last executing test programs: 6.794680049s ago: executing program 5 (id=15823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r1, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 6.218197288s ago: executing program 5 (id=15829): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 5.846887907s ago: executing program 5 (id=15831): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @empty, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 5.580130614s ago: executing program 1 (id=15834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x31) 4.922336979s ago: executing program 3 (id=15841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 4.460557513s ago: executing program 4 (id=15844): r0 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 4.306846441s ago: executing program 4 (id=15846): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000c00)=""/4096, 0x1000) 3.886387093s ago: executing program 1 (id=15848): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) poll(&(0x7f00000011c0)=[{r0, 0x2}], 0x1, 0x3) 3.870642894s ago: executing program 3 (id=15849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)={0xd4, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 3.866467521s ago: executing program 5 (id=15850): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close(0x3) 3.648545188s ago: executing program 3 (id=15852): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.499780633s ago: executing program 5 (id=15854): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x60, 0x3, 0x3, "b3e71b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.449800083s ago: executing program 3 (id=15855): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000007c0)={{}, 0x0, 0x0, 0x3, 0x10, 0x1}) 3.377547276s ago: executing program 4 (id=15856): setresuid(0xee00, 0xee00, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) 3.317912522s ago: executing program 2 (id=15857): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 2.990181123s ago: executing program 2 (id=15859): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0xa}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}}, 0x4000010) 2.982052769s ago: executing program 4 (id=15860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x1, &(0x7f00000001c0)) 2.773617867s ago: executing program 1 (id=15861): socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 2.752480286s ago: executing program 4 (id=15862): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xeb, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.698775781s ago: executing program 2 (id=15863): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @empty, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 2.677017356s ago: executing program 0 (id=15864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@mcast1}, 0x14) 2.509988481s ago: executing program 1 (id=15865): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000e3ff0000000000000000000000851006000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 2.4213932s ago: executing program 0 (id=15866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 2.242650648s ago: executing program 1 (id=15867): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) 1.424037309s ago: executing program 2 (id=15868): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0], &(0x7f0000033840), 0x0, 0x1, 0x0, 0x0, r1}) 1.346687662s ago: executing program 0 (id=15869): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000480)={[{@utf8no}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_lower}, {@shortname_winnt}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.320444227s ago: executing program 3 (id=15870): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4d49430a494741494e202753796e74682043617074757265205377697460dcd8fdfbd1e7f120d243636827"], 0x3c) close(r0) 1.111529606s ago: executing program 1 (id=15871): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota}, {@i_version}, {@nobh}, {@noload}, {@quota}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 1.02257626s ago: executing program 5 (id=15872): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00210700000007f96fe6da8f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 938.044342ms ago: executing program 0 (id=15873): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0xc1598132b0b7681a}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 727.336216ms ago: executing program 2 (id=15874): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f00000003c0)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x107) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 527.160369ms ago: executing program 0 (id=15875): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x12, @mcast1, @private2={0xfc, 0x2, '\x00', 0xff}, 0x1, 0x80, 0xfffffffc, 0x4c51}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 369.520292ms ago: executing program 4 (id=15876): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f770c0000002a9000070400000083000000000b09007a150b5d8c3dda"], 0x0}, 0x0) 271.823915ms ago: executing program 3 (id=15877): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 96.671617ms ago: executing program 2 (id=15878): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/216, 0xd8, 0x8000, 0x3, 0x2, 0x32a, 0x2}}, 0x120) 0s ago: executing program 0 (id=15879): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000401020301090212"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) kernel console output (not intermixed with test programs): cturer: syz [ 1480.311308][ T5767] usb 5-1: SerialNumber: syz [ 1480.345047][ T5767] usb 5-1: config 0 descriptor?? [ 1480.459580][ T5767] mvusb_mdio 5-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 1480.854297][ T5831] usb 5-1: USB disconnect, device number 116 [ 1481.716544][T27075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14215'. [ 1481.796295][T27078] loop2: detected capacity change from 0 to 1024 [ 1481.845154][T27078] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1482.052190][T27096] xt_NFQUEUE: number of total queues is 0 [ 1482.178619][ T5767] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1482.385585][ T5767] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 1482.415052][ T5767] usb 3-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1482.465458][ T5767] usb 3-1: config 0 has no interface number 0 [ 1482.497628][ T5767] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1482.530485][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.530536][T27123] ksmbd: Unknown IPC event: 3, ignore. [ 1482.550474][ T5767] usb 3-1: Product: syz [ 1482.557517][ T5767] usb 3-1: Manufacturer: syz [ 1482.574232][ T5767] usb 3-1: SerialNumber: syz [ 1482.615305][ T5767] usb 3-1: config 0 descriptor?? [ 1482.722492][T11596] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1482.863586][ T5767] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1482.908905][ T5767] usb 3-1: USB disconnect, device number 114 [ 1482.914800][T11596] usb 1-1: Using ep0 maxpacket: 16 [ 1482.942480][T11596] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1482.971984][T11596] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.996030][T27152] dlm: no locking on control device [ 1482.997406][T27154] netlink: 'syz.5.14238': attribute type 7 has an invalid length. [ 1483.020647][T11596] usb 1-1: config 0 has no interface number 0 [ 1483.032124][T11596] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1483.065995][T11596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.129397][T11596] usb 1-1: config 0 descriptor?? [ 1483.153972][T11596] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 1483.290973][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14241'. [ 1483.313730][T27168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14241'. [ 1483.428798][ T5767] usb 1-1: USB disconnect, device number 4 [ 1483.862450][T27208] random: crng reseeded on system resumption [ 1484.952538][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.969886][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.998896][ T5767] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1485.076943][ T30] audit: type=1326 audit(2000001394.169:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27281 comm="syz.5.14274" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1485.117845][ T30] audit: type=1326 audit(2000001394.197:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27281 comm="syz.5.14274" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1485.173023][ T30] audit: type=1326 audit(2000001394.197:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27281 comm="syz.5.14274" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1485.199690][ T5767] usb 4-1: Using ep0 maxpacket: 16 [ 1485.215948][ T5767] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 1485.225909][ T5767] usb 4-1: config 251 has no interface number 0 [ 1485.232378][ T5767] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1485.251811][ T5767] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1485.285174][ T5767] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1485.326099][ T5767] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1485.348989][ T5767] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 29440, setting to 1024 [ 1485.380055][ T5767] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1485.397175][ T5767] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1485.411608][ T5767] usb 4-1: config 251 interface 202 has no altsetting 0 [ 1485.422875][ T5767] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1485.432483][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1485.441108][ T5767] usb 4-1: Product: syz [ 1485.445813][ T5767] usb 4-1: SerialNumber: syz [ 1485.469436][T27258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1485.477374][T27258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1485.741510][T27274] Process accounting paused [ 1485.788587][ T5767] cxacru 4-1:251.202: send of cm 0x90 failed (-71) [ 1485.807790][ T5767] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1485.813202][T27304] syz.0.14282 (27304): drop_caches: 3 [ 1485.833775][ T5767] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 1485.890114][ T5767] usb 4-1: USB disconnect, device number 111 [ 1486.131133][T11596] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1486.312810][T11596] usb 2-1: Using ep0 maxpacket: 8 [ 1486.329091][T11596] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1486.351619][T11596] usb 2-1: config 179 has no interface number 0 [ 1486.367241][T28634] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1486.369865][T11596] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1486.400385][T11596] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1486.423140][T11596] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1486.462334][T11596] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1486.502066][T11596] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1486.543068][T11596] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1486.549652][T28634] usb 6-1: Using ep0 maxpacket: 8 [ 1486.560849][T11596] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1486.575801][T28634] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1486.578038][T11596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.601426][T28634] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1486.651425][T28634] usb 6-1: string descriptor 0 read error: -22 [ 1486.663760][T28634] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1486.725258][T11596] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input146 [ 1486.849167][ T4971] input input146: unable to receive magic message: -110 [ 1486.857656][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.862906][T28634] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1486.874910][ T4971] input input146: unable to receive magic message: -32 [ 1486.898145][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.926502][T28634] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1486.958232][ T4971] input input146: unable to receive magic message: -32 [ 1487.003465][ T4971] input input146: unable to receive magic message: -32 [ 1487.043691][T28634] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1487.081296][T16851] input input146: unable to receive magic message: -32 [ 1487.094012][T28634] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1487.109416][ T4971] input input146: unable to receive magic message: -32 [ 1487.123495][T28634] usb 6-1: media controller created [ 1487.168743][ T4971] input input146: unable to receive magic message: -32 [ 1487.183146][T28634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.200639][ T4971] input input146: unable to receive magic message: -32 [ 1487.250419][T16085] usb 2-1: USB disconnect, device number 111 [ 1487.250418][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1487.529571][T27395] syz.2.14302 (27395): drop_caches: 3 [ 1487.697354][T27415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14305'. [ 1487.739612][T11596] usb 6-1: USB disconnect, device number 9 [ 1487.825262][T27425] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 1487.921029][T27430] CIFS: VFS: UNC: missing share name [ 1487.948521][T27430] CIFS: VFS: Malformed UNC in devname [ 1488.029059][T27433] openvswitch: netlink: Actions may not be safe on all matching packets [ 1488.467531][T27455] netlink: 'syz.4.14318': attribute type 1 has an invalid length. [ 1488.515048][T27455] netlink: 'syz.4.14318': attribute type 2 has an invalid length. [ 1488.544864][T27463] misc userio: Invalid payload size [ 1488.554296][T27464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1488.814862][T27470] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1488.866378][T27484] openvswitch: netlink: IP tunnel dst address not specified [ 1488.895204][T27483] loop5: detected capacity change from 0 to 256 [ 1488.922250][T27483] exfat: Deprecated parameter 'namecase' [ 1488.959502][T27483] exfat: Deprecated parameter 'namecase' [ 1489.121751][T27483] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1489.710740][T16124] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1489.923646][T16124] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1489.938993][T27533] vlan0: entered promiscuous mode [ 1489.951905][T16124] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1489.967446][T27533] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1489.992497][T16124] usb 4-1: config 0 has no interface number 0 [ 1490.006955][T16124] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1490.039672][T16124] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1490.082041][T16124] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1490.132948][T16124] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1490.175353][T16124] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1490.205169][T16124] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1490.229552][T16124] usb 