last executing test programs: 11m52.491778479s ago: executing program 0 (id=14555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x20}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 11m52.348593724s ago: executing program 0 (id=14558): r0 = getpid() kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 11m52.133967535s ago: executing program 0 (id=14560): r0 = socket$kcm(0x23, 0x5, 0x0) accept(r0, 0x0, 0x0) 11m52.029996436s ago: executing program 0 (id=14562): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11m51.865206443s ago: executing program 0 (id=14565): r0 = socket$igmp(0x2, 0x3, 0x2) sendto(r0, 0x0, 0x0, 0x4800, &(0x7f0000001300)=@caif=@util={0x25, "79fb79fe96651ca97ce276940c0629a9"}, 0x80) 11m50.884790793s ago: executing program 0 (id=14576): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 11m50.632276869s ago: executing program 32 (id=14576): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 2.140108551s ago: executing program 3 (id=26908): r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x10000, 0x0, 0x0, 0xffffffff], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x0, 0xc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x2044}, {}, {}, {}, {}, {0x0, 0x5}], '\x00', 0x1000}) 1.970996388s ago: executing program 3 (id=26912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x3, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000001380)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001440)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.849158541s ago: executing program 5 (id=26915): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 1.826151813s ago: executing program 3 (id=26916): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000020c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) 1.673023989s ago: executing program 5 (id=26919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.65649331s ago: executing program 3 (id=26920): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) 1.46198647s ago: executing program 3 (id=26922): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.46135452s ago: executing program 5 (id=26932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1.284672089s ago: executing program 5 (id=26925): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 1.179694189s ago: executing program 1 (id=26926): r0 = openat$ipvtap(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa5685ddb53174de6) 1.105125087s ago: executing program 4 (id=26927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@deltaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.091975358s ago: executing program 2 (id=26928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x6, 0x80, 0x4}, 0x6}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.065943481s ago: executing program 5 (id=26929): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000051c0)={0x2, 0x14, @empty}, 0x10) 914.417367ms ago: executing program 4 (id=26930): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000440)=""/51, 0x33}], 0x2) 908.081877ms ago: executing program 1 (id=26931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003040)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 896.965438ms ago: executing program 2 (id=26933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000005c0)={0x6, 0x50}) 703.598208ms ago: executing program 2 (id=26934): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000010000104000000000000000000000000001000000000000000000000240012000a00010076786c616e00000014000200080004007b00000008000a0001020304", 0x44}], 0x1}, 0x0) 681.09975ms ago: executing program 4 (id=26935): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt(r0, 0x0, 0x7f, 0x0, 0x0) 631.664796ms ago: executing program 1 (id=26936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 523.039547ms ago: executing program 2 (id=26937): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x1d, 0x2, 0x80, "b43d70dde5cabbe40f00f401bbe6c9000000c67f00bf170000000000000800", 0x49433553}) 462.498513ms ago: executing program 4 (id=26938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 431.897016ms ago: executing program 1 (id=26939): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x500, 0xfff, 0x3231564e, 0x2, 0x4, [{0x5, 0x6}, {0x3ff, 0x3}, {0x1, 0xdbcefb6}, {0x8, 0x6e53}, {0x0, 0x10001}, {0x8, 0xe2}, {0x2, 0x6}, {0x6, 0x6}], 0x5, 0x9, 0xd253d16611fb2e39, 0x2, 0x6}}) 337.780606ms ago: executing program 2 (id=26940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x6f}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.574804ms ago: executing program 4 (id=26941): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000d00)=""/4102, 0x1006}], 0x1, 0xf, 0x3, 0x1e) 253.220624ms ago: executing program 1 (id=26942): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4112, 0x1010}], 0x1, 0x0, 0x0) 145.170195ms ago: executing program 2 (id=26943): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2f, &(0x7f00000001c0), &(0x7f0000000200)=0x6) 78.859322ms ago: executing program 4 (id=26944): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7000000}}], 0x9}}], 0x1, 0x4000881) 48.085535ms ago: executing program 1 (id=26945): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, &(0x7f0000000000)='\x00\x00\xad\xddP\x04Do\x90\x986\xc7\"K3\xaf\xf3\xe7\xf7Dm\xebD\x04\xf9A\x86_\x8d\x93\xe2\x13\xbf\xc5\xc7c\xe3\xf9(\xfe\x8a\x1c\xa8\x15\xf6\x81\xf6\xfcAM\x86\xc1\xb1\xdaJoI\xef\xf0\xe6U\xc2\r!\x16\xda\x16Y\xc0\x13\xba\xacX\a9@\x00\xac\xd0\xf1\xb3\xa8\xa7\x86h3|\x03\x95@\xebM\xa6i\xb3S\x84\xa0yum\xcbZ$8\xd2e\x19\xdb\xeb\xf3\x1eK\x1a\xad\xc4w\xe5\xcd&f\x9e\xc4') 42.508196ms ago: executing program 3 (id=26946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x2d8, [0x200000000440, 0x0, 0x0, 0x2000000006b8, 0x2000000006e8], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x40, 0x806, 'syzkaller1\x00', 'pimreg0\x00', 'veth0_virt_wifi\x00', 'ip_vti0\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x0, 0xd0, 0x108, 0x140, [@arp={{'arp\x00', 0x0, 0x38}, {{0x307, 0x8906, 0x1, @empty, 0xffffff00, @loopback, 0xffffffff, @broadcast, [0xff, 0xff, 0xfe6eb95b580b0b6, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], 0xf8, 0x28}}}], [@arpreply={'arpreply\x00', 0x10, {{@local}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}}, {0x3, 0x34, 0x3, 'veth0_to_bond\x00', 'veth0_to_bond\x00', 'bridge0\x00', 'ip6_vti0\x00', @remote, [0x0, 0xff, 0x0, 0x7f], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0xd8, 0x108, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffc}}}, @common=@STANDARD={'\x00', 0x8}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x350) 0s ago: executing program 5 (id=26947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newchain={0x2c, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x10}, {0x10, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x44004) kernel console output (not intermixed with test programs): 1.320091][T23365] xt_TCPMSS: Only works on TCP SYN packets [ 1911.630964][T23379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22914'. [ 1911.869266][T23388] loop4: detected capacity change from 0 to 2048 [ 1911.941060][T23388] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1911.973412][T23393] netlink: 'syz.2.22921': attribute type 11 has an invalid length. [ 1912.001932][T23393] netlink: 'syz.2.22921': attribute type 9 has an invalid length. [ 1912.045837][T23393] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22921'. [ 1912.076632][T23396] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1912.260864][T23400] netlink: 216 bytes leftover after parsing attributes in process `syz.5.22924'. [ 1912.710859][T23422] netlink: 'syz.2.22934': attribute type 10 has an invalid length. [ 1912.907957][T23432] netlink: 'syz.2.22940': attribute type 1 has an invalid length. [ 1913.010553][T23437] device tunl0 left promiscuous mode [ 1913.026990][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1913.045853][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1913.063291][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1913.081325][T23437] device bridge_slave_1 left promiscuous mode [ 1913.087947][T23437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1913.101122][T23437] device hsr0 left promiscuous mode [ 1913.112896][T23437] device vxlan1 left promiscuous mode [ 1913.119442][T23437] device gtp1 left promiscuous mode [ 1913.197939][T23403] delete_channel: no stack [ 1913.221151][T23442] loop4: detected capacity change from 0 to 256 [ 1913.228343][T23442] exfat: Deprecated parameter 'utf8' [ 1913.274758][T23442] exfat: Deprecated parameter 'namecase' [ 1913.280597][T23442] exfat: Deprecated parameter 'namecase' [ 1913.312529][T23442] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1913.477450][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22950'. [ 1913.971697][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22958'. [ 1914.136489][T23475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1914.176616][T23475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1914.207108][T23475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1914.300032][T23480] loop2: detected capacity change from 0 to 4096 [ 1914.315413][T23475] device veth5 left promiscuous mode [ 1914.409427][T23487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22965'. [ 1914.422237][T23489] autofs4:pid:23489:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65534.1), cmd(0xc018937a) [ 1914.443373][T23480] ntfs3: loop2: ino=5, mi_enum_attr [ 1914.448662][T23480] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1914.462080][T23489] autofs4:pid:23489:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 1914.522140][T23480] ntfs3: loop2: ino=5, "/" mi_enum_attr [ 1914.889612][T23497] loop5: detected capacity change from 0 to 4096 [ 1914.955872][T23497] ntfs3: loop5: ino=0, mi_enum_attr [ 1914.998143][T23497] ntfs3: loop5: ino=0, mi_enum_attr [ 1915.065222][T23497] ntfs3: loop5: ino=1a, mi_enum_attr [ 1915.375399][T23520] device vlan0 left promiscuous mode [ 1915.411356][T23520] device vlan1 left promiscuous mode [ 1915.435839][T23520] device macvlan0 left promiscuous mode [ 1915.466773][T23520] device bridge5 left promiscuous mode [ 1915.480394][T23520] device bridge8 left promiscuous mode [ 1915.495058][T23520] device ip6tnl6 left promiscuous mode [ 1915.676259][T23533] netlink: 'syz.1.22988': attribute type 4 has an invalid length. [ 1915.745719][T15364] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1915.972470][T15364] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.996351][T15364] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.028698][T15364] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1916.065933][T15364] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1916.090946][T15364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.099713][T15364] usb 5-1: Product: syz [ 1916.104002][T15364] usb 5-1: Manufacturer: syz [ 1916.108639][T15364] usb 5-1: SerialNumber: syz [ 1916.357730][T15364] snd-usb-caiaq 5-1:1.0: invalid EPs [ 1916.363133][T15364] usb 5-1: unable to init card! (ret=-22) [ 1916.394856][T15364] snd-usb-caiaq: probe of 5-1:1.0 failed with error -22 [ 1916.596915][T15364] usb 5-1: USB disconnect, device number 57 [ 1916.787851][T23576] netlink: 'syz.5.23011': attribute type 11 has an invalid length. [ 1917.724970][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23027'. [ 1918.121818][T23631] [U] [ 1918.124616][T23631] [U] [ 1918.127381][T23631] [U] [ 1918.130157][T23631] [U] [ 1918.131453][ T7] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1918.154672][T23631] [U] [ 1918.157445][T23631] [U] [ 1918.160197][T23631] [U] [ 1918.162935][T23631] [U] [ 1918.185000][T23631] [U] [ 1918.187769][T23631] [U] [ 1918.190510][T23631] [U] [ 1918.214959][T23630] [U] [ 1918.230441][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23039'. [ 1918.293681][T23636] IPVS: length: 153 != 24 [ 1918.336038][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.355577][ T7] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.365391][ T7] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1918.413225][T23639] netlink: 224 bytes leftover after parsing attributes in process `syz.3.23042'. [ 1918.431870][ T7] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1918.440996][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.481172][ T7] usb 2-1: Product: syz [ 1918.493714][ T7] usb 2-1: Manufacturer: syz [ 1918.505503][ T7] usb 2-1: SerialNumber: syz [ 1918.750206][ T7] snd-usb-caiaq 2-1:1.0: invalid EPs [ 1918.759648][ T7] usb 2-1: unable to init card! (ret=-22) [ 1918.770691][ T7] snd-usb-caiaq: probe of 2-1:1.0 failed with error -22 [ 1918.877748][T23660] CIFS mount error: No usable UNC path provided in device string! [ 1918.877748][T23660] [ 1918.922765][T23660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1918.990428][ T7] usb 2-1: USB disconnect, device number 59 [ 1919.223919][T23673] loop2: detected capacity change from 0 to 164 [ 1919.744668][T23689] netlink: 'syz.2.23067': attribute type 1 has an invalid length. [ 1920.069524][ T4330] nvme nvme0: rdma_resolve_route failed (-110). [ 1920.106295][T23693] nvme nvme0: rdma connection establishment failed (-19) [ 1920.252175][T23710] loop4: detected capacity change from 0 to 256 [ 1920.325207][T23710] FAT-fs (loop4): Directory bread(block 64) failed [ 1920.353480][T23710] FAT-fs (loop4): Directory bread(block 65) failed [ 1920.366725][T23710] FAT-fs (loop4): Directory bread(block 66) failed [ 1920.388218][T23710] FAT-fs (loop4): Directory bread(block 67) failed [ 1920.416557][T23710] FAT-fs (loop4): Directory bread(block 68) failed [ 1920.436009][T23710] FAT-fs (loop4): Directory bread(block 69) failed [ 1920.484401][T23710] FAT-fs (loop4): Directory bread(block 70) failed [ 1920.491070][T23710] FAT-fs (loop4): Directory bread(block 71) failed [ 1920.540078][T23710] FAT-fs (loop4): Directory bread(block 72) failed [ 1920.546689][T23710] FAT-fs (loop4): Directory bread(block 73) failed [ 1920.816053][ T7] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1920.915867][T23732] xt_l2tp: v2 doesn't support IP mode [ 1921.033270][ T7] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1921.051199][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1921.074188][ T7] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1921.093974][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.112943][ T7] usb 3-1: Product: syz [ 1921.123754][ T7] usb 3-1: Manufacturer: syz [ 1921.134577][ T7] usb 3-1: SerialNumber: syz [ 1921.155865][ T7] usb 3-1: config 0 descriptor?? [ 1921.175129][ T7] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1921.618827][ T7] gspca_sunplus: reg_r err -71 [ 1921.625160][ T7] sunplus: probe of 3-1:0.0 failed with error -71 [ 1921.657040][ T7] usb 3-1: USB disconnect, device number 62 [ 1921.799394][T23768] loop3: detected capacity change from 0 to 33792 [ 1921.812047][T23768] /dev/loop3: Can't open blockdev [ 1922.122738][T23778] loop4: detected capacity change from 0 to 8 [ 1922.179804][T23778] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1922.308278][T23782] ipt_rpfilter: unknown options [ 1923.100080][T23819] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1923.214487][T23826] loop5: detected capacity change from 0 to 22 [ 1923.228600][T23826] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1923.244737][T23826] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1923.479534][T15365] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1923.710659][T15365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1923.746756][T15365] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1923.780924][T15365] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1923.805623][T15365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.824950][T15365] usb 5-1: Product: syz [ 1923.846581][T15365] usb 5-1: Manufacturer: syz [ 1923.857404][T15365] usb 5-1: SerialNumber: syz [ 1923.882646][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23148'. [ 1923.890924][T15365] whiteheat 5-1:1.0: Connect Tech - WhiteHEAT converter detected [ 