last executing test programs: 3m22.197916751s ago: executing program 2 (id=8902): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 3m22.016146996s ago: executing program 2 (id=8905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 3m21.792738011s ago: executing program 2 (id=8910): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10) 3m21.626233745s ago: executing program 2 (id=8914): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m21.219153816s ago: executing program 2 (id=8923): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001a00)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 3m20.048135454s ago: executing program 2 (id=8937): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x1013, 0x2, @stepwise={0x0, 0x3ff, 0x0, 0x0, 0x200}}) 3m19.80732113s ago: executing program 32 (id=8937): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x1013, 0x2, @stepwise={0x0, 0x3ff, 0x0, 0x0, 0x200}}) 3.497237474s ago: executing program 3 (id=12055): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '%', 0x20, 0x84}, 0x29, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.276085929s ago: executing program 3 (id=12059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) 2.947564338s ago: executing program 3 (id=12066): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0x3d, 0x107, 0x70bd27, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.938226487s ago: executing program 0 (id=12067): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.803294621s ago: executing program 1 (id=12068): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000005c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x2) 2.696684464s ago: executing program 3 (id=12070): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.696497754s ago: executing program 0 (id=12071): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={0x50, 0x12, 0x101, 0x0, 0x0, {0x0, 0xfe, 0x4, 0x0, {0x0, 0x2000, [0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x100]}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 2.568981257s ago: executing program 0 (id=12073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 2.476950119s ago: executing program 1 (id=12074): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) readv(r0, 0x0, 0x0) 2.292149634s ago: executing program 1 (id=12075): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00ffa100000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.775209986s ago: executing program 1 (id=12079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e21, 0xc, @mcast2, 0x213d}}}, 0x32) 1.765673346s ago: executing program 0 (id=12081): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d036ae269b0, 0x8031, 0xffffffffffffffff, 0xf6e30000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 1.63665241s ago: executing program 1 (id=12082): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa3, 0x6b, 0xbc, 0x8, 0xbda, 0x139, 0x4570, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x20, 0x3, "", [{{0x9, 0x4, 0x66, 0x0, 0x0, 0xa3, 0xbe, 0xaf, 0x6}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(0x0, 0x0, 0x298000) 1.636540959s ago: executing program 0 (id=12083): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x1a1040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x4008661e, &(0x7f0000000080)) 1.476578133s ago: executing program 0 (id=12085): r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x308, &(0x7f0000000080)=ANY=[]) 1.118370183s ago: executing program 4 (id=12090): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 1.032413365s ago: executing program 3 (id=12092): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) 878.687418ms ago: executing program 3 (id=12094): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 811.26502ms ago: executing program 4 (id=12095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x29}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 671.005654ms ago: executing program 5 (id=12096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 667.408934ms ago: executing program 4 (id=12097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff5593700000080000000021a8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 501.447668ms ago: executing program 5 (id=12098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 439.187859ms ago: executing program 4 (id=12099): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000440)) 372.535891ms ago: executing program 5 (id=12100): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) sendfile(r0, r0, 0x0, 0x9) 271.236333ms ago: executing program 4 (id=12101): r0 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40084146, &(0x7f0000000000)) 177.799135ms ago: executing program 5 (id=12102): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x67, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x50}, 0x0) 126.156757ms ago: executing program 4 (id=12103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x490, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x91, 0x40, {0xb, 0x0, 0x3, 0x1da, 0x206, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xb, 0x0, 0x2, 0x9d, 0x9, 0x6, 0xd65, 0xfffffff9, 0x0, 0x8, 0x6, 0x6, 0x1, 0x100, 0x0, 0x10, 0xffff, 0x2, 0x800, 0x80000000, 0x8, 0x4dbbcd1b, 0x4, 0x8, 0x800, 0x7, 0x0, 0x8, 0xb97, 0xd6, 0x7, 0x9, 0x0, 0xea, 0x8, 0x9, 0x1, 0x8, 0xe3, 0x2, 0x2, 0x9, 0x1000437f, 0x200, 0x0, 0x200, 0x1, 0x1ff, 0x3, 0xd5, 0x6, 0x2, 0xfffffff9, 0x5, 0x6, 0x7, 0xcf5, 0x83a7, 0x7db, 0x3, 0xb, 0x8, 0x5, 0x9, 0x1000, 0x6, 0x7, 0x8e09, 0x7af, 0x2, 0xe8, 0x3, 0x5, 0x6, 0x81, 0x2, 0x8, 0x405, 0xfffffffe, 0x101, 0x5, 0x2, 0x2921579d, 0x6, 0xfffffff8, 0x40, 0x2, 0x9, 0x2, 0x4, 0x2, 0x8003, 0x9, 0x5, 0xfffffffd, 0x8, 0x8, 0x2, 0x3, 0x2, 0x3ff, 0x9, 0x5, 0xb3, 0x6832, 0x4, 0x8, 0x401, 0x6, 0x810b, 0x8, 0x3, 0x1, 0x6, 0x8cf60000, 0x0, 0x2, 0x7, 0x5, 0x6, 0x6, 0x9, 0x6, 0x81, 0x384, 0x7, 0x1, 0x2, 0x1000, 0x7, 0xf, 0x4, 0x1, 0x0, 0xb, 0x4, 0x0, 0x9, 0x6e55, 0x80000001, 0x3, 0x3, 0xa, 0x0, 0xa, 0x63a82083, 0x0, 0x0, 0x80000001, 0xde, 0xb, 0x401, 0x6, 0x7, 0x8, 0x10001, 0x590a, 0x3, 0x8, 0x1, 0x0, 0x4defd41f, 0x80000000, 0x9, 0x6, 0x8, 0xfff, 0xd73, 0x0, 0xce04, 0x7, 0xf, 0x10, 0x1, 0x1, 0x7, 0xc000, 0x0, 0x81, 0xe03, 0x3, 0x3, 0x32, 0x20e2ffff, 0x222f, 0x8, 0x5, 0x74e, 0x0, 0x2, 0x0, 0x830, 0xfff, 0x7fffffff, 0x9, 0x2, 0xc, 0x0, 0x2, 0x1ff, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x9, 0x5, 0x1d89, 0xd14, 0x2, 0xa5a, 0x4, 0x4, 0xfffffff8, 0x7, 0x4, 0x9, 0x0, 0x6, 0x5, 0x2, 0x7, 0x0, 0x3, 0x7ff, 0xfffffffa, 0x800, 0x80, 0x3, 0xf71800, 0x1, 0x101, 0x80000000, 0x5, 0x4010, 0x6, 0x7, 0x4, 0x7, 0x1, 0xe514, 0x101, 0x3, 0x10001, 0x5, 0x8, 0x6061, 0xc, 0x1ff, 0x8001, 0x8, 0x8, 0x2, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 79.643188ms ago: executing program 5 (id=12104): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x7) 113.1µs ago: executing program 1 (id=12105): r0 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x4, 0x33524742, 0x2, @discrete={0x3, 0x2}}) 0s ago: executing program 5 (id=12106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000000100000100000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r0}, 0x38) kernel console output (not intermixed with test programs): 6 [ 1067.133267][T27729] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1067.184595][T27729] BTRFS info (device loop1): enabling auto defrag [ 1067.215233][T27729] BTRFS info (device loop1): force clearing of disk cache [ 1067.267059][T27729] BTRFS info (device loop1): ignoring data csums [ 1067.284550][T27729] BTRFS info (device loop1): turning on async discard [ 1067.307447][T27757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1067.336107][T27757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.350848][T27729] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1067.368020][T27757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.380447][T27729] BTRFS info (device loop1): turning off async discard [ 1067.389457][T27729] BTRFS info (device loop1): disabling free space tree [ 1067.431461][T27757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 1067.658986][ T27] audit: type=1326 audit(1788805252.908:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1067.810080][ T27] audit: type=1326 audit(1788805252.908:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1067.944378][ T4277] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1067.962138][ T27] audit: type=1326 audit(1788805252.945:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.039873][ T27] audit: type=1326 audit(1788805252.945:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.125424][ T27] audit: type=1326 audit(1788805252.954:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.256211][ T27] audit: type=1326 audit(1788805252.954:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.372388][ T27] audit: type=1326 audit(1788805252.954:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.500896][ T27] audit: type=1326 audit(1788805252.954:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.546836][T27802] loop5: detected capacity change from 0 to 4096 [ 1068.595711][T27802] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1068.615573][ T27] audit: type=1326 audit(1788805252.954:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.3.10240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1068.781287][T27816] loop3: detected capacity change from 0 to 256 [ 1068.836677][T27819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1068.889497][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1068.933874][T27819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1069.033684][T27819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1069.397951][T27838] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1070.049951][T27867] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1070.131938][ T5620] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1070.380992][ T5620] usb 1-1: Using ep0 maxpacket: 16 [ 1070.389314][ T5620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.405191][ T5620] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1070.437861][ T5620] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1070.476158][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.486548][ T5620] usb 1-1: Product: syz [ 1070.491409][ T5620] usb 1-1: Manufacturer: syz [ 1070.496253][ T5620] usb 1-1: SerialNumber: syz [ 1070.522110][ T5620] r8152-cfgselector 1-1: config 0 descriptor?? [ 1070.591610][T27895] overlayfs: missing 'lowerdir' [ 1070.757014][ T5620] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1070.787250][T27903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1070.820685][T27903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.846618][T27903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.903053][T27903] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1070.955384][ T4322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1070.981622][ T4366] usb 1-1: USB disconnect, device number 17 [ 1070.992486][T27911] loop5: detected capacity change from 0 to 8 [ 1071.401524][ T4322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1071.659364][ T5833] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1071.691190][T27933] loop0: detected capacity change from 0 to 128 [ 1071.752659][T27933] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1071.847460][T27933] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1071.869558][T27933] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.10313: checksumming directory block 0 [ 1071.885502][ T5833] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1071.928976][ T5833] usb 4-1: config 0 has no interface number 0 [ 1071.974273][ T5833] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1072.003323][ T5833] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1072.077382][ T4288] EXT4-fs (loop0): unmounting filesystem. [ 1072.078674][ T5833] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 1072.117250][ T5833] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1072.127329][ T5833] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1072.136741][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.145136][ T5833] usb 4-1: Product: syz [ 1072.149737][ T5833] usb 4-1: Manufacturer: syz [ 1072.154353][ T5833] usb 4-1: SerialNumber: syz [ 1072.177561][ T5833] usb 4-1: config 0 descriptor?? [ 1072.190963][T27923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1072.201226][T27923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1072.466095][T27957] netlink: zone id is out of range [ 1072.708393][ T5833] usb 4-1: USB disconnect, device number 40 [ 1072.758447][T27966] __nla_validate_parse: 16 callbacks suppressed [ 1072.758468][T27966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1072.989578][T27980] netlink: 'syz.4.10335': attribute type 6 has an invalid length. [ 1073.013400][T27980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10335'. [ 1073.139417][T27988] xt_TCPMSS: Only works on TCP SYN packets [ 1073.327521][ T5833] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1073.384923][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1073.384938][ T27] audit: type=1400 audit(1788805258.198:156): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=27996 comm="syz.1.10344" [ 1073.567365][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1073.622981][ T5833] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1073.659795][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.668988][ T5833] usb 6-1: Product: syz [ 1073.673460][ T5833] usb 6-1: Manufacturer: syz [ 1073.694780][ T5833] usb 6-1: SerialNumber: syz [ 1073.724148][ T5833] usb 6-1: config 0 descriptor?? [ 1073.751701][T27984] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1073.763036][ T5833] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1073.838833][T28017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10354'. [ 1073.859655][T28017] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10354'. [ 1073.874417][T28017] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10354'. [ 1073.890705][T16882] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1073.898940][T28017] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1073.929808][T28021] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.10356'. [ 1073.939752][T28021] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4 [ 1074.005093][ T5833] usb 6-1: USB disconnect, device number 7 [ 1074.063500][T28025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10359'. [ 