4-1: Product: syz [ 1490.240367][T16124] usb 4-1: SerialNumber: syz [ 1490.271670][T16124] usb 4-1: config 0 descriptor?? [ 1490.501447][T16126] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1490.544834][T16124] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input147 [ 1490.683059][T16126] usb 5-1: Using ep0 maxpacket: 8 [ 1490.697040][T16126] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1490.724901][T16126] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1490.770081][T16126] usb 5-1: Product: syz [ 1490.793044][T16126] usb 5-1: Manufacturer: syz [ 1490.811296][T16126] usb 5-1: SerialNumber: syz [ 1490.842205][T16126] usb 5-1: config 0 descriptor?? [ 1490.851426][T16054] usb 4-1: USB disconnect, device number 112 [ 1490.942653][T16126] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1491.322090][T16126] gspca_zc3xx: reg_r err -71 [ 1491.340242][T16126] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1491.377467][T16126] usb 5-1: USB disconnect, device number 117 [ 1491.630344][T27624] netlink: 'syz.0.14366': attribute type 1 has an invalid length. [ 1491.655847][T27628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14367'. [ 1491.660562][T27624] netlink: 228 bytes leftover after parsing attributes in process `syz.0.14366'. [ 1491.675465][T27629] loop1: detected capacity change from 0 to 64 [ 1491.681969][T27628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14367'. [ 1492.304046][T27663] loop1: detected capacity change from 0 to 256 [ 1492.361493][T27663] exfat: Deprecated parameter 'namecase' [ 1492.384529][T27663] exfat: Deprecated parameter 'namecase' [ 1492.444062][T27663] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1493.525423][T28634] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1493.700771][T28634] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1493.736013][T28634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.778601][T28634] usb 4-1: config 0 descriptor?? [ 1493.808473][T28634] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1494.042433][T28634] gspca_spca505: reg write: error -71 [ 1494.067307][T28634] spca505 4-1:0.0: probe with driver spca505 failed with error -5 [ 1494.102127][T28634] usb 4-1: USB disconnect, device number 113 [ 1494.257303][T16124] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1494.340348][ T30] audit: type=1326 audit(2000001402.845:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.390415][T27774] loop2: detected capacity change from 0 to 2048 [ 1494.411418][ T30] audit: type=1326 audit(2000001402.863:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.451799][T27774] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1494.501278][T16124] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1494.517213][ T30] audit: type=1326 audit(2000001402.873:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.542396][T27774] UDF-fs: unknown compression code (0) [ 1494.556815][T16124] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1494.576096][T16124] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1494.590904][ T30] audit: type=1326 audit(2000001402.873:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.638562][T16124] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1494.664328][T16124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.691903][ T30] audit: type=1326 audit(2000001402.873:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.718190][T16124] usb 2-1: Product: syz [ 1494.729763][T16124] usb 2-1: Manufacturer: syz [ 1494.753847][T16124] usb 2-1: SerialNumber: syz [ 1494.781399][T16124] usb 2-1: config 0 descriptor?? [ 1494.793846][ T30] audit: type=1326 audit(2000001402.873:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.820507][T27752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1494.839983][T27752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1494.857196][T16124] usb 2-1: ucan: probing device on interface #0 [ 1494.865315][ T30] audit: type=1326 audit(2000001402.873:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.892737][ T30] audit: type=1326 audit(2000001402.873:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.5.14414" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1494.919092][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14420'. [ 1495.293278][T16124] usb 2-1: ucan: failed to retrieve device info [ 1495.316791][T16124] usb 2-1: ucan: probe failed; try to update the device firmware [ 1495.367212][T16124] usb 2-1: USB disconnect, device number 112 [ 1495.609307][T27855] netlink: 'syz.5.14428': attribute type 1 has an invalid length. [ 1495.622683][T27855] netlink: 228 bytes leftover after parsing attributes in process `syz.5.14428'. [ 1495.794328][T27866] loop5: detected capacity change from 0 to 1024 [ 1495.857280][T16124] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1496.071308][T16124] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1496.105120][T16124] usb 1-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1496.130816][T27878] netlink: 'syz.3.14434': attribute type 3 has an invalid length. [ 1496.163904][T27878] netlink: 'syz.3.14434': attribute type 1 has an invalid length. [ 1496.173422][T16124] usb 1-1: config 0 has no interface number 0 [ 1496.203205][T16124] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1496.239279][T27878] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14434'. [ 1496.263425][T16124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.281320][T16124] usb 1-1: Product: syz [ 1496.303131][T16124] usb 1-1: Manufacturer: syz [ 1496.322538][T16124] usb 1-1: SerialNumber: syz [ 1496.381321][T16124] usb 1-1: config 0 descriptor?? [ 1496.648932][T16124] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1496.685576][T16124] usb 1-1: USB disconnect, device number 5 [ 1496.695499][T27911] loop5: detected capacity change from 0 to 2048 [ 1496.724393][T27911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1496.837870][T16054] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1496.985133][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.027953][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.032632][T16054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.067043][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.108176][T16054] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.109787][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.173810][T16054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1497.178880][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.217233][T16054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.232041][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.244769][T16054] usb 3-1: Product: syz [ 1497.263498][T16054] usb 3-1: Manufacturer: syz [ 1497.282722][T16054] usb 3-1: SerialNumber: syz [ 1497.283159][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1497.337708][T16054] cdc_ncm 3-1:1.0: skipping garbage [ 1497.369800][T16054] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 1497.407579][T16054] cdc_ncm 3-1:1.0: bind() failure [ 1497.461875][T16054] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1497.482218][T16054] cdc_ncm 3-1:1.1: bind() failure [ 1497.564989][T16126] usb 3-1: USB disconnect, device number 115 [ 1497.993562][T16124] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1498.173647][T16124] usb 2-1: Using ep0 maxpacket: 16 [ 1498.183594][T16124] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1498.208325][T16124] usb 2-1: config 0 has no interface number 0 [ 1498.227720][T16124] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1498.246004][T16124] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1498.261260][T16124] usb 2-1: Product: syz [ 1498.271703][T16124] usb 2-1: SerialNumber: syz [ 1498.301512][T16124] usb 2-1: config 0 descriptor?? [ 1498.322366][T27997] cgroup: release_agent respecified [ 1498.362733][T16124] cm109 2-1:0.8: invalid payload size 32, expected 4 [ 1498.403915][T16124] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input148 [ 1498.525178][T28014] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 1498.636180][ C0] cm109_urb_ctl_callback: 79 callbacks suppressed [ 1498.636219][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.650204][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.657386][T16126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1498.665836][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.673172][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.680586][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.687736][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.694914][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.702213][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.702686][T28634] usb 2-1: USB disconnect, device number 113 [ 1498.709298][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1498.709339][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1498.791406][T28634] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1498.890537][T16126] usb 1-1: Using ep0 maxpacket: 8 [ 1498.924309][T16126] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1498.944347][T16126] usb 1-1: config 179 has no interface number 0 [ 1498.974013][T16126] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1499.021597][T16126] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1499.071664][T16126] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1499.095258][T16126] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1499.107441][T28032] nvme_fabrics: missing parameter 'transport=%s' [ 1499.119741][T28032] nvme_fabrics: missing parameter 'nqn=%s' [ 1499.155317][T16126] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1499.188111][T16126] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1499.222326][T16126] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1499.252996][T16126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.403180][T16126] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input149 [ 1499.411025][T28052] openvswitch: netlink: Message has 512 unknown bytes. [ 1499.520866][ T4971] input input149: unable to receive magic message: -110 [ 1499.548862][ T4971] input input149: unable to receive magic message: -32 [ 1499.568861][ T4971] input input149: unable to receive magic message: -32 [ 1499.653364][ T4971] input input149: unable to receive magic message: -32 [ 1499.747713][ T4971] input input149: unable to receive magic message: -32 [ 1499.830546][ T4971] input input149: unable to receive magic message: -32 [ 1499.856715][T28634] usb 1-1: USB disconnect, device number 6 [ 1499.856775][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1499.871077][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1499.931912][T28077] xt_hashlimit: max too large, truncated to 1048576 [ 1500.271376][T28098] Unsupported ieee802154 address type: 0 [ 1500.951538][T28142] __nla_validate_parse: 14 callbacks suppressed [ 1500.951567][T28142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14494'. [ 1501.037306][T28142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14494'. [ 1501.096689][T28152] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 1501.674285][T28179] misc userio: The device must be registered before sending interrupts [ 1501.913611][T28634] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1502.098185][T28634] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 1502.130368][T28634] usb 4-1: config 0 has no interface number 1 [ 1502.153424][T28634] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1502.188788][T28634] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1502.209293][T28634] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1502.216628][T28634] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1502.226288][T28634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.245166][T28634] usb 4-1: config 0 descriptor?? [ 1502.268881][T28210] loop2: detected capacity change from 0 to 16 [ 1502.305826][T28210] erofs (device loop2): mounted with root inode @ nid 36. [ 1502.387507][T28210] syz.2.14516: attempt to access beyond end of device [ 1502.387507][T28210] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1502.447918][T16126] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1502.471569][T28634] usb 4-1: Could not set interface, error -71 [ 1502.480949][T28210] erofs (device loop2): bogus lookback distance 0 @ lcn 8 of nid 89 [ 1502.525388][T28210] erofs (device loop2): readahead error at folio 8 @ nid 89 [ 1502.537974][T28634] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1502.562510][T28210] syz.2.14516: attempt to access beyond end of device [ 1502.562510][T28210] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1502.572509][T28634] usb 4-1: USB disconnect, device number 114 [ 1502.620611][T28210] syz.2.14516: attempt to access beyond end of device [ 1502.620611][T28210] loop2: rw=524288, sector=32, nr_sectors = 24 limit=16 [ 1502.640454][T16126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1502.665835][T16126] usb 6-1: config index 0 descriptor too short (expected 40961, got 257) [ 1502.687563][T16126] usb 6-1: config 216 has too many interfaces: 155, using maximum allowed: 32 [ 1502.712586][T28210] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1502.728047][T16126] usb 6-1: config 216 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.751490][T16126] usb 6-1: config 216 has 1 interface, different from the descriptor's value: 155 [ 1502.763060][T28210] erofs (device loop2): read error -117 @ 1 of nid 89 [ 1502.779211][ T30] audit: type=1800 audit(2000001410.743:318): pid=28210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14516" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1502.824002][T16126] usb 6-1: string descriptor 0 read error: -22 [ 1502.830579][T16126] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1502.871234][T16126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.272509][T28260] ip6t_srh: unknown srh match flags 4000 [ 1503.510443][T16066] udevd[16066]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:216.