1924.103566][T15365] usb 5-1: Connect Tech - WhiteHEAT: Send command incomplete [0] [ 1924.131928][T15365] usb 5-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 1924.174414][T15365] usb 5-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 1924.207269][T15365] usb 5-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 1924.245156][T15365] usb 5-1: USB disconnect, device number 58 [ 1924.282038][T23866] loop2: detected capacity change from 0 to 256 [ 1924.373979][T23866] FAT-fs (loop2): Directory bread(block 64) failed [ 1924.407303][T23870] device vxcan3 entered promiscuous mode [ 1924.413288][T23866] FAT-fs (loop2): Directory bread(block 65) failed [ 1924.439768][T23866] FAT-fs (loop2): Directory bread(block 66) failed [ 1924.468150][T23866] FAT-fs (loop2): Directory bread(block 67) failed [ 1924.499409][T23866] FAT-fs (loop2): Directory bread(block 68) failed [ 1924.527858][T23866] FAT-fs (loop2): Directory bread(block 69) failed [ 1924.557410][T23866] FAT-fs (loop2): Directory bread(block 70) failed [ 1924.591886][T23866] FAT-fs (loop2): Directory bread(block 71) failed [ 1924.620271][T23866] FAT-fs (loop2): Directory bread(block 72) failed [ 1924.648505][T23866] FAT-fs (loop2): Directory bread(block 73) failed [ 1924.724472][T23874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23158'. [ 1924.791186][T23874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23158'. [ 1924.826406][T23874] netlink: 'syz.5.23158': attribute type 6 has an invalid length. [ 1924.915363][T23878] loop3: detected capacity change from 0 to 128 [ 1924.999854][T21677] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1926.911247][T23964] netlink: 'syz.1.23203': attribute type 1 has an invalid length. [ 1927.063309][T23968] vivid-000: disconnect [ 1927.068116][T23967] vivid-000: reconnect [ 1927.741317][T24000] bad cache= option: nonw [ 1927.741317][T24000] [ 1927.756883][T24003] netem: change failed [ 1927.769220][T24000] CIFS: VFS: bad cache= option: nonw [ 1927.862041][T24007] netlink: 1 bytes leftover after parsing attributes in process `syz.1.23224'. [ 1927.957966][T24012] program syz.4.23226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1928.830523][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23247'. [ 1929.146436][T24067] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1929.320611][T24075] loop2: detected capacity change from 0 to 24 [ 1929.345838][T24075] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1929.385429][T24075] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1929.449338][T24075] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 1929.477840][T24081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.23261'. [ 1929.523015][T24081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.23261'. [ 1929.543145][T24081] netlink: 44 bytes leftover after parsing attributes in process `syz.5.23261'. [ 1930.105114][T24111] loop4: detected capacity change from 0 to 24 [ 1930.142317][T24111] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1930.180539][T24111] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1930.245206][T24111] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 1930.380440][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23279'. [ 1930.711873][T21677] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1930.743459][T21677] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1930.776451][T21677] Buffer I/O error on dev loop6p8, logical block 1, async page read [ 1930.868762][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23293'. [ 1930.888863][T24145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23293'. [ 1930.909783][T24145] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1930.931516][T24145] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1930.945732][ T7] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1930.964346][T24145] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1931.124034][T24153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23297'. [ 1931.151770][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.170465][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1931.200330][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1931.221389][ T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1931.266729][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.293196][ T7] ttusb_dec_send_command: command bulk message failed: error -8 [ 1931.310172][ T7] ttusb-dec: probe of 5-1:1.0 failed with error -8 [ 1931.378694][T24164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23303'. [ 1931.398958][T24164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23303'. [ 1931.427982][T24164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23303'. [ 1931.544038][ T7] usb 5-1: USB disconnect, device number 59 [ 1931.951252][T15048] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1932.165337][T15048] usb 4-1: Using ep0 maxpacket: 16 [ 1932.172508][T15048] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1932.189675][T15048] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1932.210339][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.239156][T15048] usb 4-1: Product: syz [ 1932.243987][T24205] netlink: 'syz.2.23321': attribute type 1 has an invalid length. [ 1932.254628][T15048] usb 4-1: Manufacturer: syz [ 1932.259333][T15048] usb 4-1: SerialNumber: syz [ 1932.293569][T15048] r8152-cfgselector 4-1: config 0 descriptor?? [ 1932.485411][T24214] nfs: Unknown parameter 'ntext' [ 1932.499563][T24216] netlink: 'syz.5.23327': attribute type 1 has an invalid length. [ 1932.742967][T15048] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1932.769442][T15048] r8152-cfgselector 4-1: USB disconnect, device number 81 [ 1933.101271][T24243] netlink: 'syz.1.23340': attribute type 46 has an invalid length. [ 1934.911974][T24334] __nla_validate_parse: 1 callbacks suppressed [ 1934.911994][T24334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23385'. [ 1935.187683][T24345] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1935.219294][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23392'. [ 1935.666119][T24369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23402'. [ 1935.695266][T24369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23402'. [ 1935.704405][T24369] netlink: 'syz.4.23402': attribute type 6 has an invalid length. [ 1936.867528][T24415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23425'. [ 1937.120014][T24425] netlink: 'syz.1.23430': attribute type 32 has an invalid length. [ 1937.524928][T24441] loop3: detected capacity change from 0 to 256 [ 1937.532204][T24441] /dev/loop3: Can't open blockdev [ 1937.743991][T24423] loop5: detected capacity change from 0 to 32768 [ 1937.771941][T24423] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1937.856585][T24449] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1938.226990][ T26] audit: type=1326 audit(2000000637.143:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.3.23448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 1938.251358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1938.293252][ T26] audit: type=1326 audit(2000000637.143:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.3.23448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 1938.369820][ T26] audit: type=1326 audit(2000000637.143:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.3.23448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 1938.394462][T15364] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1938.434141][ T26] audit: type=1326 audit(2000000637.143:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24463 comm="syz.3.23448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 1938.608799][T15364] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1938.620354][T15364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.639595][T15364] usb 3-1: Product: syz [ 1938.643968][T15364] usb 3-1: Manufacturer: syz [ 1938.648883][T15364] usb 3-1: SerialNumber: syz [ 1938.675806][T15364] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 1938.722451][T15364] scsi host1: usb-storage 3-1:1.0 [ 1939.161564][T15364] ums_eneub6250: probe of 3-1:1.0 failed with error 3 [ 1939.172663][T15364] usb 3-1: USB disconnect, device number 63 [ 1939.557131][T24508] netlink: 'syz.4.23468': attribute type 21 has an invalid length. [ 1939.589005][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23468'. [ 1939.668498][T24514] 9pnet_fd: Insufficient options for proto=fd [ 1940.085846][T24534] loop3: detected capacity change from 0 to 33280 [ 1940.112683][T24534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1940.122287][T24534] /dev/loop3: Can't open blockdev [ 1940.364964][T24545] sctp: [Deprecated]: syz.4.23484 (pid 24545) Use of int in max_burst socket option. [ 1940.364964][T24545] Use struct sctp_assoc_value instead [ 1940.850052][T24530] loop2: detected capacity change from 0 to 32768 [ 1940.881269][T24563] sctp: [Deprecated]: syz.3.23495 (pid 24563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1940.881269][T24563] Use struct sctp_sack_info instead [ 1940.970158][T24530] XFS (loop2): Mounting V5 Filesystem [ 1941.086639][T24530] XFS (loop2): Ending clean mount [ 1941.098619][T24587] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1941.190518][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.240185][ T4287] XFS (loop2): Unmounting Filesystem [ 1941.254448][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.307081][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.349362][T24589] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1941.446904][T24589] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1941.653024][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.710822][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.732633][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.761527][T24589] wg2 speed is unknown, defaulting to 1000 [ 1941.782385][T24589] wg2 speed is unknown, defaulting to 1000 [ 1942.086265][T24617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23515'. [ 1942.691784][T24650] netlink: 'syz.4.23530': attribute type 15 has an invalid length. [ 1942.986878][ T26] audit: type=1326 audit(2000000641.593:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.1.23538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 1943.075934][ T26] audit: type=1326 audit(2000000641.612:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.1.23538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 1943.100271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1943.164586][ T26] audit: type=1326 audit(2000000641.612:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.1.23538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 1943.188966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1943.251772][ T26] audit: type=1326 audit(2000000641.631:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.1.23538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 1943.308788][T24678] netlink: 'syz.2.23544': attribute type 2 has an invalid length. [ 1943.327757][T24678] netlink: 'syz.2.23544': attribute type 8 has an invalid length. [ 1943.342445][ T26] audit: type=1326 audit(2000000641.631:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.1.23538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 1943.375786][T24678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23544'. [ 1943.434215][ T26] audit: type=1326 audit(2000000641.631:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.1.23538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 1943.458498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.481930][T24735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23573'. [ 1944.520311][T24735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23573'. [ 1944.920494][T24756] netlink: 'syz.4.23583': attribute type 2 has an invalid length. [ 1944.929978][T24756] netlink: 'syz.4.23583': attribute type 8 has an invalid length. [ 1944.938793][T24756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.23583'. [ 1945.083884][T24763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23587'. [ 1945.375760][T24776] netlink: 503 bytes leftover after parsing attributes in process `syz.3.23593'. [ 1945.419969][T24783] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23596'. [ 1946.060537][T15048] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1946.266322][T15048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1946.285046][T15048] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1946.329826][T15048] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1946.349396][T15048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.381542][T15048] usb 4-1: config 0 descriptor?? [ 1946.639874][T24828] netlink: 'syz.4.23618': attribute type 29 has an invalid length. [ 1946.643537][T15048] usb 4-1: USB disconnect, device number 82 [ 1946.694114][T24828] netlink: 'syz.4.23618': attribute type 29 has an invalid length. [ 1947.303446][T24850] loop5: detected capacity change from 0 to 36864 [ 1947.362127][T24850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1947.568850][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 1947.834236][T24870] loop2: detected capacity change from 0 to 764 [ 1947.873646][T24874] xt_cgroup: path and classid specified [ 1947.893643][T24870] Symlink component flag not implemented [ 1947.913098][T24870] Symlink component flag not implemented [ 1947.918888][T24870] Symlink component flag not implemented (129) [ 1947.935237][T24842] loop4: detected capacity change from 0 to 32768 [ 1947.952749][T24870] Symlink component flag not implemented (6) [ 1948.021914][T24881] netlink: 'syz.3.23642': attribute type 3 has an invalid length. [ 1948.074879][T24842] XFS (loop4): Mounting V5 Filesystem [ 1948.263722][T24842] XFS (loop4): Ending clean mount [ 1948.306068][T24842] XFS (loop4): Quotacheck needed: Please wait. [ 1948.444494][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23648'. [ 1948.462153][T24842] XFS (loop4): Quotacheck: Done. [ 1948.472107][T24904] loop2: detected capacity change from 0 to 16 [ 1948.479819][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23648'. [ 1948.499669][T24899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23648'. [ 1948.531848][T24904] erofs: (device loop2): mounted with root inode @ nid 36. [ 1948.617617][T24904] syz.2.23650: attempt to access beyond end of device [ 1948.617617][T24904] loop2: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 1948.642719][ T4285] XFS (loop4): Unmounting Filesystem [ 1948.650244][T24904] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1948.823978][T24910] 9p: Unknown access argument z: -22 [ 1949.253774][T24926] loop3: detected capacity change from 0 to 2048 [ 1949.313231][T24803] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1950.060789][T24948] loop3: detected capacity change from 0 to 8192 [ 1950.110204][T24948] /dev/loop3: Can't open blockdev [ 1950.489109][T24975] netlink: 'syz.4.23686': attribute type 1 has an invalid length. [ 1951.183328][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1951.183345][ T26] audit: type=1326 audit(2000000649.250:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.237927][T25007] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1951.262130][T25011] netlink: 80 bytes leftover after parsing attributes in process `syz.2.23703'. [ 1951.313839][ T26] audit: type=1326 audit(2000000649.250:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.368977][ T26] audit: type=1326 audit(2000000649.268:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.457976][ T26] audit: type=1326 audit(2000000649.268:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.530788][ T26] audit: type=1326 audit(2000000649.268:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.590735][ T26] audit: type=1326 audit(2000000649.268:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.674776][ T26] audit: type=1326 audit(2000000649.268:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.719161][ T26] audit: type=1326 audit(2000000649.268:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.797828][ T26] audit: type=1326 audit(2000000649.268:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.4.23702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1951.991703][T25031] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1952.596292][T15048] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1952.801281][T15048] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1952.809344][T15048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.847483][T15048] usb 2-1: config 0 has no interface number 0 [ 1952.874238][T15048] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1952.888977][T15048] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1952.919502][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.941206][T15048] usb 2-1: Product: syz [ 1952.952378][T15048] usb 2-1: Manufacturer: syz [ 1952.979012][T15048] usb 2-1: SerialNumber: syz [ 1952.986467][T15048] usb 2-1: config 0 descriptor?? [ 1953.456557][T15048] usb 2-1: USB disconnect, device number 60 [ 1953.463805][T15048] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1953.701652][T25122] loop5: detected capacity change from 0 to 33792 [ 1953.743693][T25122] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1953.788614][T25122] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1953.829884][T25122] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1953.870189][T25122] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.23758: Inode bitmap for bg 0 marked uninitialized [ 1953.949529][T25122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1954.103197][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 1954.220700][T25134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23764'. [ 1954.264893][T25134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23764'. [ 1954.288007][T25136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23763'. [ 1954.530541][T25148] netlink: 60 bytes leftover after parsing attributes in process `syz.5.23769'. [ 1954.570666][T25148] unsupported nlmsg_type 40 [ 1954.774344][T25157] IPv6: NLM_F_CREATE should be specified when creating new route [ 1954.800914][T25157] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1955.668561][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23794'. [ 1955.933682][ T7] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1956.136910][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 1956.144174][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1956.182349][ T7] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1956.222457][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.243136][ T7] usb 5-1: Product: syz [ 1956.260481][ T7] usb 5-1: Manufacturer: syz [ 1956.276017][ T7] usb 5-1: SerialNumber: syz [ 1956.308894][ T7] usb 5-1: config 0 descriptor?? [ 1956.322686][T25198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1956.341167][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 1956.347221][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 1956.379443][ T7] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input140 [ 1956.674917][ T7] usb 5-1: USB disconnect, device number 60 [ 1956.680930][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1956.993746][T25241] loop2: detected capacity change from 0 to 49152 [ 1957.018565][T25241] EXT4-fs: Ignoring removed i_version option [ 1957.038016][T25241] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1957.079598][T25241] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1957.109411][T25241] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1957.204003][T25241] EXT4-fs (loop2): mounted filesystem with journalled data mode. Quota mode: journalled. [ 1957.391288][T25267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23824'. [ 1957.411384][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23824'. [ 1957.660617][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 1958.147877][T24575] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1958.385077][T24575] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1958.412287][T24575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.434258][T24575] usb 6-1: config 0 descriptor?? [ 1958.447710][T24575] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1958.792176][T25317] netlink: 64 bytes leftover after parsing attributes in process `syz.3.23848'. [ 1958.827610][T25317] netlink: 'syz.3.23848': attribute type 1 has an invalid length. [ 1958.879432][T24575] gp8psk: usb in 128 operation failed. [ 1958.892075][T24575] gp8psk: usb in 137 operation failed. [ 1958.913114][T24575] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1958.928433][T24575] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1958.967320][T24575] usb 6-1: USB disconnect, device number 28 [ 1959.707926][T25358] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1959.885476][T25363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23869'. [ 1960.212609][T25345] loop2: detected capacity change from 0 to 32768 [ 1960.503259][T25389] netlink: 'syz.3.23885': attribute type 21 has an invalid length. [ 1960.525730][T25389] netlink: 128 bytes leftover after parsing attributes in process `syz.3.23885'. [ 1960.554722][T25389] netlink: 'syz.3.23885': attribute type 5 has an invalid length. [ 1960.583479][T25389] netlink: 'syz.3.23885': attribute type 6 has an invalid length. [ 1960.597696][T25389] netlink: 3 bytes leftover after parsing attributes in process `syz.3.23885'. [ 1960.800627][T24575] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1961.007642][T24575] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1961.055188][T24575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.085925][T24575] usb 5-1: config 0 descriptor?? [ 1961.321436][T24575] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1961.333657][T24575] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1961.505266][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23901'. [ 1961.546278][T24575] [drm:udl_init] *ERROR* Selecting channel failed [ 1961.581110][T24575] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1961.608176][T24575] [drm] Initialized udl on minor 2 [ 1961.632785][T24575] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1961.663044][T24575] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1961.697016][T24575] usb 5-1: USB disconnect, device number 61 [ 1961.723854][T15364] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1961.749179][T15364] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1961.768939][T15364] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1961.782726][T25435] loop3: detected capacity change from 0 to 33280 [ 1961.817917][T25435] /dev/loop3: Can't open blockdev [ 1961.894382][T24806] I/O error, dev loop3, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1963.039116][T25478] netlink: 5 bytes leftover after parsing attributes in process `syz.1.23926'. [ 1963.895273][T25524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23949'. [ 1963.924524][T25524] netlink: 'syz.3.23949': attribute type 1 has an invalid length. [ 1964.008589][T25528] loop4: detected capacity change from 0 to 128 [ 1964.067180][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.105857][T25528] FAT-fs (loop4): Filesystem has been set read-only [ 1964.134828][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.160321][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.190565][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.223962][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.232485][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.277203][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.314508][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.341278][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.350076][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.394838][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.403374][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.429651][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.457349][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.478975][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.490226][T25544] x_tables: unsorted entry at hook 4 [ 1964.512638][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.544530][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.553064][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.587485][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.596037][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.662305][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.716415][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.724927][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.790882][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.799404][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.836267][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.846046][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.855630][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.864120][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.873156][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.882120][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.906472][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.944031][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1964.975496][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.018746][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.062521][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.094954][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.127445][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.158160][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.188597][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.236334][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.272873][T25528] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1965.281537][ T26] audit: type=1800 audit(2000000662.431:2910): pid=25528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.23951" name="file1" dev="loop4" ino=1048766 res=0 errno=0 [ 1965.346596][T25576] loop5: detected capacity change from 0 to 33792 [ 1965.455644][T25576] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.23976: lblock 2 mapped to illegal pblock 2 (length 1) [ 1965.486766][T25576] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1965.494943][T25576] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.23976: lblock 0 mapped to illegal pblock 48 (length 1) [ 1965.509962][T25576] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1965.519026][T25576] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.23976: Failed to acquire dquot type 0 [ 1965.540344][T25576] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 1965.572127][T25576] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.23976: mark_inode_dirty error [ 1965.603717][T25576] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1965.614008][T25576] EXT4-fs (loop5): 1 orphan inode deleted [ 1965.657048][ T7083] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1965.672483][T25576] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1965.712482][ T7083] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1965.753714][T25576] EXT4-fs error (device loop5): __ext4_get_inode_loc:4523: comm syz.5.23976: Invalid inode table block 1 in block_group 0 [ 1965.767627][ T7083] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:10: Failed to release dquot type 0 [ 1965.790351][T25576] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 1965.814448][T25576] EXT4-fs error (device loop5): ext4_setattr:5571: inode #2: comm syz.5.23976: mark_inode_dirty error [ 1965.840063][T25593] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.23982'. [ 1965.929689][T25595] loop4: detected capacity change from 0 to 256 [ 1965.948901][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 1965.967420][ T7083] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1966.012470][ T7083] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1966.064123][ T7083] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:10: Failed to release dquot type 0 [ 1966.115054][ T4871] EXT4-fs error (device loop5): __ext4_get_inode_loc:4523: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1966.150878][ T4871] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 1966.192638][ T4871] EXT4-fs error (device loop5): ext4_quota_off:7142: inode #3: comm syz-executor: mark_inode_dirty error [ 1966.216349][T25593] syz.1.23982 (25593) used greatest stack depth: 18096 bytes left [ 1966.323521][T25603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23988'. [ 1966.821328][T25630] netlink: 276 bytes leftover after parsing attributes in process `syz.3.24001'. [ 1966.919291][T25634] netlink: 'syz.2.24002': attribute type 11 has an invalid length. [ 1967.641646][T25663] ebt_limit: overflow, try lower: 4294901760/65535 [ 1967.694523][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24017'. [ 1968.055863][T25683] netlink: 196 bytes leftover after parsing attributes in process `syz.3.24026'. [ 1968.458687][T25704] netlink: 'syz.3.24036': attribute type 2 has an invalid length. [ 1968.484295][T25704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24036'. [ 1968.663003][T24575] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1968.705185][T25713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24041'. [ 1968.845813][T25722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24045'. [ 1968.866548][T25722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24045'. [ 1968.877980][T24575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1968.900787][T24575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1968.934260][T24575] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice= 0.00 [ 1968.951571][T24575] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1968.966825][T24575] usb 3-1: Product: syz [ 1968.974623][T24575] usb 3-1: SerialNumber: syz [ 1968.983796][T15364] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1968.994072][T24575] usb 3-1: config 0 descriptor?? [ 1969.210411][T15364] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1969.241615][T15364] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1969.272530][T15364] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1969.299812][T15364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.306215][T25731] xt_ipvs: protocol family 7 not supported [ 1969.333764][T15365] usb 3-1: USB disconnect, device number 64 [ 1969.559789][T15364] usb 2-1: NFC: Can't submit reader poweron cmd response -90 [ 1969.574863][T15364] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 1969.593576][T15364] pn533_usb: probe of 2-1:1.0 failed with error -90 [ 1969.784169][ T7] usb 2-1: USB disconnect, device number 61 [ 1970.109584][T25766] netlink: 9 bytes leftover after parsing attributes in process `syz.3.24066'. [ 1970.144803][T25768] netlink: 'syz.2.24067': attribute type 12 has an invalid length. [ 1970.579208][T25788] netlink: 'syz.4.24077': attribute type 1 has an invalid length. [ 1970.813033][T15364] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1971.019027][T15364] usb 2-1: not running at top speed; connect to a high speed hub [ 1971.039206][T15364] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1971.069794][T15364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.321394][ C1] port100 2-1:1.0: NFC: Received an invalid ack [ 1971.327972][T15364] port100 2-1:1.0: NFC: Could not get supported command types [ 1971.538567][T15364] usb 2-1: USB disconnect, device number 62 [ 1971.616438][T25838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24101'. [ 1972.727745][T15364] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1972.801851][ T7] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1972.853817][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24129'. [ 1972.954429][T15364] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.973831][T15364] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1973.005771][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 1973.012661][ T7] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1973.013505][T15364] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1973.041589][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.059182][T15364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.069919][ T7] usb 6-1: config 0 has no interface number 0 [ 1973.087641][ T7] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1973.091285][T15364] usb 5-1: Product: syz [ 1973.120090][T15364] usb 5-1: Manufacturer: syz [ 1973.136642][ T7] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1973.144839][T15364] usb 5-1: SerialNumber: syz [ 1973.166382][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.183375][T15364] cdc_ncm 5-1:1.0: skipping garbage [ 1973.185644][ T7] usb 6-1: Product: syz [ 1973.198263][T15364] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1973.211241][T15364] cdc_ncm 5-1:1.0: bind() failure [ 1973.228785][ T7] usb 6-1: Manufacturer: syz [ 1973.233667][ T7] usb 6-1: SerialNumber: syz [ 1973.239461][T15364] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1973.251769][T15364] cdc_ncm 5-1:1.1: bind() failure [ 1973.261894][ T7] usb 6-1: config 0 descriptor?? [ 1973.291203][ T7] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1973.296365][T25909] ipt_REJECT: ECHOREPLY no longer supported. [ 1973.320849][ T7] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1973.409960][T15365] usb 5-1: USB disconnect, device number 62 [ 1973.497454][ T7] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1973.516241][ T7] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1973.626408][T24575] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1973.682810][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1973.689208][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1973.728563][T15365] usb 6-1: USB disconnect, device number 29 [ 1973.831528][T24575] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1973.850712][T24575] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1973.871501][T24575] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1973.881795][T24575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1973.891872][T24575] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1973.915205][T24575] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1973.924326][T24575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.952461][T25911] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1973.960361][T25911] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1973.967650][T25911] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1973.977679][T24575] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 1973.989880][ T7] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1974.197460][ T7] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1974.214445][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.229235][T24575] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1974.244358][ T7] usb 4-1: Product: syz [ 1974.254296][T24575] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1974.255281][ T7] usb 4-1: Manufacturer: syz [ 1974.278745][ T7] usb 4-1: SerialNumber: syz [ 1974.289374][T25943] netlink: 'syz.4.24150': attribute type 3 has an invalid length. [ 1974.316054][ T7] usb 4-1: config 0 descriptor?? [ 1974.332609][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 1974.353664][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 1974.385887][ T7] f81232 4-1:0.0: f81534a converter detected [ 1974.465063][T24575] usb 2-1: USB disconnect, device number 63 [ 1974.471336][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1974.510395][T24575] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1974.537204][T24575] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1974.562858][ T7] usb 4-1: f81534a converter now attached to ttyUSB2 [ 1974.596235][T24575] mos7720 2-1:1.0: device disconnected [ 1974.699940][T25951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.24155'. [ 1974.921096][ T7] usb 4-1: USB disconnect, device number 83 [ 1974.936718][ T7] f81534a ttyUSB2: f81534a converter now disconnected from ttyUSB2 [ 1974.956190][ T7] f81232 4-1:0.0: device disconnected [ 1975.044839][T25964] nvme_tcp: malformed address passed: 127.:8009 [ 1975.187354][T24575] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1975.260576][T25975] netlink: 'syz.5.24166': attribute type 9 has an invalid length. [ 1975.279816][T25975] netlink: 'syz.5.24166': attribute type 6 has an invalid length. [ 1975.404119][T24575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.435132][T24575] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1975.476608][T24575] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1975.496680][T24575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.762682][T24575] usb 3-1: NFC: Can't submit reader poweron cmd response -90 [ 1975.776176][T24575] pn533_usb 3-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 1975.787149][ T7] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1975.795086][T24575] pn533_usb: probe of 3-1:1.0 failed with error -90 [ 1975.990103][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 1975.995862][T15365] usb 3-1: USB disconnect, device number 65 [ 1975.999634][ T7] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 1976.021513][ T7] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1976.041197][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1976.054262][ T7] usb 4-1: config 1 has no interface number 0 [ 1976.060457][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1976.082377][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1976.103052][ T7] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1976.116274][ T7] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1976.125605][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.154981][ T7] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1976.213324][T25989] loop4: detected capacity change from 0 to 32768 [ 1976.225787][T24575] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1976.373339][ T7] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 1976.397466][ T7] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1976.404917][ T7] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 1976.455027][T24575] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1976.482225][T24575] usb 2-1: config 0 has no interface number 0 [ 1976.504195][T24575] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1976.530369][T25999] netlink: 'syz.4.24177': attribute type 2 has an invalid length. [ 1976.537586][T24575] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1976.557228][T25999] netlink: 'syz.4.24177': attribute type 1 has an invalid length. [ 1976.567787][T24575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.597711][T24575] usb 2-1: Product: syz [ 1976.608367][T24575] usb 2-1: Manufacturer: syz [ 1976.618712][ T7] usb 4-1: USB disconnect, device number 84 [ 1976.624187][T24575] usb 2-1: SerialNumber: syz [ 1976.652385][T24575] usb 2-1: config 0 descriptor?? [ 1977.106170][T24575] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1977.127141][T24575] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1977.152381][T24575] usb 2-1: USB disconnect, device number 64 [ 1977.311058][T26023] netlink: 2 bytes leftover after parsing attributes in process `syz.5.24190'. [ 1977.361767][T26025] sctp: [Deprecated]: syz.3.24191 (pid 26025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1977.361767][T26025] Use struct sctp_sack_info instead [ 1977.547954][T26032] ufs: ufs_fill_super(): bad magic number [ 1978.024210][ T26] audit: type=1326 audit(2000000674.351:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.063437][ T26] audit: type=1326 audit(2000000674.351:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.100770][ T26] audit: type=1326 audit(2000000674.369:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.150830][ T26] audit: type=1326 audit(2000000674.369:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.225832][ T26] audit: type=1326 audit(2000000674.369:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.289347][T26066] futex_wake_op: syz.5.24220 tries to shift op by -1; fix this program [ 1978.297909][ T26] audit: type=1326 audit(2000000674.369:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.396830][ T26] audit: type=1326 audit(2000000674.369:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.482661][ T26] audit: type=1326 audit(2000000674.369:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.552551][T26077] netlink: 'syz.1.24216': attribute type 21 has an invalid length. [ 1978.568263][ T26] audit: type=1326 audit(2000000674.369:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26056 comm="syz.2.24207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1978.590391][T26077] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24216'. [ 1978.649058][ T26] audit: type=1326 audit(2000000674.912:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.4.24219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 1978.956374][T26095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24226'. [ 1979.221182][T26109] Cannot find set identified by id 0 to match [ 1979.878499][T26143] loop2: detected capacity change from 0 to 256 [ 1979.933915][T26143] exfat: Deprecated parameter 'utf8' [ 1979.957577][T26143] exfat: Deprecated parameter 'namecase' [ 1980.012613][T26143] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 1980.086200][T26149] netlink: 'syz.4.24253': attribute type 10 has an invalid length. [ 1980.125256][T26149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24253'. [ 1980.165371][T26149] device team0 entered promiscuous mode [ 1980.197281][T26149] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1980.413868][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24261'. [ 1980.535585][T26167] loop5: detected capacity change from 0 to 256 [ 1980.616826][T26167] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1980.804674][T26175] netlink: 156 bytes leftover after parsing attributes in process `syz.1.24266'. [ 1980.898299][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24269'. [ 1981.780915][T26189] loop2: detected capacity change from 0 to 32768 [ 1981.825319][T26189] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.24273 (26189) [ 1981.881262][T26189] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1981.904529][T26189] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1981.923716][T26189] BTRFS info (device loop2): force zlib compression, level 3 [ 1981.959017][T26189] BTRFS info (device loop2): allowing degraded mounts [ 1981.987594][T26189] BTRFS info (device loop2): setting nodatasum [ 1982.006061][T26189] BTRFS info (device loop2): allowing degraded mounts [ 1982.034066][T26189] BTRFS info (device loop2): using free space tree [ 1982.440843][ T4287] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1982.913004][T24803] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (24803) [ 1982.975413][T15365] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1983.191165][T15365] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 1983.208963][T15365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4 [ 1983.252742][T15365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1023 [ 1983.289164][T15365] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1983.317431][T15365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.360806][T15365] usb 5-1: Product: syz [ 1983.368873][T15365] usb 5-1: Manufacturer: syz [ 1983.392551][T15365] usb 5-1: SerialNumber: syz [ 1983.424451][T15365] usb 5-1: config 0 descriptor?? [ 1983.450816][T15365] hub 5-1:0.0: bad descriptor, ignoring hub [ 1983.467768][T15365] hub: probe of 5-1:0.0 failed with error -5 [ 1983.506604][T15365] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input142 [ 1983.542521][T15365] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1983.587606][T26257] netlink: 200 bytes leftover after parsing attributes in process `syz.2.24297'. [ 1983.616376][T15365] usbtouchscreen: probe of 5-1:0.0 failed with error -22 [ 1983.681781][T15365] usb 5-1: USB disconnect, device number 63 [ 1983.738733][T26264] futex_wake_op: syz.3.24299 tries to shift op by 144; fix this program [ 1983.758923][T26264] futex_wake_op: syz.3.24299 tries to shift op by 144; fix this program [ 1984.186390][T26284] program syz.1.24310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1984.783862][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24321'. [ 1985.239593][T26321] netlink: 'syz.2.24328': attribute type 10 has an invalid length. [ 1985.264697][T26321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24328'. [ 1985.301826][T26321] device team0 entered promiscuous mode [ 1985.314241][T26321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1985.347365][T26326] loop4: detected capacity change from 0 to 33792 [ 1985.398210][T26326] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1985.450172][T26326] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1985.466785][T26326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1985.610757][T26339] set match dimension is over the limit! [ 1985.652074][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 1986.076289][T26359] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by ""[26359] [ 1986.359921][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1986.359938][ T26] audit: type=1326 audit(2000000682.147:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.444992][ T26] audit: type=1326 audit(2000000682.175:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.469276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.526446][ T26] audit: type=1326 audit(2000000682.175:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.614957][ T26] audit: type=1326 audit(2000000682.175:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.673665][ T26] audit: type=1326 audit(2000000682.175:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.771936][ T26] audit: type=1326 audit(2000000682.175:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.858905][ T26] audit: type=1326 audit(2000000682.175:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1986.936933][ T26] audit: type=1326 audit(2000000682.175:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.2.24352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 1987.544455][T26373] loop5: detected capacity change from 0 to 32768 [ 1987.627172][T26373] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1987.653427][T26373] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1987.708964][T26373] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 1987.958529][T26425] loop4: detected capacity change from 0 to 16 [ 1987.965690][T26373] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1987.982234][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24378'. [ 1988.031437][T26425] erofs: (device loop4): mounted with root inode @ nid 36. [ 1988.070332][T21016] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 1988.092941][T26425] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 1988.114946][T26373] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 1988.127719][T26373] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 1988.127719][T26373] inode = 12 2341 [ 1988.127719][T26373] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 1988.147591][T26373] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1988.157829][T26373] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:26373 [syz.5.24353] __gfs2_lookup+0xa9/0x290 [ 1988.171423][T26373] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 1988.180401][T26373] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 1988.187788][ T26] audit: type=1800 audit(2000000683.858:2937): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24380" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1988.216969][T26373] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 1988.247894][T26373] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 1988.270563][T26373] gfs2: fsid=syz:syz.s: File system withdrawn [ 1988.281050][T26373] CPU: 1 PID: 26373 Comm: syz.5.24353 