last executing test programs: 3.119423274s ago: executing program 3 (id=9606): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x3, 0xd99, &(0x7f0000006900)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.569957007s ago: executing program 3 (id=9617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 2.286448315s ago: executing program 3 (id=9622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020603060000000000000000000000000500040000000000050001000600000014000300686173683a69702c706f72742c6970000500050002000000140007800800124000000000050015000c000000090002"], 0x60}}, 0x0) 2.260235585s ago: executing program 4 (id=9623): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0xa, 0x3, 0x40, 0xad2, 'syz1\x00', 0x4}) 1.990191031s ago: executing program 3 (id=9626): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x17, 0x1, 0x2, "0e6a605103787fa03e08fd65b728aec1b20a1ca8de67a818b1c85f5a22f39ca6", 0x41495043}) 1.990070842s ago: executing program 4 (id=9627): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x27, 0xb, 0x0, 0xffffffff, {0x9}}, 0x14}}, 0x0) 1.796642976s ago: executing program 4 (id=9631): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000180)) 1.783976767s ago: executing program 3 (id=9632): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) 1.220301311s ago: executing program 0 (id=9643): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4009004}, 0x890) 1.216026891s ago: executing program 4 (id=9644): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[], 0x1, 0x62a7, &(0x7f0000012f40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 1.076083064s ago: executing program 2 (id=9645): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) 1.064947554s ago: executing program 1 (id=9646): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x40000}, 0x20) 995.326126ms ago: executing program 0 (id=9647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1c5, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) 911.722358ms ago: executing program 1 (id=9648): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 903.867098ms ago: executing program 2 (id=9649): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) 724.292493ms ago: executing program 0 (id=9650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x401, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}}, 0x0) 687.940644ms ago: executing program 2 (id=9651): r0 = socket(0x28, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 572.371026ms ago: executing program 0 (id=9652): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x100001) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000240)) 491.486218ms ago: executing program 2 (id=9653): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000000)='./mnt\x00', 0x177) 485.224568ms ago: executing program 1 (id=9654): r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x8400) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 381.992631ms ago: executing program 0 (id=9655): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0xcb4, 0x4) 242.881025ms ago: executing program 2 (id=9656): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000200)={0x0, "fff7ef93fef9aaa1c4ede5de5204eba874c7cd9bf7e6625d1221c80ac1bdffc4"}) 224.329065ms ago: executing program 1 (id=9657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000063020900020073797a3200000000090001"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 177.517967ms ago: executing program 0 (id=9658): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 79.626878ms ago: executing program 2 (id=9659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 27.92615ms ago: executing program 4 (id=9660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49813}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x40}}, 0x20000000) 0s ago: executing program 1 (id=9661): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000001380)="$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") utime(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): [ 931.015637][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.058784][ T4348] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 931.080350][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.112845][ T4348] usb 4-1: config 0 descriptor?? [ 931.142861][ T4348] hub 4-1:0.0: USB hub found [ 931.360839][ T4348] hub 4-1:0.0: 3 ports detected [ 931.606952][ T4348] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 931.614064][ T4348] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 931.657683][ T4348] usbhid 4-1:0.0: can't add hid device: -71 [ 931.674759][ T4348] usbhid: probe of 4-1:0.0 failed with error -71 [ 931.728462][ T4348] usb 4-1: USB disconnect, device number 94 [ 931.846107][T21553] loop0: detected capacity change from 0 to 32768 [ 931.997723][T21553] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 932.010141][T21582] loop1: detected capacity change from 0 to 16 [ 932.011137][T21582] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 932.404884][T21589] overlayfs: missing 'lowerdir' [ 932.413769][ T4368] XFS (loop0): Unmounting Filesystem [ 932.644845][T21595] netlink: 'syz.1.7734': attribute type 21 has an invalid length. [ 932.686594][T21595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7734'. [ 932.969497][ T27] audit: type=1326 audit(1786468312.385:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 932.993533][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.091990][ T27] audit: type=1326 audit(1786468312.422:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.211066][ T27] audit: type=1326 audit(1786468312.422:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.284845][ T27] audit: type=1326 audit(1786468312.422:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.320023][T21612] loop3: detected capacity change from 0 to 8 [ 933.361062][T21612] SQUASHFS error: Unable to read inode 0xe3 [ 933.410106][ T27] audit: type=1326 audit(1786468312.422:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.545856][T21621] loop2: detected capacity change from 0 to 512 [ 933.583350][ T27] audit: type=1326 audit(1786468312.422:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.616900][T21621] EXT4-fs: Ignoring removed nobh option [ 933.635473][T21621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 933.678706][T21627] SET target dimension over the limit! [ 933.705929][ T27] audit: type=1326 audit(1786468312.422:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.723082][T21621] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.7745: bg 0: block 384: padding at end of block bitmap is not set [ 933.835375][ T27] audit: type=1326 audit(1786468312.422:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.903616][ T27] audit: type=1326 audit(1786468312.422:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.4.7738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5529f9df99 code=0x7ffc0000 [ 933.928177][T21621] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 933.973463][T21621] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.7745: attempt to clear invalid blocks 983260 len 1 [ 934.034055][T21639] loop3: detected capacity change from 0 to 64 [ 934.047072][T21621] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.7745: Invalid inode table block 0 in block_group 0 [ 934.133814][T21621] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 934.162534][T21621] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 934.197780][T21621] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.7745: Invalid inode table block 0 in block_group 0 [ 934.233723][T21643] netlink: 'syz.4.7756': attribute type 8 has an invalid length. [ 934.259449][T21621] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 934.276561][T21643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 934.308658][T21621] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.7745: mark_inode_dirty error [ 934.347887][T21621] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 934.374055][T21621] EXT4-fs (loop2): 1 truncate cleaned up [ 934.390831][T21621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 934.468475][T21621] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 13: comm syz.2.7745: bad entry in directory: inode out of bounds - offset=60, inode=1039, rec_len=16, size=1024 fake=0 [ 934.711968][ T4378] EXT4-fs (loop2): unmounting filesystem. [ 934.824827][T21664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7766'. [ 935.045501][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7771'. [ 935.068024][ T4348] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 935.302979][ T4348] usb 2-1: Using ep0 maxpacket: 32 [ 935.311107][ T4348] usb 2-1: config 0 has an invalid interface number: 188 but max is 1 [ 935.345993][ T4348] usb 2-1: config 0 has an invalid interface number: 122 but max is 1 [ 935.380254][ T4348] usb 2-1: config 0 has no interface number 0 [ 935.386505][ T4348] usb 2-1: config 0 has no interface number 1 [ 935.430994][ T4348] usb 2-1: config 0 interface 188 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 935.485542][ T4348] usb 2-1: config 0 interface 188 has no altsetting 0 [ 935.492394][ T4348] usb 2-1: config 0 interface 122 has no altsetting 0 [ 935.519246][ T4348] usb 2-1: string descriptor 0 read error: -22 [ 935.535011][ T4348] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=bb.1a [ 935.556059][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.579605][ T4348] usb 2-1: config 0 descriptor?? [ 935.583598][T21689] loop4: detected capacity change from 0 to 2048 [ 935.651352][T21689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 935.734989][T21699] netlink: 'syz.0.7785': attribute type 1 has an invalid length. [ 935.828135][ T6843] usb 2-1: USB disconnect, device number 127 [ 935.941642][ T4380] EXT4-fs (loop4): unmounting filesystem. [ 936.081891][ T4698] udevd[4698]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.732585][T21733] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 936.766963][T21733] overlayfs: overlapping lowerdir path [ 936.959180][ T6843] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 937.007542][T21743] misc userio: Invalid payload size [ 937.167146][ T6843] usb 4-1: Using ep0 maxpacket: 16 [ 937.175226][ T6843] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 937.196091][ T6843] usb 4-1: config 254 has no interface number 0 [ 937.203145][ T6843] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 937.258279][ T6843] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 937.291712][ T6843] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 937.343798][ T6843] usb 4-1: config 254 interface 235 has no altsetting 0 [ 937.389192][ T6843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 937.429269][ T6843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.439408][ T6843] usb 4-1: Product: syz [ 937.446984][T21727] loop4: detected capacity change from 0 to 32768 [ 937.449735][T21753] loop0: detected capacity change from 0 to 512 [ 937.454133][ T6843] usb 4-1: Manufacturer: syz [ 937.472296][T21727] [ 937.472296][T21727] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.472296][T21727] [ 937.485080][ T6843] usb 4-1: SerialNumber: syz [ 937.494657][T21753] EXT4-fs: Ignoring removed nobh option [ 937.527736][T21753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 937.552227][T21727] ialloc: diAlloc returned -5! [ 937.593942][T21753] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7807: bg 0: block 384: padding at end of block bitmap is not set [ 937.614463][T21753] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 937.628071][T21753] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.7807: attempt to clear invalid blocks 983260 len 1 [ 937.652541][T21753] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.7807: Invalid inode table block 0 in block_group 0 [ 937.742534][ T4380] [ 937.742534][ T4380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.742534][ T4380] [ 937.743773][ T6843] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 937.781370][T21753] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 937.782361][ T6843] usbtest: probe of 4-1:254.235 failed with error -71 [ 937.797743][ T4380] [ 937.797743][ T4380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.797743][ T4380] [ 937.808539][T18688] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 937.817640][T21753] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 937.873557][ T6843] usb 4-1: USB disconnect, device number 95 [ 937.910557][T21753] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.7807: Invalid inode table block 0 in block_group 0 [ 937.953302][T21753] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 938.002531][T21753] EXT4-fs error (device loop0): ext4_truncate:4325: inode #11: comm syz.0.7807: mark_inode_dirty error [ 938.014122][T18688] usb 2-1: Using ep0 maxpacket: 32 [ 938.026303][T18688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 938.038547][T21753] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 938.068068][T18688] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 938.077198][T21753] EXT4-fs (loop0): 1 truncate cleaned up [ 938.092842][T18688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.114244][T21753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 938.131930][T18688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.174643][T18688] usb 2-1: string descriptor 0 read error: -22 [ 938.185403][T18688] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 938.205213][T21753] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 13: comm syz.0.7807: bad entry in directory: inode out of bounds - offset=60, inode=1039, rec_len=16, size=1024 fake=0 [ 938.238845][T18688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.282294][T18688] usb 2-1: 0:2 : does not exist [ 938.398989][ T4368] EXT4-fs (loop0): unmounting filesystem. [ 938.581928][T21773] loop3: detected capacity change from 0 to 8 [ 938.583328][ T14] usb 2-1: USB disconnect, device number 2 [ 938.670738][T21773] SQUASHFS error: Failed to read block 0x6de: -5 [ 938.698460][T21773] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 938.718119][T21773] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 939.024109][T21762] loop2: detected capacity change from 0 to 32768 [ 939.065337][T21762] [ 939.065337][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.065337][T21762] [ 939.164000][T21762] [ 939.164000][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.164000][T21762] [ 939.168521][T21788] loop3: detected capacity change from 0 to 