last executing test programs: 5m17.055584372s ago: executing program 1 (id=2481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB='\f'], 0x24}}, 0x0) 5m16.848264717s ago: executing program 1 (id=2483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x32, 0x6, 0x6a8, 0x358, 0x230, 0x358, 0x120, 0x358, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x4}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) 5m16.472169607s ago: executing program 1 (id=2490): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x59555956, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x1, 0x2, 0x1}}) 5m16.244381943s ago: executing program 1 (id=2493): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x45, 0x6188, &(0x7f0000004940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m14.885828667s ago: executing program 1 (id=2507): r0 = syz_open_procfs(0x0, &(0x7f0000000e80)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 5m13.316681677s ago: executing program 1 (id=2514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x26008040}, 0x44004) 5m12.761422761s ago: executing program 32 (id=2514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x26008040}, 0x44004) 2.637622722s ago: executing program 3 (id=6932): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\xAK-^{', 0x3a, './file0'}, 0x30) 2.34232428s ago: executing program 3 (id=6937): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000048c0)=ANY=[@ANYBLOB="340000003a0007010000000003000000017c00000400fc800c00018006000600800a000008000280040015"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.34189215s ago: executing program 5 (id=6938): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf250300090080ff"], 0x88}, 0x1, 0x7}, 0x0) 2.065325457s ago: executing program 3 (id=6943): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x3f, &(0x7f0000000040)=0xfffffffd, 0x4) 2.051626908s ago: executing program 5 (id=6944): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000001c0)=0x2) 1.819826273s ago: executing program 3 (id=6947): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x541b, &(0x7f00000001c0)={@null, 0x9, 'vxcan1\x00'}) 1.809919443s ago: executing program 5 (id=6948): pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 1.640227227s ago: executing program 2 (id=6951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.55167886s ago: executing program 3 (id=6952): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) 1.521967481s ago: executing program 5 (id=6953): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) 1.314257896s ago: executing program 3 (id=6956): creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") 1.264009887s ago: executing program 5 (id=6957): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getresuid(0x0, 0x0, 0xfffffffffffffffe) 1.184326459s ago: executing program 4 (id=6959): openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.108194921s ago: executing program 5 (id=6960): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000f06810b00000000000000000100000606000b0000000000050001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) 1.014870463s ago: executing program 2 (id=6962): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)={0xec4, 0x14, 0x1, 0x0, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xead, 0x1, "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"}]}, 0xec4}}, 0x0) 1.014285594s ago: executing program 4 (id=6963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 855.949158ms ago: executing program 4 (id=6965): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000004c0)="d8000000190081084e81f783db4cb9040a07290006007c09e8fc55a10a0015000600142603600e1208000200810004010400fd035c0461c1d67f6f94007134cf6efb8000a007a29000ceac3c2eb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f5025ccca9e00360db798262f3d40fad9e3bb04000000e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e10b00ffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000000000000000000000000000a59a8423e7ed1d5df17410a1a8c81a469d00000000002dda4d632a36a0bc000000", 0xd8}], 0x1}, 0x0) 789.555849ms ago: executing program 2 (id=6966): r0 = syz_open_dev$I2C(&(0x7f0000000240), 0x0, 0x800) ioctl$I2C_RETRIES(r0, 0x701, 0xe9d) 716.388531ms ago: executing program 0 (id=6967): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xd, '\x00', @st={0x4, [{0x2, @uvalue=0x10001}, {0x1, @svalue=0x8}, {0x1, @uvalue=0x3}, {0x3, @svalue=0x2}]}}, {0x3d, '\x00', @buffer={"5d0ee4d31cdfec16d779befc2d87fd8bda78b2b84ff56847c3b20fafc6865b9a", 0x20}, 0x3}]}) 654.950283ms ago: executing program 4 (id=6968): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r0, 0x0, 0x0) 630.904763ms ago: executing program 2 (id=6969): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e002100fdffffff0000000007000000050000000000000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 535.014456ms ago: executing program 0 (id=6970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 456.386468ms ago: executing program 4 (id=6971): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 435.131409ms ago: executing program 2 (id=6972): r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x10f, 0x86, 0x0, 0x0) 325.867011ms ago: executing program 4 (id=6973): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x23c, 0x7d, 0x0, {{0x500, 0xfb, 0x0, 0x0, {0x11}, 0x3000000, 0x0, 0x0, 0x0, 0x29, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\n\xbc\x92\xfe3iZ\xa3\xc2\xc4bmq\xfe\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\x00\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x02\x10\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\xf3\x13b@', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00@\x00\x00G\xec!\xca\x9e\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23c) 204.398524ms ago: executing program 0 (id=6974): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 204.216614ms ago: executing program 2 (id=6975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 91.859007ms ago: executing program 0 (id=6976): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) 36.061998ms ago: executing program 0 (id=6977): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000080)={[{@noprefix}, {@subsystem='perf_event'}]}) 0s ago: executing program 0 (id=6978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5}]}]}, 0x64}}, 0x0) kernel console output (not intermixed with test programs): ries 15 out of range 0-14 [ 566.634586][T15789] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:21: Failed to release dquot type 1 [ 566.646407][T16183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 566.682777][T16183] ext4 filesystem being mounted at /1009/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.729623][T16191] 9p: Unknown access argument z: -22 [ 566.757673][ T7951] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 566.851089][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 566.863151][T15782] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 566.877341][T15782] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 1 [ 566.987811][ T7951] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 567.034112][ T7951] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 567.073633][ T7951] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 567.101476][ T7951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.111906][ T7951] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.121976][ T7951] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 567.165542][ T7951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.198632][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5045'. [ 567.203678][T16185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.225830][T16185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.243480][T16185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.262312][ T7951] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 567.300480][ T14] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 567.423485][T16214] netlink: 'syz.0.5048': attribute type 1 has an invalid length. [ 567.443010][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5048'. [ 567.473106][ T7951] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 567.500459][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 567.507867][ T14] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 567.511558][ T7951] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 567.557121][ T14] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.606835][ T14] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 567.625951][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.650875][ T14] usb 6-1: Product: syz [ 567.661917][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.677148][ T14] usb 6-1: Manufacturer: syz [ 567.683965][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.686410][ T7951] usb 4-1: USB disconnect, device number 86 [ 567.691158][ C1] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 567.691187][T16219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.718591][ T7951] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 567.720100][ T14] usb 6-1: SerialNumber: syz [ 567.735029][ T7951] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 567.747207][ T7951] mos7720 4-1:1.0: device disconnected [ 567.764514][ T14] usb 6-1: config 0 descriptor?? [ 567.991358][ T7952] usb 6-1: USB disconnect, device number 12 [ 568.185706][T16236] loop4: detected capacity change from 0 to 164 [ 568.223300][T16236] Unable to read rock-ridge attributes [ 568.250263][T16236] Unable to read rock-ridge attributes [ 568.273517][T16236] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 568.623484][T16248] AppArmor: change_hat: Invalid input '0' [ 569.103685][T16262] loop5: detected capacity change from 0 to 4096 [ 569.142557][T16262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.151039][T16269] loop2: detected capacity change from 0 to 64 [ 569.177114][T16262] EXT4-fs (loop5): Test dummy encryption mode enabled [ 569.226106][T16262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 569.234536][T16262] System zones: 0-5 [ 569.241142][T16275] loop4: detected capacity change from 0 to 64 [ 569.327628][T16262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 569.606647][T10426] EXT4-fs (loop5): unmounting filesystem. [ 569.622898][T16284] loop4: detected capacity change from 0 to 256 [ 569.897056][T16293] device bond3 entered promiscuous mode [ 569.929408][T16293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.295158][T16308] loop4: detected capacity change from 0 to 1024 [ 570.429563][T16308] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 570.813306][T16328] loop2: detected capacity change from 0 to 1024 [ 570.909946][T16328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 570.965529][T16328] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.5104: Attempting to read directory block (623) that is past i_size (638464) [ 571.070846][T16328] EXT4-fs (loop2): Remounting filesystem read-only [ 571.114354][T16341] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 571.252422][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 571.435217][T16351] device ip6tnl0 entered promiscuous mode [ 571.633259][T16359] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 571.705791][T16365] loop2: detected capacity change from 0 to 64 [ 572.236420][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5128'. [ 572.242489][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5130'. [ 572.288131][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5128'. [ 572.860013][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 572.860031][ T26] audit: type=1326 audit(1787535847.063:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.2.5143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 572.970174][ T26] audit: type=1326 audit(1787535847.105:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.2.5143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 573.175019][ T14] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 573.394038][ T14] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 573.407809][ T14] usb 5-1: config 0 has no interface number 0 [ 573.425317][ T14] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.468270][T16432] loop3: detected capacity change from 0 to 512 [ 573.472761][ T14] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 573.491841][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.501726][T16432] /dev/loop3: Can't open blockdev [ 573.512891][ T14] usb 5-1: Product: syz [ 573.520688][ T14] usb 5-1: Manufacturer: syz [ 573.542789][ T14] usb 5-1: SerialNumber: syz [ 573.559683][ T14] usb 5-1: config 0 descriptor?? [ 573.618316][ T14] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 573.851562][ C0] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 573.974360][T16447] overlayfs: unrecognized mount option "obj_type=@}\{" or missing value [ 574.016698][ T4323] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discverxzzl]! [ 574.044072][T16440] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discverxzzl]" [ 574.067746][ T7952] usb 5-1: USB disconnect, device number 81 [ 574.094766][ T7952] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 574.513731][T16462] device veth0_macvtap left promiscuous mode [ 574.734279][T16469] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.5171'. [ 574.765449][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.794434][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.801634][T16471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.308122][T16489] loop5: detected capacity change from 0 to 256 [ 576.018224][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5196'. [ 576.047187][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5196'. [ 576.132952][T16519] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 576.477754][T13659] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discverxzzl]! [ 576.536719][T16526] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discverxzzl]" [ 576.731601][T16543] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 576.899607][T16546] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5210'. [ 577.028466][T16554] loop5: detected capacity change from 0 to 512 [ 577.084838][T16554] EXT4-fs: Ignoring removed i_version option [ 577.091623][T16554] EXT4-fs: Ignoring removed bh option [ 577.191069][T16554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 577.203101][ T14] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 577.226935][T16554] ext4 filesystem being mounted at /514/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 577.403591][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 577.422015][ T14] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 577.430177][ T14] usb 3-1: config 0 has no interface number 0 [ 577.470598][ T14] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.497287][ T14] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 577.519147][ T14] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 577.536037][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.577971][ T14] usb 3-1: Product: syz [ 577.586262][ T4317] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 577.592325][ T14] usb 3-1: Manufacturer: syz [ 577.598631][ T14] usb 3-1: SerialNumber: syz [ 577.618696][ T14] usb 3-1: config 0 descriptor?? [ 577.641768][T16573] ip_tables: iptables: counters copy to user failed while replacing table [ 577.647752][ T14] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 577.773005][ T4317] usb 6-1: Using ep0 maxpacket: 8 [ 577.786201][ T4317] usb 6-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 577.808192][ T4317] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 577.845383][ T14] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 577.854808][ T14] quatech2: probe of 3-1:0.51 failed with error -90 [ 577.866715][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.906701][ T4317] usb 6-1: config 0 descriptor?? [ 577.958500][ T4317] usb 6-1: bad CDC descriptors [ 577.970628][ T4317] usb 6-1: bad CDC descriptors [ 577.991498][ T4317] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 578.017090][ T4317] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 578.032284][ T4317] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 578.085691][ T4725] usb 3-1: USB disconnect, device number 85 [ 578.111614][ T4317] usb 6-1: USB disconnect, device number 13 [ 578.306287][ T14] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 578.488784][ T14] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 578.510356][ T14] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 578.533721][ T14] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 578.559046][ T14] usb 5-1: config 220 has no interface number 2 [ 578.574249][ T14] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 578.627167][ T14] usb 5-1: config 220 interface 0 has no altsetting 0 [ 578.639743][ T14] usb 5-1: config 220 interface 76 has no altsetting 0 [ 578.640935][T16604] loop0: detected capacity change from 0 to 4096 [ 578.658539][ T14] usb 5-1: config 220 interface 1 has no altsetting 0 [ 578.689879][ T14] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 578.714584][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.742245][ T14] usb 5-1: Product: syz [ 578.758441][ T14] usb 5-1: Manufacturer: syz [ 578.763558][ T14] usb 5-1: SerialNumber: syz [ 578.783987][T10426] EXT4-fs (loop5): unmounting filesystem. [ 578.990131][ T14] usb 5-1: selecting invalid altsetting 0 [ 579.005509][ T14] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 579.022652][ T14] usb 5-1: No valid video chain found. [ 579.053472][ T14] usb 5-1: selecting invalid altsetting 0 [ 579.066685][ T14] usbtest: probe of 5-1:220.1 failed with error -22 [ 579.087180][ T14] usb 5-1: USB disconnect, device number 82 [ 579.245939][T16620] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5244'. [ 580.143972][T16651] unsupported nlmsg_type 40 [ 580.709325][T16675] program syz.0.5270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.042856][T16690] netlink: 'syz.3.5277': attribute type 11 has an invalid length. [ 581.090587][T16690] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5277'. [ 581.316664][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5281'. [ 581.372357][T16702] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 581.403948][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'. [ 581.429141][ T7952] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 581.592020][T16706] xt_hashlimit: max too large, truncated to 1048576 [ 581.609543][T16712] loop5: detected capacity change from 0 to 256 [ 581.609746][ T7952] usb 1-1: Using ep0 maxpacket: 32 [ 581.639787][ T7952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.667116][ T7952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.707579][ T7952] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 581.758196][ T7952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.790618][ T7952] usb 1-1: config 0 descriptor?? [ 581.816895][ T7952] hub 1-1:0.0: USB hub found [ 582.019560][ T7952] hub 1-1:0.0: 26 ports detected [ 582.024957][ T7952] hub 1-1:0.0: insufficient power available to use all downstream ports [ 582.216384][ T7952] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 582.234239][ T7952] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 582.274329][ T7952] usbhid 1-1:0.0: can't add hid device: -71 [ 582.286907][ T7952] usbhid: probe of 1-1:0.0 failed with error -71 [ 582.362925][ T7952] usb 1-1: USB disconnect, device number 88 [ 582.902531][T16754] loop0: detected capacity change from 0 to 8 [ 583.022362][T16754] SQUASHFS error: Unable to read inode 0xa7 [ 583.633412][ T26] audit: type=1326 audit(1787535858.375:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 583.693178][ T26] audit: type=1326 audit(1787535858.375:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 583.761833][ T26] audit: type=1326 audit(1787535858.375:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 583.886159][ T26] audit: type=1326 audit(1787535858.375:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 583.959752][ T26] audit: type=1326 audit(1787535858.375:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 584.065298][T16794] netlink: 'syz.0.5329': attribute type 2 has an invalid length. [ 584.113766][ T26] audit: type=1326 audit(1787535858.375:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 584.130191][T16794] netlink: 'syz.0.5329': attribute type 11 has an invalid length. [ 584.182896][ T26] audit: type=1326 audit(1787535858.375:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 584.206443][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5329'. [ 584.286265][ T26] audit: type=1326 audit(1787535858.375:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16777 comm="syz.4.5321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 584.745105][T16818] xt_ipcomp: unknown flags 1D [ 584.900043][T16824] loop4: detected capacity change from 0 to 256 [ 585.240467][T16836] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5349'. [ 585.440129][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5352'. [ 585.457379][T16842] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5352'. [ 586.580303][T16887] [U] [ 586.583090][T16887] [U] [ 586.585827][T16887] [U] [ 586.588546][T16887] [U] [ 586.675540][T16887] [U] [ 586.678313][T16887] [U] [ 586.681012][T16887] [U] [ 586.683711][T16887] [U] [ 586.756812][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5378'. [ 586.759200][T16887] [U] [ 586.768629][T16887] [U] [ 586.771362][T16887] [U] [ 586.843906][T16885] [U] [ 587.284022][T16906] loop2: detected capacity change from 0 to 4096 [ 587.529647][T16917] loop5: detected capacity change from 0 to 256 [ 587.682506][T16917] FAT-fs (loop5): Directory bread(block 64) failed [ 587.703885][T16917] FAT-fs (loop5): Directory bread(block 65) failed [ 587.729888][T16917] FAT-fs (loop5): Directory bread(block 66) failed [ 587.775333][T16917] FAT-fs (loop5): Directory bread(block 67) failed [ 587.790191][T16917] FAT-fs (loop5): Directory bread(block 68) failed [ 587.827927][T16917] FAT-fs (loop5): Directory bread(block 69) failed [ 587.835108][T16917] FAT-fs (loop5): Directory bread(block 70) failed [ 587.853810][T16917] FAT-fs (loop5): Directory bread(block 71) failed [ 587.884661][T16917] FAT-fs (loop5): Directory bread(block 72) failed [ 587.891268][T16917] FAT-fs (loop5): Directory bread(block 73) failed [ 587.967770][T16926] program syz.4.5394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.078999][T16930] loop0: detected capacity change from 0 to 512 [ 588.111993][T16930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 588.149773][T16930] System zones: 1-12 [ 588.165279][T16930] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5396: invalid indirect mapped block 1819239214 (level 1) [ 588.180069][T16930] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5396: bg 0: block 361: padding at end of block bitmap is not set [ 588.195454][T16930] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 588.208451][T16930] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.5396: attempt to clear invalid blocks 33619980 len 1 [ 588.224043][T16933] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5397'. [ 588.252134][T16930] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5396: invalid indirect mapped block 1819239214 (level 0) [ 588.273253][T16930] EXT4-fs (loop0): 1 truncate cleaned up [ 588.279311][T16930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 588.306917][T16930] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.5396: Directory hole found for htree index block 0 [ 588.439402][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 588.519515][T16940] loop3: detected capacity change from 0 to 256 [ 588.621360][ T4619] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 588.823886][T16950] loop4: detected capacity change from 0 to 512 [ 588.881057][T16953] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5405'. [ 588.918559][T16950] EXT4-fs: Ignoring removed i_version option [ 588.982547][T16958] loop2: detected capacity change from 0 to 256 [ 588.992982][T16950] EXT4-fs: Ignoring removed bh option [ 589.056874][T16950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 589.084550][T16950] ext4 filesystem being mounted at /1022/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.419251][ T14] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 589.617340][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 589.625450][ T14] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 589.663843][ T14] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 589.682924][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.730616][ T14] usb 5-1: config 0 descriptor?? [ 589.765686][ T14] usb 5-1: bad CDC descriptors [ 589.777253][ T14] usb 5-1: bad CDC descriptors [ 589.784112][ T14] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 589.810586][ T14] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 589.829812][ T14] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 589.931150][T16983] loop2: detected capacity change from 0 to 512 [ 589.973288][ T14] usb 5-1: USB disconnect, device number 83 [ 590.013448][T16983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 590.110731][T16968] loop3: detected capacity change from 0 to 32768 [ 590.112451][T16983] ext4 filesystem being mounted at /1084/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.396885][ T4380] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (4380) [ 590.413541][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 590.609743][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 590.666727][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5427'. [ 591.079579][ T4323] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 591.089455][T17016] binder: Bad value for 'stats' [ 591.163593][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5436'. [ 591.270877][ T4323] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 591.306384][ T4323] usb 5-1: config 0 has no interface number 0 [ 591.322952][ T4323] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 591.382165][ T4323] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 591.445418][ T4323] usb 5-1: config 0 interface 255 has no altsetting 0 [ 591.452280][ T4323] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 591.517266][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.558624][ T4323] usb 5-1: config 0 descriptor?? [ 591.595483][ T4323] cp210x 5-1:0.255: cp210x converter detected [ 591.977787][ T4323] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 592.007277][ T4323] usb 5-1: cp210x converter now attached to ttyUSB0 [ 592.031456][ T4323] usb 5-1: USB disconnect, device number 84 [ 592.051936][T17047] loop5: detected capacity change from 0 to 4096 [ 592.099477][ T4323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 592.161253][ T4323] cp210x 5-1:0.255: device disconnected [ 592.197249][T17047] ntfs: volume version 3.1. [ 593.050857][T17083] loop0: detected capacity change from 0 to 256 [ 593.263956][T17089] tmpfs: Bad value for 'mpol' [ 593.330156][T17093] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5471'. [ 593.516600][T17097] IPv6: NLM_F_REPLACE set, but no existing node found! [ 593.618895][T17101] loop3: detected capacity change from 0 to 512 [ 593.655299][T17101] EXT4-fs: Ignoring removed i_version option [ 593.661370][T17101] EXT4-fs: Ignoring removed bh option [ 593.694246][T17101] /dev/loop3: Can't open blockdev [ 593.974673][T17111] device erspan0 entered promiscuous mode [ 594.031166][ T5914] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 594.219004][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 594.228836][ T5914] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 594.268908][ T5914] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 594.288659][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.312177][ T5914] usb 4-1: config 0 descriptor?? [ 594.365214][ T5914] usb 4-1: bad CDC descriptors [ 594.372735][ T5914] usb 4-1: bad CDC descriptors [ 594.373075][ T5914] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 594.373095][ T5914] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 594.373119][ T5914] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 594.560582][ T14] usb 4-1: USB disconnect, device number 87 [ 594.658995][T17139] netlink: 'syz.5.5494': attribute type 1 has an invalid length. [ 594.700337][T17139] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5494'. [ 595.020650][T17151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.180768][T17158] loop4: detected capacity change from 0 to 2048 [ 595.205284][T17158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.793229][T17179] netlink: 'syz.3.5514': attribute type 3 has an invalid length. [ 595.810981][ T26] audit: type=1326 audit(1787535871.168:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 595.816205][T17177] loop0: detected capacity change from 0 to 1024 [ 595.852454][ T26] audit: type=1326 audit(1787535871.168:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 