Not tainted syzkaller #0 [ 1988.288713][T26373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1988.298815][T26373] Call Trace: [ 1988.302128][T26373] [ 1988.305101][T26373] dump_stack_lvl+0x188/0x24e [ 1988.309827][T26373] ? show_regs_print_info+0x12/0x12 [ 1988.315066][T26373] ? load_image+0x410/0x410 [ 1988.319609][T26373] ? kobject_uevent_env+0x364/0x890 [ 1988.324853][T26373] gfs2_withdraw+0xc69/0x1450 [ 1988.329579][T26373] ? gfs2_lm+0x240/0x240 [ 1988.333868][T26373] ? load_image+0x410/0x410 [ 1988.338412][T26373] ? gfs2_consist_inode_i+0xf1/0x110 [ 1988.343736][T26373] gfs2_dirent_scan+0x540/0x680 [ 1988.348630][T26373] ? gfs2_dirent_search+0x800/0x800 [ 1988.353855][T26373] gfs2_dirent_search+0x2d5/0x800 [ 1988.358913][T26373] ? gfs2_dirent_search+0x800/0x800 [ 1988.364137][T26373] ? gfs2_permission+0x408/0x4e0 [ 1988.369110][T26373] ? gfs2_dir_search+0x220/0x220 [ 1988.374078][T26373] ? gfs2_lookupi+0x660/0x660 [ 1988.378797][T26373] gfs2_dir_search+0x49/0x220 [ 1988.383531][T26373] gfs2_lookupi+0x46b/0x660 [ 1988.388094][T26373] ? gfs2_lookup_simple+0x100/0x100 [ 1988.393345][T26373] ? __gfs2_lookup+0xa9/0x290 [ 1988.398077][T26373] __gfs2_lookup+0xa9/0x290 [ 1988.402626][T26373] ? __lock_acquire+0x7ea0/0x7ea0 [ 1988.407708][T26373] ? gfs2_atomic_open+0x210/0x210 [ 1988.412780][T26373] ? d_set_d_op+0x25b/0x370 [ 1988.417318][T26373] ? do_raw_spin_unlock+0x11d/0x230 [ 1988.422560][T26373] ? _raw_spin_unlock+0x24/0x40 [ 1988.427491][T26373] ? d_alloc+0x1e7/0x250 [ 1988.431773][T26373] lookup_one_qstr_excl+0x10e/0x240 [ 1988.437010][T26373] filename_create+0x242/0x450 [ 1988.441816][T26373] ? kern_path_create+0x50/0x50 [ 1988.446700][T26373] ? __virt_addr_valid+0x467/0x540 [ 1988.451884][T26373] do_mkdirat+0xa5/0x440 [ 1988.456181][T26373] ? vfs_mkdir+0x570/0x570 [ 1988.460636][T26373] __x64_sys_mkdirat+0x85/0x90 [ 1988.465453][T26373] do_syscall_64+0x4c/0xa0 [ 1988.469906][T26373] ? clear_bhb_loop+0x60/0xb0 [ 1988.474621][T26373] ? clear_bhb_loop+0x60/0xb0 [ 1988.479357][T26373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1988.485310][T26373] RIP: 0033:0x7f60765a8347 [ 1988.489770][T26373] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1988.509506][T26373] RSP: 002b:00007f60773bee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1988.517959][T26373] RAX: ffffffffffffffda RBX: 00007f60773beee0 RCX: 00007f60765a8347 [ 1988.525957][T26373] RDX: 00000000000001ff RSI: 0000200000013240 RDI: 00000000ffffff9c [ 1988.533953][T26373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1988.541951][T26373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013240 [ 1988.549949][T26373] R13: 00007f60773beea0 R14: 0000000000000000 R15: 0000000000000000 [ 1988.557966][T26373] [ 1988.890878][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24387'. [ 1988.901436][T26441] netlink: 312 bytes leftover after parsing attributes in process `syz.2.24387'. [ 1988.912532][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24387'. [ 1989.217794][T26454] overlayfs: missing 'lowerdir' [ 1989.636753][T26469] loop4: detected capacity change from 0 to 33280 [ 1989.672444][T26469] EXT4-fs: Ignoring removed mblk_io_submit option [ 1989.727020][T26469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1989.789948][T26469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1989.821255][T26469] ext4 filesystem being mounted at /4981/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1990.087118][T26482] nvme_fabrics: missing parameter 'nqn=%s' [ 1990.098649][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 1990.570194][T26509] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1990.943661][T26525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24427'. [ 1991.062096][T15365] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1991.269153][T15365] usb 2-1: config 1 has an invalid interface number: 170 but max is 0 [ 1991.285511][T15365] usb 2-1: config 1 has no interface number 0 [ 1991.297863][T15365] usb 2-1: config 1 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 70, setting to 64 [ 1991.341801][T15365] usb 2-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=c7.cd [ 1991.366778][T15365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.447150][T26541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24434'. [ 1991.612013][T15365] usb 2-1: USB disconnect, device number 65 [ 1991.744964][T26549] bond0: option arp_all_targets: invalid value (1073741824) [ 1991.781857][T26551] netlink: 'syz.3.24441': attribute type 1 has an invalid length. [ 1991.820820][T26551] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24441'. [ 1991.869470][T26553] device veth1_macvtap left promiscuous mode [ 1991.875640][T26553] device macsec0 entered promiscuous mode [ 1991.898925][T26555] netlink: 'syz.5.24442': attribute type 5 has an invalid length. [ 1992.444927][T26577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1992.474596][T26577] device batadv_slave_0 entered promiscuous mode [ 1992.519386][T26577] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1992.743757][T26587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24458'. [ 1992.782361][T26587] netlink: 52 bytes leftover after parsing attributes in process `syz.3.24458'. [ 1992.959194][T26600] netlink: 'syz.1.24463': attribute type 17 has an invalid length. [ 1992.979443][T26600] device lo entered promiscuous mode [ 1992.993479][T26600] infiniband syz0: set active [ 1993.005961][T26600] infiniband syz0: set active [ 1993.031021][T26600] infiniband syz0: set active [ 1993.048029][T26600] device tunl0 entered promiscuous mode [ 1993.065078][T26606] loop2: detected capacity change from 0 to 64 [ 1993.074193][T26600] device gre0 entered promiscuous mode [ 1993.110094][T26600] device gretap0 entered promiscuous mode [ 1993.136626][T26600] device erspan0 entered promiscuous mode [ 1993.161112][T26600] device ip_vti0 entered promiscuous mode [ 1993.184584][T26600] device ip6_vti0 entered promiscuous mode [ 1993.218956][T26600] device sit0 entered promiscuous mode [ 1993.266071][T26600] device ip6tnl0 entered promiscuous mode [ 1993.291470][T26600] device ip6gre0 entered promiscuous mode [ 1993.326044][T26600] device syz_tun entered promiscuous mode [ 1993.352200][T26600] device ip6gretap0 entered promiscuous mode [ 1993.379350][T26600] device vcan0 entered promiscuous mode [ 1993.399927][T26600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1993.426240][T26600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1993.454309][T26600] device dummy0 entered promiscuous mode [ 1993.484536][T26600] device nlmon0 entered promiscuous mode [ 1993.501218][T26600] device caif0 entered promiscuous mode [ 1993.510913][T26600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1993.585107][T15429] lo speed is unknown, defaulting to 1000 [ 1993.594674][T15048] lo speed is unknown, defaulting to 1000 [ 1993.601155][ T7] lo speed is unknown, defaulting to 1000 [ 1993.607151][T15429] lo speed is unknown, defaulting to 1000 [ 1993.646183][T26622] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24473'. [ 1993.698737][T26624] smc: removing ib device rxe0 [ 1994.552445][T26656] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 1994.588486][T26659] loop3: detected capacity change from 0 to 64 [ 1995.010657][T26670] netlink: 144 bytes leftover after parsing attributes in process `syz.1.24494'. [ 1995.051671][T26670] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1995.111218][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24497'. [ 1995.483108][T26687] device vxlan2 entered promiscuous mode [ 1995.517637][T26691] echo interval is out of bounds [ 1995.517637][T26691] [ 1995.547213][T26691] CIFS: VFS: echo interval is out of bounds [ 1995.922908][T26709] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1995.955205][T26710] tmpfs: Bad value for 'mpol' [ 1996.094480][T26715] netlink: 'syz.4.24519': attribute type 32 has an invalid length. [ 1996.117025][T26718] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1996.625260][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24530'. [ 1996.722939][T26747] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1997.019671][T26762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24541'. [ 1997.070155][T26766] netlink: 84 bytes leftover after parsing attributes in process `syz.1.24542'. [ 1997.095408][T26766] netlink: 84 bytes leftover after parsing attributes in process `syz.1.24542'. [ 1997.664571][T26797] netlink: 'syz.1.24558': attribute type 1 has an invalid length. [ 1998.527760][T26841] openvswitch: netlink: Message has 4 unknown bytes. [ 1998.554181][T26843] netlink: 830 bytes leftover after parsing attributes in process `syz.1.24581'. [ 1999.567095][T26880] loop4: detected capacity change from 0 to 33280 [ 1999.635688][T26880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1999.659452][T26880] ext4 filesystem being mounted at /5011/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1999.856591][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2000.375484][T26923] ieee802154 phy1 wpan1: encryption failed: -90 [ 2000.581427][T26934] netlink: 172 bytes leftover after parsing attributes in process `syz.2.24624'. [ 2000.614512][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24624'. [ 2000.623714][T26934] netlink: 172 bytes leftover after parsing attributes in process `syz.2.24624'. [ 2000.674500][T26934] netlink: 100 bytes leftover after parsing attributes in process `syz.2.24624'. [ 2000.703198][T26934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24624'. [ 2001.061380][T26958] netlink: 'syz.1.24635': attribute type 10 has an invalid length. [ 2001.567054][T15365] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2002.004308][T26973] loop5: detected capacity change from 0 to 32768 [ 2002.026381][T15365] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2002.040554][T26973] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop5 scanned by syz.5.24642 (26973) [ 2002.082962][T26973] BTRFS info (device loop5): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 2002.125219][T26973] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 2002.143914][T26973] BTRFS info (device loop5): using free space tree [ 2002.229667][T15429] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2002.261818][T24575] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2002.375464][T26973] BTRFS info (device loop5): enabling ssd optimizations [ 2002.422056][T15365] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 2002.433118][T15429] usb 2-1: Using ep0 maxpacket: 8 [ 2002.440659][T15429] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2002.467631][T15429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.499542][T15429] usb 2-1: config 0 has no interface number 0 [ 2002.519495][T15429] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2002.549021][T15429] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2002.560569][T15429] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2002.586525][T15429] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2002.600821][T15429] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 2002.611095][ T4871] BTRFS info (device loop5): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 2002.640796][T15429] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 2002.657669][T15429] usb 2-1: Product: syz [ 2002.662900][T15429] usb 2-1: SerialNumber: syz [ 2002.680879][T15365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.709915][T15429] usb 2-1: config 0 descriptor?? [ 2002.718090][T15365] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2002.751244][T15365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.778722][T15365] usb 5-1: Product: syz [ 2002.792376][T15365] usb 5-1: Manufacturer: syz [ 2002.821391][T15365] usb 5-1: SerialNumber: syz [ 2002.850509][T15365] usb 5-1: config 0 descriptor?? [ 2002.885545][T15365] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2002.978903][T15429] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 2002.999702][T15429] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 2003.048995][T26994] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 9 /dev/loop5 scanned by udevd (26994) [ 2003.104242][T15365] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 2003.112796][T15365] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 2003.150892][T15365] usb 5-1: USB disconnect, device number 64 [ 2003.203904][ T14] usb 2-1: USB disconnect, device number 66 [ 2003.381644][T27045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24666'. [ 2003.386413][T24575] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2003.416931][T24575] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2003.473275][T27047] device gre1 entered promiscuous mode [ 2003.706826][ T26] audit: type=1326 audit(2000000698.367:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2003.737087][T27057] loop5: detected capacity change from 0 to 33280 [ 2003.825363][ T26] audit: type=1326 audit(2000000698.386:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2003.850318][T15365] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2003.912322][T27057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2003.930287][ T26] audit: type=1326 audit(2000000698.404:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2003.995620][T27057] ext4 filesystem being mounted at /2006/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2004.081491][ T26] audit: type=1326 audit(2000000698.404:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2004.192743][ T26] audit: type=1326 audit(2000000698.404:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2004.272625][ T26] audit: type=1326 audit(2000000698.404:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2004.365929][ T26] audit: type=1326 audit(2000000698.404:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2004.369474][ T14] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2004.484727][ T26] audit: type=1326 audit(2000000698.404:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2004.521534][T27082] netlink: 'syz.4.24683': attribute type 10 has an invalid length. [ 2004.563505][ T26] audit: type=1326 audit(2000000698.404:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.2.24670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2004.594070][T27082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24683'. [ 2004.603506][T27084] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 2004.659533][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.683197][ T14] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 2004.714373][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.743276][ T14] usb 6-1: Product: syz [ 2004.744830][T27082] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2004.754755][ T14] usb 6-1: Manufacturer: syz [ 2004.796651][ T14] usb 6-1: SerialNumber: syz [ 2004.819656][ T14] usb 6-1: config 0 descriptor?? [ 2004.848609][ T14] plusb: probe of 6-1:0.0 failed with error -22 [ 2005.043626][T27099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24691'. [ 2005.099139][ T14] usb 6-1: USB disconnect, device number 30 [ 2005.602057][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24703'. [ 2005.739758][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 2005.822017][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24710'. [ 2005.839905][ T26] audit: type=1326 audit(2000000700.349:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.24706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2006.043986][T27141] device bridge_slave_0 entered promiscuous mode [ 2006.096606][T27141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2006.371777][T27149] xt_CT: No such helper "snmp_trap" [ 2006.408327][T27159] netlink: 'syz.2.24721': attribute type 1 has an invalid length. [ 2006.564567][T27163] netlink: 'syz.3.24723': attribute type 17 has an invalid length. [ 2006.584868][T27163] device lo entered promiscuous mode [ 2006.618342][T27163] device tunl0 entered promiscuous mode [ 2006.671394][T27163] device gre0 entered promiscuous mode [ 