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1503.528354][T16126] snd-usb-audio 6-1:216.0: probe with driver snd-usb-audio failed with error -71 [ 1503.585703][T16126] usb 6-1: USB disconnect, device number 10 [ 1503.637979][T28291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14533'. [ 1503.651801][T28292] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1503.682636][T28291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1503.694205][T28292] CIFS mount error: No usable UNC path provided in device string! [ 1503.694205][T28292] [ 1503.748369][T28292] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1504.037326][T28310] vti0: entered promiscuous mode [ 1504.047971][T28310] vti0: entered allmulticast mode [ 1504.339080][T16054] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1504.381552][T28334] new mount options do not match the existing superblock, will be ignored [ 1504.512137][T16054] usb 2-1: Using ep0 maxpacket: 32 [ 1504.543616][T16054] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1504.572292][T16054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.600440][T16054] usb 2-1: Product: syz [ 1504.614146][T16054] usb 2-1: Manufacturer: syz [ 1504.632049][T16054] usb 2-1: SerialNumber: syz [ 1504.665161][T16054] usb 2-1: config 0 descriptor?? [ 1504.699408][T16054] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1505.122265][ T30] audit: type=1326 audit(2000001412.933:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.148873][T16054] gspca_ov534_9: reg_w failed -71 [ 1505.213263][ T30] audit: type=1326 audit(2000001412.933:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.301449][ T30] audit: type=1326 audit(2000001412.961:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.408152][ T30] audit: type=1326 audit(2000001412.971:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.478818][ T30] audit: type=1326 audit(2000001412.971:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.566952][ T30] audit: type=1326 audit(2000001412.971:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.600299][T16054] gspca_ov534_9: Unknown sensor 0000 [ 1505.600409][T16054] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1505.652328][ T30] audit: type=1326 audit(2000001412.971:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.680818][T16054] usb 2-1: USB disconnect, device number 114 [ 1505.735983][T28402] xt_bpf: check failed: parse error [ 1505.803067][ T30] audit: type=1326 audit(2000001412.971:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1505.917864][ T30] audit: type=1326 audit(2000001412.971:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28372 comm="syz.2.14559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f538d99ce59 code=0x7ffc0000 [ 1506.643834][T28448] loop4: detected capacity change from 0 to 512 [ 1506.738274][T28448] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1506.768760][T28448] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1506.818793][T28448] EXT4-fs warning (device loop4): ext4_enable_quotas:7272: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1506.900047][T28448] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1506.934401][T28448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.14583: bg 0: block 64: padding at end of block bitmap is not set [ 1506.951396][T16054] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1507.021255][T28448] loop4: lost filesystem error report for type 5 error -117 [ 1507.031703][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1507.045629][ C1] EXT4-fs (loop4): initial error at time 2000001414: ext4_validate_block_bitmap:440 [ 1507.055099][ C1] EXT4-fs (loop4): last error at time 2000001414: ext4_validate_block_bitmap:440 [ 1507.072490][T28448] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1507.082226][T28448] loop4: lost filesystem error report for type 5 error -117 [ 1507.083988][T28448] EXT4-fs (loop4): 1 truncate cleaned up [ 1507.143328][T28448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1507.161283][T16054] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1507.192226][T16054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.240074][T16054] usb 4-1: config 0 descriptor?? [ 1507.261219][T28480] netlink: 768 bytes leftover after parsing attributes in process `syz.0.14592'. [ 1507.266601][T16054] cp210x 4-1:0.0: cp210x converter detected [ 1507.503031][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.820454][T16054] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1507.887750][T16054] usb 4-1: USB disconnect, device number 115 [ 1507.926650][T16851] udevd[16851]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 1507.933682][T16054] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1507.977237][T16851] udevd[16851]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1507.989298][T16054] cp210x 4-1:0.0: device disconnected [ 1508.561210][T28548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14608'. [ 1508.617063][T28548] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1508.892943][T28564] loop1: detected capacity change from 0 to 256 [ 1508.929837][T28564] exfat: Deprecated parameter 'utf8' [ 1508.959126][T28564] exfat: Deprecated parameter 'namecase' [ 1509.022184][T28564] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1509.213095][T28586] program syz.2.14621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1510.157985][T28638] loop5: detected capacity change from 0 to 256 [ 1510.765625][T28664] ieee802154 phy1 wpan1: encryption failed: -22 [ 1510.805265][ T30] audit: type=1326 audit(2000001418.240:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1510.924050][ T30] audit: type=1326 audit(2000001418.240:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.045522][ T30] audit: type=1326 audit(2000001418.277:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.104226][ T30] audit: type=1326 audit(2000001418.277:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.131392][ T30] audit: type=1326 audit(2000001418.286:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.148505][T28682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14652'. [ 1511.167708][ T30] audit: type=1326 audit(2000001418.286:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.193938][ T30] audit: type=1326 audit(2000001418.286:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.304704][ T30] audit: type=1326 audit(2000001418.286:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.423594][ T30] audit: type=1326 audit(2000001418.286:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.0.14647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd6d219ce59 code=0x7ffc0000 [ 1511.579335][T28704] autofs4:pid:28704:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1511.637257][T28704] autofs4:pid:28704:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1511.943859][T28721] loop2: detected capacity change from 0 to 22 [ 1511.973312][T28721] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1512.046747][T28721] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1512.314750][T28739] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1512.663000][T16054] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1512.866533][T16054] usb 4-1: Using ep0 maxpacket: 32 [ 1512.892847][T16054] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1512.919477][T16054] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.955759][T16054] usb 4-1: config 0 has no interface number 0 [ 1512.978488][T16054] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1513.018871][T16054] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1513.052045][T16054] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1513.089130][T16054] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1513.143884][T16054] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1513.188060][T16054] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1513.232200][T16054] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1513.260244][T16054] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1513.308221][T16054] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1513.339299][T16054] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1513.366321][T16054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.394960][T16054] usb 4-1: Product: syz [ 1513.415858][T16054] usb 4-1: Manufacturer: syz [ 1513.434141][T16054] usb 4-1: SerialNumber: syz [ 1513.469391][T16054] usb 4-1: config 0 descriptor?? [ 1513.498495][T28747] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1513.535495][T16054] usb 4-1: will this work? Command EP is not usually 12 [ 1513.568865][T16054] usb 4-1: will this work? Response EP is not usually 3 [ 1513.583890][T16054] usb 4-1: will this work? Image data EP is not usually 2 [ 1513.618134][T16054] scsi host1: microtekX6 [ 1513.724555][ T3348] usb 4-1: error -90 submitting URB [ 1513.774909][ T1678] usb 4-1: error -90 submitting URB [ 1513.775991][T16054] usb 4-1: USB disconnect, device number 116 [ 1513.797961][ T3348] usb 4-1: error -19 submitting URB [ 1513.838695][ T1678] usb 4-1: error -19 submitting URB [ 1514.039685][T28838] xt_l2tp: invalid flags combination: c [ 1514.655403][T28867] netlink: 'syz.4.14711': attribute type 1 has an invalid length. [ 1514.835229][T28873] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1515.238890][T28634] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1515.441226][T28634] usb 5-1: Using ep0 maxpacket: 16 [ 1515.469035][T28634] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 1515.505422][T28634] usb 5-1: config 0 has no interface number 0 [ 1515.543429][T28634] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1515.619367][T28634] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1515.641156][T28917] xt_socket: unknown flags 0x48 [ 1515.670146][T28634] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1515.687018][T28634] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1515.725273][T28634] usb 5-1: Product: syz [ 1515.752561][T28634] usb 5-1: Manufacturer: syz [ 1515.771013][T28634] usb 5-1: SerialNumber: syz [ 1515.810301][T28634] usb 5-1: config 0 descriptor?? [ 1515.852974][T28634] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 1515.894744][T28634] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 1515.939223][T28634] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 1516.005273][T28634] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1516.055143][T28634] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 1516.129305][T28634] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1516.203857][T28634] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 1516.233527][T28634] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1516.276679][T28634] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 1516.278258][T28964] netlink: 'syz.0.14733': attribute type 31 has an invalid length. [ 1516.317916][T28634] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1516.378212][T28634] usb 5-1: USB disconnect, device number 118 [ 1516.442465][T28634] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1516.508049][T28634] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1516.593562][T28634] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1516.726104][T28634] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1516.801227][T28634] keyspan 5-1:0.107: device disconnected [ 1517.699726][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14757'. [ 1517.744523][T29049] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1517.771000][T29055] netlink: 'syz.4.14759': attribute type 1 has an invalid length. [ 1517.804393][T29055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14759'. [ 1517.835404][T29051] Process accounting resumed [ 1519.010573][T28634] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1519.174505][T29135] loop3: detected capacity change from 0 to 1024 [ 1519.195283][T28634] usb 1-1: Using ep0 maxpacket: 8 [ 1519.216115][T29135] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1519.219518][T28634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1519.318088][T28634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1519.373904][T28634] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1519.414905][T28634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1519.461464][T28634] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1519.495747][T28634] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1519.531244][T28634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.580924][T28634] usb 1-1: config 0 descriptor?? [ 1519.609609][T29113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1520.047273][T16054] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1520.156658][T28634] usb 1-1: USB disconnect, device number 7 [ 1520.161881][ T5644] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1520.237573][T16054] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1520.284476][T16054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.308581][T16054] usb 6-1: Product: syz [ 1520.334635][T16054] usb 6-1: Manufacturer: syz [ 1520.382414][T16054] usb 6-1: SerialNumber: syz [ 1520.414525][T16054] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1520.576190][T16085] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1520.661355][T29141] loop4: detected capacity change from 0 to 32768 [ 1520.722368][T29141] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1520.929640][T29141] XFS (loop4): Ending clean mount [ 1521.107122][T28634] usb 6-1: USB disconnect, device number 11 [ 1521.145248][ T5631] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1521.158095][T29238] netlink: 'syz.0.14806': attribute type 1 has an invalid length. [ 1521.173638][T29238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14806'. [ 1521.657122][T16124] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1521.751567][T16085] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1521.784798][T16085] ath9k_htc: Failed to initialize the device [ 1521.827639][T28634] usb 6-1: ath9k_htc: USB layer deinitialized [ 1521.874505][T16124] usb 5-1: Using ep0 maxpacket: 8 [ 1521.902492][T16124] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1521.925121][T16124] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1521.979498][T16124] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.998749][T16054] IPVS: starting estimator thread 0... [ 1522.011761][T16124] usb 5-1: config 4 has no interface number 0 [ 1522.032095][T16124] usb 5-1: string descriptor 0 read error: -22 [ 1522.065870][T16124] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1522.119554][T29276] IPVS: using max 23 ests per chain, 55200 per kthread [ 1522.130835][T16124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.218124][T16124] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 1522.255967][T16124] uvcvideo 5-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1522.301298][T16124] uvcvideo 5-1:4.147: No valid video chain found. [ 1522.550785][T16124] usb 5-1: USB disconnect, device number 119 [ 1523.174386][T29338] ip6t_REJECT: ECHOREPLY is not supported [ 1523.565688][T29365] bond0: Error: CAN devices cannot be enslaved [ 1523.583522][T16085] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1523.690406][T16054] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1523.767057][T16085] usb 3-1: Using ep0 maxpacket: 32 [ 1523.792850][T16085] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1523.817152][T16085] usb 3-1: config 0 has no interface number 0 [ 1523.826099][ T30] audit: type=1326 