1074.109970][T16882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.130289][T16882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.147947][T16882] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1074.157996][ T27] audit: type=1326 audit(1788805258.909:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28028 comm="syz.0.10360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb31159e0d9 code=0x0 [ 1074.158989][T16882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1074.190452][T16882] usb 5-1: SerialNumber: syz [ 1074.420845][T28027] loop3: detected capacity change from 0 to 32768 [ 1074.433355][T16882] usb 5-1: 0:2 : does not exist [ 1074.448739][T28027] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.10358 (28027) [ 1074.474053][T28027] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1074.485042][T16882] usb 5-1: USB disconnect, device number 18 [ 1074.501222][T28027] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1074.513005][T28027] BTRFS info (device loop3): enabling auto defrag [ 1074.524920][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.541314][T28027] BTRFS info (device loop3): force clearing of disk cache [ 1074.549506][T28027] BTRFS info (device loop3): ignoring data csums [ 1074.573705][T28027] BTRFS info (device loop3): turning on async discard [ 1074.595273][T28027] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1074.625374][T28027] BTRFS info (device loop3): turning off async discard [ 1074.640968][T28027] BTRFS info (device loop3): disabling free space tree [ 1074.994598][T28027] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1075.136519][T28063] netlink: 'syz.1.10366': attribute type 1 has an invalid length. [ 1075.144584][T28063] netlink: 'syz.1.10366': attribute type 2 has an invalid length. [ 1075.412687][T28073] loop0: detected capacity change from 0 to 164 [ 1075.531269][T28073] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1076.067572][T28097] loop0: detected capacity change from 0 to 64 [ 1076.076419][T28098] loop3: detected capacity change from 0 to 16 [ 1076.107008][T28098] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1076.121589][T28098] /dev/loop3: Can't open blockdev [ 1076.170967][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1076.772154][T16882] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1076.777354][T28127] device vti0 entered promiscuous mode [ 1076.870286][T28131] ip6t_srh: unknown srh invflags 4000 [ 1076.988704][T16882] usb 4-1: Using ep0 maxpacket: 8 [ 1076.995526][T16882] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1077.045923][T16882] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1077.084083][T16882] usb 4-1: config 0 has no interface number 0 [ 1077.093381][T16882] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1077.115757][T16882] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1077.138313][T16882] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1077.161970][T16882] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1077.211946][T28116] loop4: detected capacity change from 0 to 32768 [ 1077.217852][T16882] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1077.239714][T16882] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1077.264811][T28116] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.10392 (28116) [ 1077.269508][T16882] usb 4-1: Manufacturer: syz [ 1077.319777][T16882] usb 4-1: config 0 descriptor?? [ 1077.330076][T28116] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1077.346302][T16882] hub 4-1:0.52: bad descriptor, ignoring hub [ 1077.374075][T28116] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1077.378605][T16882] hub: probe of 4-1:0.52 failed with error -5 [ 1077.423106][T28116] BTRFS info (device loop4): enabling auto defrag [ 1077.448432][T28116] BTRFS info (device loop4): force clearing of disk cache [ 1077.480958][T28116] BTRFS info (device loop4): ignoring data csums [ 1077.503585][T28116] BTRFS info (device loop4): turning on async discard [ 1077.530428][T28116] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1077.562738][T28116] BTRFS info (device loop4): turning off async discard [ 1077.580898][T16882] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input82 [ 1077.592282][T28116] BTRFS info (device loop4): disabling free space tree [ 1077.752514][T28165] xt_TCPMSS: Only works on TCP SYN packets [ 1078.061500][ T4366] usb 4-1: USB disconnect, device number 41 [ 1078.126352][T16882] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1078.178287][ T4276] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1078.371999][T16882] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1078.392001][T16882] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1078.412816][ T4488] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4488) [ 1078.434751][T28175] loop1: detected capacity change from 0 to 32768 [ 1078.472516][T16882] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1078.487813][T16882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.489733][T28175] jfs_strtoUCS: char2uni returned -22. [ 1078.503728][T16882] usb 1-1: Product: syz [ 1078.515973][T16882] usb 1-1: Manufacturer: syz [ 1078.520768][T16882] usb 1-1: SerialNumber: syz [ 1078.535433][T28175] charset = cp949, char = 0xd4 [ 1078.549253][T16882] usb 1-1: config 0 descriptor?? [ 1078.594419][T16882] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1078.661213][T28183] x_tables: duplicate underflow at hook 2 [ 1078.763954][T28187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1078.767794][T28185] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1078.775310][T28187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1078.821400][T28187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1079.032915][T16882] gspca_sunplus: reg_r err -71 [ 1079.038836][T16882] sunplus: probe of 1-1:0.0 failed with error -71 [ 1079.080131][T16882] usb 1-1: USB disconnect, device number 18 [ 1079.599297][ T7448] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1079.683369][T28199] loop1: detected capacity change from 0 to 32768 [ 1079.744522][T28199] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1079.771749][T28201] loop3: detected capacity change from 0 to 32768 [ 1079.820812][ T7448] usb 6-1: Using ep0 maxpacket: 16 [ 1079.829615][T28201] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1079.857475][ T7448] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1079.876383][ T4277] ocfs2: Unmounting device (7,1) on (node local) [ 1079.911036][ T7448] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1079.948756][T28201] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1079.953549][ T7448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.969811][T28201] BTRFS info (device loop3): enabling auto defrag [ 1079.996607][T28201] BTRFS info (device loop3): force clearing of disk cache [ 1080.021449][ T7448] usb 6-1: Product: syz [ 1080.032664][T28201] BTRFS info (device loop3): ignoring data csums [ 1080.039075][T28201] BTRFS info (device loop3): turning on async discard [ 1080.040305][ T7448] usb 6-1: Manufacturer: syz [ 1080.066902][ T7448] usb 6-1: SerialNumber: syz [ 1080.072445][T28201] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1080.095656][ T7448] r8152-cfgselector 6-1: config 0 descriptor?? [ 1080.128130][T28201] BTRFS info (device loop3): turning off async discard [ 1080.162977][T28201] BTRFS info (device loop3): disabling free space tree [ 1080.221307][T28220] loop0: detected capacity change from 0 to 8192 [ 1080.238468][T28227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10436'. [ 1080.331822][T28220] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1080.572194][ T7448] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1080.598061][ T7448] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 1080.949468][ T4281] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1081.306878][T28243] loop4: detected capacity change from 0 to 32768 [ 1081.437753][T28243] JBD2: Ignoring recovery information on journal [ 1081.546611][T28268] netlink: 'syz.0.10449': attribute type 11 has an invalid length. [ 1081.639120][T28243] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1081.679960][T28268] netlink: 'syz.0.10449': attribute type 4 has an invalid length. [ 1081.710734][T28278] SET target dimension over the limit! [ 1081.851298][T28243] syz.4.10439 (28243) used greatest stack depth: 18688 bytes left [ 1081.941776][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 1082.472706][T28312] loop4: detected capacity change from 0 to 1024 [ 1082.611217][T28314] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1082.820223][T28322] loop3: detected capacity change from 0 to 512 [ 1082.880799][T28321] Process accounting paused [ 1083.239011][T28340] netlink: 'syz.4.10483': attribute type 1 has an invalid length. [ 1083.247740][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10483'. [ 1083.610259][T28362] netlink: 'syz.1.10493': attribute type 2 has an invalid length. [ 1083.640355][T28362] netlink: 'syz.1.10493': attribute type 4 has an invalid length. [ 1083.709742][T28367] loop5: detected capacity change from 0 to 16 [ 1083.788067][T28367] erofs: (device loop5): mounted with root inode @ nid 36. [ 1083.852784][T28367] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1083.917526][T28367] syz.5.10496: attempt to access beyond end of device [ 1083.917526][T28367] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1084.037115][T28367] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1084.069827][T28380] netlink: 'syz.0.10502': attribute type 1 has an invalid length. [ 1084.088849][T28367] syz.5.10496: attempt to access beyond end of device [ 1084.088849][T28367] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1084.140061][T28385] loop4: detected capacity change from 0 to 64 [ 1084.162534][T28367] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 1084.222372][ T27] audit: type=1800 audit(1788805268.196:158): pid=28367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10496" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1084.468400][T28394] netlink: 'syz.5.10509': attribute type 2 has an invalid length. [ 1084.568015][T28402] loop3: detected capacity change from 0 to 256 [ 1084.632773][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1084.866048][T28413] IPv6: Can't replace route, no match found [ 1085.104358][T28420] loop4: detected capacity change from 0 to 2048 [ 1085.221231][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1085.261463][T28428] CIFS: Invalid mount helper version specified [ 1085.456214][T28414] loop3: detected capacity change from 0 to 32768 [ 1085.546601][ T4488] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1085.720947][T28443] loop0: detected capacity change from 0 to 256 [ 1086.963010][ T27] audit: type=1400 audit(1788805270.725:159): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE1 pid=28492 comm="syz.0.10557" [ 1087.139175][T28499] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1087.200985][T28499] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1087.382626][T28503] loop5: detected capacity change from 0 to 4096 [ 1087.433720][T28503] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1087.587846][T28473] loop4: detected capacity change from 0 to 32768 [ 1087.676461][T28473] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1087.719830][T28517] loop0: detected capacity change from 0 to 2048 [ 1087.749818][T28473] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1087.802642][T28473] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1087.826086][T28523] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1087.835806][ T4366] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1087.850905][ T4366] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1087.864323][T28517] syz.0.10570: attempt to access beyond end of device [ 1087.864323][T28517] loop0: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 1087.918731][T28517] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 1088.031614][ T4366] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 166ms [ 1088.070136][ T4366] gfs2: fsid=syz:syz.0: jid=0: Done [ 1088.075443][T28473] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1088.263340][T28536] netlink: 'syz.1.10576': attribute type 21 has an invalid length. [ 1088.475964][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10580'. [ 1088.526907][T28473] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1088.777684][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10587'. [ 1088.788584][T28473] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 1088.839166][T28473] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 1088.882472][T28473] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 1088.913308][T28473] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 1088.924574][T28473] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 1089.178929][ T4276] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 1089.218667][ T4276] CPU: 1 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 1089.226282][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.236357][ T4276] Call Trace: [ 1089.239652][ T4276] [ 1089.242605][ T4276] dump_stack_lvl+0x188/0x24e [ 1089.247320][ T4276] ? show_regs_print_info+0x12/0x12 [ 1089.252546][ T4276] ? load_image+0x410/0x410 [ 1089.257081][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 1089.262306][ T4276] gfs2_assert_warn_i+0x187/0x2c0 [ 1089.267354][ T4276] gfs2_quota_cleanup+0x48c/0x670 [ 1089.272397][ T4276] gfs2_make_fs_ro+0x3e0/0x4c0 [ 1089.277183][ T4276] ? gfs2_dinode_out+0xb00/0xb00 [ 1089.282136][ T4276] ? do_raw_spin_lock+0x128/0x2f0 [ 1089.287177][ T4276] ? __rwlock_init+0x140/0x140 [ 1089.291962][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 1089.297183][ T4276] gfs2_put_super+0x220/0x920 [ 1089.301883][ T4276] ? gfs2_evict_inode+0x1290/0x1290 [ 1089.307101][ T4276] generic_shutdown_super+0x130/0x340 [ 1089.312502][ T4276] kill_block_super+0x7c/0xe0 [ 1089.317200][ T4276] deactivate_locked_super+0x93/0xf0 [ 1089.322501][ T4276] cleanup_mnt+0x471/0x4f0 [ 1089.326937][ T4276] task_work_run+0x1d0/0x260 [ 1089.331636][ T4276] ? task_work_cancel+0x220/0x220 [ 1089.336664][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 1089.342158][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 1089.347443][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 1089.352989][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 1089.358441][ T4276] do_syscall_64+0x58/0xa0 [ 1089.362857][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 