ T5805] gspca_main: spca508-2.14.0 probing 041e:4018 [ 764.093971][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.154098][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.158678][T29202] gre1: entered promiscuous mode [ 764.203132][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.253686][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.324209][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.363158][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.393136][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.433199][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 764.479357][ T5805] gspca_spca508: reg_read err -71 [ 764.492211][ T5805] gspca_spca508: reg_read err -71 [ 764.498795][ T23] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 764.504099][ T5805] gspca_spca508: reg_read err -71 [ 764.512813][ T5805] gspca_spca508: reg_read err -71 [ 764.522953][ T5805] gspca_spca508: reg write: error -71 [ 764.528509][ T23] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 764.528521][ T5805] spca508: probe of 1-1:0.0 failed with error -71 [ 764.540065][ T5805] usb 1-1: USB disconnect, device number 68 [ 764.587576][ T23] usb 2-1: USB disconnect, device number 57 [ 764.670517][T29204] loop4: detected capacity change from 0 to 32768 [ 764.710367][T29204] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 764.809249][T29212] netlink: 'syz.4.10566': attribute type 1 has an invalid length. [ 764.817367][T29212] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10566'. [ 764.827609][ T5762] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 764.973312][ T5099] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 765.173975][ T5099] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 765.197149][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.224161][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.259182][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.287867][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.314377][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.345280][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.411781][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.434451][ T5099] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 765.461897][ T5099] usb 4-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 765.487299][T29232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10576'. [ 765.503087][ T5099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.511989][T29228] loop1: detected capacity change from 0 to 4096 [ 765.512883][T29232] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 765.534267][T29228] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 765.545574][ T5099] pwc: Logitech QuickCam detected (reserved ID). [ 765.552047][ T5099] pwc: Warning: more than 1 configuration available. [ 765.627568][T29228] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 765.660971][T29228] ntfs3: loop1: mft corrupted [ 765.666182][T29228] ntfs3: loop1: Failed to load $Extend (-22). [ 765.672299][T29228] ntfs3: loop1: Failed to initialize $Extend. [ 765.999044][ T5099] pwc: send_video_command error -71 [ 766.022169][ T5099] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 766.037627][ T5099] Philips webcam: probe of 4-1:250.0 failed with error -71 [ 766.074793][ T5099] usb 4-1: USB disconnect, device number 60 [ 766.152410][T29250] netlink: 'syz.1.10585': attribute type 29 has an invalid length. [ 766.178499][T29250] netlink: 'syz.1.10585': attribute type 29 has an invalid length. [ 766.260777][T29254] loop4: detected capacity change from 0 to 512 [ 766.328407][T29254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.346320][T29259] loop0: detected capacity change from 0 to 1024 [ 766.368967][T29254] ext4 filesystem being mounted at /1571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.491252][T29265] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10591'. [ 766.505687][T29265] ..0·: renamed from hsr0 (while UP) [ 766.517634][T29265] ..0·: entered allmulticast mode [ 766.528279][T29265] hsr_slave_0: entered allmulticast mode [ 766.534408][T29265] hsr_slave_1: entered allmulticast mode [ 766.540880][T29265] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 766.548768][T14464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.698367][T29267] overlayfs: conflicting options: metacopy=off,verity=on [ 767.697649][T29310] netlink: 'syz.0.10615': attribute type 1 has an invalid length. [ 768.610449][T29353] loop4: detected capacity change from 0 to 128 [ 768.658650][T29353] ufs: You didn't specify the type of your ufs filesystem [ 768.658650][T29353] [ 768.658650][T29353] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 768.658650][T29353] [ 768.658650][T29353] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 768.721779][T29353] ufs: ufstype=old is supported read-only [ 768.756264][T29353] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 768.933238][ T5805] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 769.123219][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 769.178365][ T5805] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 769.197874][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.213167][ T5805] usb 1-1: Product: syz [ 769.217373][ T5805] usb 1-1: Manufacturer: syz [ 769.234938][ T5805] usb 1-1: SerialNumber: syz [ 769.249182][ T5805] r8152-cfgselector 1-1: config 0 descriptor?? [ 769.407337][T29383] loop1: detected capacity change from 0 to 164 [ 769.456911][T29383] rock: directory entry would overflow storage [ 769.486935][T29383] rock: sig=0x4543, size=28, remaining=18 [ 769.691132][ T5805] r8152-cfgselector 1-1: Unknown version 0x0000 [ 769.719449][ T5805] r8152-cfgselector 1-1: USB disconnect, device number 69 [ 769.847993][T29396] PM: Enabling pm_trace changes system date and time during resume. [ 769.847993][T29396] PM: Correct system time has to be restored manually after resume. [ 769.876392][T29400] loop3: detected capacity change from 0 to 256 [ 770.393254][ T5099] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 770.461087][T29422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10669'. [ 770.617128][ T5099] usb 5-1: Using ep0 maxpacket: 16 [ 770.629624][ T5099] usb 5-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 770.645944][ T5099] usb 5-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 770.667985][ T5099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 770.678600][ T5099] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 770.691525][ T5099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.708665][ T5099] usb 5-1: Product: syz [ 770.715709][ T5099] usb 5-1: Manufacturer: syz [ 770.720401][ T5099] usb 5-1: SerialNumber: syz [ 770.732818][ T5099] usb 5-1: config 0 descriptor?? [ 770.750489][ T5099] usb 5-1: cannot find UAC_HEADER [ 770.796240][ T5099] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 770.805154][T29437] loop1: detected capacity change from 0 to 16 [ 770.846142][T29437] erofs: (device loop1): mounted with root inode @ nid 36. [ 770.849593][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.871930][T29437] syz.1.10676: attempt to access beyond end of device [ 770.871930][T29437] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 770.925854][T29437] syz.1.10676: attempt to access beyond end of device [ 770.925854][T29437] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 770.981457][T29437] ================================================================== [ 770.989558][T29437] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x3ab/0x4a0 [ 770.997953][T29437] Read of size 4096 at addr ffff8880313b6000 by task syz.1.10676/29437 [ 771.006245][T29437] [ 771.008590][T29437] CPU: 1 PID: 29437 Comm: syz.1.10676 Not tainted syzkaller #0 [ 771.016129][T29437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 771.026178][T29437] Call Trace: [ 771.029567][T29437] [ 771.032527][T29437] dump_stack_lvl+0x18c/0x250 [ 771.037227][T29437] ? __lock_acquire+0x7d80/0x7d80 [ 771.042255][T29437] ? show_regs_print_info+0x20/0x20 [ 771.047475][T29437] ? load_image+0x420/0x420 [ 