audit(2000001430.424:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1523.855556][T16085] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1523.884001][T16085] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1523.897802][T16054] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.912941][ T30] audit: type=1326 audit(2000001430.434:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1523.923158][T16054] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1523.964344][T16085] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1523.993049][T16085] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1524.000390][ T30] audit: type=1326 audit(2000001430.434:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.017927][T16054] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1524.047538][T16085] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1524.070751][T16085] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1524.084496][T16085] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1524.089975][ T30] audit: type=1326 audit(2000001430.434:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.096176][T16054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1524.129634][T16085] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 1524.144877][T16085] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1524.155715][T16054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1524.164104][T16085] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1524.177832][T16054] usb 2-1: SerialNumber: syz [ 1524.187876][T16085] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1524.197937][T16085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.216974][ T30] audit: type=1326 audit(2000001430.434:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.230776][T16054] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1524.266838][T16085] usb 3-1: Product: syz [ 1524.278489][T16085] usb 3-1: Manufacturer: syz [ 1524.288760][T16085] usb 3-1: SerialNumber: syz [ 1524.301556][ T30] audit: type=1326 audit(2000001430.434:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.328695][T16054] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1524.336720][T16085] usb 3-1: config 0 descriptor?? [ 1524.359075][T16054] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1524.369389][T29342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1524.385523][T29342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1524.420070][ T30] audit: type=1326 audit(2000001430.434:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.423799][T16085] usb 3-1: will this work? Response EP is not usually 3 [ 1524.490895][T16085] usb 3-1: will this work? Image data EP is not usually 2 [ 1524.520880][T16054] usb 2-1: USB disconnect, device number 115 [ 1524.530245][T16085] scsi host1: microtekX6 [ 1524.602265][ T30] audit: type=1326 audit(2000001430.434:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.734238][ T30] audit: type=1326 audit(2000001430.434:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29376 comm="syz.5.14844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1524.891851][T16124] usb 3-1: USB disconnect, device number 116 [ 1526.314731][T29480] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1527.242208][T29545] usb usb9: check_ctrlrecip: process 29545 (syz.1.14892) requesting ep 01 but needs 81 [ 1527.282303][T29545] usb usb9: usbfs: process 29545 (syz.1.14892) did not claim interface 0 before use [ 1527.581784][T29561] overlayfs: missing 'lowerdir' [ 1528.579929][T29602] geneve4: entered promiscuous mode [ 1528.608338][T29602] geneve4: entered allmulticast mode [ 1528.705909][T29550] loop3: detected capacity change from 0 to 32768 [ 1528.765085][T29550] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1528.963106][T29635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14917'. [ 1529.085460][T29550] XFS (loop3): Ending clean mount [ 1529.369370][ T5628] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1529.550420][T29659] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1529.838485][T29670] binder: 29666:29670 ioctl c0306201 200000000040 returned -22 [ 1529.986527][T29673] loop4: detected capacity change from 0 to 2048 [ 1530.040885][T29673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1530.518364][T16085] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1530.587218][T29707] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14942'. [ 1530.623559][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14942'. [ 1530.709677][T16085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.748701][T16085] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1530.784667][T16085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.817562][T16085] usb 6-1: Product: syz [ 1530.826979][T16085] usb 6-1: Manufacturer: syz [ 1530.847775][T16085] usb 6-1: SerialNumber: syz [ 1530.895549][T16085] usb 6-1: config 0 descriptor?? [ 1530.928541][T16085] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 1530.942807][T29722] netlink: 'syz.3.14947': attribute type 21 has an invalid length. [ 1530.986956][T29722] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14947'. [ 1531.031320][T29722] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14947'. [ 1531.226491][T16126] usb 6-1: USB disconnect, device number 12 [ 1531.272424][T29745] netlink: 'syz.0.14953': attribute type 6 has an invalid length. [ 1531.843097][T29781] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1532.448811][T29812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14975'. [ 1533.045457][T29844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14985'. [ 1533.072109][T16124] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1533.297321][T16124] usb 1-1: Using ep0 maxpacket: 32 [ 1533.316228][T16124] usb 1-1: config 4 has an invalid interface number: 202 but max is 2 [ 1533.342781][T16124] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.372410][T29865] loop4: detected capacity change from 0 to 64 [ 1533.380481][T16124] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 1533.406783][T16124] usb 1-1: config 4 has no interface number 0 [ 1533.425400][T16124] usb 1-1: too many endpoints for config 4 interface 202 altsetting 31: 115, using maximum allowed: 30 [ 1533.446389][T29865] Trying to free block not in datazone [ 1533.450452][T16085] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1533.453273][T29865] minix_free_block (loop4:21): bit already cleared [ 1533.475697][T16124] usb 1-1: config 4 interface 202 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1533.525731][T16124] usb 1-1: config 4 interface 202 has no altsetting 0 [ 1533.555477][T16124] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 1533.575885][T16124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.613254][T16124] usb 1-1: Product: syz [ 1533.626365][T29874] openvswitch: netlink: VXLAN extension message has 4096 unknown bytes. [ 1533.628383][T16124] usb 1-1: Manufacturer: syz [ 1533.654284][T16085] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1533.656284][T16124] usb 1-1: SerialNumber: syz [ 1533.687327][T16085] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 1533.716571][T16085] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 4 [ 1533.746276][T16085] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 1533.788416][T16085] usb 3-1: string descriptor 0 read error: -22 [ 1533.803452][T16085] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1533.844077][T16085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.931574][T16085] usb 3-1: low speed audio streaming not supported [ 1533.963433][T16085] usb 3-1: low speed audio streaming not supported [ 1534.025499][T16124] usb 1-1: USB disconnect, device number 8 [ 1534.077974][T29904] ALSA: mixer_oss: invalid OSS volume 'u' [ 1534.123357][T16085] usb 3-1: selecting invalid altsetting 1 [ 1534.141078][ T5767] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1534.162356][T16085] snd-usb-us122l 3-1:1.1: usb_set_interface error [ 1534.191011][T16085] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1534.266034][T16085] usb 3-1: USB disconnect, device number 117 [ 1534.333753][ T5767] usb 5-1: Using ep0 maxpacket: 8 [ 1534.351492][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1534.391739][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1534.409265][ T5767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1534.420179][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1534.458998][ T5767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1534.469256][T29944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15002'. [ 1534.512715][ T5767] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1534.524579][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.540494][ T5767] usb 5-1: config 0 descriptor?? [ 1534.559690][T29892] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1534.634410][T16124] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1534.701903][T29958] netlink: 'syz.5.15004': attribute type 2 has an invalid length. [ 1534.817165][T16124] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1534.827184][T16124] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 1534.839208][T16124] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1534.854876][T16124] usb 4-1: string descriptor 0 read error: -22 [ 1534.862124][T16124] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1534.872308][T16124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.130861][ T5644] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1535.133071][ T5767] usb 5-1: USB disconnect, device number 120 [ 1535.349699][T16124] usb 4-1: low speed audio streaming not supported [ 1535.551958][T16124] usb 4-1: USB disconnect, device number 117 [ 1536.071395][T29968] loop5: detected capacity change from 0 to 32768 [ 1536.099731][T29968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15007 (29968) [ 1536.169449][T29968] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1536.206178][T29968] BTRFS info (device loop5): using sha256 checksum algorithm [ 1536.325555][T30043] loop3: detected capacity change from 0 to 2048 [ 1536.422111][T30043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1536.531198][T29968] BTRFS info (device loop5): enabling ssd optimizations [ 1536.531244][T29968] BTRFS info (device loop5): turning on async discard [ 1536.531278][T29968] BTRFS info (device loop5): enabling free space tree [ 1536.689536][T30069] erspan2: entered promiscuous mode [ 1536.712792][T30069] erspan2: entered allmulticast mode [ 1536.746848][ T5641] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1537.550822][T30108] CIFS mount error: No usable UNC path provided in device string! [ 1537.550822][T30108] [ 1537.620056][T30108] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1537.814084][T30121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15044'. [ 1537.823722][T30119] loop4: detected capacity change from 0 to 512 [ 1537.857254][T30121] gre0: Master is either lo or non-ether device [ 1537.965295][T30119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1538.070773][T30119] ext4 filesystem being mounted at /2494/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.181551][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15049'. [ 1538.463434][T30119] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1538.510482][T30119] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1538.585452][T30119] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.15043: Failed to acquire dquot type 0 [ 1538.727582][T30163] netlink: 'syz.3.15057': attribute type 21 has an invalid length. [ 1538.763971][T30163] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15057'. [ 1538.951003][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1539.373801][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15066'. [ 1539.415153][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15066'. [ 1539.673594][T30213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15071'. [ 1540.135693][T11596] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1540.353092][T11596] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1540.371925][T11596] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1540.400976][T11596] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1540.419353][T11596] usb 3-1: string descriptor 0 read error: -22 [ 1540.447876][T11596] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1540.479854][T11596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.745378][T30270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1541.138783][T28634] usb 3-1: USB disconnect, device number 118 [ 1541.182651][T16124] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1541.385462][T16124] usb 5-1: Using ep0 maxpacket: 16 [ 1541.398855][T16124] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1541.420159][T16124] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1541.442650][T16124] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1541.481019][T16124] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1541.514747][T16124] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1541.539195][T16124] usb 5-1: config 0 has no interface number 0 [ 1541.540544][T30323] ALSA: mixer_oss: invalid OSS volume '' [ 1541.547180][T16124] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1541.574999][T16124] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1541.592747][T16124] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1541.602738][T16124] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1541.626881][T16124] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1541.637707][T16124] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1541.645013][T11596] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1541.675228][T16124] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1541.700045][T16124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.728255][T16124] usb 5-1: Product: syz [ 1541.742955][T16124] usb 5-1: Manufacturer: syz [ 1541.752178][T16124] usb 5-1: SerialNumber: syz [ 1541.774110][T16124] usb 5-1: config 0 descriptor?? [ 1541.809853][T16124] usb 5-1: selecting invalid altsetting 2 [ 1541.824988][T11596] usb 4-1: Using ep0 maxpacket: 16 [ 1541.837802][T11596] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1541.859491][T11596] usb 4-1: config 0 has no interface number 0 [ 1541.881211][T11596] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1541.933238][T11596] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1541.949457][T11596] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1541.959382][T11596] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1541.992790][T11596] usb 4-1: Product: syz [ 1542.013525][T11596] usb 4-1: Manufacturer: syz [ 1542.026882][T11596] usb 4-1: SerialNumber: syz [ 1542.051112][T11596] usb 4-1: config 0 descriptor?? [ 1542.063212][ C0] usb 5-1: async_complete: urb error -71 [ 1542.069035][ C0] usb 5-1: async_complete: urb error -71 [ 1542.074792][ C0] usb 5-1: async_complete: urb error -71 [ 1542.080545][ C0] usb 5-1: async_complete: urb error -71 [ 1542.097179][T16124] get_1284_register: usb error -71 [ 1542.139409][T11596] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1542.155538][T11596] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1542.174973][T16124] usb 5-1: USB disconnect, device number 121 [ 1542.196208][T11596] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1542.233544][T11596] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1542.278699][T11596] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1542.302822][T11596] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1542.328456][T11596] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1542.371483][T11596] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1542.436678][T11596] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1542.471341][T11596] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1542.528508][T11596] usb 4-1: USB disconnect, device number 118 [ 1542.616792][T11596] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1542.670921][T11596] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1542.702693][T11596] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1542.724440][T11596] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1542.755548][T11596] keyspan 4-1:0.107: device disconnected [ 1543.682093][T30448] tmpfs: Bad value for 'mpol' [ 1543.979587][T30469] loop1: detected capacity change from 0 to 256 [ 1544.088737][T16124] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1544.271042][T16124] usb 5-1: Using ep0 maxpacket: 32 [ 1544.304926][T16124] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1544.335093][T16124] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.376258][T16124] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1544.414704][T16124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.439767][T16124] usb 5-1: Product: syz [ 1544.455035][T16124] usb 5-1: Manufacturer: syz [ 1544.459995][T16124] usb 5-1: SerialNumber: syz [ 1544.743365][T16124] usb 5-1: Invalid number of CPorts: 0 [ 1544.769160][T16124] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1545.044278][T28634] usb 5-1: USB disconnect, device number 122 [ 1545.070106][T30525] futex_wake_op: syz.3.15154 tries to shift op by 144; fix this program [ 1545.115069][T30525] futex_wake_op: syz.3.15154 tries to shift op by 144; fix this program [ 1545.256134][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.819476][T30565] netlink: 45 bytes leftover after parsing attributes in process `syz.5.15164'. [ 1545.851885][T16126] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1546.049751][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.066060][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.086876][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.106111][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.131139][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.153213][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.176531][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.200192][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.221785][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.248826][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.270181][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.290512][T16124] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1546.302136][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.322501][T16126] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1546.335523][T16126] usb 3-1: config 0 has no interface number 0 [ 1546.357024][T16126] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1546.381243][T16126] usb 3-1: New USB device strings: Mfr=32, Product=187, SerialNumber=229 [ 1546.413081][T16126] usb 3-1: Product: syz [ 1546.427738][T16126] usb 3-1: Manufacturer: syz [ 1546.437176][T16126] usb 3-1: SerialNumber: syz [ 1546.455271][T16126] usb 3-1: config 0 descriptor?? [ 1546.478021][T16124] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1546.505981][T16126] ftdi_sio 3-1:0.197: FTDI USB Serial Device converter detected [ 1546.525613][T16124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.539257][T16126] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1546.554540][T16124] usb 6-1: Product: syz [ 1546.560239][T16124] usb 6-1: Manufacturer: syz [ 1546.577010][T16124] usb 6-1: SerialNumber: syz [ 1546.613060][T16124] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1546.650800][T16126] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1546.908519][T28634] usb 3-1: USB disconnect, device number 119 [ 1546.958489][T28634] ftdi_sio 3-1:0.197: device disconnected [ 1547.038642][ C0] usb 6-1: ath: unknown panic pattern! [ 1547.311563][T16124] usb 6-1: USB disconnect, device number 13 [ 1547.821496][T16126] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1547.849027][T16126] ath9k_htc: Failed to initialize the device [ 1547.868999][T16124] usb 6-1: ath9k_htc: USB layer deinitialized [ 1548.923583][T30737] tc_dump_action: action bad kind [ 1549.453513][T30768] loop1: detected capacity change from 0 to 256 [ 1549.581040][T16124] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1549.775422][T16124] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.798441][T16124] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1549.809776][T30788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15233'. [ 1549.830587][T16124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.897781][T16124] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1550.151402][T30799] Process accounting paused [ 1550.549988][T30823] loop4: detected capacity change from 0 to 2048 [ 1550.575566][T30823] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1550.606176][T30823] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1550.625749][T30823] UDF-fs: Scanning with blocksize 512 failed [ 1550.689986][T30823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1550.995282][T30850] netlink: 'syz.2.15252': attribute type 64 has an invalid length. [ 1551.074277][T16124] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1551.229894][T30860] loop3: detected capacity change from 0 to 8 [ 1551.303629][T16124] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1551.342096][T30860] SQUASHFS error: Failed to read block 0x636: -5 [ 1551.343817][T16124] stv0680 6-1:4.0: last error: 86, command = 0x0 [ 1551.349515][T16124] usb 6-1: USB disconnect, device number 14 [ 1551.390406][T30860] SQUASHFS error: Unable to read metadata cache entry [634] [ 1551.684753][T30844] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1551.904256][T30899] loop1: detected capacity change from 0 to 512 [ 1551.983285][T30899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1552.009010][T30899] ext4 filesystem being mounted at /2553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.387940][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.508568][T30929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1552.713453][T30938] netlink: 148 bytes leftover after parsing attributes in process `syz.5.15278'. [ 1553.124736][T30961] binder: 30960:30961 ioctl c0306201 0 returned -14 [ 1553.684375][ T30] audit: type=1326 audit(2000001458.369:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.4.15293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13f79ce59 code=0x7ffc0000 [ 1553.799094][ T30] audit: type=1326 audit(2000001458.369:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.4.15293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13f79ce59 code=0x7ffc0000 [ 1553.845078][ T30] audit: type=1326 audit(2000001458.435:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.4.15293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd13f79ce59 code=0x7ffc0000 [ 1553.936709][ T30] audit: type=1326 audit(2000001458.435:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.4.15293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13f79ce59 code=0x7ffc0000 [ 1553.974513][T16124] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1554.027273][ T30] audit: type=1326 audit(2000001458.435:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.4.15293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13f79ce59 code=0x7ffc0000 [ 1554.088140][T31004] Scaler: ================= START STATUS ================= [ 1554.107686][T31004] Scaler: ================== END STATUS ================== [ 1554.186591][T16124] usb 6-1: Using ep0 maxpacket: 32 [ 1554.211974][T16124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1554.239602][T16124] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.298432][T16124] usb 6-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 1554.332070][T16124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1554.364532][T16124] usb 6-1: Product: syz [ 1554.385074][T16124] usb 6-1: Manufacturer: syz [ 1554.406206][T16124] usb 6-1: SerialNumber: syz [ 1554.678291][T31029] loop3: detected capacity change from 0 to 1764 [ 1554.704373][T16124] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.751778][T16124] usb 6-1: MIDIStreaming interface descriptor not found [ 1554.764160][T31029] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1554.953037][T16124] usb 6-1: USB disconnect, device number 15 [ 1555.174744][T16278] udevd[16278]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.535736][T31095] bridge5: entered promiscuous mode [ 1556.338312][T31169] netlink: 'syz.2.15336': attribute type 3 has an invalid length. [ 1556.382554][T31169] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15336'. [ 1556.432258][ T30] audit: type=1326 audit(2000001460.943:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31173 comm="syz.1.15338" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1556.487054][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15340'. [ 1556.537218][ T30] audit: type=1326 audit(2000001460.943:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31173 comm="syz.1.15338" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1556.625138][ T30] audit: type=1326 audit(2000001460.980:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31173 comm="syz.1.15338" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1556.754160][ T30] audit: type=1326 audit(2000001460.980:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31173 comm="syz.1.15338" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1556.866624][T31189] vxcan3: entered promiscuous mode [ 1556.901139][T31189] vxcan3: entered allmulticast mode [ 1557.045425][T31207] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1557.297477][T31212] loop1: detected capacity change from 0 to 4096 [ 1557.340239][T31222] loop4: detected capacity change from 0 to 1024 [ 1557.394464][T31222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1557.445269][T31233] netlink: 'syz.3.15356': attribute type 3 has an invalid length. [ 1557.460823][T31233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1557.475242][T31236] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1557.570885][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.728898][T31243] tmpfs: User quota block hardlimit too large. [ 1557.897673][ T30] audit: type=1326 audit(2000001462.318:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31249 comm="syz.5.15362" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1558.564293][T31289] netlink: 'syz.5.15374': attribute type 3 has an invalid length. [ 1558.590967][T31289] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15374'. [ 1559.847027][T31365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15399'. [ 1560.031566][ T5767] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1560.153897][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1560.153925][ T30] audit: type=1326 audit(2000001464.433:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.15404" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1560.235050][ T5767] usb 3-1: Using ep0 maxpacket: 8 [ 1560.267282][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1560.298451][ T5767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1560.308381][ T30] audit: type=1326 audit(2000001464.433:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.15404" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1560.376487][ T5767] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1560.397284][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.422771][ T30] audit: type=1326 audit(2000001464.471:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.15404" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1560.448662][ T5767] usb 3-1: Product: syz [ 1560.456478][ T5767] usb 3-1: Manufacturer: syz [ 1560.464871][ T5767] usb 3-1: SerialNumber: syz [ 1560.484607][ T5767] usb 3-1: config 0 descriptor?? [ 1560.519154][ T30] audit: type=1326 audit(2000001464.471:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.15404" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb119ce59 code=0x7ffc0000 [ 1560.553654][T31396] dvmrp0: left allmulticast mode [ 1560.862058][T31355] loop4: detected capacity change from 0 to 32768 [ 1560.878211][T31355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15396 (31355) [ 1560.972701][ T5767] usb 3-1: USB disconnect, device number 120 [ 1561.027261][T31355] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1561.059089][T31355] BTRFS info (device loop4): using sha256 checksum algorithm [ 1561.252015][T31355] BTRFS info (device loop4): enabling ssd optimizations [ 1561.292552][T31355] BTRFS info (device loop4): turning on async discard [ 1561.337475][T31355] BTRFS info (device loop4): enabling free space tree [ 1561.708075][ T5631] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1562.278957][T31478] ip6tnl3: entered promiscuous mode [ 1562.831120][ T30] audit: type=1326 audit(2000001466.941:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31512 comm="syz.1.15437" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1562.970387][ T30] audit: type=1326 audit(2000001466.979:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31512 comm="syz.1.15437" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1563.067867][ T30] audit: type=1326 audit(2000001466.979:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31512 comm="syz.1.15437" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1563.179735][ T30] audit: type=1326 audit(2000001466.979:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31512 comm="syz.1.15437" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1563.292681][ T30] audit: type=1326 audit(2000001466.979:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31512 comm="syz.1.15437" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1563.410584][ T30] audit: type=1326 audit(2000001466.979:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31512 comm="syz.1.15437" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x7ffc0000 [ 1563.613746][T31542] qrtr: Invalid version 17 [ 