last executing test programs: 11m43.550346018s ago: executing program 1 (id=1771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6032, 0x3021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 11m43.331651353s ago: executing program 1 (id=1774): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x6, 0x4, 0x4, 0x4000, 0x7ff, {}, {0x3, 0x2, 0x8, 0x2, 0x0, 0x7, "728a56e4"}, 0x78, 0x2, {0x0}, 0x7}) 11m43.179139596s ago: executing program 1 (id=1778): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14142323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 11m42.991571051s ago: executing program 1 (id=1783): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 11m42.515449282s ago: executing program 1 (id=1792): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x2, 0xea) 11m42.037276274s ago: executing program 1 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 11m41.633213453s ago: executing program 32 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 4m42.878368167s ago: executing program 0 (id=8568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0xc, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45}}) 4m42.780052319s ago: executing program 0 (id=8570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m42.562522864s ago: executing program 0 (id=8574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0xfd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x44) 4m42.416032798s ago: executing program 0 (id=8577): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 4m42.084568126s ago: executing program 0 (id=8586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a010400000000000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180"], 0x104}}, 0x0) 4m41.698339006s ago: executing program 0 (id=8594): r0 = syz_open_dev$vbi(&(0x7f0000000740), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x3, @raw_data="52974afc6d1baf862730b336bd8f42728e8155567f7041c1caa4c51480424d07a5d873a61b324ccec89c6d15762ce7957a5d74702a33ba725c2bbb49062082799906b0e5a9c4f3aa16c06c30a90ed300f520fd738fc05db5280aba4bc83892b01331d964b2f4b350a4100cdd6b4b77f9c9e1d5f5c77164ea926c3561a235bb2bde2d23353b47559a1174e233cc1004e01fadbee68d76e096fdd2f9a9459a56438011b8a911c2b384710f84551fc62343717b984140dc18497701b03cd0d58f0e6ed8a20b885ffd23"}) 4m41.297339145s ago: executing program 33 (id=8594): r0 = syz_open_dev$vbi(&(0x7f0000000740), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x3, @raw_data="52974afc6d1baf862730b336bd8f42728e8155567f7041c1caa4c51480424d07a5d873a61b324ccec89c6d15762ce7957a5d74702a33ba725c2bbb49062082799906b0e5a9c4f3aa16c06c30a90ed300f520fd738fc05db5280aba4bc83892b01331d964b2f4b350a4100cdd6b4b77f9c9e1d5f5c77164ea926c3561a235bb2bde2d23353b47559a1174e233cc1004e01fadbee68d76e096fdd2f9a9459a56438011b8a911c2b384710f84551fc62343717b984140dc18497701b03cd0d58f0e6ed8a20b885ffd23"}) 3m6.964500757s ago: executing program 2 (id=10101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3m6.718298853s ago: executing program 2 (id=10103): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x5a49000) 3m6.534395587s ago: executing program 2 (id=10107): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) 3m6.340738212s ago: executing program 2 (id=10112): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m5.840351564s ago: executing program 2 (id=10121): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8000038, 0x3, 0x3f0, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xd0, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a, 0x0, 0x0, 0x2}, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_team\x00', {0x64a, 0x6, 0x0, 0x101, 0x6, 0x7, 0x0, 0xfff, 0x18, 0x20}, {0x7}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [0x0, 0x0, 0xff000000], 'veth1\x00', 'bond0\x00', {0x8499377069aa4b5f}, {}, 0x2b, 0x80, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb5a3, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 3m5.081319533s ago: executing program 2 (id=10135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001640), &(0x7f0000000040)=0xc) 3m4.798238569s ago: executing program 34 (id=10135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001640), &(0x7f0000000040)=0xc) 4.632919017s ago: executing program 7 (id=12662): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) 4.188399128s ago: executing program 7 (id=12666): r0 = semget$private(0x0, 0xb, 0x19f) semop(r0, &(0x7f00000002c0)=[{0x4, 0xb, 0x800}, {0x2, 0x8, 0x1000}, {0x2, 0xfff8, 0x1000}, {0x1, 0x8, 0x1000}], 0x4) 3.987873453s ago: executing program 7 (id=12669): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.073746595s ago: executing program 6 (id=12682): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000001c0)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@rodir}, {@fat=@nfs}, {@fat=@check_strict}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") creat(&(0x7f00000005c0)='./file0\x00', 0x0) 2.669287605s ago: executing program 6 (id=12688): r0 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xffffffff9e956b62}) 2.479987109s ago: executing program 6 (id=12691): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000140)=0x45e) 2.222107846s ago: executing program 3 (id=12695): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000000c0)='/.//', &(0x7f0000000300)='./file0\x00', 0x0, 0x2009000, 0x0) 2.199395196s ago: executing program 6 (id=12696): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 2.148675607s ago: executing program 4 (id=12697): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe}}) 2.06060078s ago: executing program 3 (id=12699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) 1.956736782s ago: executing program 4 (id=12700): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1.903737673s ago: executing program 6 (id=12702): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x980d, &(0x7f0000012e80)="$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") ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000040)={0xfffffffffffffffa, 0x4010000000000006, 0xffffffff}) 1.872115844s ago: executing program 3 (id=12703): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.786324496s ago: executing program 7 (id=12704): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1a}], 0x1) 1.645295139s ago: executing program 5 (id=12705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.59922278s ago: executing program 3 (id=12706): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x2000004, 0x4) 1.499158143s ago: executing program 3 (id=12707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x0) 1.457570424s ago: executing program 5 (id=12708): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.283447508s ago: executing program 5 (id=12709): r0 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0xfffffffffffffffe) 1.269447289s ago: executing program 7 (id=12710): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x0, 0x0}) 1.21933173s ago: executing program 3 (id=12711): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1.063481074s ago: executing program 5 (id=12712): prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 997.723345ms ago: executing program 7 (id=12713): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000002580)=ANY=[@ANYBLOB="01e0ff84"]) 956.268316ms ago: executing program 4 (id=12714): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109a40) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 718.153592ms ago: executing program 4 (id=12715): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 542.183506ms ago: executing program 5 (id=12716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)="a026", 0x0, 0x1}, 0x50) 487.219598ms ago: executing program 4 (id=12717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0), 0x0}, 0x20) 412.877149ms ago: executing program 6 (id=12718): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x1d8, r0) 134.491596ms ago: executing program 4 (id=12719): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000005d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000005680)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @prinfo={0x18, 0x84, 0x5, {0x60, 0x2}}], 0x38, 0x48000}], 0x1, 0x1) 0s ago: executing program 5 (id=12720): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x24, 0x1, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): [ 740.653465][T28291] overlayfs: conflicting options: nfs_export=on,index=off [ 741.427041][ T26] audit: type=1326 audit(741.405:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28323 comm="syz.4.10767" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 741.526382][ T26] audit: type=1326 audit(741.405:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28323 comm="syz.4.10767" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 741.670647][T28333] sctp: [Deprecated]: syz.6.10772 (pid 28333) Use of int in max_burst socket option. [ 741.670647][T28333] Use struct sctp_assoc_value instead [ 741.689523][ T26] audit: type=1326 audit(741.405:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28323 comm="syz.4.10767" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 741.814932][ T26] audit: type=1326 audit(741.405:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28323 comm="syz.4.10767" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 742.426831][T28368] netlink: 'syz.6.10783': attribute type 21 has an invalid length. [ 742.465322][T28368] IPv6: NLM_F_CREATE should be specified when creating new route [ 742.532371][T28368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.539693][T28368] IPv6: NLM_F_CREATE should be set when creating new route [ 742.546987][T28368] IPv6: NLM_F_CREATE should be set when creating new route [ 742.554210][T28368] IPv6: NLM_F_CREATE should be set when creating new route [ 742.556621][ T4318] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 742.740835][T28382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.757235][T26525] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 742.776624][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 742.786887][ T4318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 742.808727][T28382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 742.838371][ T4318] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 742.858043][T28382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 742.886276][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.919375][ T4318] usb 4-1: Product: syz [ 742.936263][ T4318] usb 4-1: Manufacturer: syz [ 742.946484][ T4318] usb 4-1: SerialNumber: syz [ 742.984270][ T4318] usb 4-1: config 0 descriptor?? [ 742.989412][T26525] usb 6-1: Using ep0 maxpacket: 8 [ 742.997137][T26525] usb 6-1: unable to get BOS descriptor or descriptor too short [ 743.028136][T28361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 743.043076][ T4318] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 743.051274][T26525] usb 6-1: config 28 has an invalid interface number: 157 but max is 0 [ 743.076270][T26525] usb 6-1: config 28 has no interface number 0 [ 743.103136][T26525] usb 6-1: config 28 interface 157 has no altsetting 0 [ 743.111191][T28391] xt_HMARK: spi-set and port-set can't be combined [ 743.140374][T26525] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=38.c2 [ 743.166434][T26525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.184428][T28393] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 743.195882][T26525] usb 6-1: Product: syz [ 743.210294][T26525] usb 6-1: Manufacturer: syz [ 743.214920][T26525] usb 6-1: SerialNumber: syz [ 743.310132][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 743.316302][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 743.327046][ T8676] usb 4-1: USB disconnect, device number 57 [ 743.333815][ T8676] mcba_usb 4-1:0.0 can0: device disconnected [ 743.573038][T26525] usb 6-1: USB disconnect, device number 48 [ 744.013461][T28418] loop7: detected capacity change from 0 to 64 [ 744.182722][T28426] loop6: detected capacity change from 0 to 2048 [ 744.386640][T28426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.806439][T11140] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 744.998504][T11140] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.050568][T11140] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 745.080496][T11140] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 745.092823][T28460] loop6: detected capacity change from 0 to 8 [ 745.128196][T11140] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.156057][T11140] usb 8-1: config 0 descriptor?? [ 745.573378][T11140] Bluetooth: Can't get version to change to load ram patch err [ 745.616311][T11140] Bluetooth: Loading patch file failed [ 745.635696][T11140] ath3k: probe of 8-1:0.0 failed with error -71 [ 745.678875][T11140] usb 8-1: USB disconnect, device number 2 [ 745.788269][T28448] loop3: detected capacity change from 0 to 32768 [ 745.843706][ T4468] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 745.869551][T28477] loop6: detected capacity change from 0 to 16 [ 745.933201][T28477] erofs: (device loop6): mounted with root inode @ nid 36. [ 745.986515][T28477] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 8 [ 746.572165][T28490] loop4: detected capacity change from 0 to 4096 [ 746.579040][T28494] __nla_validate_parse: 1 callbacks suppressed [ 746.579056][T28494] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10832'. [ 746.643599][T28467] loop5: detected capacity change from 0 to 40427 [ 746.666298][T28494] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10832'. [ 746.728683][T28467] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 746.731751][T28496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10834'. [ 746.760962][T28490] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 746.780207][T28467] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 746.804200][T28498] tipc: Can't bind to reserved service type 2 [ 746.836116][T28467] F2FS-fs (loop5): invalid crc value [ 746.901794][T28467] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 747.018727][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.119736][ T26] audit: type=1326 audit(747.095:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 747.236109][ T26] audit: type=1326 audit(747.095:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 747.260321][T28467] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 747.337542][ T26] audit: type=1326 audit(747.155:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 747.347125][T28467] F2FS-fs (loop5): Start checkpoint disabled! [ 