2006.779266][T27174] loop5: detected capacity change from 0 to 256 [ 2006.798272][T27163] device gretap0 entered promiscuous mode [ 2006.804558][T27163] device erspan0 entered promiscuous mode [ 2006.839183][T27174] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb674f925, utbl_chksum : 0xe619d30d) [ 2006.855005][T27163] device ip_vti0 entered promiscuous mode [ 2006.871288][T27163] device ip6_vti0 entered promiscuous mode [ 2006.904849][T27163] device sit0 entered promiscuous mode [ 2006.911029][T27163] device ip6tnl0 entered promiscuous mode [ 2006.947696][T27163] device ip6gre0 entered promiscuous mode [ 2006.954103][T27163] device syz_tun entered promiscuous mode [ 2006.975513][T27163] device ip6gretap0 entered promiscuous mode [ 2006.988742][T27163] device vcan0 entered promiscuous mode [ 2006.999412][T27163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2007.021963][T27163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2007.029377][T27163] device team0 entered promiscuous mode [ 2007.070796][T27163] device dummy0 entered promiscuous mode [ 2007.078694][T27163] device nlmon0 entered promiscuous mode [ 2007.095317][T27163] device caif0 entered promiscuous mode [ 2007.109019][T27163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2007.131152][T27175] netlink: 14 bytes leftover after parsing attributes in process `syz.2.24728'. [ 2007.163666][T27184] netlink: 'syz.4.24734': attribute type 3 has an invalid length. [ 2007.492365][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2007.705928][T27205] loop2: detected capacity change from 0 to 256 [ 2007.805218][T27211] netlink: 'syz.4.24748': attribute type 17 has an invalid length. [ 2007.871774][T27211] device lo entered promiscuous mode [ 2007.878165][T27211] device tunl0 entered promiscuous mode [ 2007.884557][T27211] device gre0 entered promiscuous mode [ 2007.902347][T27211] device gretap0 entered promiscuous mode [ 2007.908669][T27211] device erspan0 entered promiscuous mode [ 2007.953942][T27211] device ip_vti0 entered promiscuous mode [ 2007.960774][T27211] device ip6_vti0 entered promiscuous mode [ 2007.975783][T27211] device sit0 entered promiscuous mode [ 2008.039026][T27211] device ip6tnl0 entered promiscuous mode [ 2008.048932][T27211] device ip6gre0 entered promiscuous mode [ 2008.055529][T27211] device syz_tun entered promiscuous mode [ 2008.071577][T27211] device ip6gretap0 entered promiscuous mode [ 2008.094886][T27211] device vcan0 entered promiscuous mode [ 2008.108864][T27211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2008.121217][T27211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2008.141677][T27211] device dummy0 entered promiscuous mode [ 2008.152514][T27211] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2008.170953][T27211] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2008.192666][T27211] device 60ªX¹¦À entered promiscuous mode [ 2008.205946][T27211] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 2008.233883][T27213] device bridge_slave_0 entered promiscuous mode [ 2008.240410][T27213] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2008.544572][T27237] IPv6: NLM_F_CREATE should be specified when creating new route [ 2008.940968][T27258] netlink: 'syz.2.24770': attribute type 17 has an invalid length. [ 2008.975023][T27258] device lo entered promiscuous mode [ 2008.985967][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2009.021700][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2009.050199][T27258] device tunl0 entered promiscuous mode [ 2009.068557][T27258] device gre0 entered promiscuous mode [ 2009.146712][T27258] device gretap0 entered promiscuous mode [ 2009.175761][T27258] device erspan0 entered promiscuous mode [ 2009.200767][T27258] device ip_vti0 entered promiscuous mode [ 2009.225881][T27258] device ip6_vti0 entered promiscuous mode [ 2009.236220][T27258] device sit0 entered promiscuous mode [ 2009.258051][T27258] device ip6tnl0 entered promiscuous mode [ 2009.279569][T27258] device ip6gre0 entered promiscuous mode [ 2009.299290][T27258] device syz_tun entered promiscuous mode [ 2009.318627][T27258] device ip6gretap0 entered promiscuous mode [ 2009.344762][T27258] device vcan0 entered promiscuous mode [ 2009.357500][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2009.372544][T27258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2009.385280][T27258] device bond0 entered promiscuous mode [ 2009.398497][T27258] device nlmon0 entered promiscuous mode [ 2009.405049][T27258] device batadv0 entered promiscuous mode [ 2009.413188][T27258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2009.422409][T27258] device vxcan0 entered promiscuous mode [ 2009.430685][T27258] device vxcan1 entered promiscuous mode [ 2009.446573][T27258] device veth0 entered promiscuous mode [ 2009.457834][T27258] device veth1 entered promiscuous mode [ 2009.476205][T27258] device wg0 entered promiscuous mode [ 2009.490735][T27258] device wg1 entered promiscuous mode [ 2009.501823][T27258] device wg2 entered promiscuous mode [ 2009.514828][T27258] device veth0_to_bridge entered promiscuous mode [ 2009.533535][T27258] device veth1_to_bridge entered promiscuous mode [ 2009.533769][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 2009.533781][ T26] audit: type=1326 audit(2000000703.808:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2009.571292][T27258] device bridge_slave_1 entered promiscuous mode [ 2009.578345][T27258] device veth0_to_bond entered promiscuous mode [ 2009.585545][T27258] device bond_slave_0 entered promiscuous mode [ 2009.592932][T27258] device veth1_to_bond entered promiscuous mode [ 2009.600155][ T14] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2009.601353][T27258] device bond_slave_1 entered promiscuous mode [ 2009.615323][T27258] device veth0_to_team entered promiscuous mode [ 2009.622893][T27258] device team_slave_0 entered promiscuous mode [ 2009.629930][T27258] device veth1_to_team entered promiscuous mode [ 2009.637344][T27258] device team_slave_1 entered promiscuous mode [ 2009.644702][T27258] device veth0_to_batadv entered promiscuous mode [ 2009.651736][T27258] device batadv_slave_0 entered promiscuous mode [ 2009.659110][T27258] device veth1_to_batadv entered promiscuous mode [ 2009.663978][ T26] audit: type=1326 audit(2000000703.855:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2009.668697][T27258] device batadv_slave_1 entered promiscuous mode [ 2009.698338][T27258] device xfrm0 entered promiscuous mode [ 2009.704687][T27258] device veth0_to_hsr entered promiscuous mode [ 2009.712679][T27258] device veth1_to_hsr entered promiscuous mode [ 2009.720165][T27258] device hsr0 entered promiscuous mode [ 2009.726478][T27258] device veth1_virt_wifi entered promiscuous mode [ 2009.733737][ T26] audit: type=1326 audit(2000000703.864:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2009.760804][T27258] device veth0_virt_wifi entered promiscuous mode [ 2009.767920][T27258] device virt_wifi0 entered promiscuous mode [ 2009.774503][T27258] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2009.791107][ T26] audit: type=1326 audit(2000000703.864:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2009.807525][ T14] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 2009.819923][ T26] audit: type=1326 audit(2000000703.864:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2009.848254][T27263] netlink: 'syz.5.24773': attribute type 1 has an invalid length. [ 2009.867035][T27275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2009.867718][ T14] usb 2-1: config 0 has no interface number 0 [ 2009.874286][T27275] IPv6: NLM_F_CREATE should be set when creating new route [ 2009.887733][T27275] IPv6: NLM_F_CREATE should be set when creating new route [ 2009.915871][ T14] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2009.934523][ T26] audit: type=1326 audit(2000000703.873:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2009.964073][ T14] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2010.006018][ T14] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2010.027461][ T26] audit: type=1326 audit(2000000703.873:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2010.038567][ T14] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2010.120626][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 2010.130008][ T26] audit: type=1326 audit(2000000703.883:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2010.165151][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2010.177499][ T14] usb 2-1: Product: syz [ 2010.182164][ T14] usb 2-1: Manufacturer: syz [ 2010.205860][ T26] audit: type=1326 audit(2000000703.883:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27278 comm="syz.4.24781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2010.241515][ T14] usb 2-1: SerialNumber: syz [ 2010.260340][ T14] usb 2-1: config 0 descriptor?? [ 2010.291959][ T14] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2010.339353][ T14] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input144 [ 2010.523535][T15048] usb 2-1: USB disconnect, device number 67 [ 2010.531349][T15048] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2010.666340][T27301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24791'. [ 2010.754499][T27304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24793'. [ 2010.779303][T27304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24793'. [ 2010.791570][T27304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24793'. [ 2010.948637][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24798'. [ 2010.968778][T15365] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 2011.184305][T15365] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2011.204223][T27322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24802'. [ 2011.213328][T27322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24802'. [ 2011.216212][T15365] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.257060][T15365] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2011.288368][T15365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.321921][T15365] hub 4-1:4.0: USB hub found [ 2011.539170][T15365] hub 4-1:4.0: 3 ports detected [ 2011.544149][T15365] usb 4-1: selecting invalid altsetting 1 [ 2011.561410][T15365] hub 4-1:4.0: Using single TT (err -22) [ 2011.765841][T15365] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 2011.781980][T15365] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 2011.836080][T15365] usb 4-1: USB disconnect, device number 85 [ 2011.995992][T15048] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2012.027757][ T14] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2012.198874][T15048] usb 6-1: Using ep0 maxpacket: 16 [ 2012.206200][T15048] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2012.220260][T15048] usb 6-1: config 0 has no interface number 0 [ 2012.234642][T15048] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2012.244007][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 2012.251387][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2012.267979][T15048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.279246][ T14] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2012.295100][T15048] usb 6-1: Product: syz [ 2012.299335][T15048] usb 6-1: Manufacturer: syz [ 2012.314933][T15048] usb 6-1: SerialNumber: syz [ 2012.319930][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 3 [ 2012.332629][T15048] usb 6-1: config 0 descriptor?? [ 2012.347588][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 224 [ 2012.360801][T15048] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2012.382792][ T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2012.402138][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.423971][ T14] usb 2-1: Product: syz [ 2012.428232][ T14] usb 2-1: Manufacturer: syz [ 2012.432894][ T14] usb 2-1: SerialNumber: syz [ 2012.464719][ T14] usb 2-1: config 0 descriptor?? [ 2012.526007][ T26] audit: type=1326 audit(2000000706.603:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27373 comm="syz.3.24828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2012.709345][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 2012.717700][ T14] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 2012.725083][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 2012.753279][ T14] usb 2-1: USB disconnect, device number 68 [ 2012.776156][T15048] gspca_spca1528: reg_w err -71 [ 2012.791053][ T14] mcba_usb 2-1:0.0 can0: device disconnected [ 2012.808805][T15048] spca1528: probe of 6-1:0.1 failed with error -71 [ 2012.832618][T15048] usb 6-1: USB disconnect, device number 31 [ 2012.865269][T27381] delete_channel: no stack [ 2013.047412][T27390] program syz.4.24835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2013.507625][T27415] tunl0: Caught tx_queue_len zero misconfig [ 2014.102919][T15365] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2014.244252][T27447] netlink: 52 bytes leftover after parsing attributes in process `syz.4.24858'. [ 2014.312577][T27451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.24861'. [ 2014.323793][T15365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 528 [ 2014.338168][T15365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2014.368480][T15365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2014.402963][T15365] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 2014.433796][T15365] usb 4-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 2014.455407][T15365] usb 4-1: Product: syz [ 2014.477026][T15365] usb 4-1: Manufacturer: syz [ 2014.482819][T15365] usb 4-1: SerialNumber: syz [ 2014.520788][T27432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2014.545363][T15365] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 2014.626529][T15365] scsi host1: usb-storage 4-1:1.0 [ 2014.694573][T15365] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 2014.805184][ T14] usb 4-1: USB disconnect, device number 86 [ 2015.450753][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2015.550670][T27502] netlink: 292 bytes leftover after parsing attributes in process `syz.3.24877'. [ 2016.582501][T27540] xt_hashlimit: max too large, truncated to 1048576 [ 2016.589571][T27540] xt_hashlimit: overflow, try lower: 137438953472/8 [ 2016.605979][T15365] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 2016.822756][T15365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2016.847940][T15365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.872893][T15365] usb 3-1: string descriptor 0 read error: -22 [ 2016.891193][T15365] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2016.919655][T15365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.951969][T15365] usb 3-1: bad CDC descriptors [ 2017.075762][T27557] netlink: 'syz.4.24904': attribute type 10 has an invalid length. [ 2017.094742][T27557] device hsr0 left promiscuous mode [ 2017.100829][T27557] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2017.184666][T15365] usb 3-1: USB disconnect, device number 66 [ 2017.404547][T27563] loop4: detected capacity change from 0 to 36864 [ 2017.473225][T27563] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2017.528520][T27563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2017.612003][T27563] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 2017.764055][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2017.975295][T27589] ip_tables: iptables: counters copy to user failed while replacing table [ 2018.290213][T15365] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2018.510096][T15365] usb 2-1: Using ep0 maxpacket: 8 [ 2018.519335][T15365] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2018.542308][T15365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2018.583487][T15365] usb 2-1: Product: syz [ 2018.606859][T15365] usb 2-1: Manufacturer: syz [ 2018.611542][T15365] usb 2-1: SerialNumber: syz [ 2018.650230][T15365] usb 2-1: config 0 descriptor?? [ 2018.674081][T15365] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2018.903486][T27622] nvme_tcp: malformed address passed: 