771.052022][T29437] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 771.057485][T29437] ? __virt_addr_valid+0x10c/0x380 [ 771.062598][T29437] ? __virt_addr_valid+0x10c/0x380 [ 771.067709][T29437] ? __virt_addr_valid+0x10c/0x380 [ 771.072819][T29437] ? __virt_addr_valid+0x10c/0x380 [ 771.077931][T29437] print_report+0xa8/0x210 [ 771.082349][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 771.087986][T29437] kasan_report+0x117/0x150 [ 771.092497][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 771.098136][T29437] kasan_check_range+0x241/0x290 [ 771.103077][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 771.108713][T29437] __asan_memcpy+0x29/0x70 [ 771.113316][T29437] z_erofs_transform_plain+0x3ab/0x4a0 [ 771.118781][T29437] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 771.124505][T29437] z_erofs_decompress_queue+0x1705/0x2670 [ 771.130250][T29437] ? z_erofs_onlinepage_end+0x360/0x360 [ 771.135885][T29437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 771.141863][T29437] ? lock_chain_count+0x20/0x20 [ 771.146719][T29437] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 771.152957][T29437] ? erofs_map_blocks+0x17b0/0x17b0 [ 771.158155][T29437] ? folio_unlock+0x118/0x2f0 [ 771.162821][T29437] z_erofs_runqueue+0x1993/0x1b20 [ 771.167858][T29437] ? z_erofs_do_read_page+0x3500/0x3500 [ 771.173406][T29437] ? __lock_acquire+0x7d80/0x7d80 [ 771.178435][T29437] ? put_page+0xea/0x260 [ 771.182673][T29437] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 771.188482][T29437] z_erofs_read_folio+0x321/0x5c0 [ 771.193512][T29437] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 771.198886][T29437] ? up_read+0x20/0x20 [ 771.202949][T29437] ? __might_sleep+0xe0/0xe0 [ 771.207536][T29437] ? filemap_add_folio+0x190/0x3d0 [ 771.212650][T29437] filemap_read_folio+0x16b/0x790 [ 771.217672][T29437] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 771.223044][T29437] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 771.228603][T29437] ? down_read+0x1ac/0x2e0 [ 771.233024][T29437] filemap_get_pages+0x13ac/0x1f10 [ 771.238138][T29437] ? filemap_read+0xf20/0xf20 [ 771.242809][T29437] ? __might_sleep+0xe0/0xe0 [ 771.247415][T29437] ? folio_mark_accessed+0x203/0x14a0 [ 771.252795][T29437] ? folio_activate_fn+0x2000/0x2000 [ 771.258083][T29437] ? page_copy_sane+0x4e/0x270 [ 771.262844][T29437] filemap_read+0x409/0xf20 [ 771.267369][T29437] ? filemap_get_folios_tag+0x840/0x840 [ 771.272922][T29437] ? generic_file_read_iter+0x9b/0x550 [ 771.278377][T29437] ? iov_iter_kvec+0xd4/0x1b0 [ 771.283074][T29437] __kernel_read+0x2e5/0x730 [ 771.287668][T29437] ? rw_verify_area+0x1b0/0x1b0 [ 771.292525][T29437] integrity_kernel_read+0x8a/0xd0 [ 771.297668][T29437] ? integrity_inode_free+0x170/0x170 [ 771.303045][T29437] ? _sha256_update+0x127/0x1e0 [ 771.307892][T29437] ? sha256_transform_avx+0xcc0/0xcc0 [ 771.313259][T29437] ima_calc_file_hash+0xb1f/0x1960 [ 771.318369][T29437] ? deref_stack_reg+0x1ab/0x230 [ 771.323299][T29437] ? is_bpf_text_address+0x26/0x2a0 [ 771.328507][T29437] ? look_up_lock_class+0x75/0x140 [ 771.333628][T29437] ? ima_alloc_tfm+0x2f0/0x2f0 [ 771.338382][T29437] ? register_lock_class+0xc4/0x8a0 [ 771.343604][T29437] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 771.349231][T29437] ? generic_fillattr+0x2b5/0x690 [ 771.354251][T29437] ? __asan_memcpy+0x40/0x70 [ 771.358838][T29437] ? generic_fillattr+0x451/0x690 [ 771.363861][T29437] ima_collect_measurement+0x4d4/0xa30 [ 771.369335][T29437] ? ima_get_action+0xb0/0xb0 [ 771.374018][T29437] ? erofs_getxattr+0x13f/0x450 [ 771.378872][T29437] ? rcu_is_watching+0x15/0xb0 [ 771.383651][T29437] ? ima_get_hash_algo+0x91/0x4a0 [ 771.388669][T29437] ? ima_get_cache_status+0xd0/0xd0 [ 771.393864][T29437] process_measurement+0x123a/0x1d50 [ 771.399149][T29437] ? ima_file_mmap+0x1d0/0x1d0 [ 771.403906][T29437] ? tomoyo_check_open_permission+0x384/0x460 [ 771.409982][T29437] ? tomoyo_check_open_permission+0x1cf/0x460 [ 771.416046][T29437] ? tomoyo_check_path_number_acl+0x280/0x280 [ 771.422111][T29437] ? get_cached_acl+0x4fb/0x540 [ 