747.469245][T28516] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 747.486173][ T26] audit: type=1326 audit(747.155:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 747.526148][T28516] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 747.540984][T28467] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 747.561460][T28467] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 747.591047][ T26] audit: type=1326 audit(747.155:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 747.726407][T28467] F2FS-fs (loop5): switch extent_cache option is not allowed [ 747.749513][ T26] audit: type=1326 audit(747.155:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 747.776235][T28525] 9pnet: Found fid 0 not clunked [ 747.886153][ T26] audit: type=1326 audit(747.155:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 748.018136][ T26] audit: type=1326 audit(747.155:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 748.085316][T28536] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10852'. [ 748.119416][ T26] audit: type=1326 audit(747.155:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28507 comm="syz.4.10839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 748.359931][T28539] xt_CT: No such helper "pptp" [ 749.066044][T26525] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 749.152622][T28576] loop7: detected capacity change from 0 to 16 [ 749.192918][T28576] erofs: (device loop7): mounted with root inode @ nid 36. [ 749.260548][ T4276] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 749.294138][T28576] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 749.316106][T26525] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 749.325019][T26525] usb 6-1: config 0 interface 0 has no altsetting 0 [ 749.366297][ T26] audit: type=1800 audit(749.345:479): pid=28576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10870" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 749.426038][T26525] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 749.465641][T26525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 749.509027][T26525] usb 6-1: Product: syz [ 749.513253][T26525] usb 6-1: Manufacturer: syz [ 749.545899][T26525] usb 6-1: SerialNumber: syz [ 749.566766][T26525] usb 6-1: config 0 descriptor?? [ 749.598366][T26525] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 749.625940][T26525] pctv452e: pctv452e_power_ctrl: 1 [ 749.625940][T26525] [ 749.777113][T11140] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 749.799247][T28597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10880'. [ 749.813386][T26525] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 749.813386][T26525] [ 749.845313][T26525] dvb-usb: bulk message failed: -22 (5/0) [ 749.866298][T26525] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 749.877161][T28601] sctp: [Deprecated]: syz.3.10882 (pid 28601) Use of int in max_burst socket option deprecated. [ 749.877161][T28601] Use struct sctp_assoc_value instead [ 749.928593][T26525] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 749.968161][T26525] usb 6-1: USB disconnect, device number 49 [ 749.997546][T11140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.043419][T11140] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 750.068900][T11140] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.082639][T11140] usb 7-1: config 0 descriptor?? [ 750.298408][T11140] ath6kl: Failed to submit usb control message: -71 [ 750.305317][T11140] ath6kl: unable to send the bmi data to the device: -71 [ 750.312748][T11140] ath6kl: Unable to send get target info: -71 [ 750.320143][T11140] ath6kl: Failed to init ath6kl core: -71 [ 750.338153][T28614] loop4: detected capacity change from 0 to 64 [ 750.436737][T11140] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 750.477346][T11140] usb 7-1: USB disconnect, device number 7 [ 750.658385][T28620] syz.4.10891 uses old SIOCAX25GETINFO [ 750.796483][T28607] loop3: detected capacity change from 0 to 32768 [ 750.845884][T28607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.10885 (28607) [ 750.972423][T28607] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 750.993453][T11140] kernel write not supported for file /input/mice (pid: 11140 comm: kworker/1:13) [ 751.046906][T28607] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 751.090996][T28607] BTRFS info (device loop3): force clearing of disk cache [ 751.094265][T28630] loop4: detected capacity change from 0 to 16 [ 751.141745][T28607] BTRFS info (device loop3): force zlib compression, level 3 [ 751.150046][T28630] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 751.195822][T28607] BTRFS info (device loop3): disabling free space tree [ 751.205859][T28607] BTRFS info (device loop3): max_inline at 0 [ 751.211880][T28607] BTRFS info (device loop3): enabling free space tree [ 751.273783][T28607] BTRFS info (device loop3): using free space tree [ 751.590638][T28607] BTRFS info (device loop3): enabling ssd optimizations [ 751.810382][ T4281] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 751.880647][T28666] loop7: detected capacity change from 0 to 2048 [ 752.075796][T28673] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 752.148231][T28666] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 752.362529][T28666] Remounting filesystem read-only [ 752.504059][T28683] loop6: detected capacity change from 0 to 8 [ 752.765899][T28689] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 753.355032][T28710] netlink: 'syz.5.10925': attribute type 3 has an invalid length. [ 753.815355][T28725] netlink: 'syz.4.10931': attribute type 24 has an invalid length. [ 753.959126][T28699] loop3: detected capacity change from 0 to 32768 [ 754.103438][ T4468] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 754.438419][T28745] xt_TCPMSS: Only works on TCP SYN packets [ 754.715675][T28755] comedi: No check for data length of config insn id 4 is implemented [ 754.723886][T28755] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 754.805765][T28755] comedi: Assuming n=15 is correct [ 754.895191][T28761] loop4: detected capacity change from 0 to 512 [ 755.073801][T28761] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 755.122114][T28761] Quota error (device loop4): do_check_range: Getting block 134217728 out of range 0-5 [ 755.323029][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 755.872792][T28794] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 755.949875][T28794] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 755.969981][T28759] loop7: detected capacity change from 0 to 32768 [ 756.012294][T28759] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 756.012294][T28759] [ 756.110695][T28759] ERROR: (device loop7): remounting filesystem as read-only [ 756.175014][T28759] xtLookup: xtSearch returned -5 [ 756.180273][ T8676] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 756.183735][T28801] loop4: detected capacity change from 0 to 512 [ 756.215267][T28759] ERROR: (device loop7): xtTruncate: XT_GETPAGE: xtree page corrupt [ 756.215267][T28759] [ 756.390602][T28801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 756.415268][ T8676] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 756.455189][ T8676] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 756.534130][ T8676] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 756.602254][ T8676] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.652601][ T8676] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.692935][ T8676] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 756.729546][ T8676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.794172][T28795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 756.811210][T28795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 756.847221][T28824] loop6: detected capacity change from 0 to 128 [ 756.848907][T28795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 756.902878][ T8676] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 756.947859][T28824] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 757.005597][T28824] FAT-fs (loop6): Filesystem has been set read-only [ 757.037511][T28824] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 757.075639][ T4318] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 757.089617][T28830] netlink: 'syz.7.10980': attribute type 3 has an invalid length. [ 757.101520][T28824] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 757.140836][ T8676] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 757.173240][ T8676] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 757.289352][ T4318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.315594][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 757.337978][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 757.381101][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 757.406180][ T4318] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.439718][ T4318] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 757.459832][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.496294][ T4318] usb 5-1: config 0 descriptor?? [ 757.515849][T28801] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 757.525941][ T8676] usb 6-1: USB disconnect, device number 50 [ 757.535819][ C0] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 757.555765][ T8676] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 757.621790][ T8676] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 757.658218][ T8676] mos7720 6-1:1.0: device disconnected [ 757.795340][T26525] usb 5-1: USB disconnect, device number 62 [ 757.993721][T28850] loop7: detected capacity change from 0 to 2048 [ 758.072578][T28852] openvswitch: netlink: EtherType 0 is less than min 600 [ 758.084266][T28855] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 758.125592][T28857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10992'. [ 758.362671][T28863] loop7: detected capacity change from 0 to 128 [ 758.449684][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 758.479866][T28863] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 758.525421][T28863] FAT-fs (loop7): Filesystem has been set read-only [ 758.570066][T28863] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 758.615975][T28863] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 758.942057][T28876] loop3: detected capacity change from 0 to 4096 [ 759.008420][T28876] /dev/loop3: Can't open blockdev [ 759.273745][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11007'. [ 759.278114][T28891] program syz.7.11008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 759.505569][T28897] loop4: detected capacity change from 0 to 16 [ 759.585882][T28897] erofs: (device loop4): mounted with root inode @ nid 36. [ 759.856710][T28914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11020'. [ 759.890456][T28914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11020'. [ 760.577879][T28942] loop5: detected capacity change from 0 to 16 [ 760.584887][T28942] erofs: Unknown parameter '5‚�ser_xattr' [ 760.694529][T28942] cifs: Unknown parameter '5‚�ser_xattr' [ 761.820474][T28953] loop7: detected capacity change from 0 to 32768 [ 761.891873][T28987] device syz_tun left promiscuous mode [ 761.922386][T28953] ea_get: invalid extended attribute [ 761.951188][T28953] ffff8880551fc3f0: 04 00 00 00 .... [ 762.039732][T28987] device wg1 left promiscuous mode [ 762.056387][T28991] netlink: 'syz.5.11056': attribute type 1 has an invalid length. [ 762.078726][T28987] device wg2 left promiscuous mode [ 762.141628][T28987] device netdevsim0 left promiscuous mode [ 762.230927][T28987] device bridge1 left promiscuous mode [ 762.260742][T28987] device gtp0 left promiscuous mode [ 762.284524][T28987] device ip6gre1 left promiscuous mode [ 762.334989][T28987] device gre1 left promiscuous mode [ 762.469637][T29007] loop6: detected capacity change from 0 to 64 [ 763.112069][T29026] delete_channel: no stack [ 763.293741][T29034] netlink: 'syz.7.11078': attribute type 10 has an invalid length. [ 763.312749][T29035] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 763.414829][T29038] netlink: 'syz.6.11080': attribute type 2 has an invalid length. [ 763.431498][T29034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.482228][T29034] team0: Port device bond0 added [ 763.760897][T29053] loop3: detected capacity change from 0 to 512 [ 763.782091][T29053] /dev/loop3: Can't open blockdev [ 763.924896][T29059] overlayfs: conflicting options: userxattr,metacopy=on [ 763.962102][T29060] netlink: 264 bytes leftover after parsing attributes in process `syz.7.11091'. [ 764.081189][T10201] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 764.147909][T29061] loop6: detected capacity change from 0 to 8192 [ 764.193531][T29061] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 764.268281][T29061] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1046) [ 764.279725][T10201] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 764.324325][T10201] usb 4-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 764.360166][T29061] FAT-fs (loop6): Filesystem has been set read-only [ 764.372527][T10201] usb 4-1: config 0 has no interfaces? [ 764.391860][T10201] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 764.415137][T10201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.481198][T10201] usb 4-1: config 0 descriptor?? [ 764.541758][T23045] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1046) [ 764.720954][T10201] usb 4-1: USB disconnect, device number 58 [ 764.773480][T29076] loop5: detected capacity change from 0 to 4096 [ 764.877068][T29076] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 764.940354][T29076] ntfs3: loop5: Failed to load $Extend. [ 765.040818][T29085] loop6: detected capacity change from 0 to 4096 [ 765.065203][T29088] netlink: 'syz.7.11106': attribute type 4 has an invalid length. [ 765.103522][T29088] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.11106'. [ 765.112719][T29085] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 765.529261][T29096] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 765.564278][ T26] audit: type=1326 audit(765.536:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 765.587889][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.726272][ T26] audit: type=1326 audit(765.576:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 765.852016][ T26] audit: type=1326 audit(765.576:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 765.875578][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.951763][ T26] audit: type=1326 audit(765.576:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 765.975347][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.012455][T26525] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 766.065098][ T26] audit: type=1326 audit(765.586:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 766.088755][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.154398][T29119] MTD: Couldn't look up '': -22 [ 766.175513][ T26] audit: type=1326 audit(765.586:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 766.275048][ T26] audit: type=1326 audit(765.586:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 766.278272][T26525] usb 8-1: Using ep0 maxpacket: 32 [ 766.390032][ T26] audit: type=1326 audit(765.586:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 766.424558][T26525] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 766.444941][T26525] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 766.454703][T26525] usb 8-1: config 0 interface 0 has no altsetting 0 [ 766.499076][ T26] audit: type=1326 audit(765.586:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.6.11110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7e539e0d9 code=0x7ffc0000 [ 766.522641][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.531983][T26525] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 766.568128][T26525] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.630819][T26525] usb 8-1: Product: syz [ 766.644942][T26525] usb 8-1: Manufacturer: syz [ 766.649583][T26525] usb 8-1: SerialNumber: syz [ 766.664208][T29140] x_tables: duplicate underflow at hook 4 [ 766.695971][T26525] usb 8-1: config 0 descriptor?? [ 766.733100][ T26] audit: type=1326 audit(766.706:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.4.11132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 766.756706][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.078352][T29154] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 767.135158][T26525] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 767.136091][ T4349] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 767.142133][T26525] gs_usb: probe of 8-1:0.0 failed with error -71 [ 767.185338][T26525] usb 8-1: USB disconnect, device number 3 [ 767.380295][ T4349] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 767.412759][ T4349] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 767.460328][ T4349] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.518798][ T4349] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 767.528192][ T4349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.551822][ T4349] usb 6-1: Product: syz [ 767.556221][ T4349] usb 6-1: Manufacturer: syz [ 767.560827][ T4349] usb 6-1: SerialNumber: syz [ 767.578647][T29169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11146'. [ 767.618093][ T4349] usblp0: Disabling reads from problematic bidirectional printer [ 767.807531][ T4349] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 767.864469][ T4349] usb 6-1: USB disconnect, device number 51 [ 767.921481][ T4349] usblp0: removed [ 768.338372][T29187] loop6: detected capacity change from 0 to 4096 [ 768.347674][T29195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11158'. [ 768.370649][T29187] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 768.520684][T29187] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 768.974844][T26525] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 769.128531][T29215] loop4: detected capacity change from 0 to 4096 [ 769.202820][T26525] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 769.208950][T29215] ntfs: volume version 3.1. [ 769.232160][T26525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.262437][T26525] usb 4-1: Product: syz [ 769.289616][T26525] usb 4-1: Manufacturer: syz [ 769.289636][T26525] usb 4-1: SerialNumber: syz [ 769.379597][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11175'. [ 769.575427][T26525] usb 4-1: Can't get UAC3 power state for id 10 [ 769.595664][T26525] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 769.705355][T26525] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 769.773687][T29233] loop4: detected capacity change from 0 to 4096 [ 769.784268][T26525] usb 4-1: USB disconnect, device number 59 [ 769.835274][T29233] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 769.928921][T29233] ntfs3: loop4: Failed to load $Extend. [ 770.030387][T29244] usb usb8: usbfs: process 29244 (syz.6.11182) did not claim interface 0 before use [ 770.058660][T29245] cgroup: Unknown subsys name 'pcr' [ 770.090971][ T6128] udevd[6128]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.647290][T29249] NILFS (loop4): device size too small [ 770.822888][T29269] netlink: 'syz.3.11194': attribute type 1 has an invalid length. [ 770.856689][T29269] netlink: 'syz.3.11194': attribute type 3 has an invalid length. [ 770.890040][T29269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11194'. [ 770.912610][T29275] IPv6: Can't replace route, no match found [ 771.107126][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11199'. [ 771.197922][T29285] loop3: detected capacity change from 0 to 24 [ 771.268302][T29285] /dev/loop3: Can't open blockdev [ 771.308029][T29279] loop6: detected capacity change from 0 to 4096 [ 771.339295][ T4468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.372081][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 771.372094][ T26] audit: type=1326 audit(771.346:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29289 comm="syz.5.11203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 771.438780][T29279] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 771.514932][T29279] ntfs3: loop6: Failed to load $Extend. [ 771.534688][ T26] audit: type=1326 audit(771.386:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29289 comm="syz.5.11203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 771.647441][ T26] audit: type=1326 audit(771.386:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29289 comm="syz.5.11203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 771.750130][T29299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11210'. [ 771.806804][ T26] audit: type=1326 audit(771.386:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29289 comm="syz.5.11203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 771.926649][T29304] ip6t_srh: unknown srh invflags 4000 [ 772.349083][T29318] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 772.366047][T29321] xt_hashlimit: size too large, truncated to 1048576 [ 772.391014][T29318] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 773.326310][T29356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11237'. [ 773.687276][T29363] loop5: detected capacity change from 0 to 4096 [ 773.791497][T29363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 774.052617][ T8208] EXT4-fs (loop5): unmounting filesystem. [ 774.649639][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11264'. [ 774.764573][ T4349] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 774.944340][T29419] device wlan0 entered promiscuous mode [ 774.968097][ T4349] usb 4-1: Using ep0 maxpacket: 8 [ 775.001091][ T4349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.040473][ T4349] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 775.070189][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.089497][ T4349] usb 4-1: config 0 descriptor?? [ 775.342335][ T8676] usb 4-1: USB disconnect, device number 60 [ 775.378166][ T126] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 775.389076][T29436] netlink: 312 bytes leftover after parsing attributes in process `syz.6.11277'. [ 775.584625][ T126] usb 8-1: Using ep0 maxpacket: 16 [ 775.591716][ T126] usb 8-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 775.632762][ T126] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 775.658867][ T126] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 775.684479][ T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.708302][ T126] usb 8-1: Product: syz [ 775.712942][ T126] usb 8-1: Manufacturer: syz [ 775.722879][ T126] usb 8-1: SerialNumber: syz [ 775.750114][ T126] r8152-cfgselector 8-1: config 0 descriptor?? [ 775.988153][ T126] r8152-cfgselector 8-1: Unknown version 0x0000 [ 776.010237][ T126] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 776.177027][T29460] netlink: 'syz.4.11288': attribute type 2 has an invalid length. [ 776.221452][T29460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11288'. [ 776.632216][T29472] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 776.652948][T29449] loop5: detected capacity change from 0 to 32768 [ 776.661154][T29472] UBIFS error (pid: 29472): cannot open "ubi0", error -19 [ 776.747280][T29449] JBD2: Ignoring recovery information on journal [ 776.848086][T29449] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 776.894524][T29479] xt_time: unknown flags 0xc [ 776.979663][T29449] ocfs2: Unmounting device (7,5) on (node local) [ 777.095686][T29486] x_tables: unsorted underflow at hook 2 [ 778.371912][T29528] rdma_rxe: rxe_register_device failed with error -23 [ 778.399059][T29528] rdma_rxe: failed to add bond0 [ 779.170446][T29557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11334'. [ 779.204223][T29558] SET target dimension over the limit! [ 779.209832][T29557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11334'. [ 779.446938][T29570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11343'. [ 779.494547][T29570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11343'. [ 779.792244][T29582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11348'. [ 779.834275][T29582] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11348'. [ 780.326809][T29603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11358'. [ 781.454202][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11382'. [ 782.254126][T29685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11396'. [ 782.574465][T29695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11403'. [ 782.583444][T29695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11403'. [ 782.627335][T29697] loop5: detected capacity change from 0 to 256 [ 782.681951][T29699] loop6: detected capacity change from 0 to 1024 [ 782.879315][T29705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11408'. [ 782.920771][T29705] erspan0: default FDB implementation only supports local addresses [ 783.426318][T29727] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11418'. [ 783.942944][T29740] loop7: detected capacity change from 0 to 1024 [ 784.064960][T29740] hfsplus: invalid file type 0174377 for inode 21 [ 784.169070][T29749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11430'. [ 784.456909][T29763] netlink: 'syz.6.11437': attribute type 5 has an invalid length. [ 784.902600][T29780] loop3: detected capacity change from 0 to 1024 [ 785.215375][T29792] sg_write: data in/out 8454107/16 bytes for SCSI command 0xf0-- guessing data in; [ 785.215375][T29792] program syz.6.11452 not setting count and/or reply_len properly [ 785.466706][T29800] Option ' ' to dns_resolver key: bad/missing value [ 785.480407][ T4276] Bluetooth: hci3: Invalid handle: 0x70bc > 0x0eff [ 785.505208][T29804] SET target dimension over the limit! [ 786.210396][ T8676] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 786.440597][ T8676] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 786.459829][ T8676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.493912][ T8676] usb 7-1: Product: syz [ 786.498123][ T8676] usb 7-1: Manufacturer: syz [ 786.530044][T29807] loop3: detected capacity change from 0 to 32768 [ 786.543182][ T8676] usb 7-1: SerialNumber: syz [ 786.569101][ T8676] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 786.613506][T29841] netlink: 'syz.7.11474': attribute type 10 has an invalid length. [ 786.643936][ T5706] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 786.646533][T26525] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 786.686818][T29841] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.694309][T29841] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.775551][T29841] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.784099][T29841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.794159][T29841] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.801283][T29841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.901699][T29841] team0: Port device bridge0 added [ 787.074779][ T7149] usb 7-1: USB disconnect, device number 8 [ 787.612210][T29867] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 787.734254][T26525] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 787.748003][T26525] ath9k_htc: Failed to initialize the device [ 787.784260][ T7149] usb 7-1: ath9k_htc: USB layer deinitialized [ 788.031624][T29883] loop3: detected capacity change from 0 to 2048 [ 788.091540][T29883] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 788.143889][ T126] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 788.208366][T29883] UDF-fs: unknown compression code (0) [ 788.343941][ T126] usb 8-1: Using ep0 maxpacket: 8 [ 788.352409][ T126] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.413234][ T126] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 788.458432][ T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.495584][ T126] usb 8-1: config 0 descriptor?? [ 788.507597][T29893] 0x000000000000-0x000000020000 : "" [ 788.523478][ T126] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 788.592381][T29893] ftl_cs: FTL header not found. [ 788.600756][T29869] loop5: detected capacity change from 0 to 32768 [ 788.694079][ T7149] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 788.932837][ T126] gspca_vc032x: reg_w err -71 [ 788.945341][ T7149] usb 5-1: Using ep0 maxpacket: 32 [ 788.948757][ T126] vc032x: probe of 8-1:0.0 failed with error -71 [ 788.980449][ T7149] usb 5-1: unable to get BOS descriptor or descriptor too short [ 788.994176][ T7149] usb 5-1: config index 0 descriptor too short (expected 63924, got 2228) [ 788.998324][ T126] usb 8-1: USB disconnect, device number 5 [ 789.033056][ T7149] usb 5-1: config 156 has too many interfaces: 218, using maximum allowed: 32 [ 789.073680][ T7149] usb 5-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 789.133685][ T7149] usb 5-1: config 156 has 1 interface, different from the descriptor's value: 218 [ 789.173334][ T7149] usb 5-1: config 156 has no interface number 0 [ 789.193491][ T7149] usb 5-1: config 156 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 789.233674][ T7149] usb 5-1: config 156 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 789.271463][ T7149] usb 5-1: config 156 interface 127 has no altsetting 0 [ 789.310894][ T7149] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 789.350846][ T7149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.381072][ T7149] usb 5-1: Product: syz [ 789.392074][ T7149] usb 5-1: Manufacturer: syz [ 789.411313][ T7149] usb 5-1: SerialNumber: syz [ 789.675488][ T7149] usb 5-1: USB disconnect, device number 63 [ 789.995510][ T4468] udevd[4468]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:156.