595.946199][T17182] loop2: detected capacity change from 0 to 512 [ 595.976601][ T26] audit: type=1326 audit(1787535871.168:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 596.032141][T17177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 596.121360][T17191] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 596.149741][ T26] audit: type=1326 audit(1787535871.210:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 596.228155][T17182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 596.253320][ T26] audit: type=1326 audit(1787535871.210:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 596.265151][T17182] ext4 filesystem being mounted at /1106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.339998][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 596.428415][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 596.462272][T17201] loop4: detected capacity change from 0 to 64 [ 596.479389][ T26] audit: type=1326 audit(1787535871.210:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 596.624608][ T26] audit: type=1326 audit(1787535871.210:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 596.731241][ T26] audit: type=1326 audit(1787535871.210:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.5515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 596.922246][T17215] loop0: detected capacity change from 0 to 64 [ 596.961894][T17217] loop4: detected capacity change from 0 to 16 [ 597.027176][T17215] hfs: keylen 40 too large [ 597.053446][T17217] erofs: (device loop4): mounted with root inode @ nid 36. [ 597.097402][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5533'. [ 597.131413][T17217] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 597.164626][T17221] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5533'. [ 597.181518][T17217] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 597.205903][T17217] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 597.576963][T17233] loop2: detected capacity change from 0 to 256 [ 598.007294][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5545'. [ 598.031983][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5545'. [ 598.041850][T17246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5545'. [ 598.052187][T17249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5544'. [ 598.159943][T17220] loop5: detected capacity change from 0 to 32768 [ 598.205098][T17220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5532 (17220) [ 598.286102][T17220] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.319993][T17220] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 598.329471][T17220] BTRFS info (device loop5): force clearing of disk cache [ 598.336743][T17220] BTRFS info (device loop5): force zlib compression, level 3 [ 598.372117][T17220] BTRFS info (device loop5): disabling free space tree [ 598.385731][T17220] BTRFS info (device loop5): max_inline at 0 [ 598.391993][T17220] BTRFS info (device loop5): enabling free space tree [ 598.415927][T17220] BTRFS info (device loop5): using free space tree [ 598.868460][T17220] BTRFS info (device loop5): enabling ssd optimizations [ 599.052014][ T4317] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 599.090064][T10426] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 599.244253][ T4317] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 599.266335][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.277366][ T4317] usb 1-1: config 0 has no interface number 0 [ 599.284997][ T4317] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 599.336440][ T4317] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 599.375933][ T4317] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.398878][ T4317] usb 1-1: config 0 interface 52 has no altsetting 0 [ 599.447077][ T4317] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 599.476115][ T4317] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 599.485768][ T4619] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4619) [ 599.513523][ T4317] usb 1-1: Product: syz [ 599.524677][ T4317] usb 1-1: Manufacturer: syz [ 599.537826][ T4317] usb 1-1: SerialNumber: syz [ 599.571605][ T4317] usb 1-1: config 0 descriptor?? [ 599.797449][ T4317] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 599.814213][ T4317] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 599.924185][T17314] loop3: detected capacity change from 0 to 512 [ 599.968043][T17314] /dev/loop3: Can't open blockdev [ 600.001378][ T4317] usb 1-1: USB disconnect, device number 89 [ 600.261852][T17326] netlink: 'syz.3.5576': attribute type 6 has an invalid length. [ 600.368353][T17331] netlink: 'syz.2.5577': attribute type 3 has an invalid length. [ 600.788352][T17344] loop0: detected capacity change from 0 to 1024 [ 600.861386][T17351] loop4: detected capacity change from 0 to 512 [ 600.868894][T17351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.904604][T17344] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.5583: lblock 2 mapped to illegal pblock 2 (length 1) [ 600.930683][T17351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 600.960759][T17351] System zones: 0-2, 18-18, 34-34 [ 600.976637][T17351] EXT4-fs (loop4): orphan cleanup on readonly fs [ 600.994317][T17344] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 601.016533][T17351] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.5587: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 601.041520][T17344] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.5583: lblock 0 mapped to illegal pblock 48 (length 1) [ 601.062935][T17361] loop3: detected capacity change from 0 to 256 [ 601.066543][T17358] loop2: detected capacity change from 0 to 8 [ 601.070200][T17361] exfat: Deprecated parameter 'namecase' [ 601.081740][T17361] /dev/loop3: Can't open blockdev [ 601.108996][T17351] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.5587: Bad quota inode: 4, type: 1 [ 601.127531][T17358] squashfs image failed sanity check [ 601.130882][T17351] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 601.140619][T17344] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 601.166145][T17351] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 601.173393][T17351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 601.233940][T17344] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.5583: Failed to acquire dquot type 0 [ 601.246790][T17351] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 601.255679][T17344] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 601.294435][T17351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 601.294677][T17344] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.5583: mark_inode_dirty error [ 601.319539][T17351] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 601.415963][T17344] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 601.463468][T17344] EXT4-fs (loop0): 1 orphan inode deleted [ 601.469283][T17344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 601.485101][T15768] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.558256][T15768] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 601.600492][T15768] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 601.631742][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 601.728309][T17344] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm syz.0.5583: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.807791][T17344] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 601.838743][T17377] loop5: detected capacity change from 0 to 256 [ 601.845382][T17375] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.5596'. [ 601.878342][T17375] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.5596'. [ 601.974890][T17381] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5598'. [ 601.987467][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 601.993367][ T4272] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 602.040196][ T4272] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 602.110240][ T4272] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 602.356194][T17391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5601'. [ 602.502081][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5606'. [ 602.514067][T17398] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.629074][ T26] audit: type=1326 audit(1787535878.331:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17402 comm="syz.5.5609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 602.743751][ T26] audit: type=1326 audit(1787535878.331:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17402 comm="syz.5.5609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 602.844666][ T26] audit: type=1326 audit(1787535878.331:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17402 comm="syz.5.5609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 602.946058][ T26] audit: type=1326 audit(1787535878.331:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17402 comm="syz.5.5609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 603.027901][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5616'. [ 603.209790][T17424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5619'. [ 603.334424][T17422] loop5: detected capacity change from 0 to 4096 [ 603.437776][T17422] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 603.490814][T17422] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 603.567841][T17422] ntfs: volume version 3.1. [ 603.594829][T17438] loop2: detected capacity change from 0 to 1024 [ 603.660651][T17438] EXT4-fs (loop2): barriers disabled [ 603.682857][T17438] JBD2: no valid journal superblock found [ 603.714182][T17438] EXT4-fs (loop2): error loading journal [ 604.069945][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5631'. [ 604.115876][T17448] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5631'. [ 604.328665][T17458] trusted_key: encrypted_key: insufficient parameters specified [ 604.649876][T17473] loop0: detected capacity change from 0 to 24 [ 605.207355][T17491] netlink: 'syz.0.5652': attribute type 1 has an invalid length. [ 605.261512][T17491] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5652'. [ 605.305452][T17497] loop2: detected capacity change from 0 to 64 [ 605.740280][T17479] loop4: detected capacity change from 0 to 32768 [ 605.810353][T17479] JBD2: Ignoring recovery information on journal [ 605.837351][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 605.843812][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.852347][ T1276] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 605.935969][ T4317] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 605.976383][T17479] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 606.077758][T17519] loop5: detected capacity change from 0 to 512 [ 606.143418][T17519] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.5665: inode has both inline data and extents flags [ 606.165255][ T4317] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 606.173493][ T4317] usb 3-1: config 0 has no interface number 0 [ 606.189241][ T4317] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 606.189554][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 606.214415][ T4317] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 606.223609][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 606.231827][ T4317] usb 3-1: Manufacturer: syz [ 606.236475][ T4317] usb 3-1: SerialNumber: syz [ 606.260124][ T4317] usb 3-1: config 0 descriptor?? [ 606.293286][T17519] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.5665: couldn't read orphan inode 15 (err -117) [ 606.373080][T17525] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5668'. [ 606.390749][T17519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 606.594748][T10426] EXT4-fs (loop5): unmounting filesystem. [ 606.669624][ T4317] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 606.709116][ T4317] usb 3-1: USB disconnect, device number 86 [ 607.156468][T17550] @0: renamed from virt_wifi0 [ 608.323142][T17601] loop2: detected capacity change from 0 to 64 [ 608.382822][ T4478] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 608.584519][ T4478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.601694][ T4478] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 608.630094][ T4478] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 608.665521][ T4478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.695423][ T4478] usb 4-1: config 0 descriptor?? [ 608.965980][T17621] loop4: detected capacity change from 0 to 64 [ 609.107967][ T4478] Bluetooth: Can't get state to change to load configuration err [ 609.142060][ T4478] Bluetooth: Loading sysconfig file failed [ 609.166784][ T4478] ath3k: probe of 4-1:0.0 failed with error -16 [ 609.187327][ T4478] usb 4-1: USB disconnect, device number 88 [ 609.732516][T17645] loop0: detected capacity change from 0 to 256 [ 610.239700][T17666] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5734'. [ 610.283604][T17666] netlink: 'syz.5.5734': attribute type 1 has an invalid length. [ 610.503707][T17677] loop5: detected capacity change from 0 to 8 [ 610.628684][T17682] ip_tables: iptables: counters copy to user failed while replacing table [ 611.280621][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.335962][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.890969][T17718] netlink: 'syz.5.5761': attribute type 2 has an invalid length. [ 611.905947][ T4725] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 612.126515][ T4725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 612.151723][ T4725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.185834][ T4725] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 612.229012][ T4725] usb 1-1: config 1 interface 0 has no altsetting 0 [ 612.245841][ T4725] usb 1-1: config 1 interface 0 has no altsetting 1 [ 612.264683][ T4725] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 612.293907][ T4725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.323823][ T4725] usb 1-1: Product: syz [ 612.335428][ T4725] usb 1-1: Manufacturer: syz [ 612.340087][ T4725] usb 1-1: SerialNumber: syz [ 612.374670][T17738] loop4: detected capacity change from 0 to 64 [ 612.426401][T17738] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 612.432180][T17740] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5773'. [ 612.593764][ T4725] smsusb:smsusb_probe: board id=8, interface number 0 [ 612.620681][ T4725] usb 1-1: selecting invalid altsetting 0 [ 612.626490][ T4725] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 