1089.367538][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 1089.372216][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.378115][ T4276] RIP: 0033:0x7f9594f9f317 [ 1089.382529][ T4276] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1089.402145][ T4276] RSP: 002b:00007fff1d32fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1089.410560][ T4276] RAX: 0000000000000000 RBX: 00007f9595034474 RCX: 00007f9594f9f317 [ 1089.418528][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1d32fdb0 [ 1089.426494][ T4276] RBP: 00007fff1d32fdb0 R08: 00007fff1d330db0 R09: 00000000ffffffff [ 1089.434457][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1d330e40 [ 1089.442422][ T4276] R13: 00007f9595034474 R14: 000000000010152c R15: 00007fff1d330e80 [ 1089.450399][ T4276] [ 1089.467743][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.474078][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.532242][T28579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10599'. [ 1089.719390][T28589] set_capacity_and_notify: 1 callbacks suppressed [ 1089.719408][T28589] loop1: detected capacity change from 0 to 256 [ 1089.996396][ T27] audit: type=1326 audit(1788805273.522:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.106523][ T27] audit: type=1326 audit(1788805273.522:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.130714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1090.144520][ T127] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1090.152675][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10611'. [ 1090.223311][ T27] audit: type=1326 audit(1788805273.522:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.282444][ T27] audit: type=1326 audit(1788805273.522:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.323803][ T27] audit: type=1326 audit(1788805273.522:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.347982][ C0] vkms_vblank_simulate: vblank timer overrun [ 1090.366488][ T27] audit: type=1326 audit(1788805273.522:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.399011][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 1090.406487][ T127] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.427117][ T127] usb 1-1: config 0 has no interface number 0 [ 1090.458748][ T127] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1090.474880][ T27] audit: type=1326 audit(1788805273.522:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.499280][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.520189][ T127] usb 1-1: Product: syz [ 1090.524405][ T127] usb 1-1: Manufacturer: syz [ 1090.545371][ T127] usb 1-1: SerialNumber: syz [ 1090.557783][ T127] usb 1-1: config 0 descriptor?? [ 1090.566857][ T27] audit: type=1326 audit(1788805273.522:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28596 comm="syz.5.10610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1090.586093][T28621] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1090.607922][ T127] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1090.615900][ T7447] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1090.638926][T28621] overlayfs: missing 'lowerdir' [ 1090.832444][ T7447] usb 4-1: Using ep0 maxpacket: 16 [ 1090.850549][ T7447] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1090.877189][ T7447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.919040][ T7447] usb 4-1: Product: syz [ 1090.923294][ T7447] usb 4-1: Manufacturer: syz [ 1090.927960][ T7447] usb 4-1: SerialNumber: syz [ 1090.979231][ T7447] usb 4-1: config 0 descriptor?? [ 1091.008989][ T7447] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1091.044552][ T127] gspca_spca1528: reg_w err -71 [ 1091.081612][ T127] spca1528: probe of 1-1:0.1 failed with error -71 [ 1091.107643][ T127] usb 1-1: USB disconnect, device number 19 [ 1091.450988][ T7447] gspca_spca508: reg_read err -71 [ 1091.461224][ T7447] gspca_spca508: reg_read err -71 [ 1091.467131][ T7447] gspca_spca508: reg_read err -71 [ 1091.481790][ T7447] gspca_spca508: reg_read err -71 [ 1091.491788][ T7447] gspca_spca508: reg write: error -71 [ 1091.499915][ T7447] spca508: probe of 4-1:0.0 failed with error -71 [ 1091.524328][ T7447] usb 4-1: USB disconnect, device number 42 [ 1091.824140][T28659] loop1: detected capacity change from 0 to 64 [ 1091.952677][ T27] audit: type=1326 audit(1788805275.332:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.10641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1091.976858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.075275][ T27] audit: type=1326 audit(1788805275.396:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.10641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1092.099411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.458198][ T7639] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1092.538569][T28690] ieee802154 phy0 wpan0: encryption failed: -90 [ 1092.695443][ T7639] usb 5-1: Using ep0 maxpacket: 16 [ 1092.703320][ T7639] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1092.734069][ T7639] usb 5-1: config 254 has no interface number 0 [ 1092.741664][ T7639] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 1092.764982][ T7639] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 1092.798662][ T7639] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1092.814573][ T7252] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1092.826673][ T7639] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1092.863150][ T7639] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1092.891359][ T7639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.906677][ T7639] usb 5-1: Product: syz [ 1092.921870][ T7639] usb 5-1: Manufacturer: syz [ 1092.926587][ T7639] usb 5-1: SerialNumber: syz [ 1093.022703][ T7252] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1093.042614][ T7252] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1093.062679][ T7252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.139543][ T4366] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1093.162997][ T7639] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 1093.169614][ T7639] usbtest: probe of 5-1:254.235 failed with error -71 [ 1093.187128][ T7639] usb 5-1: USB disconnect, device number 19 [ 1093.320171][ T7252] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 1093.367049][ T4366] usb 4-1: Using ep0 maxpacket: 8 [ 1093.374690][ T4366] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1093.395802][ T4366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1093.453723][ T4366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1093.464385][ T4366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1093.483003][ T4366] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1093.504325][ T4366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1093.514890][ T4366] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1093.555673][ T4366] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1093.574355][ T7252] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, ba:c0:1b:e7:17:d4 [ 1093.592517][ T4366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.621534][ T7252] usb 6-1: USB disconnect, device number 9 [ 1093.627879][ T4366] usb 4-1: Product: syz [ 1093.632063][ T4366] usb 4-1: Manufacturer: syz [ 1093.653481][ T4366] usb 4-1: SerialNumber: syz [ 1093.693647][ T7252] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 1093.711065][ T4366] usb 4-1: config 0 descriptor?? [ 1093.718562][T28706] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1093.727635][T28706] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1093.893420][T28738] netlink: 'syz.1.10676': attribute type 12 has an invalid length. [ 1093.928026][T28738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10676'. [ 1094.019890][ T4366] usb 4-1: USB disconnect, device number 43 [ 1094.919358][T28787] loop0: detected capacity change from 0 to 256 [ 1095.010278][T28789] xt_cgroup: path and classid specified [ 1095.261871][T28799] netlink: 'syz.0.10700': attribute type 11 has an invalid length. [ 1095.308046][T28799] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1095.801691][T28821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10710'. [ 1095.979935][T28827] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.10712'. [ 1096.015830][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1096.015846][ T27] audit: type=1326 audit(1788805279.080:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.141449][ T27] audit: type=1326 audit(1788805279.080:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.275370][ T27] audit: type=1326 audit(1788805279.080:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.419609][ T27] audit: type=1326 audit(1788805279.080:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.521045][ T27] audit: type=1326 audit(1788805279.080:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.677299][ T27] audit: type=1326 audit(1788805279.080:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.811787][ T27] audit: type=1326 audit(1788805279.098:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1096.887296][ T27] audit: type=1326 audit(1788805279.098:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.5.10714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1097.006939][ T4366] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1097.139091][T28876] netlink: 'syz.5.10732': attribute type 2 has an invalid length. [ 1097.224894][ T4366] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1097.244984][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.294158][ T4366] usb 5-1: config 0 descriptor?? [ 1097.541975][ T4366] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1097.564173][ T4366] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1097.764786][T28902] loop1: detected capacity change from 0 to 512 [ 1097.768851][ T4366] [drm:udl_init] *ERROR* Selecting channel failed [ 1097.794131][ T4366] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1097.823870][T28906] loop0: detected capacity change from 0 to 128 [ 1097.835063][ T4366] [drm] Initialized udl on minor 2 [ 1097.859323][ T4366] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1097.904813][T28902] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.10744: bg 0: block 5: invalid block bitmap [ 1097.920800][T28902] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1097.938267][T28902] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.10744: invalid indirect mapped block 3 (level 2) [ 1097.963173][ T4366] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1097.990520][T28902] EXT4-fs (loop1): 1 orphan inode deleted [ 1097.996823][T28902] EXT4-fs (loop1): 1 truncate cleaned up [ 1098.009361][T28902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1098.029312][ T4366] usb 5-1: USB disconnect, device number 20 [ 1098.058055][ T5618] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1098.066377][ T5618] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1098.094213][ T5618] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1098.181974][T28914] sock: sock_timestamping_bind_phc: sock not bind to device [ 1098.189602][T28916] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.10750'. [ 1098.200752][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1098.240114][T28916] netlink: zone id is out of range [ 1098.274281][T28916] netlink: get zone limit has 8 unknown bytes [ 1098.732231][T28938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1098.783163][T28938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1099.158989][T28954] loop3: detected capacity change from 0 to 128 [ 1099.169757][T28955] ipt_ECN: cannot use operation on non-tcp rule [ 1099.228378][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1099.448534][T28963] loop3: detected capacity change from 0 to 512 [ 1099.457065][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1100.146209][T28996] loop0: detected capacity change from 0 to 16 [ 1100.191638][T28996] erofs: (device loop0): mounted with root inode @ nid 36. [ 1100.195623][T29000] netlink: 'syz.1.10791': attribute type 1 has an invalid length. [ 1100.232142][T29000] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1100.412467][T29007] loop3: detected capacity change from 0 to 256 [ 1101.144760][T29035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10808'. [ 1101.854264][ T27] audit: type=1326 audit(1788805284.471:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29065 comm="syz.4.10823" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1101.931383][ T27] audit: type=1326 audit(1788805284.471:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29065 comm="syz.4.10823" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1102.008939][T29070] netlink: 'syz.1.10825': attribute type 21 has an invalid length. [ 1102.030907][ T27] audit: type=1326 audit(1788805284.471:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29065 comm="syz.4.10823" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1102.054152][T29070] netlink: 'syz.1.10825': attribute type 7 has an invalid length. [ 1102.166696][ T27] audit: type=1326 audit(1788805284.471:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29065 comm="syz.4.10823" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1102.429034][T29090] xt_ecn: cannot match TCP bits for non-tcp packets [ 1103.026544][T29122] loop5: detected capacity change from 0 to 16 [ 1103.066019][T29122] erofs: (device loop5): mounted with root inode @ nid 36. [ 1103.111730][T29122] syz.5.10852: attempt to access beyond end of device [ 1103.111730][T29122] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1103.130987][T29127] netlink: 'syz.1.10854': attribute type 2 has an invalid length. [ 1103.170021][T29127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10854'. [ 1103.170886][T29129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1103.189100][T29122] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1103.210606][T29122] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1103.221670][T29129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1103.235324][T29122] syz.5.10852: attempt to access beyond end of device [ 1103.235324][T29122] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1103.255049][T29129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1103.260050][T29122] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 1103.320805][ T27] audit: type=1800 audit(1788805285.828:184): pid=29122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10852" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1103.545895][T29141] device