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.563151][T29948] device ip6tnl1 entered promiscuous mode [ 790.740428][T29921] loop3: detected capacity change from 0 to 32768 [ 790.853494][ T4468] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 791.299160][T29971] ip_tables: iptables: counters copy to user failed while replacing table [ 791.475540][T29975] 0x000000000000-0x000000020000 : "" [ 791.515762][T29975] ftl_cs: FTL header not found. [ 791.928030][T29986] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 792.043434][T29989] loop4: detected capacity change from 0 to 2048 [ 792.109543][T29989] Alternate GPT is invalid, using primary GPT. [ 792.133909][T29989] loop4: p1 p2 p3 [ 792.632018][ T5706] udevd[5706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 792.662695][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 792.686272][ T4468] udevd[4468]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 792.808105][T30013] netlink: 'syz.3.11556': attribute type 21 has an invalid length. [ 792.843501][T30013] IPv6: NLM_F_CREATE should be specified when creating new route [ 793.242969][T30023] overlayfs: missing 'lowerdir' [ 793.294162][T30024] loop3: detected capacity change from 0 to 1024 [ 793.461158][T30028] loop7: detected capacity change from 0 to 64 [ 793.871228][T30035] loop3: detected capacity change from 0 to 4096 [ 793.914277][T30035] EXT4-fs: Ignoring removed mblk_io_submit option [ 793.944643][T30035] /dev/loop3: Can't open blockdev [ 794.268791][T30049] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11574'. [ 794.305204][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11574'. [ 794.510437][T30051] loop5: detected capacity change from 0 to 2048 [ 795.787532][T30080] loop5: detected capacity change from 0 to 512 [ 796.042468][T30080] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 796.142544][T30093] loop7: detected capacity change from 0 to 64 [ 796.235094][ T8208] EXT4-fs (loop5): unmounting filesystem. [ 796.425514][T30099] loop5: detected capacity change from 0 to 64 [ 797.332515][T30096] loop3: detected capacity change from 0 to 32768 [ 797.757286][T30132] loop4: detected capacity change from 0 to 1024 [ 797.798507][T30132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 797.900075][T30132] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 797.911990][T30137] sctp: [Deprecated]: syz.3.11615 (pid 30137) Use of int in max_burst socket option deprecated. [ 797.911990][T30137] Use struct sctp_assoc_value instead [ 797.915699][T30132] System zones: 0-1, 3-12 [ 798.078675][T30132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 798.278138][T30132] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.11613: Abort forced by user [ 798.334217][T30132] EXT4-fs (loop4): Remounting filesystem read-only [ 798.340771][T30132] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 798.496186][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 798.877306][T30160] xt_TCPMSS: Only works on TCP SYN packets [ 799.088621][T30168] xt_TCPMSS: Only works on TCP SYN packets [ 799.578586][T30000] Set syz1 is full, maxelem 65536 reached [ 799.650540][T30184] binder: 30182:30184 ioctl c018620c 200000000340 returned -1 [ 799.896955][T30192] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11642'. [ 800.152508][T30202] netlink: 'syz.3.11647': attribute type 10 has an invalid length. [ 800.206646][T30202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11647'. [ 800.256003][T30202] batman_adv: batadv0: Adding interface: vlan1 [ 800.302791][T30202] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.434201][T30202] batman_adv: batadv0: Interface activated: vlan1 [ 800.781496][T30226] xt_NFQUEUE: number of total queues is 0 [ 800.927562][T30230] loop4: detected capacity change from 0 to 256 [ 801.301654][T30246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11669'. [ 801.685647][T30259] netlink: 'syz.5.11676': attribute type 11 has an invalid length. [ 801.711873][T30261] netlink: 72 bytes leftover after parsing attributes in process `syz.7.11675'. [ 801.753132][T30263] netlink: 'syz.4.11677': attribute type 10 has an invalid length. [ 801.803619][T30263] device veth1_macvtap left promiscuous mode [ 802.492191][T30291] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.787414][T30301] loop7: detected capacity change from 0 to 2048 [ 802.848140][T30301] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 802.864094][T26525] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 802.924503][T30301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 802.937536][T30307] netlink: 'syz.3.11699': attribute type 3 has an invalid length. [ 802.985935][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11699'. [ 803.026449][T30307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11699'. [ 803.124897][T26525] usb 6-1: Using ep0 maxpacket: 8 [ 803.142044][T26525] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 803.180751][T26525] usb 6-1: config 179 has no interface number 0 [ 803.221160][T26525] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 803.242612][T30315] netlink: 798 bytes leftover after parsing attributes in process `syz.4.11704'. [ 803.258961][T26525] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 803.287086][T30319] loop7: detected capacity change from 0 to 16 [ 803.300795][T26525] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 803.330407][T30319] erofs: (device loop7): mounted with root inode @ nid 36. [ 803.358351][T26525] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 803.381685][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 803.411054][T26525] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 803.424772][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 803.446048][ T4276] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 803.453092][T26525] usb 6-1: config 179 interface 65 has no altsetting 0 [ 803.465690][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 803.498136][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 803.518256][T26525] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 803.553294][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 803.563189][T26525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.593422][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 803.627307][T26525] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input50 [ 803.642923][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 803.692408][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 803.709467][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 803.738853][T30319] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 803.772919][T30319] erofs: (device loop7): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 803.815907][T30319] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 803.903304][ T26] audit: type=1800 audit(803.878:502): pid=30319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11703" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 804.128778][ T4318] usb 6-1: USB disconnect, device number 52 [ 804.134907][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 804.153930][ T4318] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 804.230947][T30341] dlm: no local IP address has been set [ 804.272446][T30341] dlm: cannot start dlm midcomms -107 [ 804.630163][T30355] loop6: detected capacity change from 0 to 1024 [ 804.807818][T30355] syz.6.11722: attempt to access beyond end of device [ 804.807818][T30355] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 804.875703][T30355] Buffer I/O error on dev loop6, logical block 458752, async page read [ 804.910556][T30355] syz.6.11722: attempt to access beyond end of device [ 804.910556][T30355] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 804.972894][T30355] Buffer I/O error on dev loop6, logical block 458752, async page read [ 805.312924][ T26] audit: type=1326 audit(805.288:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 805.336487][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.400522][ T26] audit: type=1326 audit(805.298:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 805.566387][ T26] audit: type=1326 audit(805.348:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 805.655749][T30391] IPv6: sit1: Disabled Multicast RS [ 805.711584][ T26] audit: type=1326 audit(805.348:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 805.735186][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.809133][ T26] audit: type=1326 audit(805.358:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 805.832737][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.926992][ T26] audit: type=1326 audit(805.358:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 805.950562][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.042915][T30408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11747'. [ 806.073065][ T26] audit: type=1326 audit(805.358:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 806.185093][ T26] audit: type=1326 audit(805.358:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 806.288959][ T26] audit: type=1326 audit(805.358:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30380 comm="syz.7.11734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 806.318776][T30417] loop3: detected capacity change from 0 to 256 [ 806.354162][T30417] /dev/loop3: Can't open blockdev [ 806.391057][ T4468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 806.452802][ T126] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 806.662817][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 806.675829][ T126] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 806.721546][ T126] usb 6-1: config 2 has no interface number 0 [ 806.770230][ T126] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 806.805388][ T126] usb 6-1: config 2 interface 88 has no altsetting 0 [ 806.844550][ T126] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 806.873962][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.903620][ T126] usb 6-1: Product: syz [ 806.907832][ T126] usb 6-1: Manufacturer: syz [ 806.912454][ T126] usb 6-1: SerialNumber: syz [ 806.966041][T30413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 807.082733][T26525] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 807.165593][T30444] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 807.192333][T30413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 807.322873][ T27] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 807.352842][T26525] usb 4-1: Using ep0 maxpacket: 32 [ 807.366055][T26525] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 807.397361][T26525] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 807.423594][ T126] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 807.429271][T26525] usb 4-1: string descriptor 0 read error: -22 [ 807.447065][ T126] asix: probe of 6-1:2.88 failed with error -71 [ 807.459377][ T126] usb 6-1: USB disconnect, device number 53 [ 807.496290][T26525] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 807.513032][ T27] usb 8-1: Using ep0 maxpacket: 8 [ 807.534041][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 807.545023][T26525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.567508][ T27] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 807.570654][T30435] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 807.590175][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.605562][T26525] usb 4-1: MIDIStreaming interface descriptor not found [ 807.605981][ T27] usb 8-1: Product: syz [ 807.633140][ T27] usb 8-1: Manufacturer: syz [ 807.637791][ T27] usb 8-1: SerialNumber: syz [ 807.680475][ T27] usb 8-1: config 0 descriptor?? [ 807.731159][ T27] streamzap 8-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 807.924309][ T4318] usb 4-1: USB disconnect, device number 61 [ 808.002462][T10201] usb 8-1: USB disconnect, device number 6 [ 808.455533][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.984700][T30480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11781'. [ 809.065213][T30482] loop4: detected capacity change from 0 to 1024 [ 809.071794][T30484] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 809.349393][T30492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11787'. [ 809.360199][T18002] hfsplus: b-tree write err: -5, ino 25 [ 809.370575][T18002] hfsplus: b-tree write err: -5, ino 4 [ 809.400096][T18002] hfsplus: b-tree write err: -5, ino 2 [ 809.425839][T18002] hfsplus: b-tree write err: -5, ino 26 [ 809.882578][ T4318] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 810.105338][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 810.112042][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 810.134245][T30514] netlink: 'syz.6.11797': attribute type 10 has an invalid length. [ 810.152604][ T4318] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 810.193825][ T4318] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 810.212480][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.220499][ T4318] usb 5-1: Product: syz [ 810.280733][ T4318] usb 5-1: Manufacturer: syz [ 810.312507][ T4318] usb 5-1: SerialNumber: syz [ 810.318882][ T4318] usb 5-1: config 0 descriptor?? [ 810.369619][T30522] loop5: detected capacity change from 0 to 256 [ 810.447932][T30522] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 810.775085][ T4318] usb 5-1: USB disconnect, device number 64 [ 811.026258][T30537] bond0: (slave bond_slave_1): Releasing backup interface [ 812.196295][T30574] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11827'. [ 812.205581][T30571] program syz.3.11826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.235851][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11827'. [ 812.454891][T26525] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 812.522622][ T126] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 