512 [ 939.246945][T21762] [ 939.246945][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.246945][T21762] [ 939.297921][T21788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 939.338101][T21788] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 6: comm syz.3.7824: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 939.341261][T21762] [ 939.341261][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.341261][T21762] [ 939.462194][T21762] [ 939.462194][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.462194][T21762] [ 939.484065][T21788] EXT4-fs (loop3): Remounting filesystem read-only [ 939.545070][T21762] [ 939.545070][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.545070][T21762] [ 939.599157][T21762] [ 939.599157][T21762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.599157][T21762] [ 939.655625][ T108] [ 939.655625][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.655625][ T108] [ 939.724535][ T4373] EXT4-fs (loop3): unmounting filesystem. [ 939.800623][ T4378] [ 939.800623][ T4378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.800623][ T4378] [ 939.800847][ T4378] [ 939.800847][ T4378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 939.800847][ T4378] [ 940.344163][T21822] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 940.686646][T21833] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7845'. [ 940.707010][T21833] netlink: 'syz.4.7845': attribute type 3 has an invalid length. [ 941.103899][T21847] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7852'. [ 941.358141][T21819] loop3: detected capacity change from 0 to 32768 [ 941.478839][ T4348] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 941.506364][T21819] XFS (loop3): Mounting V5 Filesystem [ 941.582504][T21866] syz.2.7859 uses old SIOCAX25GETINFO [ 941.681899][ T4348] usb 5-1: Using ep0 maxpacket: 16 [ 941.687479][T21819] XFS (loop3): Ending clean mount [ 941.691805][ T4348] usb 5-1: config 0 has no interfaces? [ 941.707745][T21819] XFS (loop3): Quotacheck needed: Please wait. [ 941.711329][ T4348] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 941.734355][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.755957][ T4348] usb 5-1: Product: syz [ 941.775800][ T4348] usb 5-1: Manufacturer: syz [ 941.792094][ T4348] usb 5-1: SerialNumber: syz [ 941.817600][T21819] XFS (loop3): Quotacheck: Done. [ 941.863956][ T4348] r8152-cfgselector 5-1: config 0 descriptor?? [ 942.108592][ T4348] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 942.128085][ T4373] XFS (loop3): Unmounting Filesystem [ 942.362256][ T4348] usb 5-1: USB disconnect, device number 117 [ 943.073286][T21911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7878'. [ 943.554463][T21931] xt_connbytes: Forcing CT accounting to be enabled [ 943.578463][T21931] set match dimension is over the limit! [ 943.765321][T18688] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 943.887364][T21945] loop3: detected capacity change from 0 to 64 [ 943.890918][T21941] loop4: detected capacity change from 0 to 764 [ 943.957639][T18688] usb 3-1: Using ep0 maxpacket: 32 [ 943.966589][T18688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.017599][T18688] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 944.062324][T18688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.083592][T18688] usb 3-1: Product: syz [ 944.100535][T18688] usb 3-1: Manufacturer: syz [ 944.106877][T18688] usb 3-1: SerialNumber: syz [ 944.120094][T18688] usb 3-1: config 0 descriptor?? [ 944.222713][T18688] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 944.354439][T18688] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 944.361794][T18688] quatech2: probe of 3-1:0.0 failed with error -8 [ 944.601731][ T4348] usb 3-1: USB disconnect, device number 4 [ 945.093652][T21979] loop3: detected capacity change from 0 to 164 [ 945.208824][T21979] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 945.507897][ T27] audit: type=1326 audit(1786468324.121:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 945.542305][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7920'. [ 945.613924][ T27] audit: type=1326 audit(1786468324.149:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 945.742105][ T27] audit: type=1326 audit(1786468324.149:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 945.844857][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7924'. [ 945.856268][ T27] audit: type=1326 audit(1786468324.149:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 945.993271][ T27] audit: type=1326 audit(1786468324.149:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 946.083908][ T27] audit: type=1326 audit(1786468324.149:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 946.173688][T22012] netlink: 676 bytes leftover after parsing attributes in process `syz.0.7930'. [ 946.176848][T22014] netlink: 'syz.4.7929': attribute type 2 has an invalid length. [ 946.192657][ T27] audit: type=1326 audit(1786468324.149:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 946.193483][T22013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7931'. [ 946.254230][T22006] xt_CT: No such helper "pptp" [ 946.275185][ T27] audit: type=1326 audit(1786468324.149:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21988 comm="syz.0.7919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 946.340483][T22013] netlink: 'syz.1.7931': attribute type 1 has an invalid length. [ 946.375853][ T27] audit: type=1326 audit(1786468324.645:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.3.7928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa078b9df99 code=0x7ffc0000 [ 946.492413][ T27] audit: type=1326 audit(1786468324.645:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.3.7928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa078b9df99 code=0x7ffc0000 [ 947.151127][T22046] binder: 22045:22046 ioctl c018620c 200000000000 returned -22 [ 947.178558][T22048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7946'. [ 947.517017][T22057] loop3: detected capacity change from 0 to 1024 [ 947.524390][T22057] EXT4-fs: Ignoring removed orlov option [ 947.564390][T22057] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 947.602133][T22057] EXT4-fs (loop3): invalid journal inode [ 947.629603][T22057] EXT4-fs (loop3): can't get journal size [ 947.688260][T22057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 947.777222][ T4373] EXT4-fs (loop3): unmounting filesystem. [ 947.939688][T22067] loop2: detected capacity change from 0 to 4096 [ 947.965260][T22075] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 947.997594][T22067] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 948.192635][T22080] netlink: 'syz.0.7962': attribute type 3 has an invalid length. [ 948.231794][T22080] netlink: 46 bytes leftover after parsing attributes in process `syz.0.7962'. [ 948.496113][T22091] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7966'. [ 948.791031][T22101] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 949.310864][T22122] loop1: detected capacity change from 0 to 2048 [ 949.366958][T22122] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 949.429763][T22122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 950.154241][T22150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7996'. [ 950.211070][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7997'. [ 950.926690][T22173] loop1: detected capacity change from 0 to 4096 [ 951.071153][T22183] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 951.381276][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.420119][T22192] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 951.511825][ T9401] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 951.749762][ T9401] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 951.761742][ T9401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.774876][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8021'. [ 951.782315][ T9401] usb 5-1: Product: syz [ 951.818687][ T9401] usb 5-1: Manufacturer: syz [ 951.840922][ T9401] usb 5-1: SerialNumber: syz [ 951.854715][ T9401] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 951.914529][ T9401] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 952.088854][ T6843] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 952.291742][ T6843] usb 1-1: Using ep0 maxpacket: 32 [ 952.298922][ T6843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.323773][ T6843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.340050][ T6843] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 952.353374][T22224] loop1: detected capacity change from 0 to 2048 [ 952.377771][ T6843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.412388][ T6843] usb 1-1: config 0 descriptor?? [ 952.438032][T18688] usb 5-1: USB disconnect, device number 118 [ 952.448182][ T6843] hub 1-1:0.0: USB hub found [ 952.456865][T22224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.667475][ T6843] hub 1-1:0.0: 1 port detected [ 952.892867][ T6843] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 952.899282][ T6843] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 952.940720][ T6843] usbhid 1-1:0.0: can't add hid device: -71 [ 952.964908][ T6843] usbhid: probe of 1-1:0.0 failed with error -71 [ 953.019039][ T6843] usb 1-1: USB disconnect, device number 123 [ 953.103877][ T9401] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 953.110954][ T9401] ath9k_htc: Failed to initialize the device [ 953.137600][T18688] usb 5-1: ath9k_htc: USB layer deinitialized [ 953.366773][T22244] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 953.412864][T22244] overlayfs: missing 'lowerdir' [ 954.371350][T22279] netlink: 'syz.2.8059': attribute type 1 has an invalid length. [ 954.657989][T22288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.743852][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 954.743870][ T27] audit: type=1326 audit(1786468332.759:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.0.8066" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 954.918410][ T27] audit: type=1326 audit(1786468332.928:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.0.8066" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 955.023381][ T27] audit: type=1326 audit(1786468332.928:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.0.8066" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 955.064892][T22305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.081977][T22305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 955.104875][T22305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 955.117553][T22307] xt_cgroup: invalid path, errno=-2 [ 955.134705][ T27] audit: type=1326 audit(1786468332.928:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.0.8066" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c939df99 code=0x7ffc0000 [ 955.166896][T22309] netlink: 'syz.0.8074': attribute type 4 has an invalid length. [ 955.196531][T22309] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8074'. [ 955.207469][T22311] loop4: detected capacity change from 0 to 764 [ 955.612015][ T9401] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 955.841619][ T9401] usb 4-1: unable to get BOS descriptor or descriptor too short [ 955.866145][ T9401] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 955.909736][ T9401] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 955.942883][ T9401] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 955.974621][ T9401] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 956.011585][ T9401] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 956.052732][ T9401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.082592][ T9401] usb 4-1: Product: syz [ 956.093393][ T9401] usb 4-1: Manufacturer: syz [ 956.121718][ T9401] usb 4-1: SerialNumber: syz [ 956.140912][T22342] loop2: detected capacity change from 0 to 2048 [ 956.170842][T22342] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 956.256065][T22345] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 956.354558][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.373591][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.422611][ T9401] usb 4-1: USB disconnect, device number 96 [ 956.486189][T22342] Remounting filesystem read-only [ 956.510996][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.571039][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.614161][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.654811][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.705205][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.744232][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.766129][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.779724][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.799100][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.801796][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8096'. [ 956.810268][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.840364][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.867690][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.880866][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.913500][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 956.949746][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 956.994813][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.040311][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.117216][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.176712][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.277227][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.302854][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.304903][T22369] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8102'. [ 957.321710][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.344378][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.362951][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.423914][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.450135][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8105'. [ 957.475007][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.501918][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.532577][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.583823][T22342] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 957.611287][T22342] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 957.664941][ T27] audit: type=1800 audit(1786468335.492:103): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8090" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 