1564.009302][T31507] loop5: detected capacity change from 0 to 32768 [ 1564.042125][T31507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15434 (31507) [ 1564.147499][T31507] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1564.193871][T31507] BTRFS info (device loop5): using sha256 checksum algorithm [ 1564.418631][T31611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15460'. [ 1564.445828][T31611] netlink: 312 bytes leftover after parsing attributes in process `syz.1.15460'. [ 1564.455778][T31611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15460'. [ 1564.465744][T16124] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1564.498277][T31507] BTRFS info (device loop5): enabling ssd optimizations [ 1564.520934][T31507] BTRFS info (device loop5): turning on async discard [ 1564.561676][T31507] BTRFS info (device loop5): enabling free space tree [ 1564.655359][T16124] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.693670][T16124] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1564.724499][T16124] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 49, changing to 7 [ 1564.748223][T31624] netlink: 'syz.2.15464': attribute type 8 has an invalid length. [ 1564.770929][T16124] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25964, setting to 1024 [ 1564.828039][T16124] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1564.847405][T16124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.847453][T16124] usb 4-1: Product: syz [ 1564.847483][T16124] usb 4-1: Manufacturer: syz [ 1564.847512][T16124] usb 4-1: SerialNumber: syz [ 1564.856183][ T5641] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1565.180057][T16124] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1565.205584][T16124] usb 4-1: 0:2 : does not exist [ 1565.287873][T31650] loop5: detected capacity change from 0 to 512 [ 1565.450659][T31650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1565.518454][T16124] usb 4-1: USB disconnect, device number 119 [ 1565.558869][T31650] ext4 filesystem being mounted at /2535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1565.698700][T16851] udevd[16851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.952643][T16126] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1566.010839][T31691] netlink: 'syz.2.15476': attribute type 10 has an invalid length. [ 1566.068173][T31691] bond0: (slave netdevsim1): Releasing backup interface [ 1566.120821][T31691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1566.169935][T16126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 57890, setting to 64 [ 1566.187748][T31691] team0: Port device netdevsim1 added [ 1566.216872][T16126] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1566.256052][T16126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.288362][T31704] ip6t_srh: unknown srh invflags 4000 [ 1566.294624][T16126] usb 6-1: Product: syz [ 1566.303162][T16126] usb 6-1: Manufacturer: syz [ 1566.329615][T16126] usb 6-1: SerialNumber: syz [ 1566.369422][T16126] usb 6-1: config 0 descriptor?? [ 1566.396178][T31709] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1566.406515][T31650] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1566.434369][T16126] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 1566.665907][T31713] bond7: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1566.678886][T31713] bond7: entered allmulticast mode [ 1566.680642][ T5767] usb 6-1: USB disconnect, device number 16 [ 1567.003242][T31776] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1567.034502][T31776] overlayfs: overlapping lowerdir path [ 1567.305335][T31791] lo speed is unknown, defaulting to 1000 [ 1567.328009][T31791] lo speed is unknown, defaulting to 1000 [ 1567.356113][T31791] lo speed is unknown, defaulting to 1000 [ 1567.378794][ T5641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.581217][T31806] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 1568.174316][T31845] netlink: 'syz.0.15512': attribute type 21 has an invalid length. [ 1568.198623][T31845] netlink: 'syz.0.15512': attribute type 1 has an invalid length. [ 1568.216737][T31845] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15512'. [ 1568.257874][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1568.257902][ T30] audit: type=1400 audit(2000001472.014:377): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=31849 comm="syz.2.15513" [ 1568.430138][ T5767] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1568.590337][ T5767] usb 4-1: Using ep0 maxpacket: 32 [ 1568.617202][ T5767] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1568.639232][ T5767] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1568.671988][T31791] infiniband syz2: set down [ 1568.676970][T16085] lo speed is unknown, defaulting to 1000 [ 1568.692030][ T5767] usb 4-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 1568.706314][T31791] infiniband syz2: added lo [ 1568.716548][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1568.731008][T31865] program syz.0.15518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1568.744462][ T5767] usb 4-1: Product: syz [ 1568.753224][ T5767] usb 4-1: Manufacturer: syz [ 1568.765098][ T5767] usb 4-1: SerialNumber: syz [ 1568.804070][T31791] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1568.831872][T31791] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1568.850663][T31791] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1569.085841][T31791] RDS/IB: syz2: added [ 1569.098948][T31791] smc: adding ib device syz2 with port count 1 [ 1569.126363][T31791] smc: ib device syz2 port 1 has no pnetid [ 1569.142845][ T5767] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1569.154078][T31791] lo speed is unknown, defaulting to 1000 [ 1569.165038][ T5767] usb 4-1: MIDIStreaming interface descriptor not found [ 1569.178620][T28634] lo speed is unknown, defaulting to 1000 [ 1569.381692][ T5767] usb 4-1: USB disconnect, device number 120 [ 1569.389638][T31887] loop5: detected capacity change from 0 to 4096 [ 1569.581837][T16278] udevd[16278]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1569.763570][ T30] audit: type=1800 audit(2000001473.418:378): pid=31887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15523" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 1570.503275][T31941] loop2: detected capacity change from 0 to 64 [ 1570.561327][T31948] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1570.585338][ T30] audit: type=1400 audit(2000001474.194:379): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3AFF20B9DAC6B98850DD7E2AABD6BB0ED3E1FBFE95AF7DEBBE7B052583C2B8BB3F852755C2BBD37D5F3DF1CCB21D8C19D799701EB3C61CEA508FB554741E pid=31938 comm="syz.2.15532" [ 1570.798314][T31791] lo speed is unknown, defaulting to 1000 [ 1571.114516][T31970] netlink: 'syz.5.15542': attribute type 21 has an invalid length. [ 1571.484688][T31989] xfrm0: entered promiscuous mode [ 1571.508726][T31989] xfrm0: entered allmulticast mode [ 1572.090630][T32020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15560'. [ 1572.147457][T31791] lo speed is unknown, defaulting to 1000 [ 1572.202204][T16124] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1572.384630][T16124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1572.412179][T16124] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 1572.427242][T16124] usb 6-1: config 114 has no interface number 0 [ 1572.452213][T16124] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1572.464791][T16124] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1572.501303][T16124] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1572.520758][T16124] usb 6-1: config 114 interface 240 has no altsetting 0 [ 1572.572834][T16124] usb 6-1: string descriptor 0 read error: -22 [ 1572.594462][T16124] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1572.611345][T16126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1572.638174][T16124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.657003][T32011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1572.693364][T32011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1572.713859][T16124] ir_usb 6-1:114.240: IR Dongle converter detected [ 1572.779370][T16126] usb 1-1: Using ep0 maxpacket: 16 [ 1572.799135][T16126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1572.834551][T16126] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1572.870901][T16126] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1572.907191][T16126] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1572.958776][T16126] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1572.982858][T16124] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 1573.011497][T16126] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1573.022800][T16126] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1573.048734][T16126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.086183][T16126] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1573.201177][T16124] usb 6-1: USB disconnect, device number 17 [ 1573.218410][T32065] vlan2: entered allmulticast mode [ 1573.224181][T32065] bond0: entered allmulticast mode [ 1573.234516][T31791] lo speed is unknown, defaulting to 1000 [ 1573.244040][T16124] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1573.254976][T16124] ir_usb 6-1:114.240: device disconnected [ 1573.318463][T16126] scsi host1: usb-storage 1-1:1.0 [ 1573.475359][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15577'. [ 1573.611143][T16126] usb 1-1: USB disconnect, device number 9 [ 1574.351839][T31791] lo speed is unknown, defaulting to 1000 [ 1574.421251][T32143] netlink: 'syz.0.15585': attribute type 13 has an invalid length. [ 1574.808334][T32164] netlink: 'syz.2.15592': attribute type 2 has an invalid length. [ 1574.834951][T32164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15592'. [ 1575.033665][ T5892] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1575.272226][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1575.289801][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.316767][ T5892] usb 4-1: Product: syz [ 1575.335380][ T5892] usb 4-1: Manufacturer: syz [ 1575.347677][ T5892] usb 4-1: SerialNumber: syz [ 1575.408847][T32182] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1575.420931][ T5892] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1575.517700][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15598'. [ 1575.820364][T32200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15600'. [ 1576.022301][ T5767] usb 4-1: USB disconnect, device number 121 [ 1576.871034][T32241] loop1: detected capacity change from 0 to 1024 [ 1576.893344][T32182] usb 4-1: Service connection timeout for: 256 [ 1576.901824][T32241] EXT4-fs: Ignoring removed mblk_io_submit option [ 1576.914189][T32182] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1576.933023][T32182] ath9k_htc: Failed to initialize the device [ 1576.949981][ T5767] usb 4-1: ath9k_htc: USB layer deinitialized [ 1576.956187][T32241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.048408][T32241] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 1577.146354][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.185115][T32256] loop2: detected capacity change from 0 to 256 [ 1577.200201][T32256] exfat: Deprecated parameter 'utf8' [ 1577.211276][T32256] exfat: Deprecated parameter 'utf8' [ 1577.225760][T32256] exfat: Deprecated parameter 'namecase' [ 1577.323418][T32256] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1577.380633][T32262] Bluetooth: MGMT ver 1.23 [ 1577.827643][T32282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15620'. [ 1578.790639][ T483] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.800020][T31791] lo speed is unknown, defaulting to 1000 [ 1578.860667][ T483] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.897427][ T483] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.946252][ T483] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.404520][T16090] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1579.410798][T32320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15631'. [ 1579.593467][T16090] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.642296][T16090] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1579.681018][T16090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.760427][T16090] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1580.120323][T32347] loop2: detected capacity change from 0 to 1764 [ 1580.164445][T32347] iso9660: Unknown parameter 'utT8' [ 1580.177292][T32357] loop1: detected capacity change from 0 to 128 [ 1580.527554][T32373] loop4: detected capacity change from 0 to 1024 [ 1580.695485][T32385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15645'. [ 1581.136181][T16090] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1581.184422][T16090] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1581.219372][T16090] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 1581.236023][T32410] loop1: detected capacity change from 0 to 8 [ 1581.253054][T16090] usb 1-1: USB disconnect, device number 10 [ 1581.299014][T32410] SQUASHFS error: Unable to read directory block [629:46] [ 1581.332866][T32402] can0: slcan on ptm0. [ 1581.531264][T32400] can0 (unregistered): slcan off ptm0. [ 1582.042907][T32463] trusted_key: encrypted_key: key trusted:syz not found [ 1582.171501][T32182] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1582.385757][T32182] usb 4-1: Using ep0 maxpacket: 8 [ 1582.408561][T32182] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1582.423874][T32475] Process accounting resumed [ 1582.428773][T32182] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1582.443091][T32484] Bluetooth: MGMT ver 1.23 [ 1582.452624][T32182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.474992][T32182] usb 4-1: config 0 descriptor?? [ 1582.803599][T32497] loop2: detected capacity change from 0 to 1024 [ 1582.817658][T32497] EXT4-fs: Ignoring removed mblk_io_submit option [ 1582.891132][T32497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.952428][T32182] hid_parser_main: 22 callbacks suppressed [ 1582.952462][T32182] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x3 [ 1582.966340][T32182] lua 0003:1E7D:2C2E.0002: reserved main item tag 0xe [ 1582.975081][T32182] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x3 [ 1582.985416][T32182] lua 0003:1E7D:2C2E.0002: item 0 2 0 11 parsing failed [ 1582.994655][T32182] lua 0003:1E7D:2C2E.0002: parse failed [ 1583.000924][T32182] lua 0003:1E7D:2C2E.0002: probe with driver lua failed with error -22 [ 1583.063370][T32497] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 1583.256928][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.258245][T16097] usb 4-1: USB disconnect, device number 122 [ 1584.189449][T32579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15689'. [ 1584.348120][T32585] openvswitch: netlink: Actions may not be safe on all matching packets [ 1585.216297][T32626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15703'. [ 1585.279766][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15703'. [ 1585.359437][T32626] netlink: 'syz.5.15703': attribute type 12 has an invalid length. [ 1585.393710][T32626] netlink: 'syz.5.15703': attribute type 13 has an invalid length. [ 1585.796477][T32645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15708'. [ 1586.724878][T32181] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1586.927599][T32181] usb 1-1: Using ep0 maxpacket: 16 [ 1586.944037][T32181] usb 1-1: config 1 has an invalid interface number: 22 but max is 0 [ 1586.975185][T32678] loop1: detected capacity change from 0 to 2048 [ 1586.992333][T32181] usb 1-1: config 1 has no interface number 0 [ 1587.018498][T32181] usb 1-1: config 1 interface 22 has no altsetting 0 [ 1587.045004][T32181] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 1587.084474][T32678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1587.104786][T32181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.162895][T32181] usb 1-1: Product: syz [ 1587.203760][T32181] usb 1-1: Manufacturer: syz [ 1587.219671][T32181] usb 1-1: SerialNumber: syz [ 1587.374197][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.521621][T32181] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1587.594448][T32181] usb 1-1: USB disconnect, device number 11 [ 1588.105560][T32740] loop1: detected capacity change from 0 to 2048 [ 1588.143811][T32740] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1588.209930][T32753] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1588.381539][T32741] loop4: detected capacity change from 0 to 8192 [ 1588.452245][T32741] loop4: AHDI p1 p2 p3 p4 [ 1588.472450][T32741] loop4: p1 size 67109119 extends beyond EOD, truncated [ 1588.521582][T32741] loop4: p3 start 1671679 is beyond EOD, truncated [ 1588.550705][T32741] loop4: p4 size 2147155716 extends beyond EOD, truncated [ 1588.739736][ T308] netlink: 'syz.3.15742': attribute type 15 has an invalid length. [ 1589.148568][ T323] loop4: detected capacity change from 0 to 4096 [ 1589.150494][T16066] udevd[16066]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1589.163376][T16851] udevd[16851]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1589.168838][T16283] udevd[16283]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1589.265602][ T341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15748'. [ 1589.277555][T16097] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1589.300000][ T30] audit: type=1800 audit(2000001491.704:380): pid=323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15745" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 1589.433116][ T347] netlink: 104 bytes leftover after parsing attributes in process `syz.5.15751'. [ 1589.493881][T16097] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1589.509766][T16097] usb 3-1: not running at top speed; connect to a high speed hub [ 1589.547414][T16097] usb 3-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 1589.573962][T16097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.602756][T16097] usb 3-1: Product: syz [ 1589.620500][T16097] usb 3-1: Manufacturer: syz [ 1589.641252][T16097] usb 3-1: SerialNumber: syz [ 1590.118417][ T378] loop4: detected capacity change from 0 to 1024 [ 1590.147481][T16097] usb 3-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 1590.179752][ T383] loop3: detected capacity change from 0 to 16 [ 1590.215944][ T383] erofs (device loop3): mounted with root inode @ nid 36. [ 1590.271001][T16088] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1590.293861][ T380] loop5: detected capacity change from 0 to 4096 [ 1590.418255][ T399] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1590.446757][T16097] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1590.489481][T16088] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1590.527026][T16088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.540091][T16097] usb 3-1: USB disconnect, device number 121 [ 1590.569953][T16088] usb 2-1: Product: syz [ 1590.591191][T16088] usb 2-1: Manufacturer: syz [ 1590.606266][T16088] usb 2-1: SerialNumber: syz [ 1590.649116][T16088] usb 2-1: config 0 descriptor?? [ 1590.703775][ T5641] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1590.750395][T16283] udevd[16283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1590.784153][T16088] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1590.850996][T16088] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1590.860709][ T5641] Remounting filesystem read-only [ 1590.860760][ T5641] NILFS error (device loop5): nilfs_readdir: bad page in #2 [ 1590.933547][T28634] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1590.948528][T16088] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1590.963391][T16088] usb 2-1: media controller created [ 1590.988065][T16088] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1591.028236][ T5641] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=8192, inode=0, rec_len=0, name_len=0 [ 1591.046142][ T5641] NILFS error (device loop5): nilfs_readdir: bad page in #2 [ 1591.104556][T28634] usb 1-1: Using ep0 maxpacket: 32 [ 1591.118676][T28634] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.154128][T28634] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1591.197067][T16088] DVB: Unable to find symbol mt352_attach() [ 1591.224821][T28634] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1591.248128][T28634] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1591.287644][T28634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.325349][T28634] usb 1-1: config 0 descriptor?? [ 1591.401308][T16088] DVB: Unable to find symbol nxt6000_attach() [ 1591.419421][T16088] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1591.461199][T16088] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input151 [ 1591.494624][T16088] dvb-usb: schedule remote query interval to 1000 msecs. [ 1591.513724][T16088] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1591.538796][T16088] dvb-usb: bulk message failed: -22 (7/0) [ 1591.552567][T16088] dvb-usb: bulk message failed: -22 (7/0) [ 1591.564588][T16097] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1591.602553][T16088] usb 2-1: USB disconnect, device number 116 [ 1591.734970][T16097] usb 4-1: Using ep0 maxpacket: 8 [ 1591.748661][T16097] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.784453][T16097] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1591.784587][ T481] openvswitch: netlink: Actions may not be safe on all matching packets [ 1591.835834][T16097] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1591.871150][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1591.889215][T16097] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1591.911697][T16088] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1591.930908][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1591.952336][T16097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.968288][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1591.994054][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.005140][T16097] usb 4-1: config 0 descriptor?? [ 1592.015895][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.023212][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.040153][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.049491][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.071862][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.079438][T28634] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 1592.111119][T28634] itetech 0003:258A:6A88.0003: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 1592.170406][T28634] usb 1-1: USB disconnect, device number 12 [ 1592.528670][ T514] fido_id[514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1592.616021][T16097] aquacomputer_d5next 0003:0C70:F014.0004: hidraw0: USB HID v0.03 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 1592.794527][ T549] loop5: detected capacity change from 0 to 1024 [ 1592.882775][T16097] usb 4-1: USB disconnect, device number 123 [ 1592.904780][ T549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1593.031050][ T551] fido_id[551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1593.231566][T32181] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1593.375548][ T5641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.428021][T32181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.469500][T32181] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1593.514045][T32181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.564016][T32181] usb 3-1: config 0 descriptor?? [ 1593.590918][ T596] loop3: detected capacity change from 0 to 256 [ 1593.602512][T32181] pwc: Askey VC010 type 2 USB webcam detected. [ 1593.618322][ T596] exfat: Deprecated parameter 'namecase' [ 1593.648723][ T596] exfat: Deprecated parameter 'namecase' [ 1593.712078][ T596] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1594.119905][ T623] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1594.172565][T16127] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1594.262147][T32181] pwc: recv_control_msg error -71 req 02 val 2700 [ 1594.278804][T32181] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1594.303730][T32181] pwc: recv_control_msg error -71 req 04 val 1000 [ 1594.327156][T32181] pwc: recv_control_msg error -71 req 04 val 1300 [ 1594.352318][T32181] pwc: recv_control_msg error -71 req 04 val 1400 [ 1594.370090][T16127] usb 6-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1594.392489][T32181] pwc: recv_control_msg error -71 req 02 val 2000 [ 1594.411991][T16127] usb 6-1: config 0 interface 0 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1594.428582][T32181] pwc: recv_control_msg error -71 req 02 val 2100 [ 1594.449283][T16127] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1594.456225][T32181] pwc: recv_control_msg error -71 req 04 val 1500 [ 1594.470716][T16127] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1594.480145][T32181] pwc: recv_control_msg error -71 req 02 val 2500 [ 1594.499860][T32181] pwc: recv_control_msg error -71 req 02 val 2400 [ 1594.508089][T16127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.524163][T32181] pwc: recv_control_msg error -71 req 02 val 2600 [ 1594.538479][T16127] usb 6-1: config 0 descriptor?? [ 1594.548998][T32181] pwc: recv_control_msg error -71 req 02 val 2900 [ 1594.569157][T32181] pwc: recv_control_msg error -71 req 02 val 2800 [ 1594.589494][T32181] pwc: recv_control_msg error -71 req 04 val 1100 [ 1594.607479][T32181] pwc: recv_control_msg error -71 req 04 val 1200 [ 1594.648797][ T589] loop4: detected capacity change from 0 to 32768 [ 1594.658168][T32181] pwc: Registered as video103. [ 1594.682346][T32181] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input152 [ 1594.792501][T32181] usb 3-1: USB disconnect, device number 122 [ 1595.100096][T16127] wacom 0003:056A:0094.0005: Using device in hidraw-only mode [ 1595.451016][T16127] wacom 0003:056A:0094.0005: hidraw0: USB HID v80.08 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 1595.511365][T16127] usb 6-1: USB disconnect, device number 18 [ 1595.994795][ T693] fido_id[693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1596.578309][ T728] tmpfs: Invalid gid '0x00000000ffffffff' [ 1596.597738][ T730] Cannot find del_set index 14804 as target [ 1596.707414][ T30] audit: type=1326 audit(2000001498.639:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=733 comm="syz.1.15819" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75e1b9ce59 code=0x0 [ 1596.954018][ T745] loop3: detected capacity change from 0 to 512 [ 1596.978124][ T745] EXT4-fs: Ignoring removed i_version option [ 1597.015082][ T745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1597.072784][ T745] EXT4-fs (loop3): 1 truncate cleaned up [ 1597.090646][ T745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1597.192628][ T702] loop2: detected capacity change from 0 to 32768 [ 1597.200099][T16126] IPVS: starting estimator thread 0... [ 1597.244641][ T702] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1597.284430][ T702] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1597.312052][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.338443][ T757] IPVS: using max 26 ests per chain, 62400 per kthread [ 1597.577961][ T702] XFS (loop2): Ending clean mount [ 1597.687235][ T702] XFS (loop2): Quotacheck needed: Please wait. [ 1597.977636][ T796] netlink: 'syz.5.15831': attribute type 13 has an invalid length. [ 1598.006786][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15833'. [ 1598.021236][ T702] XFS (loop2): Quotacheck: Done. [ 1598.179296][ T5627] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1598.388436][ T796] bridge0: port 3(syz_tun) entered disabled state [ 1598.574310][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.581851][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.998782][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.040341][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1600.111514][ T854] loop4: detected capacity change from 0 to 32768 [ 1600.156451][ T854] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1600.404660][ T5631] ocfs2: Unmounting device (7,4) on (node local) [ 1600.550477][T16088] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1600.732490][T16088] usb 6-1: Using ep0 maxpacket: 32 [ 1600.746730][T16088] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1600.780929][T16088] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.816156][T16088] usb 6-1: config 0 has no interface number 0 [ 1600.837604][T16088] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1600.890168][T16088] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1600.928277][T16088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.974266][T16088] usb 6-1: Product: syz [ 1600.994215][T16088] usb 6-1: Manufacturer: syz [ 1601.015821][T16088] usb 6-1: SerialNumber: syz [ 1601.043505][T16088] usb 6-1: config 0 descriptor?? [ 1601.044378][ T916] netlink: 'syz.2.15863': attribute type 13 has an invalid length. [ 1601.086979][T16088] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1601.124529][T16088] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1601.302617][T16088] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1601.341898][T16127] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 1601.363498][ T916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.371061][ T916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.396228][ T890] loop3: detected capacity change from 0 to 32768 [ 1601.412994][ T890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15855 (890) [ 1601.455564][ T890] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1601.474970][ T890] BTRFS info (device