812.664146][T26525] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 812.701490][T26525] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 812.712463][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 812.719264][ T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.740843][T26525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.765905][ T126] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 812.802393][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.830760][ T126] usb 6-1: Product: syz [ 812.835211][ T126] usb 6-1: Manufacturer: syz [ 812.839819][ T126] usb 6-1: SerialNumber: syz [ 812.876836][ T126] usb 6-1: config 0 descriptor?? [ 812.896534][ T126] cdc_phonet 6-1:0.0: skipping garbage [ 812.902053][ T126] cdc_phonet: probe of 6-1:0.0 failed with error -22 [ 813.105650][T10201] usb 6-1: USB disconnect, device number 54 [ 813.182619][T26525] qmi_wwan: probe of 7-1:1.0 failed with error -22 [ 813.190854][T30579] loop4: detected capacity change from 0 to 32768 [ 813.209461][T26525] usb 7-1: USB disconnect, device number 9 [ 813.559444][T30587] loop3: detected capacity change from 0 to 40427 [ 813.620460][T30603] loop4: detected capacity change from 0 to 256 [ 813.678297][T30603] exfat: Deprecated parameter 'namecase' [ 813.717671][T30603] exfat: Deprecated parameter 'utf8' [ 813.809000][T30603] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 814.382306][T10201] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 814.464818][T30631] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11853'. [ 814.603975][T10201] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 814.623669][T10201] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 814.631792][T10201] usb 5-1: config 0 has no interface number 0 [ 814.706808][T10201] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 814.748026][T10201] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 814.798728][T10201] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 814.831772][T10201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.878313][T10201] usb 5-1: config 0 descriptor?? [ 814.884359][T30643] netlink: 'syz.6.11860': attribute type 1 has an invalid length. [ 814.951719][T30647] IPv6: NLM_F_CREATE should be specified when creating new route [ 815.156246][T30653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11866'. [ 815.205903][T30653] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 815.309875][T10201] usb 5-1: USB disconnect, device number 65 [ 816.055844][T30683] netlink: 88 bytes leftover after parsing attributes in process `syz.5.11883'. [ 816.253765][T30693] ipt_CLUSTERIP: bad num_local_nodes 32 [ 816.312328][T10201] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 816.501049][T30707] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11893'. [ 816.543730][T10201] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 816.570959][T10201] usb 5-1: config 0 has no interface number 0 [ 816.591890][T10201] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 816.641698][T10201] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.689719][T10201] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 816.702499][T30711] loop7: detected capacity change from 0 to 8 [ 816.723520][T10201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.762174][T10201] usb 5-1: Product: syz [ 816.789583][T10201] usb 5-1: Manufacturer: syz [ 816.820292][T10201] usb 5-1: SerialNumber: syz [ 816.843169][T10201] usb 5-1: config 0 descriptor?? [ 816.869133][T30685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 816.887615][T10201] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 816.921019][T10201] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 817.272015][T30728] trusted_key: encrypted_key: master key parameter '' is invalid [ 817.355437][T26525] usb 5-1: USB disconnect, device number 66 [ 817.374733][T26525] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 817.432503][T26525] cyberjack 5-1:0.69: device disconnected [ 817.513663][T10201] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 817.669030][T30737] loop5: detected capacity change from 0 to 2048 [ 817.712193][T10201] usb 7-1: Using ep0 maxpacket: 16 [ 817.719808][T10201] usb 7-1: config 0 has no interfaces? [ 817.737392][T30741] loop7: detected capacity change from 0 to 256 [ 817.749280][T30737] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 817.774511][T10201] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 817.793262][T30741] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 817.819747][T10201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.838647][T30742] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 817.865042][T10201] usb 7-1: Product: syz [ 817.869237][T10201] usb 7-1: Manufacturer: syz [ 817.883530][T10201] usb 7-1: SerialNumber: syz [ 817.908380][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 817.930280][T10201] r8152-cfgselector 7-1: config 0 descriptor?? [ 817.995691][T30737] Remounting filesystem read-only [ 818.001190][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.040822][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.099179][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.110114][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.120274][T30748] loop4: detected capacity change from 0 to 2048 [ 818.120656][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.145809][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.164315][T10201] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 818.191981][T30737] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 818.217687][ T26] audit: type=1800 audit(818.189:512): pid=30737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11906" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 818.244433][T30748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 818.335717][T30748] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 818.384572][ T126] usb 7-1: USB disconnect, device number 10 [ 818.411550][T30748] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 818.729749][T30759] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32) [ 819.648021][ T26] audit: type=1326 audit(819.619:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.5.11928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 819.762169][ T26] audit: type=1326 audit(819.649:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.5.11928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 819.887162][ T26] audit: type=1326 audit(819.659:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.5.11928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 820.027951][ T26] audit: type=1326 audit(819.659:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.5.11928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 820.160479][ T26] audit: type=1326 audit(819.659:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30783 comm="syz.5.11928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 820.198894][T30766] loop4: detected capacity change from 0 to 32768 [ 820.310948][T30766] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 820.310948][T30766] [ 820.385183][T30766] ERROR: (device loop4): remounting filesystem as read-only [ 820.974107][T30818] loop3: detected capacity change from 0 to 1764 [ 821.187439][T30826] netlink: 'syz.5.11948': attribute type 11 has an invalid length. [ 822.056425][T30863] loop5: detected capacity change from 0 to 256 [ 822.176283][T30863] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 822.284379][T30863] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 822.798549][T30891] netlink: 'syz.6.11981': attribute type 10 has an invalid length. [ 822.945681][T30891] device veth0_vlan left promiscuous mode [ 823.002556][T30891] device veth0_vlan entered promiscuous mode [ 823.072244][T30891] team0: Device veth0_vlan failed to register rx_handler [ 823.248081][T30893] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.11980'. [ 823.280497][T30905] loop7: detected capacity change from 0 to 8 [ 823.282902][T30893] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.11980'. [ 823.333166][T30907] autofs4:pid:30907:autofs_fill_super: called with bogus options [ 823.373229][T30905] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 823.398210][ T4468] udevd[4468]: incorrect cramfs checksum on /dev/loop7 [ 823.504743][T30905] cramfs: bad data blocksize 4294934200 [ 823.510956][T30905] cramfs: bad data blocksize 4294934200 [ 823.535442][ T4468] udevd[4468]: incorrect cramfs checksum on /dev/loop7 [ 823.569214][ T26] audit: type=1800 audit(823.539:518): pid=30905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11987" name="file1" dev="loop7" ino=33092 res=0 errno=0 [ 823.694091][ T4468] udevd[4468]: incorrect cramfs checksum on /dev/loop7 [ 823.859994][T30923] xt_hashlimit: size too large, truncated to 1048576 [ 823.915266][T30923] xt_hashlimit: invalid interval [ 824.506520][T30945] device vlan0 entered promiscuous mode [ 824.534822][T30947] No source specified [ 824.831785][T10201] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 824.954326][T30957] loop3: detected capacity change from 0 to 4096 [ 824.992568][T30957] /dev/loop3: Can't open blockdev [ 825.028504][T10201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 825.049620][T10201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 825.085780][T10201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 825.111666][T10201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 825.142547][ T4468] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 825.170692][T10201] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 825.222029][T10201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.230067][T10201] usb 5-1: Product: syz [ 825.271662][T10201] usb 5-1: Manufacturer: syz [ 825.290862][T10201] usb 5-1: SerialNumber: syz [ 825.328308][T10201] usb 5-1: config 0 descriptor?? [ 825.340274][T30973] loop7: detected capacity change from 0 to 1024 [ 825.379759][T30973] EXT4-fs: inline encryption not supported [ 825.459250][T30973] EXT4-fs (loop7): orphan cleanup on readonly fs [ 825.498713][T30973] EXT4-fs (loop7): 1 truncate cleaned up [ 825.542077][T30973] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 825.562328][T10201] adutux 5-1:0.0: Could not retrieve serial number [ 825.568915][T10201] adutux: probe of 5-1:0.0 failed with error -5 [ 825.803123][T10201] usb 5-1: USB disconnect, device number 67 [ 825.831922][T26659] EXT4-fs (loop7): unmounting filesystem. [ 826.014627][T30988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12028'. [ 826.523954][T31009] loop4: detected capacity change from 0 to 128 [ 826.627986][T31013] loop3: detected capacity change from 0 to 4096 [ 826.635710][T31013] /dev/loop3: Can't open blockdev [ 826.721374][ T5706] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 827.055663][T31025] xt_TCPMSS: Only works on TCP SYN packets [ 827.417819][T31041] CIFS mount error: No usable UNC path provided in device string! [ 827.417819][T31041] [ 827.521573][T31041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.136916][ T7149] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 828.366033][ T7149] usb 4-1: Using ep0 maxpacket: 32 [ 828.391526][ T7149] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 828.400629][ T7149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.447410][T31081] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12074'. [ 828.456328][ T7149] usb 4-1: config 0 descriptor?? [ 828.503436][ T7149] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 828.559986][T31083] CIFS mount error: No usable UNC path provided in device string! [ 828.559986][T31083] [ 828.639963][T31083] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.847934][T31089] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12079'. [ 828.909902][ T7149] gspca_nw80x: reg_r err -71 [ 828.914655][ T7149] nw80x: probe of 4-1:0.0 failed with error -71 [ 828.943967][ T7149] usb 4-1: USB disconnect, device number 62 [ 829.067995][T31095] loop4: detected capacity change from 0 to 256 [ 829.316987][T31102] netlink: 'syz.7.12084': attribute type 10 has an invalid length. [ 829.379476][T31102] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 829.831266][T31121] loop6: detected capacity change from 0 to 512 [ 829.875214][T31125] loop3: detected capacity change from 0 to 256 [ 829.912368][T31125] exfat: Deprecated parameter 'namecase' [ 829.918234][T31125] /dev/loop3: Can't open blockdev [ 829.932619][T31121] EXT4-fs: Ignoring removed orlov option [ 830.049912][T31121] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 830.152862][T31121] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:337: inode #15: comm syz.6.12095: verity file corrupted; can't find descriptor [ 830.269690][T31121] EXT4-fs (loop6): Remounting filesystem read-only [ 830.283406][T31138] loop4: detected capacity change from 0 to 764 [ 830.290140][T31121] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 830.449028][T31142] loop5: detected capacity change from 0 to 2048 [ 830.451573][T23045] EXT4-fs (loop6): unmounting filesystem. [ 830.474594][T10201] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 830.478171][T31142] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 830.591085][T31142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.673078][T10201] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 830.691133][T10201] usb 8-1: config 4 has no interface number 0 [ 830.723876][T10201] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 830.767669][T10201] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.770755][T31151] No such timeout policy "syz1" [ 830.831044][T10201] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 830.871426][T10201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.938928][T10201] hub 8-1:4.128: USB hub found [ 831.134642][T10201] hub 8-1:4.128: 27 ports detected [ 831.139841][T10201] hub 8-1:4.128: Using single TT (err -22) [ 831.192081][T10201] hub 8-1:4.128: insufficient power available to use all downstream ports [ 831.351873][T10201] hub 8-1:4.128: hub_hub_status failed (err = -71) [ 831.371371][T10201] hub 8-1:4.128: config failed, can't get hub status (err -71) [ 831.469766][T31172] IPv6: sit3: Disabled Multicast RS [ 831.472079][T10201] usb 8-1: USB disconnect, device number 7 [ 831.730919][T31180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12123'. [ 832.098904][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12131'. [ 832.099033][T31198] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1120) [ 