957.748342][T22342] syz.2.8090 (22342) used greatest stack depth: 19120 bytes left [ 958.096455][T22399] Driver unsupported XDP return value 0 on prog (id 530) dev N/A, expect packet loss! [ 958.272959][T22404] netlink: 'syz.4.8121': attribute type 5 has an invalid length. [ 958.598246][T22417] netlink: 'syz.4.8127': attribute type 1 has an invalid length. [ 959.147707][ T9401] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 959.215521][ T6843] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 959.239674][T22420] loop1: detected capacity change from 0 to 32768 [ 959.258091][ T6845] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 959.328923][T22420] XFS (loop1): Mounting V5 Filesystem [ 959.354318][ T9401] usb 1-1: Using ep0 maxpacket: 32 [ 959.361942][ T9401] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.382672][ T9401] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 959.410578][ T9401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.428067][ T6843] usb 5-1: unable to get BOS descriptor or descriptor too short [ 959.429021][ T9401] usb 1-1: Product: syz [ 959.441315][ T9401] usb 1-1: Manufacturer: syz [ 959.445956][ T9401] usb 1-1: SerialNumber: syz [ 959.460640][ T9401] usb 1-1: config 0 descriptor?? [ 959.461095][ T6845] usb 3-1: Using ep0 maxpacket: 32 [ 959.471014][ T9401] usb 1-1: bad CDC descriptors [ 959.481986][ T6843] usb 5-1: not running at top speed; connect to a high speed hub [ 959.489494][ T9401] usb 1-1: unsupported MDLM descriptors [ 959.527540][ T6845] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 959.552154][ T6845] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 959.564421][ T6843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 959.589579][ T6845] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 959.603410][ T6843] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 959.621522][ T6843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.632356][ T6845] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 959.651240][ T6843] usb 5-1: Product: syz [ 959.660845][ T6845] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 959.675130][ T6843] usb 5-1: Manufacturer: syz [ 959.679787][ T6843] usb 5-1: SerialNumber: syz [ 959.689918][ T6845] usb 3-1: config 0 interface 0 has no altsetting 0 [ 959.707359][T22429] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 959.730933][ T6845] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 959.734188][T22420] XFS (loop1): Ending clean mount [ 959.750261][ T6845] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 959.759323][ T9401] usb 1-1: USB disconnect, device number 124 [ 959.795752][T22420] XFS (loop1): Quotacheck needed: Please wait. [ 959.810448][ T6845] usb 3-1: Product: syz [ 959.820976][ T6845] usb 3-1: Manufacturer: syz [ 959.854797][ T6845] usb 3-1: SerialNumber: syz [ 959.862795][ T6845] usb 3-1: config 0 descriptor?? [ 959.890158][ T6845] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 959.925894][ T6845] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 959.949609][T22420] XFS (loop1): Quotacheck: Done. [ 959.975057][ T6843] usb 5-1: MIDIStreaming interface descriptor not found [ 960.043130][ T6843] usb 5-1: USB disconnect, device number 119 [ 960.120154][T22431] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 960.130874][T18688] usb 3-1: USB disconnect, device number 5 [ 960.142559][T18688] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 960.146998][ T4369] XFS (loop1): Unmounting Filesystem [ 960.335903][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.660476][T22467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8144'. [ 960.708113][T22467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8144'. [ 961.025980][T22480] loop0: detected capacity change from 0 to 512 [ 961.059591][T22480] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 961.156079][T22480] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.8155: bad orphan inode 83886093 [ 961.180451][T22480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 961.257367][T22480] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 2 [ 961.280177][T22491] device gre1 left promiscuous mode [ 961.355257][T22480] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 961.372046][T22480] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.8155: Failed to acquire dquot type 1 [ 961.381869][T22495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8162'. [ 961.562412][ T4368] EXT4-fs (loop0): unmounting filesystem. [ 961.872037][T22513] loop2: detected capacity change from 0 to 256 [ 961.883283][T22516] netlink: 'syz.4.8171': attribute type 1 has an invalid length. [ 961.909174][T22513] exfat: Deprecated parameter 'utf8' [ 961.991599][T18688] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 961.992748][T22519] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.024415][ T27] audit: type=1326 audit(1786468339.573:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.050576][T22513] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 962.120321][ T27] audit: type=1326 audit(1786468339.648:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.203709][ T27] audit: type=1326 audit(1786468339.648:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.217803][T18688] usb 4-1: Using ep0 maxpacket: 16 [ 962.278923][ T27] audit: type=1326 audit(1786468339.648:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.283649][T18688] usb 4-1: config index 0 descriptor too short (expected 34834, got 121) [ 962.315424][ T27] audit: type=1326 audit(1786468339.648:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.375921][T18688] usb 4-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 962.404248][T18688] usb 4-1: config 208 has 1 interface, different from the descriptor's value: 4 [ 962.427193][T18688] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 962.447434][T18688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.471128][T18688] usb 4-1: Product: syz [ 962.474754][ T27] audit: type=1326 audit(1786468339.648:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.475422][T18688] usb 4-1: Manufacturer: syz [ 962.556710][ T27] audit: type=1326 audit(1786468339.648:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.559443][T22533] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 962.631631][T18688] usb 4-1: SerialNumber: syz [ 962.659723][ T27] audit: type=1326 audit(1786468339.648:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22520 comm="syz.1.8173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 962.696007][T22535] netlink: 'syz.0.8181': attribute type 21 has an invalid length. [ 962.707184][T22537] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 962.761981][T22537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.894088][T18688] usb 4-1: Fast Track Pro config OK [ 962.919696][T18688] usb 4-1: cannot find UAC_HEADER [ 962.932413][T22543] loop2: detected capacity change from 0 to 64 [ 962.988804][T18688] snd-usb-audio: probe of 4-1:208.0 failed with error -22 [ 963.032440][T18688] usb 4-1: USB disconnect, device number 97 [ 963.297488][ T4698] udevd[4698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:208.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.311736][T22554] netlink: 'syz.1.8189': attribute type 3 has an invalid length. [ 964.874782][T22569] loop0: detected capacity change from 0 to 32768 [ 965.002484][T22569] XFS (loop0): Mounting V5 Filesystem [ 965.152134][T22630] netlink: 196 bytes leftover after parsing attributes in process `syz.4.8226'. [ 965.161728][T22630] netlink: 196 bytes leftover after parsing attributes in process `syz.4.8226'. [ 965.171747][T22630] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8226'. [ 965.267373][T22569] XFS (loop0): Ending clean mount [ 965.296777][T22569] XFS (loop0): Quotacheck needed: Please wait. [ 965.485119][T22569] XFS (loop0): Quotacheck: Done. [ 965.693180][T22647] netlink: 'syz.1.8231': attribute type 1 has an invalid length. [ 965.766409][ T4368] XFS (loop0): Unmounting Filesystem [ 965.998263][T22657] loop4: detected capacity change from 0 to 8 [ 966.081047][T22657] SQUASHFS error: Failed to read block 0x6fc: -5 [ 966.098952][T22657] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 966.954942][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.961751][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.218230][ T6845] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 967.294877][T22701] loop2: detected capacity change from 0 to 256 [ 967.444443][ T6845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.474650][ T6845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.498101][ T6845] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 967.525587][T22704] loop4: detected capacity change from 0 to 2048 [ 967.532558][ T6845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 967.549465][ T6845] usb 1-1: Product: syz [ 967.560115][ T6845] usb 1-1: Manufacturer: syz [ 967.571053][ T6845] usb 1-1: SerialNumber: syz [ 967.577554][T22704] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 967.614645][ T6845] usb 1-1: config 0 descriptor?? [ 967.652177][ T6845] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 967.678809][ T6845] pctv452e: pctv452e_power_ctrl: 1 [ 967.678809][ T6845] [ 967.700006][T22710] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 967.725729][T22709] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.743975][T22709] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.751566][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 967.795433][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 967.826485][T22704] Remounting filesystem read-only [ 967.840803][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 967.864342][ T6845] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 967.864342][ T6845] [ 967.879206][ T6845] dvb-usb: bulk message failed: -22 (5/0) [ 967.898469][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 967.934979][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 967.946930][ T6845] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 967.947983][T22713] loop2: detected capacity change from 0 to 512 [ 967.959907][T22709] device gre1 left promiscuous mode [ 967.973621][ T6845] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 967.993177][T22713] EXT4-fs: Ignoring removed bh option [ 968.000978][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.013337][T22713] EXT4-fs: Ignoring removed mblk_io_submit option [ 968.034213][ T6845] usb 1-1: USB disconnect, device number 125 [ 968.045893][T22713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 968.093659][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.118006][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.136264][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.147069][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.149725][T22713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 968.167279][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.188945][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.200720][T22713] ext4 filesystem being mounted at /1548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 968.201509][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.221617][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.222550][ T14] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 968.240399][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.287895][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.315786][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.327020][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.353953][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.355125][T22713] EXT4-fs error (device loop2): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.2.8262: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 968.372127][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.412597][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.414161][T22713] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.8262: directory missing '.' [ 968.445772][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.456667][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.469978][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.491609][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.516676][ T14] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 968.526764][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.539296][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.553984][ T14] usb 4-1: Product: syz [ 968.558201][ T14] usb 4-1: Manufacturer: syz [ 968.565225][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.585810][ T14] usb 4-1: SerialNumber: syz [ 968.592562][ T14] usb 4-1: config 0 descriptor?? [ 968.597673][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.620664][ T14] ch341 4-1:0.0: ch341-uart converter detected [ 968.669711][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.691880][ T4378] EXT4-fs (loop2): unmounting filesystem. [ 968.697959][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.754183][T22704] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 968.800863][T22704] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 968.832651][ T27] audit: type=1800 audit(1786468345.956:112): pid=22704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8258" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 969.064738][ T14] usb 4-1: failed to send control message: -71 [ 969.071895][ T14] ch341-uart: probe of ttyUSB0 failed with error -71 [ 969.094835][ T14] usb 4-1: USB disconnect, device number 98 [ 969.117709][ T14] ch341 4-1:0.0: device disconnected [ 969.282347][T22737] loop0: detected capacity change from 0 to 512 [ 969.348241][T22737] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8272: bg 0: block 313: padding at end of block bitmap is not set [ 969.388608][T22737] EXT4-fs (loop0): Remounting filesystem read-only [ 969.407777][T22737] EXT4-fs (loop0): 1 truncate cleaned up [ 969.448710][T22737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 969.518984][T22730] loop2: detected capacity change from 0 to 32768 [ 969.615737][T22730] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 969.615737][T22730] [ 969.675502][T22730] ERROR: (device loop2): remounting filesystem as read-only [ 969.697450][ T4368] EXT4-fs (loop0): unmounting filesystem. [ 969.840632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 970.032796][ T14] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 970.252756][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 