771.426977][T29437] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 771.433300][T29437] ima_file_check+0xcc/0x110 [ 771.437885][T29437] ? ima_bprm_check+0x200/0x200 [ 771.442733][T29437] path_openat+0x2910/0x3270 [ 771.447326][T29437] ? do_filp_open+0x430/0x430 [ 771.451999][T29437] do_filp_open+0x1f2/0x430 [ 771.456498][T29437] ? vfs_tmpfile+0x480/0x480 [ 771.461089][T29437] ? _raw_spin_unlock+0x28/0x40 [ 771.465937][T29437] ? alloc_fd+0x590/0x640 [ 771.470264][T29437] do_sys_openat2+0x134/0x1d0 [ 771.474939][T29437] ? do_sys_open+0xe0/0xe0 [ 771.479351][T29437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 771.485329][T29437] ? lock_chain_count+0x20/0x20 [ 771.490174][T29437] __x64_sys_openat+0x139/0x160 [ 771.495139][T29437] do_syscall_64+0x55/0xb0 [ 771.499554][T29437] ? clear_bhb_loop+0x40/0x90 [ 771.504237][T29437] ? clear_bhb_loop+0x40/0x90 [ 771.508905][T29437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.514797][T29437] RIP: 0033:0x7fd3a0b9de59 [ 771.519239][T29437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.538839][T29437] RSP: 002b:00007fd3a1ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 771.547246][T29437] RAX: ffffffffffffffda RBX: 00007fd3a0e25fa0 RCX: 00007fd3a0b9de59 [ 771.555215][T29437] RDX: 00000000000c8000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 771.563278][T29437] RBP: 00007fd3a0c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 771.571238][T29437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.579198][T29437] R13: 00007fd3a0e26038 R14: 00007fd3a0e25fa0 R15: 00007ffc423deb58 [ 771.587168][T29437] [ 771.590192][T29437] [ 771.592591][T29437] Allocated by task 5870: [ 771.596985][T29437] kasan_set_track+0x4e/0x70 [ 771.601571][T29437] __kasan_kmalloc+0x8f/0xa0 [ 771.606153][T29437] __kmalloc_node+0xb6/0x240 [ 771.610739][T29437] memcg_alloc_slab_cgroups+0x85/0x120 [ 771.616192][T29437] slab_post_alloc_hook+0xec/0x4d0 [ 771.621309][T29437] kmem_cache_alloc_lru+0x175/0x2b0 [ 771.626504][T29437] shmem_alloc_inode+0x28/0x40 [ 771.631274][T29437] new_inode_pseudo+0x63/0x1d0 [ 771.636037][T29437] new_inode+0x22/0x1d0 [ 771.640183][T29437] shmem_get_inode+0x34d/0xcd0 [ 771.644937][T29437] shmem_mknod+0x5f/0x1c0 [ 771.649258][T29437] shmem_mkdir+0x33/0x60 [ 771.653494][T29437] vfs_mkdir+0x2a5/0x470 [ 771.657732][T29437] do_mkdirat+0x1dc/0x450 [ 771.662059][T29437] __x64_sys_mkdirat+0x89/0xa0 [ 771.666813][T29437] do_syscall_64+0x55/0xb0 [ 771.671225][T29437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.677114][T29437] [ 771.679429][T29437] The buggy address belongs to the object at ffff8880313b6000 [ 771.679429][T29437] which belongs to the cache kmalloc-192 of size 192 [ 771.693476][T29437] The buggy address is located 0 bytes inside of [ 771.693476][T29437] allocated 152-byte region [ffff8880313b6000, ffff8880313b6098) [ 771.707435][T29437] [ 771.709746][T29437] The buggy address belongs to the physical page: [ 771.716161][T29437] page:ffffea0000c4ed80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x313b6 [ 771.728141][T29437] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 771.735681][T29437] page_type: 0xffffffff() [ 771.740102][T29437] raw: 00fff00000000800 ffff888017c41a00 ffffea000063ff00 dead000000000004 [ 771.748676][T29437] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 771.757245][T29437] page dumped because: kasan: bad access detected [ 771.763657][T29437] page_owner tracks the page as allocated [ 771.769357][T29437] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5870, tgid 5869 (syz.1.22), ts 71673846068, free_ts 71671157730 [ 771.787324][T29437] post_alloc_hook+0x1c1/0x200 [ 771.792090][T29437] get_page_from_freelist+0x2181/0x22a0 [ 771.797625][T29437] __alloc_pages+0x1f0/0x460 [ 771.802210][T29437] alloc_slab_page+0x4f/0x180 [ 771.806894][T29437] new_slab+0x87/0x2d0 [ 771.810975][T29437] ___slab_alloc+0xc5c/0x12f0 [ 771.815651][T29437] __kmem_cache_alloc_node+0x11f/0x250 [ 771.821113][T29437] __kmalloc_node+0xa6/0x240 [ 771.825706][T29437] memcg_alloc_slab_cgroups+0x85/0x120 [ 771.831199][T29437] slab_post_alloc_hook+0xec/0x4d0 [ 771.836354][T29437] kmem_cache_alloc_lru+0x175/0x2b0 [ 771.841565][T29437] shmem_alloc_inode+0x28/0x40 [ 771.846416][T29437] new_inode_pseudo+0x63/0x1d0 [ 771.851175][T29437] new_inode+0x22/0x1d0 [ 771.855322][T29437] shmem_get_inode+0x34d/0xcd0 [ 771.860079][T29437] shmem_mknod+0x5f/0x1c0 [ 771.864403][T29437] page last free stack trace: [ 771.869063][T29437] free_unref_page_prepare+0x7d7/0x8f0 [ 771.874519][T29437] free_unref_page+0x32/0x2e0 [ 771.879192][T29437] __unfreeze_partials+0x1cf/0x210 [ 771.884297][T29437] put_cpu_partial+0x17c/0x250 [ 771.889050][T29437] __slab_free+0x319/0x400 [ 771.893454][T29437] qlist_free_all+0x75/0xd0 [ 771.897950][T29437] kasan_quarantine_reduce+0x143/0x160 [ 771.903402][T29437] __kasan_slab_alloc+0x22/0x80 [ 771.908242][T29437] slab_post_alloc_hook+0x6a/0x4d0 [ 771.913365][T29437] __kmem_cache_alloc_node+0x194/0x250 [ 771.918818][T29437] __kmalloc+0xa7/0x240 [ 771.922966][T29437] tomoyo_realpath_from_path+0xe6/0x5c0 [ 771.928543][T29437] tomoyo_path_perm+0x282/0x560 [ 771.933389][T29437] security_inode_getattr+0xd3/0x120 [ 771.938674][T29437] __x64_sys_newfstat+0x12c/0x250 [ 771.943712][T29437] do_syscall_64+0x55/0xb0 [ 771.948122][T29437] [ 771.950430][T29437] Memory state around the buggy address: [ 771.956049][T29437] ffff8880313b5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 771.964098][T29437] ffff8880313b6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 771.972142][T29437] >ffff8880313b6080: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 771.980183][T29437] ^ [ 771.985017][T29437] ffff8880313b6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 771.993097][T29437] ffff8880313b6180: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 772.001151][T29437] ================================================================== [ 772.053500][T29437] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 772.060739][T29437] CPU: 0 PID: 29437 Comm: syz.1.10676 Not tainted syzkaller #0 [ 772.068327][T29437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.078374][T29437] Call Trace: [ 772.081645][T29437] [ 772.084568][T29437] dump_stack_lvl+0x18c/0x250 [ 772.089343][T29437] ? show_regs_print_info+0x20/0x20 [ 772.094545][T29437] ? load_image+0x420/0x420 [ 772.099045][T29437] panic+0x2ca/0x720 [ 772.102935][T29437] ? bpf_jit_dump+0xd0/0xd0 [ 772.107435][T29437] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 772.113412][T29437] ? _raw_spin_unlock+0x40/0x40 [ 772.118259][T29437] ? print_memory_metadata+0x314/0x400 [ 772.123721][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 772.129352][T29437] check_panic_on_warn+0x84/0xa0 [ 772.134285][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 772.139914][T29437] end_report+0x6f/0x130 [ 772.144238][T29437] kasan_report+0x128/0x150 [ 772.148736][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 772.154369][T29437] kasan_check_range+0x241/0x290 [ 772.159301][T29437] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 772.164932][T29437] __asan_memcpy+0x29/0x70 [ 772.169343][T29437] z_erofs_transform_plain+0x3ab/0x4a0 [ 772.174803][T29437] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 772.180516][T29437] z_erofs_decompress_queue+0x1705/0x2670 [ 772.186248][T29437] ? z_erofs_onlinepage_end+0x360/0x360 [ 772.191808][T29437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 772.197783][T29437] ? lock_chain_count+0x20/0x20 [ 772.202723][T29437] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 772.208883][T29437] ? erofs_map_blocks+0x17b0/0x17b0 [ 772.214078][T29437] ? folio_unlock+0x118/0x2f0 [ 772.218751][T29437] z_erofs_runqueue+0x1993/0x1b20 [ 772.223781][T29437] ? z_erofs_do_read_page+0x3500/0x3500 [ 772.229324][T29437] ? __lock_acquire+0x7d80/0x7d80 [ 772.234351][T29437] ? put_page+0xea/0x260 [ 772.238591][T29437] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 772.244483][T29437] z_erofs_read_folio+0x321/0x5c0 [ 772.249508][T29437] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 772.254888][T29437] ? up_read+0x20/0x20 [ 772.258945][T29437] ? __might_sleep+0xe0/0xe0 [ 772.263529][T29437] ? filemap_add_folio+0x190/0x3d0 [ 772.268634][T29437] filemap_read_folio+0x16b/0x790 [ 772.273659][T29437] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 772.279031][T29437] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 772.284573][T29437] ? down_read+0x1ac/0x2e0 [ 772.288980][T29437] filemap_get_pages+0x13ac/0x1f10 [ 772.294110][T29437] ? filemap_read+0xf20/0xf20 [ 772.298781][T29437] ? __might_sleep+0xe0/0xe0 [ 772.303374][T29437] ? folio_mark_accessed+0x203/0x14a0 [ 772.308738][T29437] ? folio_activate_fn+0x2000/0x2000 [ 772.314019][T29437] ? page_copy_sane+0x4e/0x270 [ 772.319403][T29437] filemap_read+0x409/0xf20 [ 772.323922][T29437] ? filemap_get_folios_tag+0x840/0x840 [ 772.329479][T29437] ? generic_file_read_iter+0x9b/0x550 [ 772.334934][T29437] ? iov_iter_kvec+0xd4/0x1b0 [ 772.339614][T29437] __kernel_read+0x2e5/0x730 [ 772.344224][T29437] ? rw_verify_area+0x1b0/0x1b0 [ 772.349082][T29437] integrity_kernel_read+0x8a/0xd0 [ 772.354196][T29437] ? integrity_inode_free+0x170/0x170 [ 772.359571][T29437] ? _sha256_update+0x127/0x1e0 [ 772.364429][T29437] ? sha256_transform_avx+0xcc0/0xcc0 [ 772.369798][T29437] ima_calc_file_hash+0xb1f/0x1960 [ 772.375001][T29437] ? deref_stack_reg+0x1ab/0x230 [ 772.379931][T29437] ? is_bpf_text_address+0x26/0x2a0 [ 772.385122][T29437] ? look_up_lock_class+0x75/0x140 [ 772.390236][T29437] ? ima_alloc_tfm+0x2f0/0x2f0 [ 772.394992][T29437] ? register_lock_class+0xc4/0x8a0 [ 772.400198][T29437] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 772.405840][T29437] ? generic_fillattr+0x2b5/0x690 [ 772.410869][T29437] ? __asan_memcpy+0x40/0x70 [ 772.415462][T29437] ? generic_fillattr+0x451/0x690 [ 772.420501][T29437] ima_collect_measurement+0x4d4/0xa30 [ 772.425972][T29437] ? ima_get_action+0xb0/0xb0 [ 772.430645][T29437] ? erofs_getxattr+0x13f/0x450 [ 772.435503][T29437] ? rcu_is_watching+0x15/0xb0 [ 772.440284][T29437] ? ima_get_hash_algo+0x91/0x4a0 [ 772.445392][T29437] ? ima_get_cache_status+0xd0/0xd0 [ 772.450606][T29437] process_measurement+0x123a/0x1d50 [ 772.455987][T29437] ? ima_file_mmap+0x1d0/0x1d0 [ 772.460920][T29437] ? tomoyo_check_open_permission+0x384/0x460 [ 772.466986][T29437] ? tomoyo_check_open_permission+0x1cf/0x460 [ 772.473065][T29437] ? tomoyo_check_path_number_acl+0x280/0x280 [ 772.479313][T29437] ? get_cached_acl+0x4fb/0x540 [ 772.484198][T29437] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 772.490351][T29437] ima_file_check+0xcc/0x110 [ 772.494947][T29437] ? ima_bprm_check+0x200/0x200 [ 772.499799][T29437] path_openat+0x2910/0x3270 [ 772.504397][T29437] ? do_filp_open+0x430/0x430 [ 772.509073][T29437] do_filp_open+0x1f2/0x430 [ 772.513573][T29437] ? vfs_tmpfile+0x480/0x480 [ 772.518166][T29437] ? _raw_spin_unlock+0x28/0x40 [ 772.523021][T29437] ? alloc_fd+0x590/0x640 [ 772.527355][T29437] do_sys_openat2+0x134/0x1d0 [ 772.532032][T29437] ? do_sys_open+0xe0/0xe0 [ 772.536448][T29437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 772.542424][T29437] ? lock_chain_count+0x20/0x20 [ 772.547273][T29437] __x64_sys_openat+0x139/0x160 [ 772.552131][T29437] do_syscall_64+0x55/0xb0 [ 772.556549][T29437] ? clear_bhb_loop+0x40/0x90 [ 772.561222][T29437] ? clear_bhb_loop+0x40/0x90 [ 772.565893][T29437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.571793][T29437] RIP: 0033:0x7fd3a0b9de59 [ 772.576202][T29437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.595984][T29437] RSP: 002b:00007fd3a1ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 772.604407][T29437] RAX: ffffffffffffffda RBX: 00007fd3a0e25fa0 RCX: 00007fd3a0b9de59 [ 772.612474][T29437] RDX: 00000000000c8000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 772.620445][T29437] RBP: 00007fd3a0c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 772.628414][T29437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.636403][T29437] R13: 00007fd3a0e26038 R14: 00007fd3a0e25fa0 R15: 00007ffc423deb58 [ 772.644393][T29437] [ 772.647649][T29437] Kernel Offset: disabled [ 772.651963][T29437] Rebooting in 86400 seconds..