wlan0 entered promiscuous mode [ 1103.574987][T29143] loop4: detected capacity change from 0 to 1024 [ 1104.423389][T29182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10879'. [ 1104.600221][ T7639] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1104.641029][T29194] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1104.808556][ T7639] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1104.827634][ T7639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.853490][ T7639] usb 2-1: config 0 descriptor?? [ 1104.919510][ T127] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1105.080162][ T7639] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1105.098492][ T7639] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1105.120218][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 1105.127405][ T127] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1105.155096][ T127] usb 1-1: config 2 has no interface number 0 [ 1105.165479][ T127] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1105.176476][ T127] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1105.193920][ T127] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1105.203625][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.213160][ T127] usb 1-1: Product: syz [ 1105.224306][ T127] usb 1-1: Manufacturer: syz [ 1105.239415][ T127] usb 1-1: SerialNumber: syz [ 1105.257700][T29193] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1105.301880][ T7639] [drm:udl_init] *ERROR* Selecting channel failed [ 1105.324800][ T7639] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1105.334300][ T7639] [drm] Initialized udl on minor 2 [ 1105.357982][ T7639] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1105.367601][ T7639] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1105.388798][ T7639] usb 2-1: USB disconnect, device number 42 [ 1105.403853][ T7447] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1105.416081][ T7447] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1105.425368][ T7447] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1105.510510][T29193] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1105.728617][T29233] comedi comedi0: comedi_config --init_data is deprecated [ 1105.737290][ T127] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1105.754970][ T127] asix: probe of 1-1:2.88 failed with error -71 [ 1105.765660][ T127] usb 1-1: USB disconnect, device number 20 [ 1105.927457][T29237] IPv6: sit2: Disabled Multicast RS [ 1106.413195][T29253] loop4: detected capacity change from 0 to 256 [ 1106.460442][T29235] loop3: detected capacity change from 0 to 32768 [ 1106.494367][T29257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10914'. [ 1106.507555][T29253] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1106.529052][T29235] /dev/loop3: Can't open blockdev [ 1106.555585][T29257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10914'. [ 1106.929681][ T27] audit: type=1326 audit(1788805289.161:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.3.10923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1107.042296][ T27] audit: type=1326 audit(1788805289.198:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.3.10923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1107.066472][T29277] loop1: detected capacity change from 0 to 512 [ 1107.119044][T29277] EXT4-fs: Ignoring removed nobh option [ 1107.134102][T29277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1107.205771][T29281] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1107.218862][ T27] audit: type=1326 audit(1788805289.198:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.3.10923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1107.220234][T29277] EXT4-fs (loop1): 1 truncate cleaned up [ 1107.291343][T29277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1107.308172][ T27] audit: type=1326 audit(1788805289.198:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.3.10923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6099e0d9 code=0x7ffc0000 [ 1107.632542][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1107.664174][T29295] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1107.865586][T29301] ipt_rpfilter: unknown options [ 1108.118023][ T5618] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1108.202320][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10945'. [ 1108.237779][T29318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10945'. [ 1108.258513][T29318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10945'. [ 1108.328409][ T5618] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1108.361040][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.366373][T29323] netlink: 'syz.1.10947': attribute type 26 has an invalid length. [ 1108.386185][ T5618] usb 5-1: config 0 descriptor?? [ 1108.413795][ T5618] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1108.462733][T29324] [U] [ 1108.835096][ T5618] gspca_stv06xx: I2C: Read error writing address: -71 [ 1108.851596][ T5618] usb 5-1: USB disconnect, device number 21 [ 1108.870655][T29345] netlink: 'syz.5.10958': attribute type 3 has an invalid length. [ 1109.299074][T29331] loop1: detected capacity change from 0 to 32768 [ 1109.330296][T29331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.10951 (29331) [ 1109.441250][T29331] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1109.476964][T29364] device bridge4 entered promiscuous mode [ 1109.509438][T29331] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1109.539726][T29331] BTRFS info (device loop1): using free space tree [ 1109.700535][T29382] loop3: detected capacity change from 0 to 64 [ 1109.781273][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1109.882042][T29387] loop4: detected capacity change from 0 to 4096 [ 1109.895246][T29391] loop5: detected capacity change from 0 to 2048 [ 1109.933940][T29387] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1110.005790][T29387] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1110.007778][T29399] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1110.018917][T29331] BTRFS info (device loop1): enabling ssd optimizations [ 1110.125021][ T4277] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1110.135362][T29403] bond0: Error: CAN devices cannot be enslaved [ 1110.175399][T29387] ntfs: volume version 3.1. [ 1110.354007][T29387] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1110.459054][T29387] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1110.551643][ T4623] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4623) [ 1110.706133][ T4276] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp860. You might want to try to use the mount option nls=utf8. [ 1110.829421][ T4276] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1110.911441][T29420] loop5: detected capacity change from 0 to 512 [ 1110.944393][T29420] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1111.079726][T29420] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10981: bg 0: block 255: padding at end of block bitmap is not set [ 1111.166892][T29420] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1111.206628][T29420] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.10981: invalid indirect mapped block 1 (level 1) [ 1111.301944][T29420] EXT4-fs (loop5): 1 truncate cleaned up [ 1111.335947][T29420] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1111.579259][T24607] EXT4-fs (loop5): unmounting filesystem. [ 1112.267244][T29473] netlink: 'syz.4.11010': attribute type 1 has an invalid length. [ 1112.371538][T29445] loop0: detected capacity change from 0 to 32768 [ 1112.416236][T29445] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1112.500905][T29481] loop1: detected capacity change from 0 to 512 [ 1112.512746][T29480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11013'. [ 1112.550798][T29480] openvswitch: netlink: EtherType 300 is less than min 600 [ 1112.617481][T29481] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1112.679589][T29485] [U] v3f"S/4:XTzWtlW= [ 1112.709087][T29485] [U] J"e:" [ 1112.709337][T29481] FAT-fs (loop1): Filesystem has been set read-only [ 1112.761100][T29481] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1112.775708][ T4488] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1112.794584][T29481] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1112.839540][T29461] loop5: detected capacity change from 0 to 32768 [ 1112.869074][T29487] loop4: detected capacity change from 0 to 4096 [ 1112.923597][T29461] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 1112.923597][T29461] [ 1112.954675][T29487] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1112.999463][T29461] ERROR: (device loop5): remounting filesystem as read-only [ 1114.512695][ T5618] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1114.636798][T29527] loop3: detected capacity change from 0 to 32768 [ 1114.728288][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 1114.728417][ T4488] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1114.735440][ T5618] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1114.761551][T29564] loop4: detected capacity change from 0 to 256 [ 1114.787182][ T5618] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1114.827206][ T5618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.885277][ T5618] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1114.916610][ T5618] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1114.949418][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.978814][ T5618] usb 2-1: config 0 descriptor?? [ 1115.157215][T29575] loop0: detected capacity change from 0 to 16 [ 1115.193261][T29575] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1115.238840][T29575] cramfs: empty filesystem [ 1115.443916][ T4328] usb 2-1: USB disconnect, device number 43 [ 1115.503780][T29587] Process accounting resumed [ 1115.554044][T29591] echo interval is out of bounds [ 1115.554044][T29591] [ 1115.568096][T29591] CIFS: VFS: echo interval is out of bounds [ 1115.596694][ T7448] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1115.806240][ T7448] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1115.831745][ T7448] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1115.859239][ T7448] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1115.872027][ T7448] usb 4-1: Manufacturer: syz [ 1115.881606][T29608] loop5: detected capacity change from 0 to 256 [ 1115.892855][ T7448] usb 4-1: SerialNumber: syz [ 1115.906191][T29608] FAT-fs (loop5): Directory bread(block 1285) failed [ 1115.918367][T29608] FAT-fs (loop5): Directory bread(block 1286) failed [ 1115.940316][T29608] FAT-fs (loop5): Directory bread(block 1287) failed [ 1115.968268][T29608] FAT-fs (loop5): Directory bread(block 1288) failed [ 1115.999200][T29608] FAT-fs (loop5): Directory bread(block 1285) failed [ 1116.020759][T29608] FAT-fs (loop5): Directory bread(block 1286) failed [ 1116.027543][T29608] FAT-fs (loop5): Directory bread(block 1287) failed [ 1116.067717][T29608] FAT-fs (loop5): Directory bread(block 1288) failed [ 1116.132212][ T7448] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 1116.140374][T29608] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 1116.177081][ T7448] usb 4-1: USB disconnect, device number 44 [ 1116.334230][T29620] loop0: detected capacity change from 0 to 512 [ 1116.373989][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.388966][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.398270][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.429259][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.444632][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.483172][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.509357][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.529185][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.548252][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.559177][T29620] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 1116.615204][ T27] audit: type=1800 audit(1788805298.106:189): pid=29620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11082" name="file0" dev="loop0" ino=1048639 res=0 errno=0 [ 1116.759549][T29638] netlink: 'syz.1.11089': attribute type 4 has an invalid length. [ 1116.925492][T29644] netlink: 'syz.0.11092': attribute type 2 has an invalid length. [ 1116.966671][T29640] loop3: detected capacity change from 0 to 4096 [ 1117.000129][T29640] /dev/loop3: Can't open blockdev [ 1117.052165][ T4488] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1117.327600][T29658] netlink: 'syz.3.11101': attribute type 1 has an invalid length. [ 1117.617145][T29669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11107'. [ 1118.080726][T29690] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11117'. [ 1118.390210][T29694] loop0: detected capacity change from 0 to 4096 [ 1118.408648][T29694] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1118.745409][T29718] netlink: 'syz.0.11131': attribute type 16 has an invalid length. [ 1118.788439][T29718] netlink: 'syz.0.11131': attribute type 17 has an invalid length. [ 1118.849705][T29718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1118.879529][T29718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1118.926904][T29718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1118.940275][T29718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1119.086091][T29727] IPv6: sit2: Disabled Multicast RS [ 1119.291483][ T27] audit: type=1326 audit(1788805300.571:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29732 comm="syz.0.11138" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb31159e0d9 code=0x0 [ 1120.010888][T29764] netlink: 'syz.0.11151': attribute type 28 has an invalid length. [ 1120.143385][T29736] loop5: detected capacity change from 0 to 32768 [ 1120.171002][T29736] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1120.372018][ T5618] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1120.395722][T29777] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11157'. [ 1120.482707][T29781] delete_channel: no stack [ 1120.498370][T29783] netlink: 'syz.3.11159': attribute type 3 has an invalid length. [ 1120.528562][ T4488] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1120.573072][T29787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11161'. [ 1120.590345][ T5618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1120.612630][ T5618] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1120.626809][T29787] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11161'. [ 1120.642568][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.655757][T29787] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11161'. [ 1120.675809][ T5618] usb 2-1: Product: syz [ 1120.680152][ T5618] usb 2-1: Manufacturer: syz [ 1120.684769][ T5618] usb 2-1: SerialNumber: syz [ 1120.742235][ T5618] usb 2-1: config 0 descriptor?? [ 1120.763564][ T5618] hub 2-1:0.0: bad descriptor, ignoring hub [ 1120.799802][ T5618] hub: probe of 2-1:0.0 failed with error -5 [ 1120.829514][ T5618] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input84 [ 1121.109888][T29799] loop4: detected capacity change from 0 to 4096 [ 1121.167047][T29799] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1121.227970][T29799] ntfs3: loop4: Failed to load $Extend. [ 1121.351436][T29811] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1121.467067][ T7447] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1121.518153][T29818] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1121.678275][ T7447] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1121.698834][ T7447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.735941][ T7447] pwc: Logitech/Cisco VT Camera webcam detected. [ 1121.923262][T29835] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1121.953028][ T7447] pwc: Failed to set LED on/off time (-71) [ 1121.963789][ T7447] pwc: send_video_command error -71 [ 1121.981670][ T7447] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1122.008776][ T7447] Philips webcam: probe of 6-1:127.0 failed with error -71 [ 1122.029934][T29835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1122.039589][ T7447] usb 6-1: USB disconnect, device number 10 [ 1122.335196][T29849] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1123.192922][T29886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11209'. [ 1123.594362][T29865] loop4: detected capacity change from 0 to 40427 [ 1123.636483][T29865] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1123.675740][T29865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1123.727561][T29865] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1123.950783][T29865] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1123.963146][T29865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1124.101508][T29865] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 1124.326093][ T3599] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1124.450217][T29934] netlink: 'syz.1.11233': attribute type 2 has an invalid length. [ 1124.531617][ T3599] usb 6-1: Using ep0 maxpacket: 8 [ 1124.539034][ T3599] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1124.568634][ T3599] usb 6-1: config 179 has no interface number 0 [ 1124.574462][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11235'. [ 1124.596622][ T3599] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1124.641252][ T3599] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1124.661771][ T3599] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1124.692758][ T3599] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1124.716279][ T3599] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1124.751823][ T3599] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1124.758803][ T3599] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1124.831575][ T3599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.862927][T29952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11241'. [ 1124.879920][ T3599] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input85 [ 1125.018206][T29958] SET target dimension over the limit! [ 1125.318719][ T7447] usb 6-1: USB disconnect, device number 11 [ 1125.325008][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1125.357231][ T7447] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1125.374677][T29966] loop0: detected capacity change from 0 to 4096 [ 1125.402508][T29966] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1125.456844][T29966] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1125.555514][T29966] ntfs: volume version 3.1. [ 1125.620188][T29966] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1125.684384][T29966] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1125.887851][ T4288] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp860. You might want to try to use the mount option nls=utf8. [ 1125.938143][ T4288] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1125.980796][ T4366] usb 2-1: USB disconnect, device number 44 [ 1126.054176][T29988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.078152][T29993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11262'. [ 1126.092834][T29988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.194737][T29991] IPv6: NLM_F_CREATE should be specified when creating new route [ 1126.302262][T29999] loop5: detected capacity change from 0 to 256 [ 1126.356764][T29999] exfat: Deprecated parameter 'utf8' [ 1126.374128][T30001] loop0: detected capacity change from 0 to 512 [ 1126.403788][T30001] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1126.424557][T29999] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1126.456434][T30001] EXT4-fs (loop0): 1 truncate cleaned up [ 1126.487634][T30001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1126.631030][T30001] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.11265: bad extra_isize 62 (inode size 256) [ 1126.739438][T30001] EXT4-fs (loop0): Remounting filesystem read-only [ 1126.812462][T30001] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.11265: bad extra_isize 62 (inode size 256) [ 1126.851059][T30001] EXT4-fs (loop0): Remounting filesystem read-only [ 1126.940810][T30016] loop3: detected capacity change from 0 to 4096 [ 1127.012951][ T4288] EXT4-fs (loop0): unmounting filesystem. [ 1127.045195][ T4488] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1127.075648][T30022] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1127.255416][T30029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11278'. [ 1127.323906][T30029] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1127.370881][T30037] xt_hashlimit: size too large, truncated to 1048576 [ 1127.773768][T30054] loop5: detected capacity change from 0 to 256 [ 1127.933209][T30063] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1128.072130][T30067] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11296'. [ 1128.186338][T30072] autofs4:pid:30072:autofs_fill_super: called with bogus options [ 1128.410304][T30082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11301'. [ 1128.539525][ T5618] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1128.563433][T30090] raw_sendmsg: syz.1.11305 forgot to set AF_INET. Fix it! [ 1128.571081][T30092] binder: Bad value for 'stats' [ 1128.756076][ T5618] usb 5-1: Using ep0 maxpacket: 32 [ 1128.769552][ T5618] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1128.811746][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.819804][ T5618] usb 5-1: Product: syz [ 1128.853517][ T5618] usb 5-1: Manufacturer: syz [ 1128.864980][ T5618] usb 5-1: SerialNumber: syz [ 1128.882383][ T5618] usb 5-1: config 0 descriptor?? [ 1128.933247][T30108] netlink: 'syz.1.11313': attribute type 8 has an invalid length. [ 1128.953203][T30108] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.11313'. [ 1129.081074][ T7252] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1129.132166][ T5618] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 022 [ 1129.303002][ T7252] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 1129.334182][ T7252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.387527][ T7252] usb 4-1: config 0 has no interface number 0 [ 1129.402818][ T7252] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1129.420903][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11320'. [ 1129.440801][ T7252] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1129.472242][ T5618] usb 5-1: USB disconnect, device number 22 [ 1129.479934][ T7252] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1129.510027][ T7252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.524702][ T7252] usb 4-1: Product: syz [ 1129.535957][ T7252] usb 4-1: Manufacturer: syz [ 1129.557608][ T7252] usb 4-1: SerialNumber: syz [ 1129.576084][ T7252] usb 4-1: config 0 descriptor?? [ 1129.597527][T30101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1129.611373][T30101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1129.647697][ T7252] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1129.868127][ T5618] usb 4-1: USB disconnect, device number 45 [ 1130.093307][T30153] loop4: detected capacity change from 0 to 256 [ 1130.305145][T30164] loop5: detected capacity change from 0 to 256 [ 1130.411579][T30161] nvme_fabrics: missing parameter 'traddr=%s' [ 1131.189399][ T4366] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1131.413672][ T7252] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1131.424523][ T4366] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 1131.437513][ T4366] usb 1-1: config 160 has no interface number 0 [ 1131.468329][ T4366] usb 1-1: config 160 interface 200 has no altsetting 0 [ 1131.480977][T30215] loop3: detected capacity change from 0 to 1024 [ 1131.495137][ T4366] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1131.526412][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.560248][T30215] /dev/loop3: Can't open blockdev [ 1131.565871][ T4366] usb 1-1: Product: syz [ 1131.570151][ T4366] usb 1-1: Manufacturer: syz [ 1131.585880][ T4366] usb 1-1: SerialNumber: syz [ 1131.626760][ T7252] usb 5-1: Using ep0 maxpacket: 32 [ 1131.634011][ T7252] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.664304][ T7252] usb 5-1: config 0 has no interface number 0 [ 1131.684701][ T7252] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1131.715546][ T7252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.734735][ T7252] usb 5-1: Product: syz [ 1131.745849][ T7252] usb 5-1: Manufacturer: syz [ 1131.757502][ T7252] usb 5-1: SerialNumber: syz [ 1131.791480][ T7252] usb 5-1: config 0 descriptor?? [ 1131.815874][ T7252] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1131.841432][ T4366] usb 1-1: MIDIStreaming interface descriptor not found [ 1131.853966][ T7252] usb 5-1: selecting invalid altsetting 1 [ 1131.872820][ T7252] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1131.890386][ T4366] usb 1-1: USB disconnect, device number 21 [ 1131.898640][ T7252] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1131.918066][ T7252] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1131.926948][ T7252] usb 5-1: media controller created [ 1131.982456][ T7252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1132.139984][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1132.152406][ T4666] udevd[4666]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.280931][ T7252] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1132.349726][ T7252] usb 5-1: USB disconnect, device number 23 [ 1132.570887][ T3599] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1132.781179][ T3599] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.792012][ T3599] usb 4-1: not running at top speed; connect to a high speed hub [ 1132.803204][ T3599] usb 4-1: config 129 has an invalid interface number: 195 but max is 0 [ 1132.822798][ T3599] usb 4-1: config 129 has no interface number 0 [ 1132.840943][ T3599] usb 4-1: config 129 interface 195 has no altsetting 0 [ 1132.850338][ T3599] usb 4-1: New USB device found, idVendor=684d, idProduct=aa5b, bcdDevice= d.12 [ 1132.915628][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.923676][ T3599] usb 4-1: Product: syz [ 1132.969878][ T3599] usb 4-1: Manufacturer: syz [ 1132.974563][ T3599] usb 4-1: SerialNumber: syz [ 1133.232622][ T3599] usb-storage 4-1:129.195: USB Mass Storage device detected [ 1133.320676][ T3599] usb 4-1: USB disconnect, device number 46 [ 1133.481292][T30282] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1133.541543][T30273] nvme_rdma: malformed address passed: 172.20.20.24:+ [ 1133.842159][T30299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11388'. [ 1134.023542][T30305] netlink: 'syz.0.11390': attribute type 6 has an invalid length. [ 1134.063736][ T27] audit: type=1326 audit(1788805314.206:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.190696][ T27] audit: type=1326 audit(1788805314.243:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.340692][ T27] audit: type=1326 audit(1788805314.243:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.450951][ T27] audit: type=1326 audit(1788805314.243:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.563120][ T27] audit: type=1326 audit(1788805314.243:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.606730][ T3599] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1134.659420][ T27] audit: type=1326 audit(1788805314.243:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.779231][ T27] audit: type=1326 audit(1788805314.243:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.824257][ T3599] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1134.857661][ T27] audit: type=1326 audit(1788805314.243:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.892724][ T3599] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1134.903211][ T3599] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.947899][ T27] audit: type=1326 audit(1788805314.243:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.5.11392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1134.961731][ T3599] usb 1-1: config 63 has no interface number 0 [ 1135.030792][ T3599] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1135.062992][ T3599] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1135.094244][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.124216][ T3599] usb 1-1: Product: syz [ 1135.136458][ T3599] usb 1-1: Manufacturer: syz [ 1135.147478][ T3599] usb 1-1: SerialNumber: syz [ 1135.255735][T30329] loop4: detected capacity change from 0 to 32768 [ 1135.288735][T30329] o2cb: This node has not been configured. [ 1135.294593][T30329] o2cb: Cluster check failed. Fix errors before retrying. [ 1135.320408][T30329] (syz.4.11403,30329,1):ocfs2_dlm_init:3373 ERROR: status = -22 [ 1135.328294][T30329] (syz.4.11403,30329,1):ocfs2_mount_volume:1792 ERROR: status = -22 [ 1135.350128][T30329] (syz.4.11403,30329,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1135.389842][ T3599] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 1135.417356][ T3599] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1135.452776][ T3599] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1135.470168][ T3599] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1135.504612][ T3599] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1135.524762][ T3599] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1135.546314][ T3599] usb 1-1: No streaming interface found for terminal 29. [ 1135.553782][ T3599] uvcvideo 1-1:63.66: Entity type for entity Output 5 was not initialized! [ 1135.584879][ T3599] usb 1-1: USB disconnect, device number 22 [ 1135.663649][T30334] loop3: detected capacity change from 0 to 40427 [ 1136.387171][ T3599] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1136.399499][T30378] loop3: detected capacity change from 0 to 64 [ 1136.605485][ T3599] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1136.625896][ T4366] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1136.627020][ T3599] usb 2-1: config 0 has no interfaces? [ 1136.669103][ T3599] usb 2-1: string descriptor 0 read error: -22 [ 1136.690116][ T3599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1136.704730][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.729644][ T3599] usb 2-1: config 0 descriptor?? [ 1136.761919][T30389] loop4: detected capacity change from 0 to 256 [ 1136.829942][T30395] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1136.849668][ T4366] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1136.869755][ T4366] usb 6-1: config 0 has no interface number 0 [ 1136.875911][ T4366] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1136.911758][ T4366] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1136.932075][ T4366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.947372][ T4366] usb 6-1: Product: syz [ 1136.954123][ T4366] usb 6-1: Manufacturer: syz [ 1136.958502][ T3599] usb 2-1: USB disconnect, device number 45 [ 1136.971663][ T4366] usb 6-1: SerialNumber: syz [ 1136.983588][ T4366] usb 6-1: config 0 descriptor?? [ 1137.000641][T30376] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1137.026838][ T4366] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, a2:74:53:6d:d9:a9 [ 1137.290914][ T3599] usb 6-1: USB disconnect, device number 12 [ 1137.299608][ T3599] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1137.313803][T30411] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 1137.324225][ T94] block nbd4: Attempted send on invalid socket [ 1137.330500][ T94] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.635026][T30423] netlink: 'syz.4.11439': attribute type 21 has an invalid length. [ 1138.119997][ T3599] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1138.262149][T30452] loop3: detected capacity change from 0 to 764 [ 1138.345450][ T3599] usb 5-1: Using ep0 maxpacket: 8 [ 1138.366786][ T3599] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1138.400575][ T3599] usb 5-1: config 179 has no interface number 0 [ 1138.406903][ T3599] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1138.450983][ T3599] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1138.480119][ T3599] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1138.507678][T30461] netlink: 'syz.5.11455': attribute type 21 has an invalid length. [ 1138.526774][ T3599] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1138.554466][ T3599] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1138.602982][ T3599] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1138.617378][ T3599] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1138.637317][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.708291][ T3599] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input86 [ 1138.769560][T30470] lo speed is unknown, defaulting to 1000 [ 1138.789315][T30470] lo speed is unknown, defaulting to 1000 [ 1138.804580][T30470] lo speed is unknown, defaulting to 1000 [ 1138.902265][T30470] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1139.057679][ T7252] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1139.087938][T30470] lo speed is unknown, defaulting to 1000 [ 1139.097752][T30479] loop3: detected capacity change from 0 to 128 [ 1139.108367][T30470] lo speed is unknown, defaulting to 1000 [ 1139.134616][T30470] lo speed is unknown, defaulting to 1000 [ 1139.163655][ T5618] usb 5-1: USB disconnect, device number 24 [ 1139.163751][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1139.178693][ T5618] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1139.195762][T30470] lo speed is unknown, defaulting to 1000 [ 1139.223229][T30470] lo speed is unknown, defaulting to 1000 [ 1139.314094][ T7252] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1139.354784][ T7252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.371707][ T7252] usb 2-1: Product: syz [ 1139.375956][ T7252] usb 2-1: Manufacturer: syz [ 1139.380600][ T7252] usb 2-1: SerialNumber: syz [ 1139.416609][ T7252] usb 2-1: config 0 descriptor?? [ 1139.666226][ T7252] usb 2-1: ignoring: probably an ADSL modem [ 1139.897819][ T7252] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1139.936012][T30507] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11469'. [ 1139.942865][ T7252] usb 2-1: USB disconnect, device number 46 [ 1140.189531][T30511] loop4: detected capacity change from 0 to 8192 [ 1140.197449][T30518] netlink: 'syz.5.11473': attribute type 32 has an invalid length. [ 1140.224464][T30511] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1140.258966][T30511] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1140.281744][T30511] REISERFS (device loop4): using ordered data mode [ 1140.335854][T30511] reiserfs: using flush barriers [ 1140.357134][T30511] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1140.378712][T30511] REISERFS (device loop4): checking transaction log (loop4) [ 1140.387224][T30511] REISERFS (device loop4): Using tea hash to sort names [ 1140.524849][T30528] loop0: detected capacity change from 0 to 64 [ 1140.588284][T30530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11478'. [ 1140.679136][T30534] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1140.735011][T30530] netlink: set zone limit has 4 unknown bytes [ 1140.785823][ T5618] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1140.868467][T30538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11482'. [ 1141.009328][ T5618] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.054425][ T5618] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1141.085323][T30546] netlink: 'syz.4.11487': attribute type 1 has an invalid length. [ 1141.090506][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.130324][ T5618] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1141.464005][T30565] loop0: detected capacity change from 0 to 1024 [ 1141.465965][T30566] netlink: 'syz.4.11496': attribute type 1 has an invalid length. [ 1141.483750][T30566] netlink: 'syz.4.11496': attribute type 1 has an invalid length. [ 1141.522727][T30565] hfsplus: invalid file type 0174377 for inode 21 [ 1141.729118][T30577] siw: device registration error -23 [ 1141.730327][T30578] loop5: detected capacity change from 0 to 64 [ 1141.776614][T30578] hfs: unable to locate alternate MDB [ 1141.796101][T30578] hfs: continuing without an alternate MDB [ 1141.848655][ T27] audit: type=1800 audit(1788805321.398:200): pid=30578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11502" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 1142.144053][T30594] delete_channel: no stack [ 1142.253998][ T5618] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1142.471788][ T5618] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1142.496015][ T5618] stv0680 4-1:4.0: last error: 86, command = 0x7 [ 1142.511551][ T5618] usb 4-1: USB disconnect, device number 47 [ 1142.772133][T30621] loop5: detected capacity change from 0 to 256 [ 1142.787441][T30623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11524'. [ 1142.821893][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11525'. [ 1142.846028][ T27] audit: type=1800 audit(1788805322.312:201): pid=30621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11523" name="file1" dev="loop5" ino=1048644 res=0 errno=0 [ 1142.896019][T30623] netlink: set zone limit has 4 unknown bytes [ 1143.389709][T30651] loop4: detected capacity change from 0 to 16 [ 1143.418258][T30651] erofs: (device loop4): mounted with root inode @ nid 36. [ 1143.806760][T30669] loop3: detected capacity change from 0 to 64 [ 1144.279139][T30694] loop1: detected capacity change from 0 to 1024 [ 1144.473137][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11558'. [ 1144.491640][ T27] audit: type=1326 audit(1788805323.835:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1144.515832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.603236][ T27] audit: type=1326 audit(1788805323.835:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1144.697406][ T27] audit: type=1326 audit(1788805323.863:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1144.765261][ T27] audit: type=1326 audit(1788805323.863:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1144.789460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.842111][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1144.892028][ T27] audit: type=1326 audit(1788805323.863:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1144.927186][T30722] nftables ruleset with unbound chain [ 1144.987515][ T27] audit: type=1326 audit(1788805323.863:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1145.032727][T30727] netlink: 'syz.4.11571': attribute type 3 has an invalid length. [ 1145.069067][T30727] netlink: 'syz.4.11571': attribute type 1 has an invalid length. [ 1145.083591][ T27] audit: type=1326 audit(1788805323.863:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1145.115813][ T27] audit: type=1326 audit(1788805323.863:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30702 comm="syz.5.11559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f54b4b9e0d9 code=0x7ffc0000 [ 1145.359887][T30739] loop1: detected capacity change from 0 to 8 [ 1145.861667][T30759] netlink: 'syz.5.11586': attribute type 49 has an invalid length. [ 1145.918881][T30731] loop3: detected capacity change from 0 to 32768 [ 1145.960140][T30763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11589'. [ 1145.979353][ T4328] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1145.980634][T30763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11589'. [ 1146.129472][T30770] MTDSB: Device #1 doesn't appear to exist [ 1146.129472][T30770] [ 1146.187849][ T4328] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 1146.207572][ T4328] usb 2-1: config 0 has no interface number 0 [ 1146.227216][ T4328] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1146.268292][ T4328] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1146.293488][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.301569][ T4328] usb 2-1: Product: syz [ 1146.306134][ T4328] usb 2-1: Manufacturer: syz [ 1146.310768][ T4328] usb 2-1: SerialNumber: syz [ 1146.347740][ T4488] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1146.348897][ T4328] usb 2-1: config 0 descriptor?? [ 1146.429228][T30752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1146.457089][ T4328] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 22:b1:32:09:05:0c [ 1146.501955][T30777] netlink: 'syz.5.11597': attribute type 32 has an invalid length. [ 1146.781622][ T4328] usb 2-1: USB disconnect, device number 47 [ 1146.797927][ T4328] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1147.041049][ T5618] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1147.257566][ T5618] usb 6-1: Using ep0 maxpacket: 8 [ 1147.265867][ T5618] usb 6-1: config 31 has an invalid interface number: 197 but max is 0 [ 1147.282253][ T5618] usb 6-1: config 31 has no interface number 0 [ 1147.295943][ T5618] usb 6-1: config 31 interface 197 has no altsetting 0 [ 1147.319199][ T5618] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 1147.328611][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.357368][ T5618] usb 6-1: Product: syz [ 1147.365611][ T5618] usb 6-1: Manufacturer: syz [ 1147.411869][ T5618] usb 6-1: SerialNumber: syz [ 1147.505448][T30814] loop4: detected capacity change from 0 to 512 [ 1147.587066][T30814] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1147.612822][T30814] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1147.657941][T30814] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1147.676987][ T5618] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1147.703711][T30814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1147.746940][ T5618] usb 6-1: USB disconnect, device number 13 [ 1147.747029][T30814] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 1147.970048][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1148.300231][T30840] Process accounting paused [ 1148.323550][T30847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1148.884780][T30874] netlink: 'syz.0.11632': attribute type 3 has an invalid length. [ 1148.933243][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1148.933258][ T27] audit: type=1326 audit(1788805327.934:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30877 comm="syz.4.11635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1149.044335][ T27] audit: type=1326 audit(1788805327.943:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30877 comm="syz.4.11635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1149.142425][ T27] audit: type=1326 audit(1788805327.943:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30877 comm="syz.4.11635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1149.265168][T30892] loop3: detected capacity change from 0 to 512 [ 1149.327961][T30892] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1149.336574][T30892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1149.445068][T30892] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.11641: Unimplemented hash flags: 0x0001 [ 1149.445176][T30892] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.11641: Corrupt directory, running e2fsck is recommended [ 1149.533912][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 1149.769507][T30912] loop1: detected capacity change from 0 to 2048 [ 1149.906272][T30920] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1150.045398][T30912] syz.1.11649: attempt to access beyond end of device [ 