970.262514][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 970.304525][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.326500][T22734] loop4: detected capacity change from 0 to 40427 [ 970.356239][ T14] usb 4-1: Product: syz [ 970.370516][ T14] usb 4-1: Manufacturer: syz [ 970.375177][ T14] usb 4-1: SerialNumber: syz [ 970.444379][T22734] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 970.463689][T22734] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 970.502354][T22734] F2FS-fs (loop4): invalid crc value [ 970.590198][T22734] F2FS-fs (loop4): Found nat_bits in checkpoint [ 970.705062][ T14] usb 4-1: Can't get UAC3 power state for id 10 [ 970.719966][ T14] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 970.800477][T22734] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 970.823766][T22734] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 970.836082][ T14] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 970.881963][ T14] usb 4-1: USB disconnect, device number 99 [ 971.173854][ T4699] udevd[4699]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.067440][T22807] loop1: detected capacity change from 0 to 164 [ 972.416688][T22822] loop4: detected capacity change from 0 to 1024 [ 972.609612][T22822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 972.835336][ T4380] EXT4-fs (loop4): unmounting filesystem. [ 973.116352][T18688] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 973.287245][ T14] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 973.319426][T18688] usb 2-1: Using ep0 maxpacket: 16 [ 973.326911][T18688] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 973.357173][T18688] usb 2-1: config 0 has no interface number 0 [ 973.379616][T18688] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 973.402108][T18688] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 973.449430][T18688] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 973.459898][T22863] loop4: detected capacity change from 0 to 512 [ 973.478431][T18688] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 973.488494][T18688] usb 2-1: Product: syz [ 973.499936][T22863] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.8321: bg 0: block 313: padding at end of block bitmap is not set [ 973.522137][T18688] usb 2-1: SerialNumber: syz [ 973.522412][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 973.528622][T18688] usb 2-1: config 0 descriptor?? [ 973.537335][T22863] EXT4-fs (loop4): Remounting filesystem read-only [ 973.546405][T18688] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 973.557404][T22863] EXT4-fs (loop4): 1 truncate cleaned up [ 973.565824][T18688] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input80 [ 973.573682][ T14] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 973.616741][T22863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 973.649711][ T14] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 973.709137][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 973.763753][ T14] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 973.806165][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.822406][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 973.841831][ T14] usb 4-1: Product: syz [ 973.860984][ T14] usb 4-1: Manufacturer: syz [ 973.877397][ T14] usb 4-1: SerialNumber: syz [ 973.907156][ T14] r8152-cfgselector 4-1: config 0 descriptor?? [ 974.055024][T18688] usb 2-1: USB disconnect, device number 3 [ 974.164997][ T14] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 974.218330][ T4380] EXT4-fs (loop4): unmounting filesystem. [ 974.271113][T18688] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 974.418464][ T6845] usb 4-1: USB disconnect, device number 100 [ 975.692195][T22911] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 975.701668][T22911] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 975.758549][T22913] netlink: 'syz.2.8344': attribute type 4 has an invalid length. [ 975.800553][T22915] netlink: 'syz.1.8345': attribute type 1 has an invalid length. [ 976.170290][T22930] loop1: detected capacity change from 0 to 2048 [ 976.234663][T22930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 976.252876][T22932] loop3: detected capacity change from 0 to 256 [ 976.352493][T22932] FAT-fs (loop3): Directory bread(block 64) failed [ 976.378764][T22932] FAT-fs (loop3): Directory bread(block 65) failed [ 976.413226][T22932] FAT-fs (loop3): Directory bread(block 66) failed [ 976.432721][T22932] FAT-fs (loop3): Directory bread(block 67) failed [ 976.484684][T22932] FAT-fs (loop3): Directory bread(block 68) failed [ 976.491288][T22932] FAT-fs (loop3): Directory bread(block 69) failed [ 976.543735][T22932] FAT-fs (loop3): Directory bread(block 70) failed [ 976.564779][T22932] FAT-fs (loop3): Directory bread(block 71) failed [ 976.580763][T22932] FAT-fs (loop3): Directory bread(block 72) failed [ 976.587479][T22932] FAT-fs (loop3): Directory bread(block 73) failed [ 977.225244][T22951] loop0: detected capacity change from 0 to 1024 [ 977.444320][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8365'. [ 977.641366][T22965] x_tables: unsorted underflow at hook 2 [ 977.905788][T22975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8375'. [ 978.031523][T22979] autofs4:pid:22979:autofs_fill_super: called with bogus options [ 978.661691][ T6845] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 978.853905][ T6845] usb 2-1: Using ep0 maxpacket: 32 [ 978.865389][ T6845] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 978.887934][ T6845] usb 2-1: config 0 interface 0 has no altsetting 0 [ 978.894738][ T6845] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 978.922078][ T27] audit: type=1326 audit(1786468355.390:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.8393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 978.928632][ T4357] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 978.953858][ T6845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.983373][ T6845] usb 2-1: config 0 descriptor?? [ 978.997437][ T27] audit: type=1326 audit(1786468355.437:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.8393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 979.067781][ T27] audit: type=1326 audit(1786468355.437:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.8393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 979.183430][ T27] audit: type=1326 audit(1786468355.437:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.8393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 979.210707][ T4357] usb 1-1: Using ep0 maxpacket: 8 [ 979.217122][ T6845] usbhid 2-1:0.0: can't add hid device: -71 [ 979.218276][ T4357] usb 1-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 979.223133][ T6845] usbhid: probe of 2-1:0.0 failed with error -71 [ 979.279582][ T6845] usb 2-1: USB disconnect, device number 4 [ 979.281205][ T4357] usb 1-1: config 30 interface 0 has no altsetting 0 [ 979.326160][ T27] audit: type=1326 audit(1786468355.437:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.8393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 979.370437][ T4357] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 979.397667][ T4357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.414755][ T4357] usb 1-1: Product: syz [ 979.419217][ T4357] usb 1-1: Manufacturer: syz [ 979.437922][ T4357] usb 1-1: SerialNumber: syz [ 979.475606][ T4357] snd_usb_toneport 1-1:30.0: Line 6 TonePort UX2 found [ 979.519113][T23031] loop3: detected capacity change from 0 to 256 [ 979.634169][T23031] FAT-fs (loop3): Directory bread(block 64) failed [ 979.640882][T23031] FAT-fs (loop3): Directory bread(block 65) failed [ 979.680724][ T4357] snd_usb_toneport 1-1:30.0: cannot get proper max packet size [ 979.688909][T23031] FAT-fs (loop3): Directory bread(block 66) failed [ 979.698420][ T4357] snd_usb_toneport 1-1:30.0: Line 6 TonePort UX2 now disconnected [ 979.719455][T23031] FAT-fs (loop3): Directory bread(block 67) failed [ 979.733859][ T4357] snd_usb_toneport: probe of 1-1:30.0 failed with error -22 [ 979.765020][T23031] FAT-fs (loop3): Directory bread(block 68) failed [ 979.771958][T23031] FAT-fs (loop3): Directory bread(block 69) failed [ 979.810888][T23031] FAT-fs (loop3): Directory bread(block 70) failed [ 979.826289][T23031] FAT-fs (loop3): Directory bread(block 71) failed [ 979.853539][T23031] FAT-fs (loop3): Directory bread(block 72) failed [ 979.879744][T23031] FAT-fs (loop3): Directory bread(block 73) failed [ 980.087026][ T4357] usb 1-1: USB disconnect, device number 126 [ 980.107304][ T27] audit: type=1800 audit(1786468356.504:118): pid=23031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8401" name="file1" dev="loop3" ino=1048648 res=0 errno=0 [ 980.238938][T23047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 981.191478][ T27] audit: type=1326 audit(1786468357.514:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.8427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 981.295937][ T27] audit: type=1326 audit(1786468357.514:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.8427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 981.328314][T23094] device ipip0 entered promiscuous mode [ 981.408209][ T27] audit: type=1326 audit(1786468357.561:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.8427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 981.479837][ T27] audit: type=1326 audit(1786468357.561:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.8427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 981.691538][T23103] 9p: Unknown access argument z: -22 [ 981.923825][T23110] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 982.240451][T23086] loop3: detected capacity change from 0 to 32768 [ 982.288950][T23092] loop2: detected capacity change from 0 to 32768 [ 982.563873][T18688] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 982.764532][T18688] usb 2-1: Using ep0 maxpacket: 16 [ 982.777472][T18688] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 982.796453][T18688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.806628][T18688] usb 2-1: config 0 has no interface number 0 [ 982.839561][T18688] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 982.861046][T18688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.876557][T18688] usb 2-1: Product: syz [ 982.880817][T18688] usb 2-1: Manufacturer: syz [ 982.905827][T18688] usb 2-1: SerialNumber: syz [ 982.913577][T18688] usb 2-1: config 0 descriptor?? [ 983.147278][T18688] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 983.170877][T18688] usb 2-1: No valid video chain found. [ 983.378045][T18688] usb 2-1: USB disconnect, device number 5 [ 984.036346][ T4384] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 984.239131][ T4384] usb 1-1: Using ep0 maxpacket: 32 [ 984.249439][ T4384] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.306418][ T4384] usb 1-1: config 0 interface 0 has no altsetting 0 [ 984.339537][ T4384] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 984.388621][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.416445][ T4384] usb 1-1: config 0 descriptor?? [ 984.531113][T23178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.559601][T23178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.625678][T23178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.644208][T23178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.665445][ T4384] usbhid 1-1:0.0: can't add hid device: -71 [ 984.680518][T23178] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 984.686034][ T4384] usbhid: probe of 1-1:0.0 failed with error -71 [ 984.710596][ T4384] usb 1-1: USB disconnect, device number 127 [ 984.731250][T23178] batman_adv: batadv0: Removing interface: virt_wifi0 [ 984.868153][T23161] loop3: detected capacity change from 0 to 32768 [ 984.906249][T23161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.8458 (23161) [ 984.997908][T23161] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 985.017224][T23161] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 985.048647][T23161] BTRFS info (device loop3): setting nodatasum [ 985.111894][T23161] BTRFS info (device loop3): force zlib compression, level 3 [ 985.179307][T23161] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 985.188769][T23161] BTRFS info (device loop3): use lzo compression, level 0 [ 985.221927][T23161] BTRFS info (device loop3): turning on flush-on-commit [ 985.307393][T23161] BTRFS info (device loop3): enabling auto defrag [ 985.314784][T23161] BTRFS info (device loop3): max_inline at 4096 [ 985.382228][T23161] BTRFS info (device loop3): using free space tree [ 985.843165][T23161] BTRFS info (device loop3): enabling ssd optimizations [ 986.134460][T23239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8482'. [ 986.162564][T23239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8482'. [ 986.227198][ T4373] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 986.429553][ T4698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4698) [ 986.458826][T23246] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8487' sets config #0 [ 986.982079][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.006347][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.059732][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.069703][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.112058][T23220] loop4: detected capacity change from 0 to 32768 [ 987.188208][T23220] jfs_strtoUCS: char2uni returned -22. [ 987.193894][T23220] charset = cp857, char = 0xd5 [ 987.233046][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.327936][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.337312][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.457424][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 987.518133][T23259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 987.626277][T23259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 987.668142][T23259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 987.713229][T23259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 987.750944][T23259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.897660][ T4357] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 989.113157][ T4357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.136708][ T4357] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 989.202649][ T4357] usb 4-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 989.245434][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 989.288675][ T4357] usb 4-1: Product: syz [ 989.299486][ T4357] usb 4-1: Manufacturer: syz [ 989.316501][ T4357] usb 4-1: SerialNumber: syz [ 989.342425][ T4357] usb 4-1: config 0 descriptor?? [ 989.374979][ T4357] cdc_acm 4-1:0.0: skipping garbage [ 989.582807][ T4357] usb 4-1: USB disconnect, device number 101 [ 989.912629][ T9401] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 990.136909][ T9401] usb 1-1: Using ep0 maxpacket: 32 [ 990.143949][ T9401] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 990.185561][ T9401] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 990.241928][ T9401] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 990.253315][ T9401] usb 1-1: config 1 has no interface number 0 [ 990.272808][ T9401] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.292490][ T9401] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 990.325896][ T9401] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 990.381884][ T9401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.428848][ T9401] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 990.642874][ T9401] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 990.677449][T23356] loop1: detected capacity change from 0 to 32768 [ 990.745255][T23356] jfs_strtoUCS: char2uni returned -22. [ 990.752453][T23356] charset = cp857, char = 0xd5 [ 990.899000][ T4383] usb 1-1: USB disconnect, device number 2 [ 990.906989][ T4383] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 991.932108][ T2168] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 992.136818][ T2168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 992.176023][ T2168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 992.212470][ T2168] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 992.238835][ T2168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.252992][ T2168] usb 1-1: Product: syz [ 992.258697][ T2168] usb 1-1: Manufacturer: syz [ 992.269522][ T2168] usb 1-1: SerialNumber: syz [ 992.288524][ T2168] usb 1-1: config 0 descriptor?? [ 992.307904][ T2168] hub 1-1:0.0: bad descriptor, ignoring hub [ 992.326162][ T2168] hub: probe of 1-1:0.0 failed with error -5 [ 992.365202][ T2168] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input81 [ 992.380238][T23428] netlink: 'syz.4.8566': attribute type 1 has an invalid length. [ 992.410076][T23428] __nla_validate_parse: 162 callbacks suppressed [ 992.410095][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8566'. [ 992.462237][T23432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.470130][T23432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.543041][T23432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.564910][ T4387] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 992.573124][T23432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.771532][ T4387] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 992.802601][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.827435][ T4387] usb 3-1: config 0 descriptor?? [ 992.850196][ T4387] cp210x 3-1:0.0: cp210x converter detected [ 993.207255][T23455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8579'. [ 993.289378][ T4387] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 993.306499][ T4387] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 993.315264][ T4387] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 993.333684][ T4387] usb 3-1: cp210x converter now attached to ttyUSB0 [ 993.362669][ T4387] usb 3-1: USB disconnect, device number 6 [ 993.406909][ T4387] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 993.434538][ T4387] cp210x 3-1:0.0: device disconnected [ 993.714757][T23468] netlink: 'syz.3.8586': attribute type 29 has an invalid length. [ 993.744656][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8586'. [ 993.766784][T23468] netlink: 'syz.3.8586': attribute type 29 has an invalid length. [ 993.795843][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8586'. [ 994.007458][T23478] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4373] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[23478] [ 994.063834][T23480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8592'. [ 994.099396][T23456] loop4: detected capacity change from 0 to 32768 [ 994.150789][T23456] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 994.484618][ T4698] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 995.105437][ T14] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 995.146361][T23518] netlink: 'syz.2.8610': attribute type 21 has an invalid length. [ 995.180607][T23518] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8610'. [ 995.189936][T23518] netlink: 'syz.2.8610': attribute type 1 has an invalid length. [ 995.213687][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8611'. [ 995.241595][T23518] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8610'. [ 995.319176][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 995.353363][ T14] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 995.384151][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.414676][ T14] usb 4-1: Product: syz [ 995.436786][T23527] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8615'. [ 995.446015][T23527] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 995.447006][ T14] usb 4-1: Manufacturer: syz [ 995.485652][ T14] usb 4-1: SerialNumber: syz [ 995.516893][ T14] usb 4-1: config 0 descriptor?? [ 995.523719][T23533] device geneve2 entered promiscuous mode [ 995.528536][ T14] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 995.960043][ T14] gspca_topro: reg_w err -71 [ 996.007670][ T14] gspca_topro: Sensor soi763a [ 996.023581][ T14] usb 4-1: USB disconnect, device number 102 [ 996.247354][T23529] loop0: detected capacity change from 0 to 32768 [ 996.303281][T23529] (syz.0.8616,23529,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 996.343373][T23529] (syz.0.8616,23529,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 996.403333][T23529] (syz.0.8616,23529,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 996.451244][T23529] JBD2: Ignoring recovery information on journal [ 996.533405][T23529] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 996.788812][T23563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8633'. [ 996.825664][T23563] device vlan0 entered promiscuous mode [ 996.876964][ T4368] ocfs2: Unmounting device (7,0) on (node local) [ 997.212275][ T9401] usb 1-1: USB disconnect, device number 3 [ 997.329680][ T4387] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 997.493846][T23582] x_tables: unsorted underflow at hook 1 [ 997.530925][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 997.538330][ T4387] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 997.568007][ T4387] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 997.593539][T23584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.616733][ T4387] usb 4-1: config 2 has no interface number 0 [ 997.625975][T23584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.635891][ T4387] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 997.646951][T23584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.680892][ T4387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.689044][ T4387] usb 4-1: Product: syz [ 997.694763][T23584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.702685][ T4387] usb 4-1: Manufacturer: syz [ 997.707549][ T4387] usb 4-1: SerialNumber: syz [ 998.021873][ T4348] usb 4-1: USB disconnect, device number 103 [ 998.206534][T23602] netlink: 'syz.0.8651': attribute type 3 has an invalid length. [ 998.237828][T23604] loop2: detected capacity change from 0 to 256 [ 998.308229][ T4698] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 998.555337][T23612] loop0: detected capacity change from 0 to 256 [ 998.589724][T23612] exfat: Deprecated parameter 'utf8' [ 998.631615][T23614] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 998.641159][T23612] exfat: Deprecated parameter 'namecase' [ 998.665199][T23592] loop1: detected capacity change from 0 to 32768 [ 998.704175][T23612] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 998.744484][T23592] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 998.744484][T23592] [ 998.795192][T23612] kAFS: unable to lookup cell 's@z0' [ 998.810935][T23619] loop2: detected capacity change from 0 to 16 [ 998.845056][T23619] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 998.878299][T23592] ialloc: diAlloc returned -5! [ 998.892887][T23619] cramfs: empty filesystem [ 999.434954][T23634] loop3: detected capacity change from 0 to 512 [ 999.578078][T23634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 999.593834][T23634] ext4 filesystem being mounted at /1722/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.760133][ T4373] EXT4-fs (loop3): unmounting filesystem. [ 1000.196958][T23669] netlink: 'syz.2.8682': attribute type 8 has an invalid length. [ 1000.569811][T23684] loop1: detected capacity change from 0 to 256 [ 1001.003323][ T14] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1001.219105][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.232650][T23708] __nla_validate_parse: 3 callbacks suppressed [ 1001.232670][T23708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8700'. [ 1001.251308][ T14] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1001.281222][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.333985][ T14] usb 4-1: config 0 descriptor?? [ 1001.388665][ T14] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 1001.396427][ T14] rndis_host: probe of 4-1:0.0 failed with error -22 [ 1001.404820][T23716] loop2: detected capacity change from 0 to 64 [ 1001.505502][ T4387] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1001.514695][T23716] syz.2.8705: attempt to access beyond end of device [ 1001.514695][T23716] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1001.548347][T23716] Buffer I/O error on dev loop2, logical block 22533, async page read [ 1001.563732][T23716] syz.2.8705: attempt to access beyond end of device [ 1001.563732][T23716] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1001.599046][ T14] usb 4-1: USB disconnect, device number 104 [ 1001.601722][T23716] Buffer I/O error on dev loop2, logical block 22533, async page read [ 1001.730562][ T4387] usb 2-1: Using ep0 maxpacket: 32 [ 1001.747178][ T4387] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1001.779230][ T4387] usb 2-1: config 0 has no interface number 0 [ 1001.799962][ T4387] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1001.833225][ T4387] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1001.864301][ T4387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.883446][ T4387] usb 2-1: Product: syz [ 1001.894251][ T4387] usb 2-1: Manufacturer: syz [ 1001.910073][ T4387] usb 2-1: SerialNumber: syz [ 1001.927966][ T4387] usb 2-1: config 0 descriptor?? [ 1001.949451][T23709] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1002.189925][T23709] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1002.451042][ T4387] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1002.489597][ T4387] asix: probe of 2-1:0.188 failed with error -71 [ 1002.512879][ T4387] usb 2-1: USB disconnect, device number 6 [ 1003.040152][T23775] loop4: detected capacity change from 0 to 256 [ 1003.405238][T23781] loop2: detected capacity change from 0 to 4096 [ 1003.487932][T23781] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1003.666559][ T4378] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1003.819050][T23799] netlink: 766 bytes leftover after parsing attributes in process `syz.4.8744'. [ 1004.087335][T23808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8749'. [ 1004.116201][T23808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8749'. [ 1004.216015][T23810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.242600][T23779] loop0: detected capacity change from 0 to 32768 [ 1004.272520][T23779] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.8735 (23779) [ 1004.343019][T23779] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1004.379747][T23779] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1004.422844][T23779] BTRFS info (device loop0): enabling ssd optimizations [ 1004.438272][T23779] BTRFS info (device loop0): not using ssd optimizations [ 1004.465098][T23779] BTRFS info (device loop0): turning off barriers [ 1004.473522][T23779] BTRFS info (device loop0): use no compression [ 1004.510651][T23779] BTRFS info (device loop0): using free space tree [ 1004.812451][T23841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1004.930968][T23841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1004.989252][T23835] loop2: detected capacity change from 0 to 32768 [ 1005.018124][ T4368] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1005.586208][T23864] loop1: detected capacity change from 0 to 512 [ 1005.745212][T23864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1005.757965][T23864] ext4 filesystem being mounted at /1786/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.850356][T23873] loop4: detected capacity change from 0 to 16 [ 1005.900565][T23873] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1005.960285][T23864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1006.325182][T23887] loop4: detected capacity change from 0 to 128 [ 1006.350474][ T4369] EXT4-fs (loop1): unmounting filesystem. [ 1006.445896][T23893] loop3: detected capacity change from 0 to 8 [ 1006.500787][T23893] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1006.528630][ T4444] udevd[4444]: incorrect cramfs checksum on /dev/loop3 [ 1006.621459][ T4444] udevd[4444]: incorrect cramfs checksum on /dev/loop3 [ 1007.372696][T23929] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1007.697616][T23937] loop2: detected capacity change from 0 to 4096 [ 1007.768123][T23937] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1007.801083][T23937] ntfs3: loop2: Failed to load $Extend. [ 1007.859309][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1007.859326][ T27] audit: type=1800 audit(1786468382.475:128): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8800" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1007.895342][ T2168] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1008.087338][ T2168] usb 2-1: Using ep0 maxpacket: 16 [ 1008.094536][ T2168] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1008.129962][ T2168] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.172833][ T2168] usb 2-1: config 0 has no interface number 0 [ 1008.206712][ T2168] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 