127.:.0.1:4420 [ 2018.939174][T15365] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 2018.946608][T15365] sq905: probe of 2-1:0.0 failed with error -71 [ 2018.991653][T15365] usb 2-1: USB disconnect, device number 69 [ 2019.506465][T27655] loop3: detected capacity change from 0 to 736 [ 2020.355865][T27680] netlink: 'syz.1.24956': attribute type 4 has an invalid length. [ 2020.387858][T27680] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.24956'. [ 2020.512980][T27687] loop3: detected capacity change from 0 to 64 [ 2020.549838][T27689] loop2: detected capacity change from 0 to 2048 [ 2020.557958][T27035] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2020.592166][T27691] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2020.881521][T27701] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 2021.981568][T27749] netlink: 136 bytes leftover after parsing attributes in process `syz.3.24984'. [ 2022.023740][T27749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24984'. [ 2022.060522][T27749] netlink: 'syz.3.24984': attribute type 3 has an invalid length. [ 2022.104415][T27749] netlink: 1 bytes leftover after parsing attributes in process `syz.3.24984'. [ 2022.176558][T27757] loop5: detected capacity change from 0 to 16 [ 2022.214760][T27757] erofs: (device loop5): mounted with root inode @ nid 36. [ 2022.720326][T27783] xt_bpf: check failed: parse error [ 2022.766815][T27785] loop3: detected capacity change from 0 to 1024 [ 2022.794783][T27787] futex_wake_op: syz.5.25003 tries to shift op by 144; fix this program [ 2023.216677][T15365] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 2023.433074][T15365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2023.451475][T15365] usb 3-1: not running at top speed; connect to a high speed hub [ 2023.470615][T15365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.502630][T15365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2023.535067][T15365] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2023.561657][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25018'. [ 2023.582152][T15365] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2023.612353][T15365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2023.623273][T15365] usb 3-1: Product: syz [ 2023.627482][T15365] usb 3-1: Manufacturer: syz [ 2023.665613][T15365] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 2023.796360][T27831] hugetlbfs: Bad value '"K%' for mount option 'size' [ 2023.796360][T27831] [ 2024.095475][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 2024.126180][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1). [ 2024.146604][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 2024.169465][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1). [ 2024.193815][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1). [ 2024.214330][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 2024.234576][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 2024.255015][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 2024.287213][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1). [ 2024.310950][T15365] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 2024.338165][T15365] usb 3-1: No streaming interface found for terminal 2. [ 2024.367434][T15365] usb 3-1: USB disconnect, device number 67 [ 2024.414775][ T14] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2024.637047][T27868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25039'. [ 2024.659878][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 2024.667003][ T14] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 2024.692758][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.703005][ T14] usb 4-1: config 0 has no interface number 0 [ 2024.735519][ T14] usb 4-1: config 0 interface 52 has no altsetting 0 [ 2024.760181][ T14] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2024.789238][ T14] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2024.797642][ T14] usb 4-1: Product: syz [ 2024.829900][ T14] usb 4-1: Manufacturer: syz [ 2024.845353][ T14] usb 4-1: SerialNumber: syz [ 2024.863733][ T14] usb 4-1: config 0 descriptor?? [ 2024.882824][T27875] loop4: detected capacity change from 0 to 33280 [ 2024.971742][T27875] EXT4-fs: Ignoring removed oldalloc option [ 2024.982883][T27875] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2025.025183][T27875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 2025.033399][T27875] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2025.045800][T27875] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.25043: bad orphan inode 267 [ 2025.087658][T27875] EXT4-fs (loop4): Remounting filesystem read-only [ 2025.121122][T27881] autofs4:pid:27881:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 2025.134850][T27881] autofs4:pid:27881:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 2025.143643][T27883] xt_TCPMSS: Only works on TCP SYN packets [ 2025.154019][T27875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2025.217580][T27875] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.25043: dx entry: limit 0 != root limit 125 [ 2025.270595][T27875] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.25043: Corrupt directory, running e2fsck is recommended [ 2025.353287][ T14] usb 4-1: USB disconnect, device number 87 [ 2025.421560][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2025.518586][T27895] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1031) [ 2025.559571][T27895] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 2025.581417][T27897] device vlan0 entered promiscuous mode [ 2026.578212][T27949] futex_wake_op: syz.4.25079 tries to shift op by -1; fix this program [ 2026.981953][T15048] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2027.185224][T15048] usb 4-1: Using ep0 maxpacket: 8 [ 2027.192384][T15048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.249121][T15048] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2027.270468][T15048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2027.300982][T15048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2027.324649][T15048] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2027.333753][T15048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.367908][T15048] hub 4-1:1.0: bad descriptor, ignoring hub [ 2027.373908][T15048] hub: probe of 4-1:1.0 failed with error -5 [ 2027.391469][T15048] cdc_wdm 4-1:1.0: skipping garbage [ 2027.396758][T15048] cdc_wdm 4-1:1.0: skipping garbage [ 2027.441094][T15048] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2027.454303][T15048] cdc_wdm 4-1:1.0: Unknown control protocol [ 2027.576638][T27996] Lens A: ================= START STATUS ================= [ 2027.595311][T27996] Lens A: Focus, Absolute: 0 [ 2027.601128][T27996] Lens A: ================== END STATUS ================== [ 2027.730834][T15048] usb 4-1: USB disconnect, device number 88 [ 2027.751086][T28002] xt_time: unknown flags 0xc [ 2027.795108][T24579] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2028.010667][T24579] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 2028.042169][T24579] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.319115][T28024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25116'. [ 2028.371531][T28030] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25119'. [ 2028.394021][T28030] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25119'. [ 2028.501600][T24579] pn533_usb 6-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 2028.509575][T24579] pn533_usb: probe of 6-1:1.0 failed with error -71 [ 2028.544922][T24579] usb 6-1: USB disconnect, device number 32 [ 2028.757069][T28044] CIFS mount error: No usable UNC path provided in device string! [ 2028.757069][T28044] [ 2028.778336][T28044] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2029.167098][T28059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25132'. [ 2029.205681][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25134'. [ 2029.388289][T28068] netlink: 'syz.4.25136': attribute type 1 has an invalid length. [ 2029.649120][T28079] syz.5.25142: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 2029.704577][T28079] CPU: 1 PID: 28079 Comm: syz.5.25142 Not tainted syzkaller #0 [ 2029.712204][T28079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2029.722306][T28079] Call Trace: [ 2029.725674][T28079] [ 2029.728653][T28079] dump_stack_lvl+0x188/0x24e [ 2029.733427][T28079] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2029.739911][T28079] ? show_regs_print_info+0x12/0x12 [ 2029.745177][T28079] ? load_image+0x410/0x410 [ 2029.749742][T28079] ? __rcu_read_unlock+0x78/0xd0 [ 2029.754739][T28079] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2029.761220][T28079] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2029.767784][T28079] warn_alloc+0x242/0x330 [ 2029.772214][T28079] ? zone_watermark_ok_safe+0x270/0x270 [ 2029.777839][T28079] ? __mutex_trylock_common+0x15c/0x260 [ 2029.783453][T28079] __vmalloc_node_range+0x11e/0x1380 [ 2029.788800][T28079] ? rcu_is_watching+0x11/0xa0 [ 2029.793654][T28079] ? trace_contention_end+0x5f/0x170 [ 2029.799013][T28079] ? __mutex_lock+0x1ab/0xb40 [ 2029.803770][T28079] ? tomoyo_path_number_perm+0x205/0x650 [ 2029.809473][T28079] ? dvb_dvr_do_ioctl+0x75/0x220 [ 2029.814503][T28079] ? tomoyo_path_number_perm+0x205/0x650 [ 2029.820207][T28079] ? free_vm_area+0x50/0x50 [ 2029.824771][T28079] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 2029.829857][T28079] vmalloc+0x75/0x80 [ 2029.833812][T28079] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 2029.838897][T28079] dvb_dvr_do_ioctl+0x12a/0x220 [ 2029.843808][T28079] dvb_usercopy+0x191/0x2b0 [ 2029.848405][T28079] ? dvb_dvr_release+0x3d0/0x3d0 [ 2029.853392][T28079] ? dvb_generic_ioctl+0xb0/0xb0 [ 2029.858394][T28079] ? dvb_dvr_poll+0x230/0x230 [ 2029.863128][T28079] dvb_dvr_ioctl+0x25/0x30 [ 2029.867585][T28079] __se_sys_ioctl+0xfa/0x170 [ 2029.872242][T28079] do_syscall_64+0x4c/0xa0 [ 2029.876710][T28079] ? clear_bhb_loop+0x60/0xb0 [ 2029.881432][T28079] ? clear_bhb_loop+0x60/0xb0 [ 2029.886158][T28079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2029.892089][T28079] RIP: 0033:0x7f60765a94d9 [ 2029.896560][T28079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.916200][T28079] RSP: 002b:00007f60773bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2029.924650][T28079] RAX: ffffffffffffffda RBX: 00007f6076825fa0 RCX: 00007f60765a94d9 [ 2029.932655][T28079] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 2029.940684][T28079] RBP: 00007f607663804e R08: 0000000000000000 R09: 0000000000000000 [ 2029.948696][T28079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2029.956705][T28079] R13: 00007f6076826038 R14: 00007f6076825fa0 R15: 00007ffc63c782e8 [ 2029.964726][T28079] [ 2029.978245][T28079] Mem-Info: [ 2029.981617][T28079] active_anon:8429 inactive_anon:39 isolated_anon:0 [ 2029.981617][T28079] active_file:1821 inactive_file:41189 isolated_file:0 [ 2029.981617][T28079] unevictable:768 dirty:359 writeback:0 [ 2029.981617][T28079] slab_reclaimable:20020 slab_unreclaimable:107398 [ 2029.981617][T28079] mapped:30263 shmem:1531 pagetables:800 [ 2029.981617][T28079] sec_pagetables:0 bounce:0 [ 2029.981617][T28079] kernel_misc_reclaimable:0 [ 2029.981617][T28079] free:1297913 free_pcp:11416 free_cma:0 [ 2029.985908][T28086] device vlan0 entered promiscuous mode [ 2030.081480][T28079] Node 0 active_anon:33704kB inactive_anon:156kB active_file:7284kB inactive_file:164560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121008kB dirty:1448kB writeback:0kB shmem:4556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12236kB pagetables:3132kB sec_pagetables:0kB all_unreclaimable? no [ 2030.136186][T28079] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2030.137886][T24579] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2030.191019][T28079] Node 0 DMA free:15352kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2030.275647][T28079] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 2030.303752][T28079] Node 0 DMA32 free:1270372kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:33704kB inactive_anon:156kB active_file:7284kB inactive_file:164560kB unevictable:1536kB writepending:1448kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:26396kB local_pcp:8604kB free_cma:0kB [ 2030.349649][T28079] lowmem_reserve[]: 0 0 1 1 1 [ 2030.357087][T28079] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2030.397152][T28079] lowmem_reserve[]: 0 0 0 0 0 [ 2030.401962][T28079] Node 1 Normal free:3905928kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19000kB local_pcp:13492kB free_cma:0kB [ 2030.444252][T28079] lowmem_reserve[]: 0 0 0 0 0 [ 2030.467876][T28079] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 2030.492596][T24579] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 2030.511963][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2030.520425][T24579] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2030.527022][T28079] Node 0 DMA32: 1*4kB (M) 916*8kB (ME) 1426*16kB (UME) 1097*32kB (UME) 484*64kB (UME) 309*128kB (UME) 124*256kB (UME) 34*512kB (UME) 18*1024kB (UM) 13*2048kB (UME) 254*4096kB (UM) = 1270372kB [ 2030.557382][T24579] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2030.592285][T24579] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2030.603991][T28079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2030.622457][T24579] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2030.636635][T24579] usb 3-1: Product: syz [ 2030.642417][T24579] usb 3-1: Manufacturer: syz [ 2030.649849][T24579] usb 3-1: SerialNumber: syz [ 2030.674118][T28079] Node 1 Normal: 124*4kB (UME) 51*8kB (UME) 32*16kB (UME) 114*32kB (UME) 51*64kB (UME) 22*128kB (UME) 8*256kB (UE) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3905928kB [ 2030.684814][T24579] usb 3-1: config 0 descriptor?? [ 2030.723924][T28079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2030.736765][T24579] hub 3-1:0.0: bad descriptor, ignoring hub [ 2030.747189][T28079] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2030.764503][T24579] hub: probe of 3-1:0.0 failed with error -5 [ 2030.775678][T28079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2030.791166][T24579] usb 3-1: selecting invalid altsetting 0 [ 2030.817273][T28079] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2030.862899][T28079] 44972 total pagecache pages [ 2030.878324][T28079] 29 pages in swap cache [ 2030.896970][T28079] Free swap = 124208kB [ 2030.914119][T28079] Total swap = 124996kB [ 2030.935733][T28079] 2097051 pages RAM [ 2030.946753][T28079] 0 pages HighMem/MovableOnly [ 2030.956298][T28079] 419799 pages reserved [ 2030.979993][T28079] 0 pages cma reserved [ 2031.121873][T24170] usb 3-1: USB disconnect, device number 68 [ 2031.190485][T28110] loop5: detected capacity change from 0 to 64 [ 2031.272068][T28113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25158'. [ 2031.324998][T28113] netlink: 108 bytes leftover after parsing attributes in process `syz.1.25158'. [ 2031.338227][T28113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25158'. [ 2031.347893][T28113] netlink: 108 bytes leftover after parsing attributes in process `syz.1.25158'. [ 2031.358070][T28113] netlink: 84 bytes leftover after parsing attributes in process `syz.1.25158'. [ 2031.477725][T28118] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 2031.886864][T28133] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 2032.142571][T28146] x_tables: unsorted entry at hook 1 [ 2032.816277][T28182] ERROR: device name not specified. [ 2033.045478][T28184] loop2: detected capacity change from 0 to 4096 [ 2033.080289][T28184] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 2033.158606][T28184] ntfs3: loop2: mft corrupted [ 2033.195925][T28184] ntfs3: loop2: Failed to load $Extend. [ 2033.247002][T28184] ntfs3: loop2: ino=1e, mi_enum_attr [ 2033.264987][T28184] ntfs3: loop2: ino=1e, mi_enum_attr [ 2033.656872][T28219] netlink: 'syz.1.25207': attribute type 1 has an invalid length. [ 