612.657336][ T4725] smsusb: probe of 1-1:1.0 failed with error -22 [ 612.709546][ T4725] usb 1-1: USB disconnect, device number 90 [ 612.845548][T17751] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 612.845548][T17751] SȘȞZ6' [ 613.145910][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5782'. [ 613.234179][T17767] CIFS: VFS: Malformed UNC in devname [ 613.303980][T17770] IPv6: Can't replace route, no match found [ 613.598577][T17780] MTDSB: Device #1 doesn't appear to exist [ 613.598577][T17780] [ 613.907569][T17793] loop2: detected capacity change from 0 to 8 [ 613.995879][T17793] SQUASHFS error: Failed to read block 0x2fc: -5 [ 614.034908][T17793] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 614.079736][T17793] SQUASHFS error: Unable to read directory block [247:26] [ 614.350896][T17812] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5804'. [ 615.458712][T17841] loop5: detected capacity change from 0 to 8192 [ 615.504053][T17841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 615.517689][T17841] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 615.527574][T17841] REISERFS (device loop5): using ordered data mode [ 615.534281][T17841] reiserfs: using flush barriers [ 615.542584][T17841] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 615.582558][ T4478] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 615.641843][T17841] REISERFS (device loop5): checking transaction log (loop5) [ 615.697403][T17841] REISERFS (device loop5): Using tea hash to sort names [ 615.795513][ T4478] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 615.824936][ T4478] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 615.854192][ T4478] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 615.891572][T17830] loop3: detected capacity change from 0 to 32768 [ 615.898562][ T4478] usb 5-1: config 220 has no interface number 2 [ 615.927092][ T4478] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 615.980331][ T4478] usb 5-1: config 220 interface 0 has no altsetting 0 [ 615.997321][ T4478] usb 5-1: config 220 interface 76 has no altsetting 0 [ 616.009113][ T4478] usb 5-1: config 220 interface 1 has no altsetting 0 [ 616.073465][ T4478] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 616.093232][ T4478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.113030][ T4478] usb 5-1: Product: syz [ 616.119914][ T4478] usb 5-1: Manufacturer: syz [ 616.132866][ T4478] usb 5-1: SerialNumber: syz [ 616.149518][T17830] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.190575][T17830] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 616.218439][T17868] tmpfs: Bad value for 'nr_blocks' [ 616.223908][T17830] BTRFS info (device loop3): force clearing of disk cache [ 616.266304][T17830] BTRFS info (device loop3): force zlib compression, level 3 [ 616.273795][T17830] BTRFS info (device loop3): disabling free space tree [ 616.339677][T17830] BTRFS info (device loop3): max_inline at 0 [ 616.361431][T17830] BTRFS info (device loop3): enabling free space tree [ 616.382061][ T4478] usb 5-1: selecting invalid altsetting 0 [ 616.388321][ T4478] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 616.418575][T17830] BTRFS info (device loop3): using free space tree [ 616.442020][ T4478] usb 5-1: No valid video chain found. [ 616.497003][ T4478] usb 5-1: selecting invalid altsetting 0 [ 616.504150][ T4478] usbtest: probe of 5-1:220.1 failed with error -22 [ 616.520085][ T4478] usb 5-1: USB disconnect, device number 85 [ 616.664939][T17887] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5838'. [ 616.743578][T17896] netlink: 'syz.5.5839': attribute type 10 has an invalid length. [ 616.820760][T17830] BTRFS info (device loop3): enabling ssd optimizations [ 616.830305][T17896] device vlan0 left promiscuous mode [ 616.923516][T17896] team0: Port device vlan0 added [ 616.929362][T15768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.992392][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 617.041412][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5842'. [ 617.489636][ T4619] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4619) [ 617.675366][T17917] netlink: 'syz.2.5849': attribute type 1 has an invalid length. [ 618.082532][T17930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5854'. [ 618.486777][T17938] loop5: detected capacity change from 0 to 1024 [ 618.621434][T17942] sctp: [Deprecated]: syz.2.5860 (pid 17942) Use of int in max_burst socket option deprecated. [ 618.621434][T17942] Use struct sctp_assoc_value instead [ 618.694356][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 618.694375][ T26] audit: type=1326 audit(1787535895.209:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17943 comm="syz.0.5859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ca99e0d9 code=0x7ffc0000 [ 618.854812][ T26] audit: type=1326 audit(1787535895.209:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17943 comm="syz.0.5859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ca99e0d9 code=0x7ffc0000 [ 618.939283][ T26] audit: type=1326 audit(1787535895.220:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17943 comm="syz.0.5859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f79ca99e0d9 code=0x7ffc0000 [ 619.070944][ T26] audit: type=1326 audit(1787535895.220:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17943 comm="syz.0.5859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ca99e0d9 code=0x7ffc0000 [ 619.188966][ T26] audit: type=1326 audit(1787535895.220:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17943 comm="syz.0.5859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ca99e0d9 code=0x7ffc0000 [ 620.470219][T17974] loop2: detected capacity change from 0 to 32768 [ 620.537966][T17974] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 620.573533][T17993] netlink: 'syz.5.5881': attribute type 12 has an invalid length. [ 620.592785][T17974] JBD2: Ignoring recovery information on journal [ 620.673142][T17974] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 620.904113][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 621.517133][T18021] loop5: detected capacity change from 0 to 256 [ 621.906887][T18029] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 622.216265][T18042] loop3: detected capacity change from 0 to 2048 [ 622.232883][T18010] loop2: detected capacity change from 0 to 32768 [ 622.239604][ T7952] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 622.260538][T18042] /dev/loop3: Can't open blockdev [ 622.342352][T18010] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 622.393185][T18010] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 622.432838][ T7952] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 622.460544][T18010] BTRFS info (device loop2): using free space tree [ 622.467791][ T7952] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.492202][ T7952] usb 1-1: config 2 interface 0 has no altsetting 0 [ 622.508267][ T7952] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 622.606976][ T7952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.666906][ T7952] usb 1-1: Product: syz [ 622.671206][ T7952] usb 1-1: Manufacturer: syz [ 622.677030][T18059] tmpfs: Bad value for 'mpol' [ 622.695923][ T7952] usb 1-1: SerialNumber: syz [ 622.938144][ T7952] ims_pcu: probe of 1-1:2.0 failed with error -22 [ 622.945851][T18010] BTRFS info (device loop2): enabling ssd optimizations [ 622.971209][ T7952] usb 1-1: USB disconnect, device number 91 [ 623.150949][ T4279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 623.222264][T18084] netlink: 'syz.3.5909': attribute type 1 has an invalid length. [ 623.702800][ T7952] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 623.759599][T18049] loop5: detected capacity change from 0 to 32768 [ 623.819803][T18049] [ 623.819803][T18049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.819803][T18049] [ 623.894635][ T7952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 623.928157][ T7952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 623.985437][ T7952] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 624.017264][ T7952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.025335][ T7952] usb 5-1: Product: syz [ 624.082880][ T7952] usb 5-1: Manufacturer: syz [ 624.087564][ T7952] usb 5-1: SerialNumber: syz [ 624.113940][T10426] [ 624.113940][T10426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.113940][T10426] [ 624.125584][ T7952] usb 5-1: config 0 descriptor?? [ 624.133528][T10426] [ 624.133528][T10426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.133528][T10426] [ 624.149939][T18087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.160968][ T7952] usb 5-1: ucan: probing device on interface #0 [ 624.167283][ T7952] usb 5-1: ucan: invalid endpoint configuration [ 624.192774][ T7952] usb 5-1: ucan: probe failed; try to update the device firmware [ 624.421501][ T4725] usb 5-1: USB disconnect, device number 86 [ 624.646520][T18090] loop3: detected capacity change from 0 to 32768 [ 625.000425][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5924'. [ 625.884888][T18155] loop2: detected capacity change from 0 to 256 [ 625.988062][T18155] FAT-fs (loop2): Directory bread(block 64) failed [ 625.997694][T18155] FAT-fs (loop2): Directory bread(block 65) failed [ 626.004372][T18155] FAT-fs (loop2): Directory bread(block 66) failed [ 626.069560][T18155] FAT-fs (loop2): Directory bread(block 67) failed [ 626.091390][ T4476] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 626.117295][T18155] FAT-fs (loop2): Directory bread(block 68) failed [ 626.124817][T18155] FAT-fs (loop2): Directory bread(block 69) failed [ 626.165218][T18155] FAT-fs (loop2): Directory bread(block 70) failed [ 626.190475][T18155] FAT-fs (loop2): Directory bread(block 71) failed [ 626.212202][T18155] FAT-fs (loop2): Directory bread(block 72) failed [ 626.230718][T18155] FAT-fs (loop2): Directory bread(block 73) failed [ 626.296035][ T4476] usb 4-1: config 1 has an invalid interface number: 82 but max is 1 [ 626.329923][ T4476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.350246][ T4476] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 626.406073][ T4476] usb 4-1: config 1 has no interface number 2 [ 626.424751][ T4476] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.453802][ T4476] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.500824][ T4476] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.535442][ T4476] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.570476][ T4476] usb 4-1: config 1 interface 82 has no altsetting 0 [ 626.590741][ T4476] usb 4-1: config 1 interface 1 has no altsetting 0 [ 626.637128][ T4476] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.675674][ T4476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.711063][ T4476] usb 4-1: Product: syz [ 626.725191][ T4476] usb 4-1: Manufacturer: syz [ 626.742796][ T4476] usb 4-1: SerialNumber: syz [ 626.775006][ T4476] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 626.810779][ T4476] cdc_ncm 4-1:1.0: bind() failure [ 626.976534][T18158] loop5: detected capacity change from 0 to 32768 [ 627.005724][T18158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5938 (18158) [ 627.096263][T18158] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 627.150122][T18158] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 627.186321][T18158] BTRFS info (device loop5): using free space tree [ 627.241706][ T7952] usb 4-1: USB disconnect, device number 89 [ 627.528625][T18158] BTRFS info (device loop5): enabling ssd optimizations [ 627.741397][T10426] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.104667][T18223] loop2: detected capacity change from 0 to 256 [ 628.136520][T18223] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.185207][T18223] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 628.262337][T18223] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 628.800424][T18241] netlink: 'syz.4.5963': attribute type 21 has an invalid length. [ 628.843009][T18241] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5963'. [ 628.882144][ T26] audit: type=1326 audit(1787535905.912:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 628.906516][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.987955][ T26] audit: type=1326 audit(1787535905.944:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.082081][T18250] loop3: detected capacity change from 0 to 1024 [ 629.089521][T18250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 629.144805][ T26] audit: type=1326 audit(1787535905.944:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.173353][T18254] netlink: 'syz.2.5967': attribute type 8 has an invalid length. [ 629.178944][T18250] /dev/loop3: Can't open blockdev [ 629.236911][ T26] audit: type=1326 audit(1787535905.944:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.261117][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.367335][ T26] audit: type=1326 audit(1787535905.944:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.462650][ T4730] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 629.470293][ T26] audit: type=1326 audit(1787535905.944:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.494476][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.543687][T18270] loop4: detected capacity change from 0 to 256 [ 629.595585][ T26] audit: type=1326 audit(1787535905.944:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.616193][T18270] FAT-fs (loop4): Directory bread(block 64) failed [ 629.619688][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.662580][ T4730] usb 6-1: Using ep0 maxpacket: 16 [ 629.669539][ T4730] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 629.685935][T18270] FAT-fs (loop4): Directory bread(block 65) failed [ 629.702481][ T4730] usb 6-1: config 0 has no interface number 0 [ 629.708823][ T4730] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 629.729073][T18270] FAT-fs (loop4): Directory bread(block 66) failed [ 629.729079][ T26] audit: type=1326 audit(1787535905.944:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.5.5964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 629.780395][ T4730] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 629.811210][ T4730] usb 6-1: config 0 interface 41 has no altsetting 0 [ 629.826812][ T4730] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 629.844037][T18270] FAT-fs (loop4): Directory bread(block 67) failed [ 629.861033][T18270] FAT-fs (loop4): Directory bread(block 68) failed [ 629.877926][ T4730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.908538][T18270] FAT-fs (loop4): Directory bread(block 69) failed [ 629.921473][ T4730] usb 6-1: Product: syz [ 629.927002][ T4730] usb 6-1: Manufacturer: syz [ 629.935082][T18270] FAT-fs (loop4): Directory bread(block 70) failed [ 629.945546][ T4730] usb 6-1: SerialNumber: syz [ 629.972385][T18270] FAT-fs (loop4): Directory bread(block 71) failed [ 629.986419][ T4730] usb 6-1: config 0 descriptor?? [ 629.992428][T18259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.014172][T18259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.021598][T18270] FAT-fs (loop4): Directory bread(block 72) failed [ 630.042590][T18270] FAT-fs (loop4): Directory bread(block 73) failed [ 630.272934][T18259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.305711][T18259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.534471][ T4730] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 630.574578][ T4730] usb 6-1: USB disconnect, device number 14 [ 631.157056][ T8889] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 631.269260][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5993'. [ 631.379647][ T8889] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 631.409723][ T8889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.442240][ T8889] usb 5-1: Product: syz [ 631.446520][ T8889] usb 5-1: Manufacturer: syz [ 631.480921][ T8889] usb 5-1: SerialNumber: syz [ 631.507412][ T8889] usb 5-1: config 0 descriptor?? [ 631.543202][ T8889] hub 5-1:0.0: bad descriptor, ignoring hub [ 631.575958][ T8889] hub: probe of 5-1:0.0 failed with error -5 [ 631.742582][ T8889] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 631.789550][ T8889] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 631.823516][ T8889] dib0700: firmware download failed at 7 with -22 [ 631.890450][ T8889] usb 5-1: USB disconnect, device number 87 [ 632.718738][T18366] netlink: 'syz.3.6011': attribute type 11 has an invalid length. [ 633.403204][T18394] netlink: 'syz.2.6025': attribute type 1 has an invalid length. [ 633.431271][T18394] netlink: 'syz.2.6025': attribute type 2 has an invalid length. [ 633.482285][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6025'. [ 633.498066][T18399] SET target dimension over the limit! [ 633.991764][T18422] netlink: 'syz.4.6038': attribute type 2 has an invalid length. [ 634.027356][T18422] netlink: 'syz.4.6038': attribute type 8 has an invalid length. [ 634.060518][T18422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6038'. [ 634.338561][T18430] loop3: detected capacity change from 0 to 4096 [ 634.346054][T18430] /dev/loop3: Can't open blockdev [ 634.426633][T18435] IPv6: sit1: Disabled Multicast RS [ 634.962311][T18456] delete_channel: no stack [ 634.984279][ T4730] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 635.192573][ T4730] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 635.217452][ T4730] usb 1-1: config 0 has no interface number 0 [ 635.236743][ T4730] usb 1-1: config 0 interface 41 has no altsetting 0 [ 635.253192][ T4730] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 635.268592][ T4730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.299376][ T4730] usb 1-1: Product: syz [ 635.307689][ T4730] usb 1-1: Manufacturer: syz [ 635.317947][ T7952] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 635.346243][ T4730] usb 1-1: SerialNumber: syz [ 635.367382][ T4730] usb 1-1: config 0 descriptor?? [ 635.500263][ T7952] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 635.516874][ T7952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.552629][ T7952] usb 3-1: config 0 descriptor?? [ 635.571349][ T4730] CoreChips: probe of 1-1:0.41 failed with error -71 [ 635.584431][ T7952] cp210x 3-1:0.0: cp210x converter detected [ 635.602297][ T4730] usb 1-1: USB disconnect, device number 92 [ 635.781874][ T7952] usb 3-1: cp210x converter now attached to ttyUSB0 [ 635.992097][ T7952] usb 3-1: USB disconnect, device number 87 [ 636.028260][ T7952] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 636.051077][ T7952] cp210x 3-1:0.0: device disconnected [ 636.444577][T18502] comedi comedi1: fl512: I/O port conflict (0x2fc,16) [ 636.568122][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 636.743599][T18488] loop3: detected capacity change from 0 to 32768 [ 636.823097][ T4619] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 636.983823][ T8889] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 637.172878][ T8889] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 637.195871][ T8889] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 637.221652][ T8889] usb 3-1: Product: syz [ 637.231064][ T8889] usb 3-1: SerialNumber: syz [ 637.246494][ T8889] usb 3-1: config 0 descriptor?? [ 637.267434][ T4725] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 637.464171][ T8889] hso 3-1:0.0: Can't find BULK IN endpoint [ 637.483617][ T4725] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 637.503372][ T4725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.532861][ T4725] usb 6-1: Product: syz [ 637.542266][ T4725] usb 6-1: Manufacturer: syz [ 637.549315][ T4725] usb 6-1: SerialNumber: syz [ 637.554728][ T7952] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 637.567800][ T4725] usb 6-1: config 0 descriptor?? [ 637.576810][ T4725] ch341 6-1:0.0: ch341-uart converter detected [ 637.596978][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6095'. [ 637.606371][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6095'. [ 637.626085][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6095'. [ 637.673957][ T14] usb 3-1: USB disconnect, device number 88 [ 637.770966][ T7952] usb 4-1: config index 0 descriptor too short (expected 897, got 27) [ 637.781005][ T7952] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 637.795472][ T7952] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 637.806223][ T7952] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 637.818898][ T7952] usb 4-1: config 2 has no interface number 0 [ 637.855305][ T7952] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 637.871074][ T7952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.883096][ T7952] usb 4-1: Product: syz [ 637.887320][ T7952] usb 4-1: Manufacturer: syz [ 637.894820][ T7952] usb 4-1: SerialNumber: syz [ 637.965820][ T4725] usb 6-1: failed to send control message: -71 [ 637.974167][ T4725] ch341-uart: probe of ttyUSB0 failed with error -71 [ 637.994525][ T4725] usb 6-1: USB disconnect, device number 15 [ 638.010075][ T4725] ch341 6-1:0.0: device disconnected [ 638.118669][ T7952] cdc_ncm 4-1:2.1: CDC Union missing and no IAD found [ 638.125530][ T7952] cdc_ncm 4-1:2.1: bind() failure [ 638.161942][ T7952] usb 4-1: no audio or video endpoints found [ 638.200231][ T7952] usb 4-1: USB disconnect, device number 90 [ 638.598236][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6109'. [ 639.249214][T18591] netlink: 'syz.0.6122': attribute type 10 has an invalid length. [ 639.275376][T18591] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6122'. [ 639.307015][ T4730] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 639.515964][ T4730] usb 6-1: Using ep0 maxpacket: 32 [ 639.523033][ T4730] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.565076][ T4730] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.608118][ T4730] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 639.637932][ T4730] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 639.686005][ T4730] usb 6-1: Product: syz [ 639.690725][ T4730] usb 6-1: Manufacturer: syz [ 639.723934][ T4730] hub 6-1:4.0: USB hub found [ 639.927729][ T4730] hub 6-1:4.0: 2 ports detected [ 640.128266][ T4730] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 640.134693][ T4730] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 640.206427][ T4730] usb 6-1: USB disconnect, device number 16 [ 640.278231][T18619] loop2: detected capacity change from 0 to 4096 [ 640.325186][T18619] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 640.355420][T18629] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.416062][T18619] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 640.437688][T18619] ntfs3: loop2: Failed to load $Extend. [ 641.558918][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6161'. [ 641.818635][T18685] netlink: 'syz.3.6167': attribute type 3 has an invalid length. [ 642.241872][T18703] x_tables: unsorted underflow at hook 4 [ 642.827204][T18726] netlink: 'syz.2.6189': attribute type 21 has an invalid length. [ 642.828643][T18731] loop4: detected capacity change from 0 to 256 [ 642.846345][T18726] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6189'. [ 642.871964][T18731] exfat: Deprecated parameter 'namecase' [ 642.893045][T18731] exfat: Deprecated parameter 'namecase' [ 642.907549][T18726] netlink: 'syz.2.6189': attribute type 5 has an invalid length. [ 642.942022][T18726] netlink: 'syz.2.6189': attribute type 6 has an invalid length. [ 642.969692][T18731] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 642.998650][T18726] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6189'. [ 643.328612][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6199'. [ 643.354810][T18746] loop5: detected capacity change from 0 to 512 [ 643.395832][T18746] EXT4-fs: inline encryption not supported [ 643.450691][T18746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.468870][T18749] netlink: 'syz.0.6200': attribute type 7 has an invalid length. [ 643.494764][T18746] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 643.543224][T18746] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 643.588530][T18746] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 643.608167][T18757] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 643.653434][T18746] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 643.667137][T18746] EXT4-fs (loop5): orphan cleanup on readonly fs [ 643.725367][T18746] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6198: bg 0: block 34: padding at end of block bitmap is not set [ 643.810208][ T7952] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 643.838721][T18746] Quota error (device loop5): write_blk: dquota write failed [ 643.855776][T18746] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 643.896537][T18746] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.6198: Failed to acquire dquot type 1 [ 643.920585][T18746] EXT4-fs (loop5): 1 truncate cleaned up [ 643.944973][T18746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 643.972994][T18746] EXT4-fs (loop5): unmounting filesystem. [ 644.019307][ T7952] usb 5-1: Using ep0 maxpacket: 8 [ 644.026780][ T7952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.051995][ T7952] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 644.070437][ T7952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.083562][ T7952] usb 5-1: Product: syz [ 644.092913][ T7952] usb 5-1: Manufacturer: syz [ 644.101051][ T7952] usb 5-1: SerialNumber: syz [ 644.113277][ T7952] usb 5-1: config 0 descriptor?? [ 644.138998][ T7952] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 644.165209][ T7952] usb 5-1: selecting invalid altsetting 1 [ 644.259803][T18773] netlink: 'syz.5.6211': attribute type 1 has an invalid length. [ 644.268123][T18773] netlink: 216 bytes leftover after parsing attributes in process `syz.5.6211'. [ 644.277737][T18773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6211'. [ 644.318030][ T8889] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 644.424839][ T26] audit: type=1326 audit(1787535922.224:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.5.6213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 644.485261][ T26] audit: type=1326 audit(1787535922.224:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.5.6213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 644.554290][ T8889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.574529][ T26] audit: type=1326 audit(1787535922.276:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.5.6213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 644.587145][ T14] usb 5-1: USB disconnect, device number 88 [ 644.602424][ T8889] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 644.636690][ T8889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 644.656014][ T26] audit: type=1326 audit(1787535922.276:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.5.6213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 644.689727][ T8889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.720439][ T8889] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.738733][ T26] audit: type=1326 audit(1787535922.276:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.5.6213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 644.765080][T18780] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 644.771946][ T8889] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.780229][ T8889] usb 4-1: Manufacturer: syz [ 644.808445][ T8889] usb 4-1: config 0 descriptor?? [ 645.029631][ T8889] usb 4-1: USB disconnect, device number 91 [ 645.327405][ T7952] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 645.511080][ T7952] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.547046][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'. [ 645.551579][ T7952] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.586142][ T7952] usb 6-1: config 1 has no interface number 0 [ 645.592520][ T8889] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 645.621863][ T7952] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 645.641473][ T7952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.663685][ T7952] usb 6-1: Product: syz [ 645.673868][ T7952] usb 6-1: Manufacturer: syz [ 645.683471][ T7952] usb 6-1: SerialNumber: syz [ 645.801723][ T8889] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 645.828433][ T8889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.881196][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 646.495168][ T128] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 646.681101][ T128] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 646.710108][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.732201][ T128] usb 3-1: Product: syz [ 646.750308][ T128] usb 3-1: Manufacturer: syz [ 646.768351][ T128] usb 3-1: SerialNumber: syz [ 646.793005][ T128] usb 3-1: config 0 descriptor?? [ 646.818031][ T128] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 647.029341][ T8889] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 647.074731][ T7952] usb 6-1: 1:0 : does not exist [ 647.081924][ T7952] usb 6-1: 1:2 : does not exist [ 647.087650][ T8889] usb 1-1: USB disconnect, device number 93 [ 647.104214][ T7952] usb 6-1: 1:3 : does not exist [ 647.109709][ T7952] usb 6-1: BAAD HEADPHONE p_chmask mismatch [ 647.163358][ T7952] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 647.209314][ T128] usb 3-1: USB disconnect, device number 89 [ 647.217304][ T7952] usb 6-1: USB disconnect, device number 17 [ 647.250932][T18863] overlayfs: missing 'workdir' [ 647.382665][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.444990][T18870] loop4: detected capacity change from 0 to 2048 [ 647.459327][ T4619] udevd[4619]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 647.498029][T18870] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 647.570655][T18871] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 647.765410][T18877] netlink: 'syz.0.6261': attribute type 10 has an invalid length. [ 647.826819][T18877] device virt_wifi0 entered promiscuous mode [ 647.828339][T18879] loop4: detected capacity change from 0 to 16 [ 647.863039][T18877] team0: Port device virt_wifi0 added [ 647.899357][T18879] erofs: (device loop4): mounted with root inode @ nid 36. [ 648.150034][T18889] netlink: 'syz.0.6267': attribute type 28 has an invalid length. [ 648.176854][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6267'. [ 648.489932][T18906] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6275'. [ 648.809944][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 648.828191][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 648.875823][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 648.911092][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 648.951433][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 648.982424][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 649.012569][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 649.061906][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6281'. [ 649.483499][T18945] loop3: detected capacity change from 0 to 512 [ 649.658056][T18950] loop2: detected capacity change from 0 to 16 [ 649.691507][T18950] erofs: (device loop2): mounted with root inode @ nid 36. [ 649.918980][T18960] autofs4:pid:18960:autofs_fill_super: called with bogus options [ 650.242000][T18976] CIFS: VFS: Unable to allocate memory for devname [ 651.440272][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 651.466166][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 651.485668][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 651.958655][ T4725] vxcan1 speed is unknown, defaulting to 1000 [ 651.977630][T19022] infiniband syz2: set active [ 652.001112][T19022] infiniband syz2: added vxcan1 [ 652.037473][T19041] loop3: detected capacity change from 0 to 2048 [ 652.075629][T19041] /dev/loop3: Can't open blockdev [ 652.425302][T19022] RDS/IB: syz2: added [ 652.513200][T19022] smc: adding ib device syz2 with port count 1 [ 652.520303][T19022] smc: ib device syz2 port 1 has pnetid [ 652.549230][ T7952] vxcan1 speed is unknown, defaulting to 1000 [ 652.577626][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 653.018928][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 653.055071][ T4725] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 653.118127][T19050] loop3: detected capacity change from 0 to 32768 [ 653.144586][T19071] loop4: detected capacity change from 0 to 256 [ 653.229375][T19050] XFS (loop3): Mounting V5 Filesystem [ 653.286782][ T4725] usb 6-1: Using ep0 maxpacket: 8 [ 653.313945][ T4725] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 653.381987][ T4725] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 653.454442][ T4725] usb 6-1: Product: syz [ 653.458776][ T4725] usb 6-1: Manufacturer: syz [ 653.474470][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 653.481038][ T4725] usb 6-1: SerialNumber: syz [ 653.508413][ T4725] usb 6-1: config 0 descriptor?? [ 653.528591][T19050] XFS (loop3): Ending clean mount [ 653.542936][ T4725] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 653.710614][ T4274] XFS (loop3): Unmounting Filesystem [ 653.870422][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 653.924962][ T4725] gspca_zc3xx: reg_r err -71 [ 653.935760][ T4725] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 653.962166][ T4725] usb 6-1: USB disconnect, device number 18 [ 654.088258][T19091] __nla_validate_parse: 73 callbacks suppressed [ 654.088278][T19091] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6363'. [ 654.137362][T19093] netlink: 'syz.2.6364': attribute type 13 has an invalid length. [ 654.303237][T19022] vxcan1 speed is unknown, defaulting to 1000 [ 654.521801][T19101] loop2: detected capacity change from 0 to 2048 [ 654.625824][T19104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.674640][T19101] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 654.677744][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.701301][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.746266][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.782915][T19101] Remounting filesystem read-only [ 654.786482][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.837290][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.902760][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.941293][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 654.995906][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 655.019993][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6370'. [ 655.058722][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 655.067277][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 655.080316][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.091347][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.099015][T19119] netlink: 'syz.2.6375': attribute type 1 has an invalid length. [ 655.108644][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.124014][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.155343][T19121] loop4: detected capacity change from 0 to 512 [ 655.255071][T19121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 655.264366][T19121] ext4 filesystem being mounted at /1225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.334013][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 655.645618][ T26] audit: type=1326 audit(1787535934.019:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.2.6380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 655.705401][ T26] audit: type=1326 audit(1787535934.050:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.2.6380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 655.705451][ T26] audit: type=1326 audit(1787535934.050:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.2.6380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 655.705488][ T26] audit: type=1326 audit(1787535934.050:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.2.6380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 655.817898][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.333668][T19157] netlink: 'syz.5.6392': attribute type 1 has an invalid length. [ 656.637275][T19168] dns_resolver: Unsupported content type (254) [ 656.891629][ T4323] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 656.938137][T19176] loop3: detected capacity change from 0 to 2048 [ 657.092558][ T4323] usb 3-1: Using ep0 maxpacket: 32 [ 657.111103][ T4323] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 657.148690][ T4323] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 657.181888][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.200766][ T4323] usb 3-1: Product: syz [ 657.205092][ T4323] usb 3-1: Manufacturer: syz [ 657.215687][ T128] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 657.223479][ T4323] usb 3-1: SerialNumber: syz [ 657.242384][ T4323] usb 3-1: config 0 descriptor?? [ 657.260011][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 657.274719][ T4323] hub 3-1:0.0: bad descriptor, ignoring hub [ 657.290498][ T4323] hub: probe of 3-1:0.0 failed with error -5 [ 657.322032][ T4323] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 657.415512][ T128] usb 6-1: Using ep0 maxpacket: 16 [ 657.430516][ T128] usb 6-1: unable to get BOS descriptor or descriptor too short [ 657.474427][ T128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.526825][ T128] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 657.576783][ T128] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 657.634382][ T128] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 657.681933][ T128] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 657.722893][ T128] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 657.744271][ T4323] usb 3-1: USB disconnect, device number 90 [ 657.750367][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 657.754661][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.803981][ T128] usb 6-1: Product: syz [ 657.825214][ T128] usb 6-1: Manufacturer: syz [ 657.829883][ T128] usb 6-1: SerialNumber: syz [ 658.072106][ T128] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 658.135978][ T128] usb 6-1: USB disconnect, device number 19 [ 658.273637][T19218] CIFS mount error: No usable UNC path provided in device string! [ 658.273637][T19218] [ 658.307490][T19218] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.416809][ T4619] udevd[4619]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.796470][ T4725] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 659.005410][ T4725] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 659.050658][ T4725] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 659.062876][ T4725] usb 5-1: Product: syz [ 659.067191][ T4725] usb 5-1: SerialNumber: syz [ 659.124019][ T4725] usb 5-1: config 0 descriptor?? [ 659.232276][T19247] loop2: detected capacity change from 0 to 4096 [ 659.247494][T19255] program syz.3.6440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.274967][T19247] ntfs3: loop2: ino=3, Correct links count -> 2. [ 659.443686][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 659.561978][ T4725] usb 5-1: USB disconnect, device number 89 [ 659.649292][T19257] nvme_fabrics: missing parameter 'nqn=%s' [ 659.744169][T19264] rdma_rxe: rxe_register_device failed with error -23 [ 659.798211][T19264] rdma_rxe: failed to add vxcan1 [ 659.863116][T19271] __nla_validate_parse: 86 callbacks suppressed [ 659.863135][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6447'. [ 660.645738][T19300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6462'. [ 660.769393][T19305] IPv6: NLM_F_CREATE should be specified when creating new route [ 660.985860][ T8889] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 661.018595][T19316] x_tables: unsorted underflow at hook 2 [ 661.078050][T19318] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6470'. [ 661.088419][T19318] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 661.182267][ T8889] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.195095][T19322] trusted_key: encrypted_key: keylen parameter is missing [ 661.203317][ T8889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.211684][ T4730] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 661.220089][ T8889] usb 1-1: Product: syz [ 661.232594][ T8889] usb 1-1: Manufacturer: syz [ 661.242438][ T8889] usb 1-1: SerialNumber: syz [ 661.254815][T19325] ax25_connect(): syz.2.6473 uses autobind, please contact jreuter@yaina.de [ 661.277898][ T8889] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.325392][ T8889] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.406782][ T4730] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 661.433487][ T4730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.561664][T19334] netlink: 'syz.2.6477': attribute type 9 has an invalid length. [ 661.571068][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 661.697813][T19338] loop5: detected capacity change from 0 to 164 [ 661.702290][T19337] kAFS: unable to lookup cell '(,c' [ 661.751769][T19338] rock: directory entry would overflow storage [ 661.776052][T19338] rock: sig=0x66, size=4, remaining=3 [ 661.812946][T19338] rock: directory entry would overflow storage [ 661.818687][ T128] usb 1-1: USB disconnect, device number 94 [ 661.843043][T19338] rock: sig=0x66, size=4, remaining=3 [ 662.212260][ T26] audit: type=1326 audit(1787535940.909:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19347 comm="syz.3.6484" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7abf9e0d9 code=0x0 [ 662.338042][ T8889] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 662.347430][ T8889] ath9k_htc: Failed to initialize the device [ 662.361133][ T128] usb 1-1: ath9k_htc: USB layer deinitialized [ 662.387075][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6486'. [ 662.391720][T19354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6487'. [ 662.437563][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6487'. [ 662.642635][ T4730] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 662.688545][T19363] sctp: [Deprecated]: syz.3.6491 (pid 19363) Use of int in maxseg socket option. [ 662.688545][T19363] Use struct sctp_assoc_value instead [ 662.709794][ T4730] usb 5-1: USB disconnect, device number 90 [ 662.758040][T19365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6492'. [ 663.772018][T19398] loop4: detected capacity change from 0 to 256 [ 663.865230][T19398] FAT-fs (loop4): Directory bread(block 64) failed [ 663.914861][T19398] FAT-fs (loop4): Directory bread(block 65) failed [ 663.943970][T19398] FAT-fs (loop4): Directory bread(block 66) failed [ 663.994724][T19398] FAT-fs (loop4): Directory bread(block 67) failed [ 664.023448][T19398] FAT-fs (loop4): Directory bread(block 68) failed [ 664.030512][T19398] FAT-fs (loop4): Directory bread(block 69) failed [ 664.068625][T19398] FAT-fs (loop4): Directory bread(block 70) failed [ 664.112014][T19398] FAT-fs (loop4): Directory bread(block 71) failed [ 664.184230][T19398] FAT-fs (loop4): Directory bread(block 72) failed [ 664.211070][T19398] FAT-fs (loop4): Directory bread(block 73) failed [ 664.267044][T19415] program syz.0.6512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.321943][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.328344][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.339678][ T1276] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 665.029599][T19439] 0x000000000000-0x000000020000 : "" [ 665.118701][T19439] ftl_cs: FTL header not found. [ 665.737010][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 