1008.236496][ T2168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.271979][ T2168] usb 2-1: Product: syz [ 1008.276304][ T2168] usb 2-1: Manufacturer: syz [ 1008.294101][ T2168] usb 2-1: SerialNumber: syz [ 1008.309669][ T2168] usb 2-1: config 0 descriptor?? [ 1008.327622][ T2168] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 1008.360710][ T2168] usb 2-1: No valid video chain found. [ 1008.432909][T23967] netlink: 'syz.0.8815': attribute type 29 has an invalid length. [ 1008.470452][T23967] netlink: 'syz.0.8815': attribute type 29 has an invalid length. [ 1008.573276][ T2168] usb 2-1: USB disconnect, device number 7 [ 1008.974182][ T130] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1008.994540][T23991] netlink: 'syz.2.8827': attribute type 10 has an invalid length. [ 1009.004753][T23991] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1009.153223][T23996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8830'. [ 1009.164166][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8830'. [ 1009.190590][ T130] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.205340][ T130] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.234465][ T130] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1009.264076][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.291609][ T130] usb 1-1: Product: syz [ 1009.300967][ T130] usb 1-1: Manufacturer: syz [ 1009.311993][ T130] usb 1-1: SerialNumber: syz [ 1009.676091][T24013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8837'. [ 1009.768833][ T130] usb 1-1: 0:2 : does not exist [ 1009.837070][ T130] usb 1-1: USB disconnect, device number 4 [ 1010.172214][T24034] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8848'. [ 1010.173182][ T4698] udevd[4698]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.337865][T24040] loop4: detected capacity change from 0 to 512 [ 1010.427400][ T2168] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1010.446879][T24040] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.8851: inode has both inline data and extents flags [ 1010.461380][T24040] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.8851: couldn't read orphan inode 15 (err -117) [ 1010.473983][T24040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1010.621638][ T4380] EXT4-fs (loop4): unmounting filesystem. [ 1010.634138][ T2168] usb 4-1: Using ep0 maxpacket: 8 [ 1010.662749][ T2168] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1010.698255][ T2168] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1010.733541][ T2168] usb 4-1: config 0 has no interface number 0 [ 1010.747726][ T2168] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1010.769136][ T2168] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1010.793572][ T2168] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.838188][ T2168] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1010.859936][ T2168] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1010.871963][T24054] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1010.904636][ T2168] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1010.924308][ T2168] usb 4-1: Manufacturer: syz [ 1010.936571][ T2168] usb 4-1: config 0 descriptor?? [ 1010.957760][ T2168] hub 4-1:0.52: bad descriptor, ignoring hub [ 1010.980621][ T2168] hub: probe of 4-1:0.52 failed with error -5 [ 1011.078648][T24068] netlink: 'syz.1.8864': attribute type 1 has an invalid length. [ 1011.182755][ T2168] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input83 [ 1011.602737][ T2168] usb 4-1: USB disconnect, device number 105 [ 1011.764124][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8876'. [ 1011.831419][T24096] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1012.202433][T24110] loop1: detected capacity change from 0 to 1024 [ 1012.209917][T24110] EXT4-fs: Ignoring removed bh option [ 1012.282657][T24110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1012.479906][ T4369] EXT4-fs (loop1): unmounting filesystem. [ 1013.037832][T24141] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1013.531368][T24159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1013.879746][ T6843] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1014.045731][T24181] netlink: 'syz.4.8919': attribute type 3 has an invalid length. [ 1014.063335][T24181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8919'. [ 1014.093492][T24181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8919'. [ 1014.147448][ T6843] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1014.177529][ T6843] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.187987][ T6843] usb 2-1: config 220 has no interface number 2 [ 1014.211391][ T6843] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1014.250770][ T6843] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1014.295161][ T6843] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1014.302457][ T6843] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1014.342915][ T6843] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1014.364198][ T6843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.379425][ T6843] usb 2-1: Product: syz [ 1014.384093][ T6843] usb 2-1: Manufacturer: syz [ 1014.389005][ T6843] usb 2-1: SerialNumber: syz [ 1014.635178][ T6843] usb 2-1: selecting invalid altsetting 0 [ 1014.645357][ T6843] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1014.663149][ T6843] usb 2-1: No valid video chain found. [ 1014.727658][ T6843] usb 2-1: selecting invalid altsetting 0 [ 1014.755183][ T6843] usbtest: probe of 2-1:220.1 failed with error -22 [ 1014.776723][T24202] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8929'. [ 1014.797984][ T6843] usb 2-1: USB disconnect, device number 8 [ 1014.856795][T24202] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1015.170905][T24195] loop2: detected capacity change from 0 to 32768 [ 1015.214108][T24195] (syz.2.8926,24195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1015.258693][T24195] (syz.2.8926,24195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1015.432929][T24195] JBD2: Ignoring recovery information on journal [ 1015.654472][T24195] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1015.707575][T24226] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1015.773443][T24226] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1016.128065][ T4378] ocfs2: Unmounting device (7,2) on (node local) [ 1016.400314][T24245] No such timeout policy "syz1" [ 1016.764948][T24261] netlink: 320 bytes leftover after parsing attributes in process `syz.3.8957'. [ 1017.258090][T24281] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 1017.383885][T24286] netlink: 'syz.1.8968': attribute type 6 has an invalid length. [ 1017.392056][T24286] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8968'. [ 1017.802785][T24304] loop4: detected capacity change from 0 to 512 [ 1017.844397][T24304] EXT4-fs: inline encryption not supported [ 1017.878086][T24304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1017.939078][T24304] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1017.945553][T24304] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8978: inode #15: comm syz.4.8978: iget: illegal inode # [ 1017.974787][T24304] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.8978: couldn't read orphan inode 15 (err -117) [ 1018.051291][T24304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1018.081554][T24304] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.8978: inode #15: comm syz.4.8978: iget: illegal inode # [ 1018.153194][ T4380] EXT4-fs (loop4): unmounting filesystem. [ 1018.157542][T24319] IPv6: Can't replace route, no match found [ 1018.391755][T24327] sctp: [Deprecated]: syz.3.8989 (pid 24327) Use of int in maxseg socket option. [ 1018.391755][T24327] Use struct sctp_assoc_value instead [ 1018.411261][T24329] loop0: detected capacity change from 0 to 16 [ 1018.446526][T24329] erofs: (device loop0): mounted with root inode @ nid 36. [ 1018.487913][T24329] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1018.579831][T24329] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1018.618134][T24329] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1018.660401][T24329] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1018.679525][T24329] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1019.377234][T24369] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1019.402394][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1019.438353][T24369] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1019.466618][T24369] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1019.499075][T24369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1019.554724][T24373] tc_dump_action: action bad kind [ 1019.683806][ T6843] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1019.885142][ T6843] usb 1-1: Using ep0 maxpacket: 32 [ 1019.892255][ T6843] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1019.928392][ T6843] usb 1-1: config 0 has no interface number 0 [ 1019.934583][ T6843] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1019.935406][T24389] No such timeout policy "syz1" [ 1019.969489][ T6843] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1020.000689][ T6843] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1020.008935][ T6843] usb 1-1: Product: syz [ 1020.022069][ T6843] usb 1-1: Manufacturer: syz [ 1020.037689][ T6843] usb 1-1: SerialNumber: syz [ 1020.049405][ T6843] usb 1-1: config 0 descriptor?? [ 1020.288210][ T6843] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1020.306333][ T6843] ipheth: probe of 1-1:0.196 failed with error -71 [ 1020.328894][ T6843] usb 1-1: USB disconnect, device number 5 [ 1020.456667][T24405] block device autoloading is deprecated and will be removed. [ 1020.514702][ T4383] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1020.716607][ T4383] usb 5-1: Using ep0 maxpacket: 16 [ 1020.723675][ T4383] usb 5-1: config 0 has no interfaces? [ 1020.750989][ T4383] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1020.780700][ T4383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.799773][ T4383] usb 5-1: Product: syz [ 1020.815930][ T4383] usb 5-1: Manufacturer: syz [ 1020.820607][ T4383] usb 5-1: SerialNumber: syz [ 1020.852728][ T4383] r8152-cfgselector 5-1: config 0 descriptor?? [ 1021.091307][ T4383] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1021.109023][ T27] audit: type=1326 audit(1786468394.876:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.3.9041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa078b9df99 code=0x7ffc0000 [ 1021.137525][ T27] audit: type=1326 audit(1786468394.904:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.3.9041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa078b9df99 code=0x7ffc0000 [ 1021.214498][ T27] audit: type=1326 audit(1786468394.932:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.3.9041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa078b9df99 code=0x7ffc0000 [ 1021.251344][ T27] audit: type=1326 audit(1786468394.932:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.3.9041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa078b9df99 code=0x7ffc0000 [ 1021.322991][ T4383] usb 5-1: USB disconnect, device number 120 [ 1021.371476][ T27] audit: type=1326 audit(1786468395.120:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.1.9045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 1021.420216][T24443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.435611][ T27] audit: type=1326 audit(1786468395.166:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.1.9045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 1021.464212][ T27] audit: type=1326 audit(1786468395.166:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.1.9045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b19b9df99 code=0x7ffc0000 [ 1021.521773][ T27] audit: type=1326 audit(1786468395.166:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.1.9045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b19b9f807 code=0x7ffc0000 [ 1021.586914][ T27] audit: type=1326 audit(1786468395.166:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.1.9045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8b19b5e7ce code=0x7ffc0000 [ 1021.632805][ T27] audit: type=1326 audit(1786468395.166:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24440 comm="syz.1.9045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8b19b5e7ce code=0x7ffc0000 [ 1021.855675][T24460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1022.409858][T24485] netlink: 'syz.0.9066': attribute type 9 has an invalid length. [ 1022.828808][T24500] loop4: detected capacity change from 0 to 256 [ 1022.891465][T24500] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 1023.182949][T24512] loop1: detected capacity change from 0 to 256 [ 1023.631884][T24526] loop1: detected capacity change from 0 to 1024 [ 1023.693946][T24526] hfsplus: invalid file type 0177755 for inode 17 [ 1024.456653][T24557] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9104'. [ 1024.692485][T24536] loop3: detected capacity change from 0 to 32768 [ 1024.756682][T24536] (syz.3.9093,24536,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1024.816067][T24536] (syz.3.9093,24536,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1024.889564][T24536] JBD2: Ignoring recovery information on journal [ 1024.963415][T24536] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1025.286039][ T4373] ocfs2: Unmounting device (7,3) on (node local) [ 1025.415290][T24588] netlink: 'syz.0.9119': attribute type 4 has an invalid length. [ 1025.589672][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1026.312886][T24624] loop1: detected capacity change from 0 to 2048 [ 1026.372001][T24624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.704157][T24636] loop1: detected capacity change from 0 to 512 [ 1026.888473][T24636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1026.893098][T24612] loop0: detected capacity change from 0 to 32768 [ 1026.907189][T24612] (syz.0.9129,24612,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1026.922152][T24612] (syz.0.9129,24612,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1026.922435][T24636] ext4 filesystem being mounted at /1859/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.961136][T24612] JBD2: Ignoring recovery information on journal [ 1027.001391][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9145'. [ 