832.099054][T31198] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 832.462386][T31210] netlink: 'syz.4.12138': attribute type 10 has an invalid length. [ 832.666215][T31210] team0: Device veth0_vlan is already a lower device of the team interface [ 832.764690][T31214] xt_CT: No such helper "syz0" [ 833.060646][T31233] overlayfs: unrecognized mount option "obj_type=@}\{" or missing value [ 833.209948][T31240] loop6: detected capacity change from 0 to 256 [ 833.339569][T31240] FAT-fs (loop6): Directory bread(block 64) failed [ 833.362602][T31243] loop5: detected capacity change from 0 to 128 [ 833.371294][T31240] FAT-fs (loop6): Directory bread(block 65) failed [ 833.377987][T31240] FAT-fs (loop6): Directory bread(block 66) failed [ 833.413239][T31240] FAT-fs (loop6): Directory bread(block 67) failed [ 833.470982][T31240] FAT-fs (loop6): Directory bread(block 68) failed [ 833.486105][T31245] usb usb9: usbfs: process 31245 (syz.4.12154) did not claim interface 0 before use [ 833.495669][T31240] FAT-fs (loop6): Directory bread(block 69) failed [ 833.542937][T31240] FAT-fs (loop6): Directory bread(block 70) failed [ 833.549713][T31240] FAT-fs (loop6): Directory bread(block 71) failed [ 833.627614][T31240] FAT-fs (loop6): Directory bread(block 72) failed [ 833.671239][T31240] FAT-fs (loop6): Directory bread(block 73) failed [ 834.151497][T31257] loop5: detected capacity change from 0 to 4096 [ 834.210863][T31257] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 834.226791][T31237] loop3: detected capacity change from 0 to 32768 [ 834.718354][T31272] loop3: detected capacity change from 0 to 4096 [ 834.767254][T31272] /dev/loop3: Can't open blockdev [ 835.225293][ T4468] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 835.468612][T31267] loop4: detected capacity change from 0 to 32768 [ 835.508687][T31284] loop6: detected capacity change from 0 to 1764 [ 835.582337][T31267] XFS (loop4): Mounting V5 Filesystem [ 835.804668][T31267] XFS (loop4): Ending clean mount [ 836.033040][ T4277] XFS (loop4): Unmounting Filesystem [ 836.140365][T31307] netlink: 'syz.7.12180': attribute type 10 has an invalid length. [ 836.198777][T31309] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 836.294531][T31307] device veth0_vlan left promiscuous mode [ 836.341407][T31307] device veth0_vlan entered promiscuous mode [ 836.377080][T31307] team0: Device veth0_vlan failed to register rx_handler [ 836.492316][T31310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.523691][T31310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.561276][T31310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.640958][T31310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.704266][T31310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.733089][T31310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.770084][T31312] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12184'. [ 836.785287][T31312] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12184'. [ 836.821382][T31312] netlink: 'syz.6.12184': attribute type 3 has an invalid length. [ 836.841118][T31312] netlink: 11 bytes leftover after parsing attributes in process `syz.6.12184'. [ 837.074487][T31318] loop4: detected capacity change from 0 to 8192 [ 837.181619][T31330] loop5: detected capacity change from 0 to 16 [ 837.235193][T31330] erofs: (device loop5): mounted with root inode @ nid 36. [ 837.343923][T31318] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 837.380979][T31318] FAT-fs (loop4): Filesystem has been set read-only [ 837.571069][T10201] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 837.762668][T10201] usb 7-1: No LPM exit latency info found, disabling LPM. [ 837.781370][T10201] usb 7-1: config 0 has no interfaces? [ 837.843827][T10201] usb 7-1: string descriptor 0 read error: -22 [ 837.850307][T10201] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.892437][T10201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.929157][T10201] usb 7-1: config 0 descriptor?? [ 838.174155][T10201] usb 7-1: USB disconnect, device number 11 [ 838.211345][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 838.791796][T31380] tmpfs: Bad value for 'mpol' [ 838.823705][T31383] netlink: 'syz.5.12212': attribute type 10 has an invalid length. [ 838.869213][T31386] loop6: detected capacity change from 0 to 256 [ 838.929170][T31383] team0: Device veth0_vlan failed to register rx_handler [ 839.831025][T31423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12228'. [ 839.884032][T31425] overlayfs: option "workdir=./file0:/" is useless in a non-upper mount, ignore [ 839.932238][T31425] overlayfs: missing 'lowerdir' [ 840.167078][T31436] netlink: 'syz.5.12234': attribute type 10 has an invalid length. [ 840.251672][T31436] team0: Device veth1_vlan failed to register rx_handler [ 840.764878][T31417] loop7: detected capacity change from 0 to 32768 [ 840.912122][T31417] XFS (loop7): Mounting V5 Filesystem [ 841.064917][T31476] loop5: detected capacity change from 0 to 8 [ 841.103865][T31476] squashfs image failed sanity check [ 841.248384][T31417] XFS (loop7): Ending clean mount [ 841.433680][T26659] XFS (loop7): Unmounting Filesystem [ 842.090559][T31507] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12264'. [ 842.225270][T31509] ceph: No source [ 842.480820][T31519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12269'. [ 842.599581][T31526] netlink: 7 bytes leftover after parsing attributes in process `syz.5.12272'. [ 842.639141][T31521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12270'. [ 842.830158][ T7149] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 843.043819][ T7149] usb 5-1: Using ep0 maxpacket: 32 [ 843.062386][ T7149] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 843.093721][ T7149] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 843.154525][T31528] loop7: detected capacity change from 0 to 32768 [ 843.160655][ T7149] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 843.197475][T31528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.12273 (31528) [ 843.200638][ T7149] usb 5-1: config 0 interface 0 has no altsetting 1 [ 843.245633][ T7149] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 843.291914][ T7149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 843.296870][T31528] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 843.322066][ T7149] usb 5-1: SerialNumber: syz [ 843.337720][ T7149] usb 5-1: config 0 descriptor?? [ 843.346419][T31546] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 843.365335][T31528] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 843.369666][ T7149] usb-storage 5-1:0.0: USB Mass Storage device detected [ 843.378003][T31548] netlink: 'syz.3.12281': attribute type 10 has an invalid length. [ 843.396970][T31528] BTRFS info (device loop7): using free space tree [ 843.455865][ T7149] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 843.473369][T31548] team0: Device veth0_vlan failed to register rx_handler [ 843.536803][T31558] loop6: detected capacity change from 0 to 512 [ 843.659356][ T7149] usb 5-1: USB disconnect, device number 68 [ 843.671356][T31558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 843.783620][T31558] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 843.830757][T31528] BTRFS info (device loop7): enabling ssd optimizations [ 843.919779][T31558] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 844.044256][T31558] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 844.139193][T31558] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.12283: Failed to acquire dquot type 0 [ 844.167588][T26659] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.344131][T23045] EXT4-fs (loop6): unmounting filesystem. [ 844.579998][T31585] loop5: detected capacity change from 0 to 4096 [ 844.759078][T31585] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 844.831077][T31597] device sit0 entered promiscuous mode [ 844.840941][T31585] ntfs3: loop5: Failed to load $Extend. [ 845.213555][T31609] loop5: detected capacity change from 0 to 1024 [ 845.248155][T31609] EXT4-fs: Ignoring removed bh option [ 845.377996][T31609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 845.570068][ T8208] EXT4-fs (loop5): unmounting filesystem. [ 845.800828][ T4349] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 845.889831][T31635] netlink: 'syz.4.12313': attribute type 41 has an invalid length. [ 846.000610][ T4349] usb 7-1: Using ep0 maxpacket: 8 [ 846.008243][ T4349] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.041506][ T4349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 846.072601][T31638] loop5: detected capacity change from 0 to 4096 [ 846.092183][ T4349] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 846.125083][T31638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 846.140270][ T4349] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 846.181532][ T4349] usb 7-1: Product: syz [ 846.191600][T31638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 846.202289][ T4349] usb 7-1: Manufacturer: syz [ 846.219433][ T4349] usb 7-1: SerialNumber: syz [ 846.225740][ T26] audit: type=1326 audit(846.211:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.257325][ T4349] usb 7-1: config 0 descriptor?? [ 846.266952][ T4349] imon_raw 7-1:0.0: IR endpoint missing [ 846.320073][ T26] audit: type=1326 audit(846.211:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.359792][ T26] audit: type=1326 audit(846.331:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.396824][ T8208] EXT4-fs (loop5): unmounting filesystem. [ 846.484379][ T26] audit: type=1326 audit(846.331:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.536263][ T4349] usb 7-1: USB disconnect, device number 12 [ 846.579850][ T26] audit: type=1326 audit(846.331:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.608516][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12318'. [ 846.671479][ T26] audit: type=1326 audit(846.331:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.771246][ T26] audit: type=1326 audit(846.331:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 846.781877][T31659] device vti0 entered promiscuous mode [ 846.883504][ T26] audit: type=1326 audit(846.331:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31642 comm="syz.7.12316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0fe599e0d9 code=0x7ffc0000 [ 847.131984][T31668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12326'. [ 847.286672][T31675] loop6: detected capacity change from 0 to 256 [ 847.481164][T31674] loop5: detected capacity change from 0 to 4096 [ 847.649200][T31674] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 847.886933][T31695] loop3: detected capacity change from 0 to 64 [ 848.160405][ T4468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.289985][T31707] loop7: detected capacity change from 0 to 64 [ 848.383510][T31712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12347'. [ 848.395509][T31710] loop3: detected capacity change from 0 to 256 [ 848.541133][ T4468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.927729][T31725] loop7: detected capacity change from 0 to 1024 [ 849.076002][T31725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 849.169933][T31733] delete_channel: no stack [ 849.190374][T31725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 849.318431][T31725] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 849.390411][T31725] System zones: 0-1, 3-36 [ 849.410834][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 849.442550][T31749] loop3: detected capacity change from 0 to 16 [ 849.443622][T31725] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 849.449737][T31749] /dev/loop3: Can't open blockdev [ 849.540386][ T4468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 849.743776][T26659] EXT4-fs (loop7): unmounting filesystem. [ 850.198604][T31770] loop6: detected capacity change from 0 to 512 [ 850.262294][T31770] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.12372: bg 0: block 313: padding at end of block bitmap is not set [ 850.336497][T31770] EXT4-fs (loop6): Remounting filesystem read-only [ 850.410483][T31770] EXT4-fs (loop6): 1 truncate cleaned up [ 850.434944][T31770] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 850.438100][T31742] loop4: detected capacity change from 0 to 32768 [ 850.501586][T31742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12363 (31742) [ 850.584654][T31742] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 850.619592][T31742] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 850.649067][T31780] xt_NFQUEUE: number of total queues is 0 [ 850.683393][T31742] BTRFS info (device loop4): force clearing of disk cache [ 850.703523][T23045] EXT4-fs (loop6): unmounting filesystem. [ 850.735258][T31742] BTRFS info (device loop4): use zlib compression, level 3 [ 850.768781][T31742] BTRFS info (device loop4): enabling ssd optimizations [ 850.822359][T31742] BTRFS info (device loop4): using spread ssd allocation scheme [ 850.842344][T31742] BTRFS info (device loop4): using free space tree [ 851.125686][T31809] netlink: 'syz.6.12384': attribute type 11 has an invalid length. [ 851.177447][T31742] BTRFS info (device loop4): rebuilding free space tree [ 851.290697][T31742] BTRFS info (device loop4): checking UUID tree [ 851.561796][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 852.042558][T31835] CacheFiles: No cache directory specified [ 852.156828][ T4468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (4468) [ 852.638698][T31856] dlm: no locking on control device [ 853.040736][T31872] ubi: mtd0 is already attached to ubi0 [ 853.335306][T31882] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 853.824044][T31896] xt_hashlimit: max too large, truncated to 1048576 [ 853.850605][T31896] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 854.186029][ T4349] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 854.283590][T31913] loop7: detected capacity change from 0 to 256 [ 854.401780][ T4349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.424913][ T4349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.444359][ T4349] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 854.519674][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 854.573959][ T4349] usb 4-1: SerialNumber: syz [ 854.609885][ T4349] usb 4-1: 0:2 : does not exist [ 854.972791][T31934] loop7: detected capacity change from 0 to 64 [ 855.027885][ T4318] usb 4-1: USB disconnect, device number 63 [ 855.073246][T31934] syz.7.12442: attempt to