665.779171][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 665.817661][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 665.874450][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 665.907621][T19472] loop4: detected capacity change from 0 to 512 [ 665.949037][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 665.982748][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.050707][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.086896][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.107449][T19472] FAT-fs (loop4): FAT read failed (blocknr 128) [ 666.137934][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.166431][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.203613][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.255171][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 666.294815][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.342293][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.383391][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.394907][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.403774][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.409686][T19486] loop4: detected capacity change from 0 to 764 [ 666.411476][T19466] infiniband syz2: set active [ 666.434929][T19466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.448449][T19466] infiniband syz2: set active [ 666.455053][T19486] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 666.506195][T19490] loop5: detected capacity change from 0 to 256 [ 666.561734][T19490] FAT-fs (loop5): Directory bread(block 64) failed [ 666.581025][T19490] FAT-fs (loop5): Directory bread(block 65) failed [ 666.607932][T19490] FAT-fs (loop5): Directory bread(block 66) failed [ 666.629864][T19490] FAT-fs (loop5): Directory bread(block 67) failed [ 666.646610][T19490] FAT-fs (loop5): Directory bread(block 68) failed [ 666.670976][ T7951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 666.698849][ T128] vxcan1 speed is unknown, defaulting to 1000 [ 666.707251][ T8889] vxcan1 speed is unknown, defaulting to 1000 [ 666.736535][T19490] FAT-fs (loop5): Directory bread(block 69) failed [ 666.743221][T19490] FAT-fs (loop5): Directory bread(block 70) failed [ 666.780259][T19490] FAT-fs (loop5): Directory bread(block 71) failed [ 666.819858][T19490] FAT-fs (loop5): Directory bread(block 72) failed [ 666.842637][T19490] FAT-fs (loop5): Directory bread(block 73) failed [ 667.188982][ T128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 667.740122][T19527] netlink: 'syz.5.6567': attribute type 49 has an invalid length. [ 667.912041][T19531] loop2: detected capacity change from 0 to 256 [ 668.016773][T19531] FAT-fs (loop2): Directory bread(block 64) failed [ 668.043725][T19531] FAT-fs (loop2): Directory bread(block 65) failed [ 668.050467][T19531] FAT-fs (loop2): Directory bread(block 66) failed [ 668.068675][T19531] FAT-fs (loop2): Directory bread(block 67) failed [ 668.079073][T19531] FAT-fs (loop2): Directory bread(block 68) failed [ 668.085694][T19531] FAT-fs (loop2): Directory bread(block 69) failed [ 668.125424][T19531] FAT-fs (loop2): Directory bread(block 70) failed [ 668.152650][T19531] FAT-fs (loop2): Directory bread(block 71) failed [ 668.165313][T19531] FAT-fs (loop2): Directory bread(block 72) failed [ 668.171907][T19531] FAT-fs (loop2): Directory bread(block 73) failed [ 668.221629][ T7951] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 668.345643][T19541] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 668.412488][ T7951] usb 5-1: Using ep0 maxpacket: 16 [ 668.433814][ T7951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 668.504961][ T7951] usb 5-1: config 251 has an invalid interface number: 33 but max is 0 [ 668.535979][ T7951] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 668.565167][ T7951] usb 5-1: config 251 has no interface number 0 [ 668.581683][ T7951] usb 5-1: config 251 interface 33 has no altsetting 0 [ 668.604364][ T7951] usb 5-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 668.631449][ T7951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.660430][ T7951] usb 5-1: Product: syz [ 668.664669][ T7951] usb 5-1: Manufacturer: syz [ 668.669294][ T7951] usb 5-1: SerialNumber: syz [ 668.803952][T19555] loop3: detected capacity change from 0 to 2048 [ 668.842524][T19558] ipt_REJECT: ECHOREPLY no longer supported. [ 668.908470][ T7951] qmi_wwan: probe of 5-1:251.33 failed with error -22 [ 668.946006][ T7951] usb 5-1: USB disconnect, device number 91 [ 669.478723][T19578] delete_channel: no stack [ 669.555621][T19580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 669.632005][T19583] loop4: detected capacity change from 0 to 8 [ 669.666431][T19583] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 669.701780][ T4619] udevd[4619]: incorrect cramfs checksum on /dev/loop4 [ 669.736850][T19583] cramfs: Error -3 while decompressing! [ 669.743132][T19583] cramfs: ffffffff96da4228(18)->ffff88804943d000(4096) [ 669.767507][T19583] cramfs: Error -3 while decompressing! [ 669.773254][T19583] cramfs: ffffffff96da4228(18)->ffff88804943d000(4096) [ 669.823002][ T26] audit: type=1800 audit(1787535948.901:369): pid=19583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6593" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 669.829190][T19556] loop5: detected capacity change from 0 to 32768 [ 669.920490][T19591] netlink: 'syz.3.6598': attribute type 12 has an invalid length. [ 670.076802][T19556] XFS (loop5): Mounting V5 Filesystem [ 670.226080][T19608] loop3: detected capacity change from 0 to 1024 [ 670.246729][T19556] XFS (loop5): Ending clean mount [ 670.296982][T19608] /dev/loop3: Can't open blockdev [ 670.514219][T10426] XFS (loop5): Unmounting Filesystem [ 670.543462][T19614] loop2: detected capacity change from 0 to 512 [ 670.565059][T19614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 670.847754][T19614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 670.858562][T19614] ext4 filesystem being mounted at /1340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.034976][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 671.587765][T19650] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 671.654506][T19651] device geneve2 entered promiscuous mode [ 671.871858][T19659] __nla_validate_parse: 80 callbacks suppressed [ 671.871881][T19659] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6626'. [ 672.300650][T19672] loop3: detected capacity change from 0 to 4096 [ 672.355447][T19672] /dev/loop3: Can't open blockdev [ 672.414098][ T4619] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.739056][T19692] 0x000000000000-0x000000020000 : "" [ 672.799004][T19692] ftl_cs: FTL header not found. [ 672.966942][ T26] audit: type=1326 audit(1787535952.210:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.6646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 673.065914][ T26] audit: type=1326 audit(1787535952.210:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.6646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 673.188137][ T26] audit: type=1326 audit(1787535952.210:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.6646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64e99e0d9 code=0x7ffc0000 [ 673.484292][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6653'. [ 674.467535][ T8889] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 674.650643][ T8889] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 674.661210][ T8889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.685371][ T8889] usb 3-1: config 0 has no interface number 0 [ 674.702966][ T8889] usb 3-1: config 0 interface 2 has no altsetting 0 [ 674.747896][ T8889] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 674.771578][ T8889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.789310][ T8889] usb 3-1: Product: syz [ 674.795275][ T8889] usb 3-1: Manufacturer: syz [ 674.799984][ T8889] usb 3-1: SerialNumber: syz [ 674.840280][ T8889] usb 3-1: config 0 descriptor?? [ 675.157382][T19769] loop3: detected capacity change from 0 to 4096 [ 675.279967][ T7951] usb 3-1: USB disconnect, device number 91 [ 675.306420][ T7951] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 675.340315][T19777] cgroup: name respecified [ 675.791579][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6690'. [ 676.473138][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6703'. [ 676.889525][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6710'. [ 677.084165][T19840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6714'. [ 677.141227][T19840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6714'. [ 677.162585][T19805] loop4: detected capacity change from 0 to 32768 [ 677.179023][T19843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.215079][T19843] device batadv_slave_0 entered promiscuous mode [ 677.327706][T19805] XFS (loop4): Mounting V5 Filesystem [ 677.561077][T19805] XFS (loop4): Ending clean mount [ 677.790008][ T4278] XFS (loop4): Unmounting Filesystem [ 678.249727][T19881] loop5: detected capacity change from 0 to 16 [ 678.289147][T19881] erofs: (device loop5): mounted with root inode @ nid 36. [ 678.339356][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 678.376049][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 678.400373][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 678.437112][T19881] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 678.467545][T19881] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 678.497657][T19881] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 678.523804][ T26] audit: type=1800 audit(1787535958.029:373): pid=19881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6732" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 679.723158][ T7951] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 679.824354][T19932] loop2: detected capacity change from 0 to 4096 [ 679.853824][T19932] ntfs3: Invalid value for gid. [ 679.909569][ T7951] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 679.938121][ T7951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.972134][ T7951] usb 5-1: config 0 descriptor?? [ 680.053180][T19939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6757'. [ 680.101593][T19943] netlink: 'syz.0.6759': attribute type 3 has an invalid length. [ 680.113195][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6758'. [ 680.128131][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6758'. [ 680.141233][T19943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6759'. [ 680.162411][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6758'. [ 680.187741][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6758'. [ 680.206788][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6758'. [ 680.231963][T19942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 680.278933][T19942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 680.330123][T19942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.368450][ T7951] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 680.383700][ T7951] hackrf 5-1:0.0: Could not detect board [ 680.395293][ T7951] hackrf: probe of 5-1:0.0 failed with error -71 [ 680.413779][ T7951] usb 5-1: USB disconnect, device number 92 [ 681.394276][ T26] audit: type=1400 audit(1787535961.053:374): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=19988 comm="syz.0.6778" [ 681.553206][T19997] netlink: 'syz.2.6781': attribute type 10 has an invalid length. [ 681.640583][T19997] team0: Port device wlan1 added [ 682.630616][T20033] netlink: 'syz.3.6800': attribute type 21 has an invalid length. [ 682.672643][T20033] __nla_validate_parse: 174 callbacks suppressed [ 682.672663][T20033] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6800'. [ 682.745509][T20033] netlink: 'syz.3.6800': attribute type 5 has an invalid length. [ 682.812439][T20033] netlink: 'syz.3.6800': attribute type 6 has an invalid length. [ 682.827107][T20033] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6800'. [ 682.885161][T20042] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6804'. [ 682.891378][T20044] loop2: detected capacity change from 0 to 256 [ 682.953472][T20044] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 683.071300][T20047] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6805'. [ 683.214580][T20052] loop4: detected capacity change from 0 to 2048 [ 683.304022][T20052] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 683.467410][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 683.826718][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.847166][T20071] loop4: detected capacity change from 0 to 256 [ 683.915778][T20071] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 684.074954][T20079] loop2: detected capacity change from 0 to 256 [ 684.132010][T20079] exfat: Deprecated parameter 'utf8' [ 684.137464][T20079] exfat: Deprecated parameter 'namecase' [ 684.154014][T20082] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 20082 comm: syz.0.6821) [ 684.170783][T20079] exfat: Deprecated parameter 'namecase' [ 684.176927][ T26] audit: type=1800 audit(1787535963.973:375): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6821" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=80332 res=0 errno=0 [ 684.223804][T20079] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 684.782311][ T7951] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 684.999675][ T7951] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 685.026581][ T7951] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.058580][ T7951] usb 4-1: config 1 interface 0 has no altsetting 0 [ 685.085154][ T7951] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 685.107702][ T7951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.134361][ T7951] usb 4-1: Product: syz [ 685.146477][ T7951] usb 4-1: Manufacturer: syz [ 685.159091][ T7951] usb 4-1: SerialNumber: syz [ 685.379119][ T7951] vmk80xx 4-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 685.411999][ T7951] usb 4-1: USB disconnect, device number 92 [ 685.719813][T20108] loop2: detected capacity change from 0 to 32764 [ 685.813096][T20108] syz.2.6833: attempt to access beyond end of device [ 685.813096][T20108] loop2: rw=4096, sector=32767, nr_sectors = 1 limit=32764 [ 685.833516][T20108] XFS (loop2): last sector read failed [ 685.841567][T20117] loop4: detected capacity change from 0 to 32768 [ 685.940322][ T7951] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 686.047809][T20117] JBD2: Ignoring recovery information on journal [ 