loop3): using sha256 checksum algorithm [ 1601.503707][ T30] audit: type=1326 audit(2000001503.131:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=946 comm="syz.1.15867" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75e1b9ce59 code=0x0 [ 1601.533774][T16088] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1601.539571][T16127] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1601.587309][T16127] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1601.632696][T16127] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1601.654939][T16127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1601.661862][T16127] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1601.666599][ T890] BTRFS info (device loop3): enabling ssd optimizations [ 1601.671140][T16127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.690750][T16127] usb 5-1: config 0 descriptor?? [ 1601.697351][ T917] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1601.729220][ T890] BTRFS info (device loop3): turning on async discard [ 1601.742580][ T916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.759941][ T916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.764099][ T890] BTRFS info (device loop3): enabling free space tree [ 1601.836553][T16088] usb 6-1: USB disconnect, device number 19 [ 1601.863370][T16088] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1602.173711][T16127] hid_parser_main: 78 callbacks suppressed [ 1602.173744][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.196757][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.204302][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.213154][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.221010][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.228803][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.236351][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.246814][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.254704][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.275209][T16127] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 1602.336425][T16127] koneplus 0003:1E7D:2E22.0006: hidraw0: USB HID v0.07 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 1602.358738][ T5628] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1602.410931][T16127] usb 5-1: USB disconnect, device number 123 [ 1602.588500][ T988] fido_id[988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1602.743863][ T1008] loop1: detected capacity change from 0 to 512 [ 1602.776587][ T1008] EXT4-fs: Ignoring removed i_version option [ 1602.804221][ T1008] EXT4-fs: Ignoring removed nobh option [ 1602.876995][ T1008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1603.061492][T16088] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1603.125742][ T1008] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.15871: invalid block [ 1603.171418][ T1026] loop2: detected capacity change from 0 to 256 [ 1603.212297][ T1008] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1603.221647][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1603.237536][ C1] EXT4-fs (loop1): initial error at time 2000001504: ext4_get_branch:178: inode 11: block 4294967295 [ 1603.248704][ C1] EXT4-fs (loop1): last error at time 2000001504: ext4_get_branch:178: inode 11: block 4294967295 [ 1603.267240][ T1008] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.15871: invalid indirect mapped block 4294967295 (level 1) [ 1603.289070][T16088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1603.315087][T16088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.325317][ T1008] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1603.330104][ T1008] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.15871: invalid indirect mapped block 4294967295 (level 1) [ 1603.368355][T16088] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1603.411100][T16088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.423173][ T1008] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1603.454086][T16088] usb 6-1: config 0 descriptor?? [ 1603.489552][ T1008] EXT4-fs (loop1): 2 truncates cleaned up [ 1603.508280][ T1008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.726159][T16126] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1603.738553][ T1008] [ 1603.741038][ T1008] ====================================================== [ 1603.748155][ T1008] WARNING: possible circular locking dependency detected [ 1603.755316][ T1008] syzkaller #0 Tainted: G L [ 1603.761339][ T1008] ------------------------------------------------------ [ 1603.768366][ T1008] syz.1.15871/1008 is trying to acquire lock: [ 1603.774462][ T1008] ffff888077c58640 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 1603.782522][ T1008] [ 1603.782522][ T1008] but task is already holding lock: [ 1603.789931][ T1008] ffff888046d64c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 1603.800188][ T1008] [ 1603.800188][ T1008] which lock already depends on the new lock. [ 1603.800188][ T1008] [ 1603.810884][ T1008] [ 1603.810884][ T1008] the existing dependency chain (in reverse order) is: [ 1603.820106][ T1008] [ 1603.820106][ T1008] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1603.828844][ T1008] lock_acquire+0x1b9/0x370 [ 1603.833901][ T1008] ext4_writepages+0x21d/0x750 [ 1603.839224][ T1008] do_writepages+0x278/0x600 [ 1603.844415][ T1008] __writeback_single_inode+0x164/0x1300 [ 1603.850777][ T1008] writeback_single_inode+0x51c/0xfc0 [ 1603.856705][ T1008] write_inode_now+0x174/0x1f0 [ 1603.862021][ T1008] iput.part.0+0x62a/0x1050 [ 1603.867149][ T1008] iput+0x35/0x40 [ 1603.871325][ T1008] ext4_xattr_block_set+0x6f7/0x3660 [ 1603.877164][ T1008] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1603.883654][ T1008] __ext4_expand_extra_isize+0x346/0x480 [ 1603.890062][ T1008] __ext4_mark_inode_dirty+0x668/0x880 [ 1603.896074][ T1008] ext4_evict_inode+0x835/0x1960 [ 1603.901573][ T1008] evict+0x3c2/0xad0 [ 1603.905999][ T1008] iput.part.0+0x989/0x1050 [ 1603.911044][ T1008] iput+0x35/0x40 [ 1603.915411][ T1008] ext4_orphan_cleanup+0x71e/0x11e0 [ 1603.921164][ T1008] ext4_fill_super+0x917f/0xb470 [ 1603.926667][ T1008] get_tree_bdev_flags+0x38c/0x620 [ 1603.932419][ T1008] vfs_get_tree+0x92/0x320 [ 1603.937379][ T1008] path_mount+0x7d0/0x23d0 [ 1603.942448][ T1008] __x64_sys_mount+0x293/0x310 [ 1603.947754][ T1008] do_syscall_64+0x115/0x870 [ 1603.953023][ T1008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.959636][ T1008] [ 1603.959636][ T1008] -> #0 (sb_internal){.+.+}-{0:0}: [ 1603.967073][ T1008] check_prev_add+0xeb/0xe60 [ 1603.972233][ T1008] __lock_acquire+0x136c/0x1a40 [ 1603.977718][ T1008] lock_acquire+0x1b9/0x370 [ 1603.982762][ T1008] ext4_evict_inode+0xf1b/0x1960 [ 1603.988253][ T1008] evict+0x3c2/0xad0 [ 1603.992683][ T1008] iput.part.0+0x989/0x1050 [ 1603.997727][ T1008] iput+0x35/0x40 [ 1604.002081][ T1008] ext4_ext_migrate+0xd5b/0x2000 [ 1604.007631][ T1008] ext4_fileattr_set+0xed1/0x17d0 [ 1604.013222][ T1008] vfs_fileattr_set+0x783/0xd70 [ 1604.018628][ T1008] ioctl_setflags+0x1af/0x1e0 [ 1604.023863][ T1008] do_vfs_ioctl+0x705/0x13e0 [ 1604.028997][ T1008] __x64_sys_ioctl+0x114/0x210 [ 1604.034309][ T1008] do_syscall_64+0x115/0x870 [ 1604.039448][ T1008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.045883][ T1008] [ 1604.045883][ T1008] other info that might help us debug this: [ 1604.045883][ T1008] [ 1604.056204][ T1008] Possible unsafe locking scenario: [ 1604.056204][ T1008] [ 1604.063662][ T1008] CPU0 CPU1 [ 1604.069076][ T1008] ---- ---- [ 1604.074448][ T1008] lock(&sbi->s_writepages_rwsem); [ 1604.079671][ T1008] lock(sb_internal); [ 1604.086280][ T1008] lock(&sbi->s_writepages_rwsem); [ 1604.094101][ T1008] rlock(sb_internal); [ 1604.098303][ T1008] [ 1604.098303][ T1008] *** DEADLOCK *** [ 1604.098303][ T1008] [ 1604.106446][ T1008] 3 locks held by syz.1.15871/1008: [ 1604.111660][ T1008] #0: ffff888077c58450 (sb_writers#4){.+.+}-{0:0}, at: ioctl_setflags+0x136/0x1e0 [ 1604.121069][ T1008] #1: ffff8880351b8380 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x14d/0xd70 [ 1604.131718][ T1008] #2: ffff888046d64c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 1604.142502][ T1008] [ 1604.142502][ T1008] stack backtrace: [ 1604.148457][ T1008] CPU: 0 UID: 0 PID: 1008 Comm: syz.1.15871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1604.148511][ T1008] Tainted: [L]=SOFTLOCKUP [ 1604.148524][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1604.148546][ T1008] Call Trace: [ 1604.148561][ T1008] [ 1604.148576][ T1008] dump_stack_lvl+0x100/0x190 [ 1604.148626][ T1008] print_circular_bug.cold+0x178/0x1c7 [ 1604.148687][ T1008] check_noncircular+0x146/0x160 [ 1604.148733][ T1008] check_prev_add+0xeb/0xe60 [ 1604.148776][ T1008] __lock_acquire+0x136c/0x1a40 [ 1604.148826][ T1008] lock_acquire+0x1b9/0x370 [ 1604.148865][ T1008] ? evict+0x3c2/0xad0 [ 1604.148901][ T1008] ? __pfx___might_resched+0x10/0x10 [ 1604.148944][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.148992][ T1008] ext4_evict_inode+0xf1b/0x1960 [ 1604.149040][ T1008] ? evict+0x3c2/0xad0 [ 1604.149074][ T1008] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1604.149123][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.149169][ T1008] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1604.149225][ T1008] ? evict+0x37e/0xad0 [ 1604.149256][ T1008] ? evict+0x37e/0xad0 [ 1604.149288][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.149335][ T1008] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1604.149385][ T1008] evict+0x3c2/0xad0 [ 1604.149421][ T1008] ? __pfx_evict+0x10/0x10 [ 1604.149454][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.149504][ T1008] ? iput.part.0+0x981/0x1050 [ 1604.149538][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.149586][ T1008] iput.part.0+0x989/0x1050 [ 1604.149628][ T1008] iput+0x35/0x40 [ 1604.149661][ T1008] ext4_ext_migrate+0xd5b/0x2000 [ 1604.149715][ T1008] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1604.149759][ T1008] ? ext4_mark_iloc_dirty+0x961/0x1d50 [ 1604.149810][ T1008] ? __pfx_inode_maybe_inc_iversion+0x10/0x10 [ 1604.149863][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.149905][ T1008] ? ext4_change_inode_journal_flag+0x4a5/0x740 [ 1604.149966][ T1008] ext4_fileattr_set+0xed1/0x17d0 [ 1604.150025][ T1008] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1604.150082][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150127][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150171][ T1008] ? fileattr_fill_flags+0x363/0x3e0 [ 1604.150233][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150276][ T1008] ? ext4_fileattr_get+0x179/0x280 [ 1604.150327][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150377][ T1008] vfs_fileattr_set+0x783/0xd70 [ 1604.150434][ T1008] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1604.150490][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150535][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150578][ T1008] ? mnt_get_write_access+0x1e9/0x2f0 [ 1604.150622][ T1008] ioctl_setflags+0x1af/0x1e0 [ 1604.150678][ T1008] ? __pfx_ioctl_setflags+0x10/0x10 [ 1604.150732][ T1008] ? __pfx_futex_wait+0x10/0x10 [ 1604.150773][ T1008] do_vfs_ioctl+0x705/0x13e0 [ 1604.150817][ T1008] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1604.150864][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.150907][ T1008] ? find_held_lock+0x2b/0x80 [ 1604.150964][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.151007][ T1008] ? hook_file_ioctl_common+0x140/0x440 [ 1604.151071][ T1008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1604.151116][ T1008] ? __fget_files+0x21f/0x3d0 [ 1604.151171][ T1008] __x64_sys_ioctl+0x114/0x210 [ 1604.151219][ T1008] do_syscall_64+0x115/0x870 [ 1604.151270][ T1008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.151309][ T1008] RIP: 0033:0x7f75e1b9ce59 [ 1604.151338][ T1008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.151374][ T1008] RSP: 002b:00007f75e2a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.151406][ T1008] RAX: ffffffffffffffda RBX: 00007f75e1e15fa0 RCX: 00007f75e1b9ce59 [ 1604.151432][ T1008] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000004 [ 1604.151456][ T1008] RBP: 00007f75e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1604.151478][ T1008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.151501][ T1008] R13: 00007f75e1e16038 R14: 00007f75e1e15fa0 R15: 00007ffe1e82e838 [ 1604.151537][ T1008] [ 1604.585211][T16127] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1604.633003][ T1056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1604.639672][ T1056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1604.646839][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.647411][ T1056] vhci_hcd vhci_hcd.0: Device attached [ 1604.721281][ T1077] fido_id[1077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1604.804039][T16126] usb 5-1: Using ep0 maxpacket: 16 [ 1604.811538][T16126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.822809][T16126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1604.836433][T16126] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1604.845549][T16126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.856330][T16126] usb 5-1: config 0 descriptor?? [ 1604.867332][T16090] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1604.890891][T16088] aquacomputer_d5next 0003:0C70:F0B6.0008: item fetching failed at offset 5/7 [ 1604.912119][T16088] aquacomputer_d5next 0003:0C70:F0B6.0008: probe with driver aquacomputer_d5next failed with error -22 [ 1604.922641][T32181] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 1605.027546][T16090] usb 1-1: Using ep0 maxpacket: 16 [ 1605.034272][T16090] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.045141][T16090] usb 1-1: config 0 has no interfaces? [ 1605.053117][T16090] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1605.062358][T16090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.070406][T16090] usb 1-1: Product: syz [ 1605.074584][T16090] usb 1-1: Manufacturer: syz [ 1605.079323][T16090] usb 1-1: SerialNumber: syz [ 1605.085798][T16090] usb 1-1: config 0 descriptor?? [ 1605.118589][T16090] usb 6-1: USB disconnect, device number 20 [ 1605.303873][T16126] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input153 [ 1605.323301][T16126] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1605.368901][T16090] usb 1-1: USB disconnect, device number 13 [ 1605.376241][ T1062] vhci_hcd: connection closed [ 1605.379889][T22856] vhci_hcd vhci_hcd.0: stop threads [ 1605.397009][T22856] vhci_hcd vhci_hcd.0: release socket [ 1605.409566][T22856] vhci_hcd vhci_hcd.0: disconnect device [ 1605.433864][T32181] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1605.515344][T16088] usb 5-1: USB disconnect, device number 124 [ 1610.905849][ T1311] ieee802154 phy1 wpan1: encryption failed: -22