access beyond end of device [ 855.073246][T31934] loop7: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 855.158082][T31934] Buffer I/O error on dev loop7, logical block 22533, async page read [ 855.190186][T31934] syz.7.12442: attempt to access beyond end of device [ 855.190186][T31934] loop7: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 855.213950][T31942] loop6: detected capacity change from 0 to 1024 [ 855.231513][T31934] Buffer I/O error on dev loop7, logical block 22533, async page read [ 856.045905][T31966] loop7: detected capacity change from 0 to 128 [ 856.113336][T31937] loop4: detected capacity change from 0 to 32768 [ 856.119953][T31966] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 856.168852][T31966] hpfs: filesystem error: improperly stopped [ 856.229920][T31966] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 856.237730][T31966] hpfs: You really don't want any checks? You are crazy... [ 856.299990][T31966] hpfs: Code page index out of array [ 856.305323][T31966] hpfs: code page support is disabled [ 856.363440][T31966] hpfs: hpfs_map_4sectors(): unaligned read [ 856.385784][T31975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.420490][T31966] hpfs: hpfs_map_4sectors(): unaligned read [ 856.426468][T31966] hpfs: filesystem error: unable to find root dir [ 856.531568][T31966] hpfs: hpfs_map_sector(): read error [ 856.850109][T10201] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 857.051600][T10201] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 857.073285][T10201] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 857.103777][T10201] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 857.152097][T10201] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 857.215424][T10201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.247755][T10201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 857.276527][T10201] usb 6-1: SerialNumber: syz [ 857.309688][T10201] cdc_acm 6-1:1.0: invalid descriptor buffer length [ 857.344967][T10201] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 857.384749][T10201] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 857.391588][T10201] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 857.516186][T10201] usb 6-1: USB disconnect, device number 55 [ 857.591098][T31986] loop3: detected capacity change from 0 to 32768 [ 857.973546][ T8675] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 858.188950][ T8675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 858.208103][T32026] loop6: detected capacity change from 0 to 8 [ 858.220447][ T8675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 858.260650][ T8675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 858.290274][T32026] SQUASHFS error: Failed to read block 0x71: -5 [ 858.305326][ T8675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 858.350146][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 858.350159][ T26] audit: type=1800 audit(858.331:528): pid=32026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12487" name="file0" dev="loop6" ino=1 res=0 errno=0 [ 858.368364][ T8675] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 858.449795][ T8675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.478092][ T8675] usb 5-1: Product: syz [ 858.498264][ T8675] usb 5-1: Manufacturer: syz [ 858.518661][ T8675] usb 5-1: SerialNumber: syz [ 858.563135][ T8675] usb 5-1: config 0 descriptor?? [ 858.610268][ T8675] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 858.736035][T32046] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 858.865376][ T8675] ums-isd200: probe of 5-1:0.0 failed with error -22 [ 859.064789][ T8675] usb 5-1: USB disconnect, device number 69 [ 859.316940][T32066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12506'. [ 859.771049][T32086] loop3: detected capacity change from 0 to 256 [ 859.835147][ T4468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 860.165588][ T8670] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 860.379696][ T8675] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 860.387395][ T8670] usb 7-1: Using ep0 maxpacket: 16 [ 860.395823][ T8670] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.419715][ T8670] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.450222][ T8670] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 860.459289][ T8670] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 860.502296][ T8670] usb 7-1: SerialNumber: syz [ 860.533873][ T8670] usb 7-1: 0:2 : does not exist [ 860.617675][ T8675] usb 5-1: Using ep0 maxpacket: 16 [ 860.630431][ T8675] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 860.659011][ T8675] usb 5-1: config 254 has no interface number 0 [ 860.682990][ T8675] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 860.714596][ T8675] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 860.756536][ T8675] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.807252][ T8675] usb 5-1: config 254 interface 235 has no altsetting 0 [ 860.845027][ T8675] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 860.874359][ T8675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.894479][ T8675] usb 5-1: Product: syz [ 860.898706][ T8675] usb 5-1: Manufacturer: syz [ 860.934773][ T8675] usb 5-1: SerialNumber: syz [ 860.960650][ T8670] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 860.993910][ T8670] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 861.007727][T32105] loop7: detected capacity change from 0 to 32768 [ 861.049154][T32105] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 11 [ 861.063999][ T8670] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 861.090137][ T8670] usb 7-1: USB disconnect, device number 13 [ 861.138697][ T4468] udevd[4468]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 861.165107][ T8675] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 861.173338][ T8675] usbtest: probe of 5-1:254.235 failed with error -71 [ 861.231183][ T8675] usb 5-1: USB disconnect, device number 70 [ 861.387386][ T4265] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 11 [ 861.639819][ T4349] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 861.679484][ T26] audit: type=1326 audit(861.652:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 861.759880][ T26] audit: type=1326 audit(861.702:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 861.779745][T10201] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 861.841641][ T4349] usb 8-1: unable to get BOS descriptor or descriptor too short [ 861.858922][ T4349] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 861.880591][ T26] audit: type=1326 audit(861.702:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 861.917317][ T4349] usb 8-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 861.942293][ T4349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.959687][ T4349] usb 8-1: Product: syz [ 861.963990][ T26] audit: type=1326 audit(861.702:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 861.998820][ T4349] usb 8-1: Manufacturer: syz [ 862.003798][ T4349] usb 8-1: SerialNumber: syz [ 862.011376][T10201] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 862.026832][T10201] usb 6-1: config 0 has no interface number 0 [ 862.035163][T32121] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 862.049500][T10201] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 862.075283][ T26] audit: type=1326 audit(861.702:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 862.104853][T10201] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 862.138508][T10201] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 862.159837][ T26] audit: type=1326 audit(861.702:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 862.203117][T10201] usb 6-1: config 0 interface 2 has no altsetting 0 [ 862.227213][ T26] audit: type=1326 audit(861.702:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32126 comm="syz.3.12536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa6dc39e0d9 code=0x7ffc0000 [ 862.279694][T10201] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 862.307384][T10201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.338516][ T4349] usb 8-1: USB disconnect, device number 8 [ 862.349425][T10201] usb 6-1: Product: syz [ 862.364819][T10201] usb 6-1: Manufacturer: syz [ 862.397454][T10201] usb 6-1: SerialNumber: syz [ 862.422966][ T6128] udevd[6128]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.439801][T10201] usb 6-1: config 0 descriptor?? [ 862.447452][T32123] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 862.455318][T32145] netlink: 'syz.3.12545': attribute type 21 has an invalid length. [ 862.485492][T32123] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 862.538162][T32145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12545'. [ 863.020733][T10201] usb 6-1: USB disconnect, device number 56 [ 863.138979][T32166] loop4: detected capacity change from 0 to 8 [ 863.201113][T32166] SQUASHFS error: Failed to read block 0x71: -5 [ 863.222903][ T26] audit: type=1800 audit(863.202:536): pid=32166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12555" name="file0" dev="loop4" ino=1 res=0 errno=0 [ 863.419709][T11140] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 863.609701][T11140] usb 4-1: Using ep0 maxpacket: 8 [ 863.618188][T11140] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 863.635500][T11140] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.698658][T11140] usb 4-1: config 0 has no interface number 0 [ 863.713663][ T26] audit: type=1326 audit(863.692:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 863.740889][T11140] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 863.777293][T11140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.799914][T11140] usb 4-1: Product: syz [ 863.804251][ T26] audit: type=1326 audit(863.722:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 863.827781][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.844136][T11140] usb 4-1: Manufacturer: syz [ 863.869563][T11140] usb 4-1: SerialNumber: syz [ 863.892718][T11140] usb 4-1: config 0 descriptor?? [ 863.939494][ T26] audit: type=1326 audit(863.732:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.029544][ T4349] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 864.039574][ T26] audit: type=1326 audit(863.732:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.111316][T11140] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 864.119850][T11140] usb 4-1: No valid video chain found. [ 864.149493][ T26] audit: type=1326 audit(863.742:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.224439][ T4349] usb 5-1: Using ep0 maxpacket: 32 [ 864.232077][ T4349] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 864.259484][ T26] audit: type=1326 audit(863.742:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.266311][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 864.301499][ T4349] usb 5-1: config 0 has no interface number 0 [ 864.308043][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.322671][T32196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12569'. [ 864.344505][ T26] audit: type=1326 audit(863.742:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.378505][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.418853][T11140] usb 4-1: USB disconnect, device number 64 [ 864.426029][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 864.465484][ T4349] usb 5-1: config 0 has no interface number 0 [ 864.469476][ T26] audit: type=1326 audit(863.752:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.489671][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.535353][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.579707][ T26] audit: type=1326 audit(863.752:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32181 comm="syz.5.12563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f2b99e0d9 code=0x7ffc0000 [ 864.580611][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 864.694476][ T4349] usb 5-1: config 0 has no interface number 0 [ 864.730368][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.760766][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.797942][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 864.827647][ T4349] usb 5-1: config 0 has no interface number 0 [ 864.844238][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.864489][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 864.916637][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 864.960765][ T4349] usb 5-1: config 0 has no interface number 0 [ 864.966909][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.017445][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 865.019308][T32216] loop7: detected capacity change from 0 to 512 [ 865.061680][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 865.102664][ T4349] usb 5-1: config 0 has no interface number 0 [ 865.129150][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.185635][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 865.226241][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 865.244735][ T4349] usb 5-1: config 0 has no interface number 0 [ 865.251576][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.261711][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 865.271954][T32216] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 33619980: comm syz.7.12580: invalid block [ 865.286667][ T4349] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 865.302190][ T4349] usb 5-1: config 0 has no interface number 0 [ 865.318654][ T4349] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.329317][ T4349] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 865.351747][ T4349] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 865.369427][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.387829][ T4349] usb 5-1: Product: syz [ 865.392141][ T4349] usb 5-1: Manufacturer: syz [ 865.396977][ T4349] usb 5-1: SerialNumber: syz [ 865.397300][T32216] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.12580: Invalid block bitmap block 0 in block_group 0 [ 865.416516][ T4349] usb 5-1: config 0 descriptor?? [ 865.439468][ T4349] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 865.498434][T32216] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 865.529740][T32216] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.12580: attempt to clear invalid blocks 983261 len 1 [ 865.597479][T32216] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.12580: invalid indirect mapped block 2683928664 (level 0) [ 865.646021][ T4349] etas_es58x 