1027.066830][T24612] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1027.251597][T24655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1027.277747][ T4369] EXT4-fs (loop1): unmounting filesystem. [ 1027.290000][ T4368] ocfs2: Unmounting device (7,0) on (node local) [ 1028.760659][T24718] netlink: 'syz.0.9180': attribute type 13 has an invalid length. [ 1028.815563][ T130] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1028.924351][T24722] loop3: detected capacity change from 0 to 128 [ 1028.933972][T24720] loop0: detected capacity change from 0 to 8192 [ 1028.943960][ T4357] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1028.958757][T24720] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1029.013026][T24720] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1029.034076][T24720] FAT-fs (loop0): Filesystem has been set read-only [ 1029.034469][ T130] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 1029.061889][ T130] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.084357][ T130] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1029.095850][ T130] usb 5-1: config 1 has no interface number 0 [ 1029.103672][ T130] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1029.120960][ T130] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.134505][ T130] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1029.161756][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.179150][ T130] usb 5-1: Product: syz [ 1029.185039][ T130] usb 5-1: Manufacturer: syz [ 1029.190348][ T130] usb 5-1: SerialNumber: syz [ 1029.197415][ T4357] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1029.209219][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.223276][ T130] cdc_wdm 5-1:1.128: skipping garbage [ 1029.234142][ T4357] usb 3-1: Product: syz [ 1029.238577][ T4357] usb 3-1: Manufacturer: syz [ 1029.244508][ T130] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 1029.251663][ T130] cdc_wdm 5-1:1.128: Unknown control protocol [ 1029.258251][ T4357] usb 3-1: SerialNumber: syz [ 1029.269216][ T4357] usb 3-1: config 0 descriptor?? [ 1029.282851][ T4357] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 007 [ 1029.527408][ T130] usb 5-1: USB disconnect, device number 121 [ 1029.734458][ T4357] (null): failure reading functionality [ 1029.751190][ T4357] i2c i2c-1: failure reading functionality [ 1029.789554][ T4357] i2c i2c-1: connected i2c-tiny-usb device [ 1029.819613][ T4357] usb 3-1: USB disconnect, device number 7 [ 1030.689961][T24777] loop2: detected capacity change from 0 to 128 [ 1030.804747][T24777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1030.871331][T24777] ext4 filesystem being mounted at /1765/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.912108][T24787] loop1: detected capacity change from 0 to 64 [ 1030.930946][T24787] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1031.157676][ T4378] EXT4-fs (loop2): unmounting filesystem. [ 1031.232872][T24794] ERROR: device name not specified. [ 1031.424369][T24804] loop4: detected capacity change from 0 to 164 [ 1031.435016][T24803] loop2: detected capacity change from 0 to 16 [ 1031.452306][T24803] erofs: (device loop2): mounted with root inode @ nid 36. [ 1031.892380][T24824] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1031.967711][T24824] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1032.153292][T24831] xt_HMARK: proto mask must be zero with L3 mode [ 1032.390964][T24841] netlink: 'syz.4.9240': attribute type 10 has an invalid length. [ 1032.429067][T24841] device veth1_macvtap left promiscuous mode [ 1032.492329][T24841] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1032.591311][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1032.597943][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.725867][T24937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9288'. [ 1034.824270][T24939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9289'. [ 1035.119649][ T6843] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1035.327657][ T6843] usb 2-1: Using ep0 maxpacket: 8 [ 1035.336304][ T6843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.361835][ T6843] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1035.388027][ T6843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.397386][ T9401] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1035.425223][ T6843] usb 2-1: config 0 descriptor?? [ 1035.433622][ T6843] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1035.526318][T24969] loop4: detected capacity change from 0 to 512 [ 1035.596774][T24969] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.9305: iget: bogus i_mode (163214) [ 1035.611363][ T9401] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1035.619701][ T9401] usb 1-1: config 0 has no interface number 0 [ 1035.622491][T24969] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.9305: error while reading EA inode 11 err=-117 [ 1035.626916][ T9401] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.656136][ T9401] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1035.666515][ T9401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.674923][ T9401] usb 1-1: Product: syz [ 1035.680009][ T9401] usb 1-1: Manufacturer: syz [ 1035.684833][ T9401] usb 1-1: SerialNumber: syz [ 1035.692235][ T9401] usb 1-1: config 0 descriptor?? [ 1035.704659][ T9401] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1035.708673][T24969] EXT4-fs (loop4): 1 orphan inode deleted [ 1035.739309][ T130] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1035.747458][T24969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1035.872544][ T6843] gspca_vc032x: reg_w err -71 [ 1035.877617][ T6843] vc032x: probe of 2-1:0.0 failed with error -71 [ 1035.897253][ T6843] usb 2-1: USB disconnect, device number 9 [ 1035.914912][ T4380] EXT4-fs (loop4): unmounting filesystem. [ 1035.968802][ T130] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1035.992438][ C0] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1036.026896][ T130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.039652][ T130] usb 4-1: Product: syz [ 1036.044180][ T130] usb 4-1: Manufacturer: syz [ 1036.067954][ T130] usb 4-1: SerialNumber: syz [ 1036.083823][ T130] usb 4-1: config 0 descriptor?? [ 1036.103233][ T130] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1036.130241][T24981] IPv6: NLM_F_CREATE should be specified when creating new route [ 1036.139133][T24981] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9309'. [ 1036.212141][ T6843] usb 1-1: USB disconnect, device number 6 [ 1036.235331][ T6843] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1036.547888][ T130] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1036.567889][ T130] sq905c 4-1:0.0: Reading version command failed [ 1036.592895][ T130] sq905c: probe of 4-1:0.0 failed with error -71 [ 1036.601957][ T130] usb 4-1: USB disconnect, device number 106 [ 1036.694626][T25001] netlink: 'syz.4.9319': attribute type 21 has an invalid length. [ 1036.711711][T25001] netlink: 'syz.4.9319': attribute type 6 has an invalid length. [ 1036.722811][T25001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9319'. [ 1036.862444][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9321'. [ 1036.894169][T25005] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1037.281999][T25023] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1037.533306][T25035] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1038.229934][T25064] ieee802154 phy0 wpan0: encryption failed: -22 [ 1038.529414][ T9401] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1038.581108][T25081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1038.750909][ T9401] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1038.767989][ T9401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.806422][ T9401] usb 2-1: config 0 descriptor?? [ 1038.823000][T25088] tmpfs: Bad value for 'mpol' [ 1038.826081][ T9401] cp210x 2-1:0.0: cp210x converter detected [ 1038.841456][T25089] netlink: 'syz.0.9363': attribute type 1 has an invalid length. [ 1038.855517][T25089] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9363'. [ 1039.065577][T25099] loop0: detected capacity change from 0 to 164 [ 1039.160946][T25099] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1039.262292][ T9401] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1039.286541][ T9401] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1039.309126][ T9401] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1039.332926][ T9401] usb 2-1: USB disconnect, device number 10 [ 1039.357773][T25105] netlink: 'syz.3.9371': attribute type 6 has an invalid length. [ 1039.385624][ T9401] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1039.430379][ T9401] cp210x 2-1:0.0: device disconnected [ 1040.943647][T25170] device sit0 entered promiscuous mode [ 1040.946327][T25171] mmap: syz.1.9402 (25171): VmData 45850624 exceed data ulimit 3798. Update limits or use boot option ignore_rlimit_data. [ 1040.997417][T25170] netlink: 'syz.0.9400': attribute type 1 has an invalid length. [ 1041.038932][T25170] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1041.280048][T25181] loop1: detected capacity change from 0 to 256 [ 1041.736460][T25197] binder: 25196:25197 ioctl c018620c 200000000940 returned -22 [ 1041.897003][T25205] device veth0_macvtap left promiscuous mode [ 1042.029220][T25212] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9423'. [ 1042.075557][T25212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9423'. [ 1042.101829][T25212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9423'. [ 1042.151483][T25212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9423'. [ 1042.400947][T25222] loop3: detected capacity change from 0 to 256 [ 1042.415986][T25224] sctp: [Deprecated]: syz.2.9428 (pid 25224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1042.415986][T25224] Use struct sctp_sack_info instead [ 1042.605289][T25231] ax25_connect(): syz.4.9433 uses autobind, please contact jreuter@yaina.de [ 1042.937152][T25243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9440'. [ 1043.721971][ T9401] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1043.945172][ T9401] usb 1-1: Using ep0 maxpacket: 32 [ 1043.956690][ T9401] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1043.988806][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.008287][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.030767][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.059271][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.082614][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.102271][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.122362][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.159164][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.195461][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.220355][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.241060][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.277196][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.307620][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.330306][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.347810][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.392450][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.429846][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.462449][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.490948][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.519329][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.542622][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.562492][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.573305][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.618241][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.643487][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.657325][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.663738][T25314] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1044.675542][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.685891][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.707473][T25314] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1044.717254][ T9401] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1044.734440][ T9401] usb 1-1: config 0 has no interface number 0 [ 1044.763031][ T9401] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.784785][ T9401] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.818608][ T9401] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1044.843319][ T9401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.881162][ T9401] usb 1-1: Product: syz [ 1044.893553][ T9401] usb 1-1: Manufacturer: syz [ 1044.903457][ T9401] usb 1-1: SerialNumber: syz [ 1044.926689][ T9401] usb 1-1: config 0 descriptor?? [ 1044.951154][ T9401] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 1045.184012][ T9401] etas_es58x 1-1:0.2: Product info: [ 1045.298350][T25334] netlink: 'syz.3.9482': attribute type 3 has an invalid length. [ 1045.348149][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9482'. [ 1045.361960][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9482'. [ 1045.517798][ T4357] usb 1-1: USB disconnect, device number 7 [ 1045.548544][ T4357] etas_es58x 1-1:0.2: Disconnecting syz syz [ 1046.202693][T25366] loop4: detected capacity change from 0 to 1764 [ 1048.168748][T25453] loop2: detected capacity change from 0 to 16 [ 1048.195155][T25453] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1048.203359][T25452] device veth0_macvtap left promiscuous mode [ 1048.549137][T25468] trusted_key: encrypted_key: master key parameter '' is invalid [ 1049.747005][T25511] vivid-007: ================= START STATUS ================= [ 1049.758855][ T2168] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1049.769122][T25511] vivid-007: Generate PTS: true [ 1049.805471][T25511] vivid-007: Generate SCR: true [ 1049.811568][T25511] tpg source WxH: 640x360 (Y'CbCr) [ 1049.832773][T25511] tpg field: 1 [ 1049.836494][T25511] tpg crop: 640x360@0x0 [ 1049.862962][T25511] tpg compose: 640x360@0x0 [ 1049.869197][T25511] tpg colorspace: 8 [ 1049.896518][T25511] tpg transfer function: 0/0 [ 1049.913485][T25511] tpg Y'CbCr encoding: 0/0 [ 1049.960650][ T2168] usb 1-1: Using ep0 maxpacket: 8 [ 1049.968495][ T2168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.971304][T25511] tpg quantization: 0/0 [ 1050.003460][T25511] tpg RGB range: 0/2 [ 1050.011736][ T2168] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1050.020802][T25511] vivid-007: ================== END STATUS ================== [ 