1150.045398][T30912] loop1: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 1150.045600][T30912] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 1150.155846][T30929] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1150.155876][T30929] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1150.186571][T30920] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1150.186684][T30920] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1150.215277][T30920] Remounting filesystem read-only [ 1150.218494][ T4277] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1150.804282][ T5620] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1150.917109][T30953] loop1: detected capacity change from 0 to 164 [ 1150.982185][T30953] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1151.049042][ T5620] usb 6-1: Using ep0 maxpacket: 32 [ 1151.066373][ T5620] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1151.096049][ T5620] usb 6-1: config 0 has no interface number 0 [ 1151.115833][ T5620] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1151.169960][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.178022][ T5620] usb 6-1: Product: syz [ 1151.224486][ T5620] usb 6-1: Manufacturer: syz [ 1151.253168][ T5620] usb 6-1: SerialNumber: syz [ 1151.284503][ T5620] usb 6-1: config 0 descriptor?? [ 1151.301343][ T5620] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1151.319658][ T5620] usb 6-1: selecting invalid altsetting 1 [ 1151.329926][ T5620] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1151.363725][ T5620] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1151.407193][ T5620] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1151.415525][ T5620] usb 6-1: media controller created [ 1151.475832][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1151.699278][ T7252] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1151.793608][ T5620] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1151.894472][ T5620] usb 6-1: USB disconnect, device number 14 [ 1151.939235][ T7252] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1151.940243][ T7252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.940279][ T7252] usb 2-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.940309][ T7252] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1151.942458][ T7252] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.942487][ T7252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.942509][ T7252] usb 2-1: Product: syz [ 1151.942525][ T7252] usb 2-1: Manufacturer: syz [ 1151.942541][ T7252] usb 2-1: SerialNumber: syz [ 1152.157251][T30994] device ip6tnl0 entered promiscuous mode [ 1152.170893][ T7252] usb 2-1: bad CDC descriptors [ 1152.173856][ T7252] usb 2-1: USB disconnect, device number 48 [ 1152.760594][T31019] loop3: detected capacity change from 0 to 164 [ 1152.868724][T31019] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1152.947999][T31023] misc userio: The device must be registered before sending interrupts [ 1153.291798][T31032] xt_TCPMSS: Only works on TCP SYN packets [ 1153.410193][T31036] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1153.435003][T31036] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1153.567636][T31046] libceph: secret too big 31 [ 1154.118886][T31043] loop5: detected capacity change from 0 to 32768 [ 1154.563419][T31083] loop0: detected capacity change from 0 to 1764 [ 1154.629996][T31083] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1154.808122][ T4328] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1155.020834][ T4328] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1155.033551][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.045004][ T4328] usb 5-1: Product: syz [ 1155.052560][ T4328] usb 5-1: Manufacturer: syz [ 1155.072085][ T4328] usb 5-1: SerialNumber: syz [ 1155.137397][ T4328] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1155.232594][T31104] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11725'. [ 1155.283329][T31104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1155.586013][T31117] [U]  [ 1155.643310][ T7447] usb 5-1: USB disconnect, device number 25 [ 1155.680389][T31120] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1155.800475][T31128] netlink: 'syz.3.11737': attribute type 10 has an invalid length. [ 1155.819097][T31128] team0: Port device wlan1 added [ 1155.937033][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.943438][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.095455][ T27] audit: type=1326 audit(1788805334.544:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31139 comm="syz.0.11743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31159e0d9 code=0x7ffc0000 [ 1156.118904][T31135] loop1: detected capacity change from 0 to 4096 [ 1156.130197][T31135] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1156.205207][ T27] audit: type=1326 audit(1788805334.544:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31139 comm="syz.0.11743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31159e0d9 code=0x7ffc0000 [ 1156.229451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.280991][ T4328] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1156.289442][T31135] ntfs: volume version 3.1. [ 1156.296192][ T4328] ath9k_htc: Failed to initialize the device [ 1156.322004][ T27] audit: type=1326 audit(1788805334.590:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31139 comm="syz.0.11743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb31159e0d9 code=0x7ffc0000 [ 1156.357616][ T7447] usb 5-1: ath9k_htc: USB layer deinitialized [ 1156.432828][ T27] audit: type=1326 audit(1788805334.590:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31139 comm="syz.0.11743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31159e0d9 code=0x7ffc0000 [ 1156.583759][ T27] audit: type=1326 audit(1788805334.590:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31139 comm="syz.0.11743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31159e0d9 code=0x7ffc0000 [ 1156.802536][T31166] device gre1 entered promiscuous mode [ 1156.841048][T31169] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1156.963481][ T5620] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1157.017969][T31173] loop3: detected capacity change from 0 to 256 [ 1157.099204][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1157.183118][ T5620] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1157.212464][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.247883][ T5620] usb 2-1: config 0 descriptor?? [ 1157.710539][ T5620] usb 2-1: Cannot set MAC address [ 1157.721142][ T5620] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1157.765184][ T5620] usb 2-1: USB disconnect, device number 49 [ 1157.861132][ T27] audit: type=1326 audit(1788805336.178:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31202 comm="syz.4.11774" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1157.904745][T31207] IPv6: sit2: Disabled Multicast RS [ 1157.956051][ T27] audit: type=1326 audit(1788805336.205:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31202 comm="syz.4.11774" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1157.980282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.050144][ T27] audit: type=1326 audit(1788805336.205:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31202 comm="syz.4.11774" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1158.074324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.164583][ T27] audit: type=1326 audit(1788805336.205:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31202 comm="syz.4.11774" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9594f9e0d9 code=0x7ffc0000 [ 1158.196432][T31215] netlink: 'syz.0.11780': attribute type 2 has an invalid length. [ 1158.205903][T31215] netlink: 723 bytes leftover after parsing attributes in process `syz.0.11780'. [ 1158.682986][T31233] loop3: detected capacity change from 0 to 1024 [ 1158.747440][T31233] /dev/loop3: Can't open blockdev [ 1159.253178][T31263] netlink: 'syz.5.11803': attribute type 10 has an invalid length. [ 1159.551858][T31273] device gre1 entered promiscuous mode [ 1159.685815][T31280] device sit0 entered promiscuous mode [ 1159.715298][T31280] netlink: 'syz.4.11812': attribute type 1 has an invalid length. [ 1159.740320][T31280] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11812'. [ 1159.779475][T31283] netlink: 5 bytes leftover after parsing attributes in process `syz.5.11813'. [ 1159.789740][T31283] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1160.463139][T31311] unsupported nlmsg_type 40 [ 1160.494766][ T3599] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1160.709484][ T3599] usb 1-1: Using ep0 maxpacket: 8 [ 1160.724146][ T3599] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1160.744044][ T3599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1160.759781][ T3599] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1160.791447][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.810671][ T3599] usb 1-1: Product: syz [ 1160.814944][ T3599] usb 1-1: Manufacturer: syz [ 1160.832548][ T3599] usb 1-1: SerialNumber: syz [ 1160.864255][ T3599] usb 1-1: config 0 descriptor?? [ 1160.875150][ T3599] powermate: probe of 1-1:0.0 failed with error -5 [ 1161.093120][ T3599] usb 1-1: USB disconnect, device number 23 [ 1161.203074][T31343] loop5: detected capacity change from 0 to 128 [ 1161.299708][T31346] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1161.375582][T31327] loop1: detected capacity change from 0 to 32768 [ 1161.387950][T31327] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.11835 (31327) [ 1161.414177][T31327] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1161.426518][T31327] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1161.470046][T31327] BTRFS info (device loop1): enabling ssd optimizations [ 1161.479529][T31350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11846'. [ 1161.498066][T31327] BTRFS info (device loop1): not using ssd optimizations [ 1161.527651][T31350] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1161.556244][T31327] BTRFS info (device loop1): turning off barriers [ 1161.562849][T31327] BTRFS info (device loop1): use no compression [ 1161.577628][T31327] BTRFS info (device loop1): using free space tree [ 1161.974400][T31381] loop4: detected capacity change from 0 to 512 [ 1162.165437][T31381] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1162.206146][T31381] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1162.260557][T31381] System zones: 0-1, 15-15, 18-18, 34-34 [ 1162.283159][T31381] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1162.325461][T31381] __quota_error: 13 callbacks suppressed [ 1162.325476][T31381] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1162.390763][T31327] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 1162.452052][T31381] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1162.540439][T31381] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1162.548710][ T4277] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1162.572480][T31381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.11852: bg 0: block 40: padding at end of block bitmap is not set [ 1162.632685][T31381] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1162.662611][T31381] EXT4-fs (loop4): 1 truncate cleaned up [ 1162.668321][T31381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1162.722155][T31381] EXT4-fs (loop4): unmounting filesystem. [ 1162.890367][T31401] device gre2 entered promiscuous mode [ 1163.069668][T31389] loop3: detected capacity change from 0 to 32768 [ 1163.602760][T31430] loop0: detected capacity change from 0 to 512 [ 1163.666796][T31432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11876'. [ 1163.687642][T31432] netlink: 4260 bytes leftover after parsing attributes in process `syz.5.11876'. [ 1163.707990][T31430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1163.948291][T31442] device gre1 entered promiscuous mode [ 1164.044744][ T4288] EXT4-fs (loop0): unmounting filesystem. [ 1164.358236][T31459] loop5: detected capacity change from 0 to 64 [ 1164.379889][T31458] loop4: detected capacity change from 0 to 1024 [ 1164.416567][T31458] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1164.495727][T31458] hfsplus: filesystem is marked journaled, leaving read-only. [ 1164.533406][T31463] loop3: detected capacity change from 0 to 4096 [ 1164.595299][T31463] /dev/loop3: Can't open blockdev [ 1165.016394][ T27] audit: type=1400 audit(1788805342.788:236): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=31480 comm="syz.1.11900" [ 1165.268085][T31495] netlink: 'syz.5.11905': attribute type 4 has an invalid length. [ 1165.641358][T31510] loop3: detected capacity change from 0 to 4096 [ 1165.658703][T31510] /dev/loop3: Can't open blockdev [ 1165.714554][T31516] x_tables: duplicate underflow at hook 1 [ 1166.070698][T31534] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11925'. [ 1166.113369][T31537] vivid-000: ================= START STATUS ================= [ 1166.125214][T31537] vivid-000: Generate PTS: true [ 1166.132857][ T4328] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1166.146082][T31537] vivid-000: Generate SCR: true [ 1166.157626][T31537] tpg source WxH: 320x180 (R'G'B) [ 1166.178608][T31537] tpg field: 1 [ 1166.189462][T31537] tpg crop: 320x180@0x0 [ 1166.196023][T31537] tpg compose: 320x180@0x0 [ 1166.200632][T31537] tpg colorspace: 8 [ 1166.209573][T31537] tpg transfer function: 0/0 [ 1166.215943][T31537] tpg quantization: 0/0 [ 1166.220616][T31537] tpg RGB range: 0/2 [ 1166.224584][T31537] vivid-000: ================== END STATUS ================== [ 1166.351348][ T4328] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1166.363822][T31545] nvme_fabrics: unknown parameter or missing value '0x00000000000000ff' in ctrl creation request [ 1166.375018][ T7447] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1166.386778][ T4328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.395931][ T4328] usb 6-1: Product: syz [ 1166.406244][ T4328] usb 6-1: Manufacturer: syz [ 1166.417158][ T4328] usb 6-1: SerialNumber: syz [ 1166.431021][ T4328] usb 6-1: config 0 descriptor?? [ 1166.450954][ T4328] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now attached [ 1166.586644][ T7447] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1166.606723][ T7447] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 1166.636966][ T7447] usb 2-1: config 4 has no interface number 0 [ 1166.647728][ T7447] usb 2-1: config 4 interface 138 has no altsetting 0 [ 1166.668490][ T4328] usb 6-1: USB disconnect, device number 15 [ 1166.699219][ T7447] usb 2-1: string descriptor 0 read error: -22 [ 1166.705875][ T4328] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now disconnected [ 1166.723352][ T7447] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1166.744715][ T7447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.996312][ T7447] catc 2-1:4.138: Missing or invalid endpoints [ 1167.072670][T31573] MTD: Couldn't look up './bus': -15 [ 1167.233075][ T7447] usb 2-1: USB disconnect, device number 50 [ 1167.535873][T31597] loop5: detected capacity change from 0 to 512 [ 1167.558456][T31597] EXT4-fs: Ignoring removed oldalloc option [ 1167.658082][T31597] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1167.712952][T31597] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.794536][T31597] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.11956: inode #327680: comm syz.5.11956: iget: illegal inode # [ 1167.877744][T31597] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.11956: error while reading EA inode 327680 err=-117 [ 1167.917946][T31614] loop0: detected capacity change from 0 to 1024 [ 1167.951587][T31614] EXT4-fs: Ignoring removed oldalloc option [ 1167.979555][T31614] EXT4-fs: Ignoring removed oldalloc option [ 1168.012869][T31614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1168.050571][T31614] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 1168.123711][T24607] EXT4-fs (loop5): unmounting filesystem. [ 1168.361805][T31631] loop4: detected capacity change from 0 to 2048 [ 1168.428894][T31637] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1168.466229][T31631] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..' [ 1168.503273][T31631] Remounting filesystem read-only [ 1168.576858][T31641] loop0: detected capacity change from 0 to 4096 [ 1168.602731][T31641] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1168.657128][T31641] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1168.698741][T31643] loop1: detected capacity change from 0 to 512 [ 1168.733575][T31641] ntfs3: loop0: no free space to extend mft [ 1168.738075][ T7448] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1168.763665][T31643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1168.870221][T31649] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11978'. [ 1168.992203][ T7448] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1169.026706][ T7448] usb 4-1: not running at top speed; connect to a high speed hub [ 1169.040932][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1169.065359][ T7448] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.100825][ T7448] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.156445][T31657] binder: 31656:31657 ioctl c00c620f 0 returned -14 [ 1169.159027][ T7448] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1169.211794][ T7448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.225174][ T7448] usb 4-1: Product: syz [ 1169.236081][ T7448] usb 4-1: Manufacturer: syz [ 1169.244724][T31662] loop5: detected capacity change from 0 to 64 [ 1169.245676][ T7448] usb 4-1: SerialNumber: syz [ 1169.318586][T31662] syz.5.11984: attempt to access beyond end of device [ 1169.318586][T31662] loop5: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 1169.506658][ T7448] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1169.535863][ T7448] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 1169.568392][T31672] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11990'. [ 1169.591655][T31672] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11990'. [ 1169.620921][ T7448] usb 4-1: USB disconnect, device number 48 [ 1169.739411][T31679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11993'. [ 1169.889664][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1169.952032][T31687] loop0: detected capacity change from 0 to 512 [ 1169.991170][T31687] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1169.991195][T31687] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1169.991260][T31687] System zones: 0-1, 15-15, 18-18, 34-34 [ 1169.994399][T31687] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1170.002101][T31687] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1170.002171][T31687] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1170.002201][T31687] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1170.002508][T31687] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.11998: bad orphan inode 16 [ 1170.002847][T31687] ext4_test_bit(bit=15, block=18) = 1 [ 1170.002864][T31687] is_bad_inode(inode)=0 [ 1170.002873][T31687] NEXT_ORPHAN(inode)=0 [ 1170.002881][T31687] max_ino=32 [ 1170.002889][T31687] i_nlink=2 [ 1170.002959][T31687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1170.033486][T31687] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1170.291256][T31699] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1170.439616][ T4288] EXT4-fs (loop0): unmounting filesystem. [ 1170.910281][T31724] netlink: 'syz.1.12011': attribute type 21 has an invalid length. [ 1172.922273][T31809] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1173.130890][T31786] loop4: detected capacity change from 0 to 32768 [ 1173.151374][T31817] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12059'. [ 1173.198806][T31786] JBD2: Ignoring recovery information on journal [ 1173.246143][T31786] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1173.255613][T31786] JBD2: bad block at offset 32 [ 1173.290770][T31786] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1173.625363][T31839] loop1: detected capacity change from 0 to 64 [ 1173.643969][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 1173.674307][T31839] syz.1.12068: attempt to access beyond end of device [ 1173.674307][T31839] loop1: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 1173.875968][T31845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1173.923217][T31845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1173.967937][T31845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1173.980829][ T5833] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1174.011801][T31849] CIFS: Attempting to mount \\127.0.0.1\test [ 1174.015061][T31845] device bridge_slave_0 left promiscuous mode [ 1174.035812][T31845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.056975][T31849] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1174.057081][T31845] device bridge_slave_1 left promiscuous mode [ 1174.071252][T31849] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1174.080088][T31845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.103273][T31845] bond0: (slave bond_slave_0): Releasing backup interface [ 1174.148505][T31845] bond0: (slave bond_slave_1): Releasing backup interface [ 1174.215293][ T5833] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1174.234250][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.253188][ T5833] usb 4-1: config 0 descriptor?? [ 1174.280480][ T5833] cp210x 4-1:0.0: cp210x converter detected [ 1174.292147][T31837] loop5: detected capacity change from 0 to 32768 [ 1174.311242][T31845] team0: Port device team_slave_0 removed [ 1174.365667][T31845] team0: Port device team_slave_1 removed [ 1174.386601][T31845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.394474][T31845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.404689][T31845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.412254][T31845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.704631][ T5833] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1174.717837][ T5833] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1174.739406][ T5833] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1174.758182][ T5833] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1174.786784][ T5833] usb 4-1: USB disconnect, device number 49 [ 1174.828941][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1174.843899][ T5833] cp210x 4-1:0.0: device disconnected [ 1175.031799][ T7448] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1175.150805][ T4328] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1175.243068][ T7448] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1175.266347][ T7448] usb 2-1: not running at top speed; connect to a high speed hub [ 1175.294771][ T7448] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 1175.315207][ T7448] usb 2-1: config 0 has no interface number 0 [ 1175.329794][ T7448] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=45.70 [ 1175.349056][ T7448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.375414][ T4328] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1175.385408][ T4328] usb 1-1: config 0 has no interface number 0 [ 1175.392792][ T7448] usb 2-1: Product: syz [ 1175.396987][ T7448] usb 2-1: Manufacturer: syz [ 1175.422146][ T4328] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1175.433713][ T7448] usb 2-1: SerialNumber: syz [ 1175.444053][ T7448] usb 2-1: config 0 descriptor?? [ 1175.454239][ T4328] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1175.463319][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.491630][ T4328] usb 1-1: Product: syz [ 1175.495881][ T4328] usb 1-1: Manufacturer: syz [ 1175.501116][ T4328] usb 1-1: SerialNumber: syz [ 1175.540165][ T4328] usb 1-1: config 0 descriptor?? [ 1175.558952][ T4328] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1175.673279][ T7448] rtsx_usb: probe of 2-1:0.102 failed with error -22 [ 1175.694356][ T7448] usb 2-1: USB disconnect, device number 51 [ 1175.805974][ C0] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1175.885152][T31900] netlink: 'syz.5.12098': attribute type 1 has an invalid length. [ 1175.902681][T31900] netlink: 'syz.5.12098': attribute type 2 has an invalid length. [ 1176.033769][T31892] loop3: detected capacity change from 0 to 32768 [ 1176.052343][ T7448] usb 1-1: USB disconnect, device number 24 [ 1176.071648][ T7448] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1176.091435][T31892] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1176.141320][T31892] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 1176.359311][ T4281] INFO: trying to register non-static key. [ 1176.365170][ T4281] The code is fine but needs lockdep annotation, or maybe [ 1176.372287][ T4281] you didn't initialize this object before use? [ 1176.378527][ T4281] turning off the locking correctness validator. [ 1176.384860][ T4281] CPU: 1 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 1176.392421][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1176.402469][ T4281] Call Trace: [ 1176.405739][ T4281] [ 1176.408662][ T4281] dump_stack_lvl+0x188/0x24e [ 1176.413352][ T4281] ? show_regs_print_info+0x12/0x12 [ 1176.418554][ T4281] ? load_image+0x410/0x410 [ 1176.423054][ T4281] ? _find_next_bit+0x11e/0x130 [ 1176.427981][ T4281] ? __is_module_percpu_address+0x279/0x3b0 [ 1176.433887][ T4281] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1176.439667][ T4281] assign_lock_key+0x201/0x230 [ 1176.444440][ T4281] ? SOFTIRQ_verbose+0x10/0x10 [ 1176.449203][ T4281] register_lock_class+0x21d/0x870 [ 1176.454319][ T4281] ? mark_lock+0x94/0x320 [ 1176.458645][ T4281] ? is_dynamic_key+0x260/0x260 [ 1176.463491][ T4281] ? __lock_acquire+0x1465/0x7c40 [ 1176.468514][ T4281] __lock_acquire+0x172/0x7c40 [ 1176.473298][ T4281] ? kernel_text_address+0x9c/0xd0 [ 1176.478409][ T4281] ? __kernel_text_address+0x9/0x30 [ 1176.483599][ T4281] ? verify_lock_unused+0x140/0x140 [ 1176.488795][ T4281] ? verify_lock_unused+0x140/0x140 [ 1176.493995][ T4281] ? stack_trace_save+0xa6/0xf0 [ 1176.498844][ T4281] ? __stack_depot_save+0x35/0x480 [ 1176.504036][ T4281] lock_acquire+0x1bb/0x4a0 [ 1176.508536][ T4281] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1176.514481][ T4281] ? memset+0x1e/0x40 [ 1176.518488][ T4281] ? read_lock_is_recursive+0x10/0x10 [ 1176.523859][ T4281] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1176.530133][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 1176.535355][ T4281] _raw_spin_lock_irqsave+0xb0/0x100 [ 1176.540639][ T4281] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1176.546526][ T4281] ? _raw_spin_lock+0x40/0x40 [ 1176.551208][ T4281] ? ktime_get+0x247/0x270 [ 1176.555619][ T4281] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1176.561334][ T4281] ? ocfs2_dlm_shutdown+0x230/0x230 [ 1176.566544][ T4281] ? slab_free_freelist_hook+0x133/0x1b0 [ 1176.572274][ T4281] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 1176.577817][ T4281] ? ocfs2_journal_init+0xd40/0xd40 [ 1176.583016][ T4281] ocfs2_dlm_shutdown+0x33/0x230 [ 1176.587951][ T4281] ocfs2_dismount_volume+0x479/0x940 [ 1176.593309][ T4281] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 1176.598591][ T4281] ? clear_inode+0x150/0x150 [ 1176.603175][ T4281] ? dput+0x37/0x1d0 [ 1176.607100][ T4281] ? ocfs2_free_inode+0x20/0x20 [ 1176.611953][ T4281] generic_shutdown_super+0x130/0x340 [ 1176.617321][ T4281] kill_block_super+0x7c/0xe0 [ 1176.621995][ T4281] deactivate_locked_super+0x93/0xf0 [ 1176.627275][ T4281] cleanup_mnt+0x471/0x4f0 [ 1176.631692][ T4281] task_work_run+0x1d0/0x260 [ 1176.636282][ T4281] ? task_work_cancel+0x220/0x220 [ 1176.641315][ T4281] ? exit_to_user_mode_loop+0x3b/0x110 [ 1176.646775][ T4281] exit_to_user_mode_loop+0xe6/0x110 [ 1176.652062][ T4281] exit_to_user_mode_prepare+0xee/0x180 [ 1176.657603][ T4281] syscall_exit_to_user_mode+0x16/0x40 [ 1176.663058][ T4281] do_syscall_64+0x58/0xa0 [ 1176.667473][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 1176.672146][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 1176.676818][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1176.682708][ T4281] RIP: 0033:0x7fdb6099f317 [ 1176.687118][ T4281] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1176.706716][ T4281] RSP: 002b:00007ffc92bf7118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1176.715124][ T4281] RAX: 0000000000000000 RBX: 00007fdb60a34474 RCX: 00007fdb6099f317 [ 1176.723127][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc92bf71d0 [ 1176.731099][ T4281] RBP: 00007ffc92bf71d0 R08: 00007ffc92bf81d0 R09: 00000000ffffffff [ 1176.739072][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc92bf8260 [ 1176.747043][ T4281] R13: 00007fdb60a34474 R14: 0000000000114fa4 R15: 00007ffc92bf82a0 [ 1176.755016][ T4281] [ 1176.758107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1176.787686][ T4281] ocfs2: Unmounting device (7,3) on (node local)