5-1:0.2: Product info: [ 865.664685][T32216] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.12580: Invalid inode table block 0 in block_group 0 [ 865.729906][T32216] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 865.766997][T32216] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 865.806553][T32216] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.12580: Invalid inode table block 0 in block_group 0 [ 865.851561][T32237] tmpfs: Bad value for 'mpol' [ 865.916530][T32216] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 865.959679][T32216] EXT4-fs error (device loop7): ext4_truncate:4325: inode #13: comm syz.7.12580: mark_inode_dirty error [ 865.993440][ T8670] usb 5-1: USB disconnect, device number 71 [ 866.009357][T32216] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 866.019818][ T8670] etas_es58x 5-1:0.2: Disconnecting syz syz [ 866.036134][T32239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12590'. [ 866.054930][T32216] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.12580: Invalid inode table block 0 in block_group 0 [ 866.098263][T32239] netlink: 112 bytes leftover after parsing attributes in process `syz.6.12590'. [ 866.099951][T32216] EXT4-fs (loop7): 1 truncate cleaned up [ 866.155926][T32216] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 866.238144][T32228] loop3: detected capacity change from 0 to 32768 [ 866.252154][T32216] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.12580: Invalid inode table block 0 in block_group 0 [ 866.287350][T32216] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 866.305190][T32228] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.12584 (32228) [ 866.330068][T32244] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12592'. [ 866.398310][T32228] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 866.447990][T32228] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 866.485680][T32228] BTRFS info (device loop3): enabling auto defrag [ 866.500820][T26659] EXT4-fs (loop7): unmounting filesystem. [ 866.516809][T32228] BTRFS info (device loop3): force clearing of disk cache [ 866.569472][T32228] BTRFS info (device loop3): ignoring data csums [ 866.598763][T32228] BTRFS info (device loop3): turning on async discard [ 866.636369][T32228] BTRFS info (device loop3): setting nodatacow, compression disabled [ 866.676810][T32228] BTRFS info (device loop3): turning off async discard [ 866.729509][T32228] BTRFS info (device loop3): disabling free space tree [ 867.175686][ T4281] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 867.513915][T32292] loop5: detected capacity change from 0 to 2048 [ 867.556594][ T4468] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4468) [ 867.610605][T32292] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 867.750547][T32292] overlayfs: upper fs is r/o, try multi-lower layers mount [ 867.829516][T32246] loop6: detected capacity change from 0 to 32768 [ 867.945936][ T8208] EXT4-fs (loop5): unmounting filesystem. [ 868.009760][T32246] XFS (loop6): Mounting V5 Filesystem [ 868.077630][T32246] XFS (loop6): Ending clean mount [ 868.213872][T23045] XFS (loop6): Unmounting Filesystem [ 868.805250][ T26] audit: type=1326 audit(868.782:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.4.12617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 868.940016][ T26] audit: type=1326 audit(868.782:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.4.12617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 869.104036][ T26] audit: type=1326 audit(868.822:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.4.12617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 869.200485][T32349] trusted_key: encrypted_key: master key parameter is missing [ 869.299791][ T26] audit: type=1326 audit(868.822:549): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.4.12617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 869.427605][ T26] audit: type=1326 audit(868.822:550): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.4.12617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f39e0d9 code=0x7ffc0000 [ 869.891971][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.446972][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12639'. [ 870.561121][T32359] loop4: detected capacity change from 0 to 32768 [ 870.697791][T32359] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 870.994607][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 871.439903][T32389] loop5: detected capacity change from 0 to 32768 [ 871.621530][T32389] XFS (loop5): Mounting V5 Filesystem [ 871.629163][ T6179] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 871.833901][T32389] XFS (loop5): Ending clean mount [ 871.860243][ T6179] usb 4-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 871.897352][ T6179] usb 4-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.943703][ T6179] usb 4-1: config 1 interface 0 has no altsetting 0 [ 872.005214][ T6179] usb 4-1: string descriptor 0 read error: -22 [ 872.028688][ T6179] usb 4-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 872.039598][ T8208] XFS (loop5): Unmounting Filesystem [ 872.069071][ T6179] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 872.194827][ T6179] usbhid 4-1:1.0: fixing wrong optional hid class descriptors count [ 872.257447][T32417] loop3: detected capacity change from 0 to 32768 [ 872.259072][ T6179] usbhid 4-1:1.0: can't add hid device: -22 [ 872.273907][T32454] loop4: detected capacity change from 0 to 8 [ 872.289181][ T6179] usbhid: probe of 4-1:1.0 failed with error -22 [ 872.384936][T32417] loop3: p1 p3 < > [ 872.558254][ T126] usb 4-1: USB disconnect, device number 65 [ 873.339198][ T6177] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 873.479072][T32487] netlink: 'syz.5.12675': attribute type 4 has an invalid length. [ 873.525148][ T26] audit: type=1400 audit(873.502:551): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE1 pid=32488 comm="syz.4.12676" [ 873.545300][ T4468] udevd[4468]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 873.545459][ T5706] udevd[5706]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 873.555611][T32487] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12675'. [ 873.588972][ T6177] usb 8-1: Using ep0 maxpacket: 16 [ 873.595697][ T6177] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 873.620894][ T6177] usb 8-1: config 0 has no interface number 0 [ 873.641031][ T6177] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 873.708983][ T6177] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 873.758304][ T6177] usb 8-1: config 0 interface 41 has no altsetting 0 [ 873.783891][ T6177] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 873.846472][ T6177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.881059][ T6177] usb 8-1: Product: syz [ 873.885274][ T6177] usb 8-1: Manufacturer: syz [ 873.939307][ T6177] usb 8-1: SerialNumber: syz [ 873.963248][ T6177] usb 8-1: config 0 descriptor?? [ 873.968790][T32475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 873.982341][T32500] loop6: detected capacity change from 0 to 256 [ 873.991947][T32475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 874.131996][T32505] netlink: 'syz.5.12684': attribute type 5 has an invalid length. [ 874.214299][T32475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 874.270103][T32475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 874.391964][T32515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12689'. [ 874.540298][ T6177] sr9700 8-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 874.582308][ T6177] usb 8-1: USB disconnect, device number 9 [ 875.148735][T32537] loop4: detected capacity change from 0 to 512 [ 875.219063][T32537] EXT4-fs: Ignoring removed orlov option [ 875.224780][T32537] EXT4-fs: Ignoring removed mblk_io_submit option [ 875.339653][T32537] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 875.461479][T32537] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.12700: attempt to clear invalid blocks 2 len 1 [ 875.546000][T32537] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 875.608996][T32537] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.12700: invalid indirect mapped block 1819239214 (level 0) [ 875.658747][T32537] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.12700: invalid indirect mapped block 1819239214 (level 1) [ 875.765769][T32537] EXT4-fs (loop4): 1 truncate cleaned up [ 875.783918][T32537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 876.003984][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 876.085337][T32539] loop6: detected capacity change from 0 to 32768 [ 876.201560][T32539] XFS (loop6): Mounting V5 Filesystem [ 876.357282][T32539] XFS (loop6): Ending clean mount [ 876.372505][ T8675] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 876.501569][T23045] XFS (loop6): Unmounting Filesystem [ 876.591913][ T8675] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 876.610643][ T8675] usb 8-1: config 0 has no interface number 0 [ 876.619197][T32558] loop3: detected capacity change from 0 to 32768 [ 876.639261][ T8675] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 876.673095][ T8675] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 876.697845][T32558] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 876.715746][ T8675] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 876.738906][ T8675] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.757129][ T8675] usb 8-1: Product: syz [ 876.767189][ T8675] usb 8-1: Manufacturer: syz [ 876.782055][ T8675] usb 8-1: SerialNumber: syz [ 876.793702][ T8675] usb 8-1: config 0 descriptor?? [ 876.806525][T32558] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 876.809507][T32565] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 876.840270][ T8675] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 876.860547][ T8675] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 877.099551][ T4281] INFO: trying to register non-static key. [ 877.105399][ T4281] The code is fine but needs lockdep annotation, or maybe [ 877.112507][ T4281] you didn't initialize this object before use? [ 877.118741][ T4281] turning off the locking correctness validator. [ 877.125086][ T4281] CPU: 0 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 877.132640][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.142710][ T4281] Call Trace: [ 877.145993][ T4281] [ 877.148925][ T4281] dump_stack_lvl+0x188/0x24e [ 877.153626][ T4281] ? show_regs_print_info+0x12/0x12 [ 877.158839][ T4281] ? load_image+0x410/0x410 [ 877.163389][ T4281] ? _find_next_bit+0x11e/0x130 [ 877.168349][ T4281] ? __is_module_percpu_address+0x279/0x3b0 [ 877.174305][ T4281] ? is_kernel_percpu_address+0x18f/0x1b0 [ 877.180042][ T4281] assign_lock_key+0x201/0x230 [ 877.184843][ T4281] ? SOFTIRQ_verbose+0x10/0x10 [ 877.189629][ T4281] register_lock_class+0x21d/0x870 [ 877.194758][ T4281] ? mark_lock+0x94/0x320 [ 877.199102][ T4281] ? is_dynamic_key+0x260/0x260 [ 877.203963][ T4281] ? __lock_acquire+0x1465/0x7c40 [ 877.209002][ T4281] __lock_acquire+0x172/0x7c40 [ 877.213781][ T4281] ? kernel_text_address+0x9c/0xd0 [ 877.219009][ T4281] ? __kernel_text_address+0x9/0x30 [ 877.224213][ T4281] ? verify_lock_unused+0x140/0x140 [ 877.229421][ T4281] ? verify_lock_unused+0x140/0x140 [ 877.234633][ T4281] ? stack_trace_save+0xa6/0xf0 [ 877.239500][ T4281] ? __stack_depot_save+0x35/0x480 [ 877.244702][ T4281] lock_acquire+0x1bb/0x4a0 [ 877.249216][ T4281] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 877.255188][ T4281] ? memset+0x1e/0x40 [ 877.259251][ T4281] ? read_lock_is_recursive+0x10/0x10 [ 877.264637][ T4281] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 877.270890][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 877.275165][T32592] loop5: detected capacity change from 0 to 64 [ 877.276081][ T4281] _raw_spin_lock_irqsave+0xb0/0x100 [ 877.287501][ T4281] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 877.293403][ T4281] ? _raw_spin_lock+0x40/0x40 [ 877.298090][ T4281] ? ktime_get+0x247/0x270 [ 877.302514][ T4281] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 877.308240][ T4281] ? ocfs2_dlm_shutdown+0x230/0x230 [ 877.313456][ T4281] ? slab_free_freelist_hook+0x133/0x1b0 [ 877.319145][ T4281] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 877.324708][ T4281] ? ocfs2_journal_init+0xd40/0xd40 [ 877.329919][ T4281] ocfs2_dlm_shutdown+0x33/0x230 [ 877.334857][ T4281] ocfs2_dismount_volume+0x479/0x940 [ 877.340235][ T4281] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 877.345522][ T4281] ? clear_inode+0x150/0x150 [ 877.350120][ T4281] ? dput+0x37/0x1d0 [ 877.354054][ T4281] ? ocfs2_free_inode+0x20/0x20 [ 877.358894][ T4281] generic_shutdown_super+0x130/0x340 [ 877.364285][ T4281] kill_block_super+0x7c/0xe0 [ 877.368955][ T4281] deactivate_locked_super+0x93/0xf0 [ 877.374229][ T4281] cleanup_mnt+0x471/0x4f0 [ 877.378682][ T4281] task_work_run+0x1d0/0x260 [ 877.383273][ T4281] ? task_work_cancel+0x220/0x220 [ 877.388290][ T4281] ? exit_to_user_mode_loop+0x3b/0x110 [ 877.393786][ T4281] exit_to_user_mode_loop+0xe6/0x110 [ 877.399064][ T4281] exit_to_user_mode_prepare+0xee/0x180 [ 877.404605][ T4281] syscall_exit_to_user_mode+0x16/0x40 [ 877.410053][ T4281] do_syscall_64+0x58/0xa0 [ 877.414463][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 877.419130][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 877.423797][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.429690][ T4281] RIP: 0033:0x7fa6dc39f317 [ 877.434097][ T4281] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 877.453882][ T4281] RSP: 002b:00007fff4236aad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 877.462345][ T4281] RAX: 0000000000000000 RBX: 00007fa6dc434474 RCX: 00007fa6dc39f317 [ 877.470307][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4236ab90 [ 877.478265][ T4281] RBP: 00007fff4236ab90 R08: 00007fff4236bb90 R09: 00000000ffffffff [ 877.486224][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4236bc20 [ 877.494187][ T4281] R13: 00007fa6dc434474 R14: 00000000000d61a8 R15: 00007fff4236bc60 [ 877.502149][ T4281] [ 877.513105][ T6177] usb 8-1: USB disconnect, device number 10 [ 877.530520][ T6177] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 877.550229][ T6177] cyberjack 8-1:0.69: device disconnected [ 877.588860][ T4281] ocfs2: Unmounting device (7,3) on (node local) [ 877.802979][T32597] loop3: detected capacity change from 0 to 164 [ 877.824759][T32597] iso9660: Corrupted directory entry in block 4 of inode 1792