1050.038275][ T2168] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1050.080516][ T2168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.113010][ T2168] usb 1-1: Product: syz [ 1050.117701][ T2168] usb 1-1: Manufacturer: syz [ 1050.124257][T25524] loop3: detected capacity change from 0 to 1764 [ 1050.143358][ T2168] usb 1-1: SerialNumber: syz [ 1050.188759][ T2168] usb 1-1: config 0 descriptor?? [ 1050.224421][ T2168] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1050.409448][ T9401] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1050.431901][ T2168] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 1050.432114][ T2168] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1050.433421][ T2168] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 1050.587308][T25535] loop2: detected capacity change from 0 to 1024 [ 1050.601697][ T9401] usb 5-1: Using ep0 maxpacket: 16 [ 1050.620037][ T9401] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.634828][ T9401] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.665618][ T9401] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.710861][ T9401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.720250][ T9401] usb 5-1: Product: syz [ 1050.724656][ T9401] usb 5-1: Manufacturer: syz [ 1050.730413][ T9401] usb 5-1: SerialNumber: syz [ 1050.771369][ T130] usb 1-1: USB disconnect, device number 8 [ 1050.829537][T25535] hfsplus: keylen 65060 too large [ 1050.835313][T25535] hfsplus: xattr search failed [ 1051.005569][ T9401] usb 5-1: 0:2 : does not exist [ 1051.027036][ T9401] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1051.096269][ T9401] usb 5-1: USB disconnect, device number 122 [ 1051.905488][T25579] tc_dump_action: action bad kind [ 1051.905841][T25571] loop4: detected capacity change from 0 to 4096 [ 1051.929423][T25571] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1052.261177][T25583] loop2: detected capacity change from 0 to 4096 [ 1052.302247][T25583] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1052.398239][T25583] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1052.427599][T25583] ntfs3: loop2: Failed to load $Extend. [ 1052.689837][T25598] netlink: 'syz.1.9598': attribute type 2 has an invalid length. [ 1052.693961][T25602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9599'. [ 1052.736743][T25598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9598'. [ 1053.359674][T25622] loop3: detected capacity change from 0 to 4096 [ 1053.451201][T25633] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1053.790059][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9619'. [ 1054.000353][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1054.000370][ T27] audit: type=1326 audit(1786468425.668:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.078993][ T27] audit: type=1326 audit(1786468425.696:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.112020][T25657] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1054.121804][ T27] audit: type=1326 audit(1786468425.705:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.154100][ T27] audit: type=1326 audit(1786468425.705:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.228416][ T27] audit: type=1326 audit(1786468425.705:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.274854][ T27] audit: type=1326 audit(1786468425.705:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.385144][ T27] audit: type=1326 audit(1786468425.705:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.499139][ T27] audit: type=1326 audit(1786468425.705:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.573695][ T27] audit: type=1326 audit(1786468425.705:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25654 comm="syz.2.9624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0018f9df99 code=0x7ffc0000 [ 1054.761858][T25681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9637'. [ 1054.812114][T25681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9637'. [ 1054.819061][T25684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1054.961051][ T9401] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1055.176859][ T9401] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1055.209268][ T9401] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1055.228584][ T9401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.247760][ T9401] usb 4-1: Product: syz [ 1055.257718][ T9401] usb 4-1: Manufacturer: syz [ 1055.294184][ T9401] usb 4-1: SerialNumber: syz [ 1055.320224][ T9401] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1055.373852][ T9401] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1055.669567][ C0] usb 4-1: ath: unknown panic pattern! [ 1055.919854][ T4357] usb 4-1: USB disconnect, device number 107 [ 1055.993762][T25695] loop4: detected capacity change from 0 to 32768 [ 1056.016519][T25695] [ 1056.016519][T25695] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.016519][T25695] [ 1056.146373][ T9] [ 1056.146373][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.146373][ T9] [ 1056.186850][ T9] [ 1056.186850][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.186850][ T9] [ 1056.212298][ T4380] [ 1056.212298][ T4380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.212298][ T4380] [ 1056.228172][ T4380] [ 1056.228172][ T4380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.228172][ T4380] [ 1056.241845][T25727] loop1: detected capacity change from 0 to 256 [ 1056.249223][T25727] exfat: Deprecated parameter 'utf8' [ 1056.257639][ T109] [ 1056.257639][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.257639][ T109] [ 1056.257960][T25727] exfat: Deprecated parameter 'namecase' [ 1056.281268][T25727] exfat: Deprecated parameter 'namecase' [ 1056.308900][ T109] ================================================================== [ 1056.317032][ T109] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 1056.323649][ T109] Write of size 8 at addr ffff888079cf3040 by task jfsCommit/109 [ 1056.331412][ T109] [ 1056.333891][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 [ 1056.341230][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1056.351413][ T109] Call Trace: [ 1056.354722][ T109] [ 1056.357681][ T109] dump_stack_lvl+0x188/0x24e [ 1056.362409][ T109] ? read_lock_is_recursive+0x10/0x10 [ 1056.367910][ T109] ? show_regs_print_info+0x12/0x12 [ 1056.373366][ T109] ? load_image+0x410/0x410 [ 1056.378011][ T109] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1056.383514][ T109] ? __virt_addr_valid+0x188/0x540 [ 1056.388670][ T109] ? __virt_addr_valid+0x467/0x540 [ 1056.393880][ T109] ? txEnd+0x329/0x520 [ 1056.398061][ T109] print_report+0xa8/0x210 [ 1056.402499][ T109] kasan_report+0x10b/0x140 [ 1056.407047][ T109] ? mutex_unlock+0x10/0x10 [ 1056.411565][ T109] ? txEnd+0x329/0x520 [ 1056.415651][ T109] kasan_check_range+0x235/0x290 [ 1056.420616][ T109] txEnd+0x329/0x520 [ 1056.424628][ T109] jfs_lazycommit+0x5bf/0xa90 [ 1056.429490][ T109] ? txFreelock+0x5a0/0x5a0 [ 1056.434001][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1056.439919][ T109] ? do_task_dead+0xd0/0xd0 [ 1056.444527][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1056.450431][ T109] ? __kthread_parkme+0x71/0x1c0 [ 1056.455431][ T109] ? __kthread_parkme+0x15b/0x1c0 [ 1056.460504][ T109] kthread+0x29d/0x330 [ 1056.464771][ T109] ? txFreelock+0x5a0/0x5a0 [ 1056.469294][ T109] ? kthread_blkcg+0xd0/0xd0 [ 1056.473910][ T109] ret_from_fork+0x1f/0x30 [ 1056.478515][ T109] [ 1056.481540][ T109] [ 1056.483866][ T109] Allocated by task 25695: [ 1056.488416][ T109] kasan_set_track+0x4b/0x70 [ 1056.493018][ T109] __kasan_kmalloc+0x8e/0xa0 [ 1056.497619][ T109] lmLogOpen+0x2c0/0xf90 [ 1056.501869][ T109] jfs_mount_rw+0xfb/0x5a0 [ 1056.506423][ T109] jfs_fill_super+0x57d/0xab0 [ 1056.511132][ T109] mount_bdev+0x28a/0x3c0 [ 1056.515460][ T109] legacy_get_tree+0xe6/0x180 [ 1056.520180][ T109] vfs_get_tree+0x88/0x270 [ 1056.524600][ T109] do_new_mount+0x247/0xa40 [ 1056.529516][ T109] __se_sys_mount+0x2e3/0x3d0 [ 1056.534558][ T109] do_syscall_64+0x4c/0xa0 [ 1056.538987][ T109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.545070][ T109] [ 1056.547490][ T109] Freed by task 4380: [ 1056.551470][ T109] kasan_set_track+0x4b/0x70 [ 1056.556096][ T109] kasan_save_free_info+0x27/0x40 [ 1056.561168][ T109] ____kasan_slab_free+0x126/0x1f0 [ 1056.566459][ T109] slab_free_freelist_hook+0x133/0x1b0 [ 1056.571930][ T109] __kmem_cache_free+0xb6/0x200 [ 1056.576783][ T109] lmLogClose+0x292/0x530 [ 1056.581117][ T109] jfs_umount+0x288/0x360 [ 1056.585724][ T109] jfs_put_super+0x88/0x190 [ 1056.590596][ T109] generic_shutdown_super+0x130/0x340 [ 1056.596186][ T109] kill_block_super+0x7c/0xe0 [ 1056.600987][ T109] deactivate_locked_super+0x93/0xf0 [ 1056.606369][ T109] cleanup_mnt+0x471/0x4f0 [ 1056.610956][ T109] task_work_run+0x1d0/0x260 [ 1056.615582][ T109] exit_to_user_mode_loop+0xe6/0x110 [ 1056.621044][ T109] exit_to_user_mode_prepare+0xee/0x180 [ 1056.628222][ T109] syscall_exit_to_user_mode+0x16/0x40 [ 1056.633710][ T109] do_syscall_64+0x58/0xa0 [ 1056.638153][ T109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.644671][ T109] [ 1056.647121][ T109] The buggy address belongs to the object at ffff888079cf3000 [ 1056.647121][ T109] which belongs to the cache kmalloc-1k of size 1024 [ 1056.661214][ T109] The buggy address is located 64 bytes inside of [ 1056.661214][ T109] 1024-byte region [ffff888079cf3000, ffff888079cf3400) [ 1056.674588][ T109] [ 1056.676937][ T109] The buggy address belongs to the physical page: [ 1056.683360][ T109] page:ffffea0001e73c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79cf0 [ 1056.693518][ T109] head:ffffea0001e73c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1056.701842][ T109] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1056.709919][ T109] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0 [ 1056.718862][ T109] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1056.728057][ T109] page dumped because: kasan: bad access detected [ 1056.734474][ T109] page_owner tracks the page as allocated [ 1056.740237][ T109] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4378, tgid 4378 (syz-executor), ts 81120689646, free_ts 81040084431 [ 1056.763160][ T109] post_alloc_hook+0x173/0x1a0 [ 1056.768023][ T109] get_page_from_freelist+0x206b/0x2180 [ 1056.773592][ T109] __alloc_pages+0x1ec/0x4f0 [ 1056.778190][ T109] alloc_slab_page+0x5d/0x180 [ 1056.782871][ T109] new_slab+0x87/0x2d0 [ 1056.787116][ T109] ___slab_alloc+0xbc5/0x1240 [ 1056.791968][ T109] __kmem_cache_alloc_node+0x126/0x270 [ 1056.797518][ T109] __kmalloc_node_track_caller+0xa0/0x240 [ 1056.803291][ T109] __alloc_skb+0x226/0x7d0 [ 1056.808045][ T109] rtmsg_fib+0xd7/0x440 [ 1056.812239][ T109] fib_table_insert+0xd4e/0x1af0 [ 1056.817201][ T109] fib_magic+0x2ca/0x3b0 [ 1056.821483][ T109] fib_add_ifaddr+0x3e2/0x5c0 [ 1056.826176][ T109] fib_netdev_event+0x361/0x470 [ 1056.831035][ T109] raw_notifier_call_chain+0xcb/0x160 [ 1056.836503][ T109] __dev_notify_flags+0x1a7/0x310 [ 1056.841625][ T109] page last free stack trace: [ 1056.846301][ T109] free_unref_page_prepare+0x8e5/0x9e0 [ 1056.851856][ T109] free_unref_page+0x2e/0x3f0 [ 1056.856539][ T109] qlist_free_all+0x76/0xe0 [ 1056.861045][ T109] kasan_quarantine_reduce+0x144/0x160 [ 1056.866603][ T109] __kasan_slab_alloc+0x1e/0x80 [ 1056.871459][ T109] slab_post_alloc_hook+0x4b/0x490 [ 1056.876590][ T109] kmem_cache_alloc+0x18b/0x2f0 [ 1056.881446][ T109] security_inode_alloc+0x30/0x110 [ 1056.886654][ T109] inode_init_always+0x910/0xc90 [ 1056.891600][ T109] new_inode_pseudo+0x91/0x1c0 [ 1056.896451][ T109] __sock_create+0x129/0x940 [ 1056.901085][ T109] __sys_socket+0xc4/0x190 [ 1056.905599][ T109] __x64_sys_socket+0x76/0x80 [ 1056.910373][ T109] do_syscall_64+0x4c/0xa0 [ 1056.915046][ T109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.921031][ T109] [ 1056.923456][ T109] Memory state around the buggy address: [ 1056.929094][ T109] ffff888079cf2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1056.937168][ T109] ffff888079cf2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1056.945314][ T109] >ffff888079cf3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1056.953643][ T109] ^ [ 1056.959795][ T109] ffff888079cf3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1056.967887][ T109] ffff888079cf3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1056.975950][ T109] ================================================================== [ 1056.992544][ T9401] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1056.994798][T25727] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1056.999581][ T9401] ath9k_htc: Failed to initialize the device [ 1057.071751][ T4357] usb 4-1: ath9k_htc: USB layer deinitialized [ 1057.089728][ T4348] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1057.286283][ T109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1057.293548][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 [ 1057.300786][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.310972][ T109] Call Trace: [ 1057.314282][ T109] [ 1057.317604][ T109] dump_stack_lvl+0x188/0x24e [ 1057.322375][ T109] ? memcpy+0x3c/0x60 [ 1057.326490][ T109] ? show_regs_print_info+0x12/0x12 [ 1057.331888][ T109] ? load_image+0x410/0x410 [ 1057.336426][ T109] panic+0x2d3/0x710 [ 1057.340354][ T109] ? bpf_jit_dump+0xd0/0xd0 [ 1057.344954][ T109] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1057.350953][ T109] ? _raw_spin_unlock+0x40/0x40 [ 1057.355961][ T109] check_panic_on_warn+0x80/0xa0 [ 1057.361601][ T109] ? txEnd+0x329/0x520 [ 1057.365693][ T109] end_report+0x66/0x110 [ 1057.370652][ T109] kasan_report+0x118/0x140 [ 1057.375340][ T109] ? mutex_unlock+0x10/0x10 [ 1057.380136][ T109] ? txEnd+0x329/0x520 [ 1057.384311][ T109] kasan_check_range+0x235/0x290 [ 1057.389443][ T109] txEnd+0x329/0x520 [ 1057.393349][ T109] jfs_lazycommit+0x5bf/0xa90 [ 1057.398417][ T109] ? txFreelock+0x5a0/0x5a0 [ 1057.402926][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1057.408916][ T109] ? do_task_dead+0xd0/0xd0 [ 1057.413604][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1057.419503][ T109] ? __kthread_parkme+0x71/0x1c0 [ 1057.424459][ T109] ? __kthread_parkme+0x15b/0x1c0 [ 1057.429495][ T109] kthread+0x29d/0x330 [ 1057.433575][ T109] ? txFreelock+0x5a0/0x5a0 [ 1057.438083][ T109] ? kthread_blkcg+0xd0/0xd0 [ 1057.442682][ T109] ret_from_fork+0x1f/0x30 [ 1057.447109][ T109] [ 1057.450482][ T109] Kernel Offset: disabled [ 1057.454893][ T109] Rebooting in 86400 seconds..