686.079632][T20141] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.087439][T20141] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.094854][T20141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.121313][ T7951] usb 1-1: Using ep0 maxpacket: 8 [ 686.148610][ T7951] usb 1-1: config 31 has an invalid interface number: 197 but max is 0 [ 686.191426][ T7951] usb 1-1: config 31 has no interface number 0 [ 686.211950][T20117] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 686.233871][ T7951] usb 1-1: config 31 interface 197 has no altsetting 0 [ 686.282119][T20117] ocfs2: Unmounting device (7,4) on (node local) [ 686.293101][ T7951] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 686.341883][ T7951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.370944][ T7951] usb 1-1: Product: syz [ 686.375176][ T7951] usb 1-1: Manufacturer: syz [ 686.415825][ T7951] usb 1-1: SerialNumber: syz [ 686.506272][ T26] audit: type=1326 audit(1787535966.431:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.2.6848" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 686.568785][ T26] audit: type=1326 audit(1787535966.452:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.2.6848" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 686.596855][ T4725] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 686.664489][ T7951] gspca_main: etoms-2.14.0 probing 102c:6151 [ 686.708964][ T26] audit: type=1326 audit(1787535966.452:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.2.6848" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 686.748308][ T7951] usb 1-1: USB disconnect, device number 95 [ 686.801031][ T4725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.835489][ T4725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 686.854760][ T26] audit: type=1326 audit(1787535966.452:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.2.6848" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce87b9e0d9 code=0x7ffc0000 [ 686.902334][ T4725] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 686.940448][ T4725] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.974797][ T4725] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 687.020940][ T4725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.412426][T20171] loop4: detected capacity change from 0 to 164 [ 687.470054][ T4725] usb 4-1: USB disconnect, device number 93 [ 688.063989][ T7951] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 688.105699][T20197] netlink: 'syz.5.6873': attribute type 1 has an invalid length. [ 688.128935][T20197] netlink: 'syz.5.6873': attribute type 2 has an invalid length. [ 688.268099][ T7951] usb 5-1: Using ep0 maxpacket: 8 [ 688.276561][ T7951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.308203][ T7951] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 688.337705][ T7951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.367528][ T7951] usb 5-1: Product: syz [ 688.386744][ T7951] usb 5-1: Manufacturer: syz [ 688.399147][ T7951] usb 5-1: SerialNumber: syz [ 688.424789][ T7951] usb 5-1: config 0 descriptor?? [ 688.455049][ T7951] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 688.678997][ T7951] usb 5-1: USB disconnect, device number 93 [ 688.813848][T20231] loop3: detected capacity change from 0 to 64 [ 689.025185][ T4725] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 689.034788][ T4730] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 689.263533][ T4725] usb 6-1: Using ep0 maxpacket: 32 [ 689.279596][ T4730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.299199][ T4725] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.320197][ T4730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.330743][ T4730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 689.350351][ T4725] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 689.366288][ T4725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.374704][ T4730] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 689.384042][ T4725] usb 6-1: Product: syz [ 689.388502][ T4730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.396631][ T4725] usb 6-1: Manufacturer: syz [ 689.401426][ T4725] usb 6-1: SerialNumber: syz [ 689.415761][ T4730] usb 1-1: config 0 descriptor?? [ 689.426794][ T4725] usb 6-1: config 0 descriptor?? [ 689.436708][ T4730] hub 1-1:0.0: USB hub found [ 689.444321][ T4725] usb 6-1: bad CDC descriptors [ 689.449519][ T4725] usb 6-1: unsupported MDLM descriptors [ 689.642525][ T4323] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 689.663588][ T4730] hub 1-1:0.0: 9 ports detected [ 689.669252][ T4730] hub 1-1:0.0: insufficient power available to use all downstream ports [ 689.687290][ T7951] usb 6-1: USB disconnect, device number 20 [ 689.739362][ T4725] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 689.799854][T20233] syz.2.6891 (20233): drop_caches: 2 [ 689.860757][ T4730] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 689.869154][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 689.877206][ T4323] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 689.893443][ T4730] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 689.909677][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.934291][ T4725] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 689.952194][ T4730] usb 1-1: USB disconnect, device number 96 [ 689.974821][ T4323] usb 4-1: config 0 has no interface number 0 [ 689.985365][ T4725] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 690.001958][ T4323] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 690.014062][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.022729][ T4323] usb 4-1: Product: syz [ 690.027755][ T4323] usb 4-1: Manufacturer: syz [ 690.032684][ T4323] usb 4-1: SerialNumber: syz [ 690.037987][ T4725] usb 5-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 690.048430][ T4725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.059525][ T4323] usb 4-1: config 0 descriptor?? [ 690.065350][ T4725] usb 5-1: Product: syz [ 690.070220][ T4725] usb 5-1: Manufacturer: syz [ 690.078241][ T4725] usb 5-1: SerialNumber: syz [ 690.149940][T20251] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 690.269364][ T4323] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 690.293613][ T4323] usb 4-1: No valid video chain found. [ 690.300046][ T4725] usb 5-1: Can't get UAC3 power state for id 10 [ 690.328352][ T4725] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 690.377612][ T4725] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 690.440798][ T4725] usb 5-1: USB disconnect, device number 94 [ 690.550987][ T4323] usb 4-1: USB disconnect, device number 94 [ 690.685452][T20265] loop2: detected capacity change from 0 to 256 [ 690.721768][T20265] FAT-fs (loop2): Directory bread(block 64) failed [ 690.736324][T20265] FAT-fs (loop2): Directory bread(block 65) failed [ 690.779583][T20265] FAT-fs (loop2): Directory bread(block 66) failed [ 690.782264][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.798436][T20265] FAT-fs (loop2): Directory bread(block 67) failed [ 690.826738][T20265] FAT-fs (loop2): Directory bread(block 68) failed [ 690.833817][T20265] FAT-fs (loop2): Directory bread(block 69) failed [ 690.841973][T20265] FAT-fs (loop2): Directory bread(block 70) failed [ 690.850605][T20265] FAT-fs (loop2): Directory bread(block 71) failed [ 690.857562][T20265] FAT-fs (loop2): Directory bread(block 72) failed [ 690.871463][T20265] FAT-fs (loop2): Directory bread(block 73) failed [ 691.456134][T20291] loop3: detected capacity change from 0 to 256 [ 691.975635][T20305] loop5: detected capacity change from 0 to 256 [ 692.011849][T20305] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 692.051733][T20309] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.068853][T20305] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 692.070788][T20309] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.084568][T20309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.114119][T20305] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 692.205984][T20305] loop5: Can't mount, would change RO state [ 692.757194][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6937'. [ 692.772779][T20328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.078042][ T26] audit: type=1326 audit(1787535973.331:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.4.6942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 693.119888][ T26] audit: type=1326 audit(1787535973.331:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.4.6942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 693.241496][ T26] audit: type=1326 audit(1787535973.331:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.4.6942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 693.289571][T20350] netlink: 'syz.4.6949': attribute type 4 has an invalid length. [ 693.330302][T20350] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6949'. [ 693.363003][T20353] block nbd0: NBD_DISCONNECT [ 693.370016][ T26] audit: type=1326 audit(1787535973.331:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.4.6942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760479e0d9 code=0x7ffc0000 [ 694.184126][T20383] netlink: 'syz.4.6965': attribute type 21 has an invalid length. [ 694.216677][T20383] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6965'. [ 694.262084][ T4725] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 694.454433][ T4725] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 694.480925][ T4725] usb 6-1: config 2 interface 0 has no altsetting 0 [ 694.519625][ T4725] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 694.545573][ T4725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.557152][ T4725] usb 6-1: Product: syz [ 694.561381][ T4725] usb 6-1: Manufacturer: syz [ 694.576295][ T4725] usb 6-1: SerialNumber: syz [ 694.598807][ T4725] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 694.648977][ T4725] usb 6-1: selecting invalid altsetting 0 [ 694.681643][ T4725] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 694.705085][T20367] loop3: detected capacity change from 0 to 32768 [ 694.826409][T20367] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 694.868136][T20367] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 694.878916][ T7952] usb 6-1: USB disconnect, device number 21 [ 694.919885][T20367] INFO: trying to register non-static key. [ 694.925779][T20367] The code is fine but needs lockdep annotation, or maybe [ 694.932915][T20367] you didn't initialize this object before use? [ 694.939267][T20367] turning off the locking correctness validator. [ 694.944098][T20409] cgroup: noprefix used incorrectly [ 694.945601][T20367] CPU: 1 PID: 20367 Comm: syz.3.6956 Not tainted syzkaller #0 [ 694.958368][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 694.968459][T20367] Call Trace: [ 694.971768][T20367] [ 694.974728][T20367] dump_stack_lvl+0x188/0x24e [ 694.979493][T20367] ? show_regs_print_info+0x12/0x12 [ 694.984740][T20367] ? load_image+0x410/0x410 [ 694.989298][T20367] ? _find_next_bit+0x11e/0x130 [ 694.994276][T20367] ? __is_module_percpu_address+0x279/0x3b0 [ 695.000251][T20367] ? is_kernel_percpu_address+0x18f/0x1b0 [ 695.006063][T20367] assign_lock_key+0x201/0x230 [ 695.010888][T20367] ? SOFTIRQ_verbose+0x10/0x10 [ 695.015697][T20367] register_lock_class+0x21d/0x870 [ 695.020853][T20367] ? mark_lock+0x94/0x320 [ 695.025222][T20367] ? is_dynamic_key+0x260/0x260 [ 695.030113][T20367] ? __lock_acquire+0x1465/0x7c40 [ 695.035182][T20367] __lock_acquire+0x172/0x7c40 [ 695.039998][T20367] ? kernel_text_address+0x9c/0xd0 [ 695.045261][T20367] ? __kernel_text_address+0x9/0x30 [ 695.050503][T20367] ? verify_lock_unused+0x140/0x140 [ 695.055754][T20367] ? verify_lock_unused+0x140/0x140 [ 695.061000][T20367] ? stack_trace_save+0xa6/0xf0 [ 695.065896][T20367] ? __stack_depot_save+0x35/0x480 [ 695.071112][T20367] lock_acquire+0x1bb/0x4a0 [ 695.075656][T20367] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 695.081629][T20367] ? memset+0x1e/0x40 [ 695.085689][T20367] ? read_lock_is_recursive+0x10/0x10 [ 695.091099][T20367] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 695.097517][T20367] ? lockdep_hardirqs_on+0x94/0x140 [ 695.102756][T20367] _raw_spin_lock_irqsave+0xb0/0x100 [ 695.108304][T20367] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 695.114235][T20367] ? _raw_spin_lock+0x40/0x40 [ 695.118957][T20367] ? ktime_get+0x247/0x270 [ 695.123409][T20367] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 695.129255][T20367] ? ocfs2_dlm_shutdown+0x230/0x230 [ 695.134489][T20367] ? slab_free_freelist_hook+0x133/0x1b0 [ 695.140196][T20367] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 695.145796][T20367] ? ocfs2_journal_init+0xd40/0xd40 [ 695.150997][T20367] ocfs2_dlm_shutdown+0x33/0x230 [ 695.155932][T20367] ocfs2_dismount_volume+0x479/0x940 [ 695.161275][T20367] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 695.166566][T20367] ? clear_inode+0x150/0x150 [ 695.171169][T20367] ? dput+0x37/0x1d0 [ 695.175098][T20367] ? ocfs2_free_inode+0x20/0x20 [ 695.179953][T20367] generic_shutdown_super+0x130/0x340 [ 695.185351][T20367] kill_block_super+0x7c/0xe0 [ 695.190022][T20367] deactivate_locked_super+0x93/0xf0 [ 695.195304][T20367] cleanup_mnt+0x471/0x4f0 [ 695.199752][T20367] task_work_run+0x1d0/0x260 [ 695.204451][T20367] ? task_work_cancel+0x220/0x220 [ 695.209503][T20367] ? __se_sys_mount+0x38f/0x3d0 [ 695.214349][T20367] ? exit_to_user_mode_loop+0x3b/0x110 [ 695.219843][T20367] exit_to_user_mode_loop+0xe6/0x110 [ 695.225142][T20367] exit_to_user_mode_prepare+0xee/0x180 [ 695.230698][T20367] syscall_exit_to_user_mode+0x16/0x40 [ 695.236156][T20367] do_syscall_64+0x58/0xa0 [ 695.240577][T20367] ? clear_bhb_loop+0x60/0xb0 [ 695.245304][T20367] ? clear_bhb_loop+0x60/0xb0 [ 695.249979][T20367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.255877][T20367] RIP: 0033:0x7ff7abf9f34a [ 695.260296][T20367] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.279930][T20367] RSP: 002b:00007ff7aa1f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 695.288613][T20367] RAX: ffffffffffffffec RBX: 00007ff7aa1f5ee0 RCX: 00007ff7abf9f34a [ 695.296622][T20367] RDX: 0000200000004480 RSI: 00002000000044c0 RDI: 00007ff7aa1f5ea0 [ 695.304597][T20367] RBP: 0000200000004480 R08: 00007ff7aa1f5ee0 R09: 0000000000800401 [ 695.312653][T20367] R10: 0000000000800401 R11: 0000000000000246 R12: 00002000000044c0 [ 695.320634][T20367] R13: 00007ff7aa1f5ea0 R14: 000000000000446c R15: 0000200000000080 [ 695.328613][T20367] [ 695.332690][T20367] ocfs2: Unmounting device (7,3) on (node local)