2033.837683][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 2033.837700][ T26] audit: type=1326 audit(2000000726.525:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2033.912502][ T26] audit: type=1326 audit(2000000726.544:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2033.981084][ T26] audit: type=1326 audit(2000000726.544:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2034.054747][ T26] audit: type=1326 audit(2000000726.544:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2034.135425][ T26] audit: type=1326 audit(2000000726.544:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2034.225126][ T26] audit: type=1326 audit(2000000726.544:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2034.323240][ T26] audit: type=1326 audit(2000000726.553:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2034.363422][T28243] __nla_validate_parse: 2 callbacks suppressed [ 2034.363440][T28243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25219'. [ 2034.407879][T28239] netlink: 'syz.5.25217': attribute type 8 has an invalid length. [ 2034.437671][T28243] netlink: 31 bytes leftover after parsing attributes in process `syz.2.25219'. [ 2034.446832][ T26] audit: type=1326 audit(2000000726.553:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2034.459449][T28239] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2034.483527][T28243] netlink: 'syz.2.25219': attribute type 3 has an invalid length. [ 2034.534138][T28243] netlink: 'syz.2.25219': attribute type 2 has an invalid length. [ 2034.542020][T28243] netlink: 31 bytes leftover after parsing attributes in process `syz.2.25219'. [ 2034.555279][ T26] audit: type=1326 audit(2000000726.553:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.2.25211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2035.796232][T24579] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2035.974928][T28269] loop5: detected capacity change from 0 to 32768 [ 2036.031546][T24579] usb 3-1: Using ep0 maxpacket: 8 [ 2036.048413][T24579] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2036.101942][T28269] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2036.122105][T24579] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2036.176631][T24579] usb 3-1: Product: syz [ 2036.185293][T24579] usb 3-1: Manufacturer: syz [ 2036.224536][T24579] usb 3-1: SerialNumber: syz [ 2036.255329][T24579] usb 3-1: config 0 descriptor?? [ 2036.300277][T24579] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2036.348236][ T4871] ocfs2: Unmounting device (7,5) on (node local) [ 2036.500627][T24579] gspca_zc3xx: reg_w_i err -71 [ 2036.507271][T24579] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 2036.541549][T24579] usb 3-1: USB disconnect, device number 69 [ 2036.921726][T28316] netlink: 'syz.1.25255': attribute type 29 has an invalid length. [ 2036.941141][T28316] netlink: 'syz.1.25255': attribute type 29 has an invalid length. [ 2037.071022][T28323] netlink: 292 bytes leftover after parsing attributes in process `syz.5.25257'. [ 2037.164207][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25259'. [ 2037.382278][T28339] CIFS: VFS: bad security option: kr!qÌ [ 2037.550727][ T26] audit: type=1326 audit(1912.730:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28347 comm="syz.5.25270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2037.981484][T28368] netlink: 5 bytes leftover after parsing attributes in process `syz.3.25280'. [ 2038.008989][T28368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2038.045712][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25281'. [ 2038.860529][T28405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25297'. [ 2039.039934][T28407] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 2039.215215][T28420] netlink: 172 bytes leftover after parsing attributes in process `syz.5.25303'. [ 2039.404205][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.716545][T28443] device vlan0 entered promiscuous mode [ 2039.963922][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 2039.963938][ T26] audit: type=1326 audit(1914.983:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.043363][ T26] audit: type=1326 audit(1914.983:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.128413][ T26] audit: type=1326 audit(1915.048:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.170348][T28463] loop2: detected capacity change from 0 to 4096 [ 2040.204282][ T26] audit: type=1326 audit(1915.048:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.282591][T28470] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2040.304965][ T26] audit: type=1326 audit(1915.048:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.321572][T28463] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 2040.385868][T28463] Remounting filesystem read-only [ 2040.416145][ T26] audit: type=1326 audit(1915.048:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.477032][ T26] audit: type=1326 audit(1915.048:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.501815][T28474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25330'. [ 2040.578711][ T26] audit: type=1326 audit(1915.048:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.685350][ T26] audit: type=1326 audit(1915.048:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28458 comm="syz.5.25323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2040.813022][T28486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25336'. [ 2040.831560][T28487] xt_TCPMSS: Only works on TCP SYN packets [ 2040.838761][ T26] audit: type=1326 audit(1915.806:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.4.25337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2041.018360][T28494] loop4: detected capacity change from 0 to 8 [ 2041.066803][T28494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2041.107292][T28494] SQUASHFS error: Failed to read block 0x91: -5 [ 2041.144274][T28494] SQUASHFS error: Unable to read metadata cache entry [8f] [ 2041.166189][T28494] SQUASHFS error: Unable to read inode 0x11f [ 2041.310570][T28508] loop2: detected capacity change from 0 to 128 [ 2041.353365][T28508] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2041.964499][T28541] loop4: detected capacity change from 0 to 256 [ 2042.066441][T28541] FAT-fs (loop4): Directory bread(block 64) failed [ 2042.094081][T28545] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.107198][T28541] FAT-fs (loop4): Directory bread(block 65) failed [ 2042.113870][T28541] FAT-fs (loop4): Directory bread(block 66) failed [ 2042.165501][T28541] FAT-fs (loop4): Directory bread(block 67) failed [ 2042.191760][T28541] FAT-fs (loop4): Directory bread(block 68) failed [ 2042.218390][T28541] FAT-fs (loop4): Directory bread(block 69) failed [ 2042.235723][T28541] FAT-fs (loop4): Directory bread(block 70) failed [ 2042.279299][T28541] FAT-fs (loop4): Directory bread(block 71) failed [ 2042.285972][T28541] FAT-fs (loop4): Directory bread(block 72) failed [ 2042.317467][T28541] FAT-fs (loop4): Directory bread(block 73) failed [ 2042.374822][T28541] overlayfs: filesystem on './file0' not supported [ 2042.458975][T28558] netlink: 'syz.3.25370': attribute type 12 has an invalid length. [ 2042.535075][T15048] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2042.577628][T28562] netlink: 'syz.4.25372': attribute type 2 has an invalid length. [ 2042.596817][T28560] loop5: detected capacity change from 0 to 4096 [ 2042.618497][T28562] device .*! entered promiscuous mode [ 2042.640852][T28560] ntfs3: loop5: mft corrupted [ 2042.656062][T28560] ntfs3: loop5: Failed to load $MFT. [ 2042.740268][T15048] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2042.770802][T15048] usb 3-1: config 0 has no interface number 0 [ 2042.776997][T15048] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2042.823399][T15048] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2042.877500][T15048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.885573][T15048] usb 3-1: Product: syz [ 2042.920203][T15048] usb 3-1: Manufacturer: syz [ 2042.931149][T15048] usb 3-1: SerialNumber: syz [ 2042.961000][T15048] usb 3-1: config 0 descriptor?? [ 2043.015594][T15048] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 2043.230555][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 2043.456191][ T14] usb 3-1: USB disconnect, device number 70 [ 2043.478806][ T14] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 2044.326035][T28621] device lo left promiscuous mode [ 2044.343036][T28621] device tunl0 left promiscuous mode [ 2044.355730][T28621] device gre0 left promiscuous mode [ 2044.373082][T28621] device gretap0 left promiscuous mode [ 2044.383208][T28621] device erspan0 left promiscuous mode [ 2044.390166][T28621] device ip_vti0 left promiscuous mode [ 2044.397463][T28621] device ip6_vti0 left promiscuous mode [ 2044.403996][T28621] device sit0 left promiscuous mode [ 2044.411296][T28621] device ip6tnl0 left promiscuous mode [ 2044.418494][T28621] device ip6gre0 left promiscuous mode [ 2044.425154][T28621] device syz_tun left promiscuous mode [ 2044.434822][T28621] device ip6gretap0 left promiscuous mode [ 2044.449106][T28621] device vcan0 left promiscuous mode [ 2044.460832][T28621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2044.479927][T28621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2044.491475][T28621] device team0 left promiscuous mode [ 2044.507351][T28621] device dummy0 left promiscuous mode [ 2044.514130][T24579] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2044.522679][T28621] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2044.543777][T28621] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2044.555294][T28621] device 60ªX¹¦À left promiscuous mode [ 2044.568726][T28621] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 2044.707861][T24579] usb 6-1: not running at top speed; connect to a high speed hub [ 2044.737536][T24579] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2044.772792][T24579] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2044.802786][T24579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.823223][T24579] usb 6-1: Product: syz [ 2044.843484][T24579] usb 6-1: Manufacturer: syz [ 2044.854287][T24579] usb 6-1: SerialNumber: syz [ 2044.898004][T24579] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 2044.917076][T24579] keyspan 6-1:1.0: unsupported endpoint type 0 [ 2044.928166][T24579] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2044.953640][T24579] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2044.985165][T24579] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2045.018994][T24579] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2045.070472][T15048] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2045.262397][T28645] loop4: detected capacity change from 0 to 4096 [ 2045.292893][T28645] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 2045.306089][T15048] usb 2-1: Using ep0 maxpacket: 32 [ 2045.329461][T15048] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.360034][T24579] usb 6-1: USB disconnect, device number 33 [ 2045.360349][T15048] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2045.394774][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.404279][T24579] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2045.416738][T15048] usb 2-1: Product: syz [ 2045.420970][T15048] usb 2-1: Manufacturer: syz [ 2045.433580][T15048] usb 2-1: SerialNumber: syz [ 2045.455507][T28653] netlink: 'syz.3.25416': attribute type 2 has an invalid length. [ 2045.477109][T28653] netlink: 'syz.3.25416': attribute type 1 has an invalid length. [ 2045.489366][T24579] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2045.500125][T15048] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2045.509271][T28645] ntfs3: loop4: mft corrupted [ 2045.515967][T28645] ntfs3: loop4: Failed to load $Extend. [ 2045.530475][T15048] imon 2-1:155.0: unable to initialize intf0, err -19 [ 2045.541616][T15048] imon:imon_probe: failed to initialize context! [ 2045.548022][T15048] imon 2-1:155.0: unable to register, err -19 [ 2045.566977][T24579] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2045.615065][T24579] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2045.668935][T24579] keyspan 6-1:1.0: device disconnected [ 2046.040495][T28670] tmpfs: Bad value for 'mpol' [ 2046.420604][T28689] tmpfs: Bad value for 'mpol' [ 2046.437882][T28687] loop5: detected capacity change from 0 to 4096 [ 2047.200517][T28713] cgroup: none used incorrectly [ 2047.500736][T28701] loop2: detected capacity change from 0 to 32768 [ 2047.630937][T28701] XFS (loop2): Mounting V5 Filesystem [ 2047.757828][T28701] XFS (loop2): Ending clean mount [ 2047.914656][ T4287] XFS (loop2): Unmounting Filesystem [ 2048.059080][T15365] usb 2-1: USB disconnect, device number 70 [ 2048.250505][T28753] futex_wake_op: syz.5.25463 tries to shift op by 32; fix this program [ 2048.544590][T28745] loop3: detected capacity change from 0 to 32768 [ 2048.610846][T27035] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2049.477557][T24579] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2049.671945][T24579] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 2049.703270][T24579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.735386][T24579] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2049.777671][T24579] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2049.807744][T24579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.845101][T24579] usb 4-1: config 0 descriptor?? [ 2049.866742][T24579] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2049.903841][T24579] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 2050.121064][T15365] usb 4-1: USB disconnect, device number 89 [ 2050.691837][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25505'. [ 2050.798055][T28847] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.25508'. [ 2050.867357][T28850] netlink: 'syz.3.25509': attribute type 4 has an invalid length. [ 2050.882084][T28850] netlink: 17 bytes leftover after parsing attributes in process `syz.3.25509'. [ 2051.277056][T28869] loop3: detected capacity change from 0 to 64 [ 2052.052618][T28906] netlink: 'syz.4.25536': attribute type 2 has an invalid length. [ 2052.226649][T28909] loop3: detected capacity change from 0 to 8 [ 2052.258084][T28909] /dev/loop3: Can't open blockdev [ 2052.288924][T28911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25540'. [ 2052.688732][T28931] loop4: detected capacity change from 0 to 64 [ 2052.730574][T28931] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 2053.029395][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 2053.029410][ T26] audit: type=1326 audit(1927.202:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.117904][ T26] audit: type=1326 audit(1927.220:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.196042][ T26] audit: type=1326 audit(1927.220:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.299692][ T26] audit: type=1326 audit(1927.220:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.391019][ T26] audit: type=1326 audit(1927.230:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.403424][T28953] loop5: detected capacity change from 0 to 33792 [ 2053.459434][ T26] audit: type=1326 audit(1927.230:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.469565][T28953] EXT4-fs: inline encryption not supported [ 2053.574280][T28953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2053.586224][ T26] audit: type=1326 audit(1927.230:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.611353][T28953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2053.686734][T28953] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2053.737126][ T26] audit: type=1326 audit(1927.230:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2053.806035][T28953] EXT4-fs error (device loop5): ext4_get_first_dir_block:3607: inode #12: comm syz.5.25561: directory missing '..' [ 2053.863620][T28953] EXT4-fs (loop5): Remounting filesystem read-only [ 2053.886603][ T26] audit: type=1326 audit(1927.230:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.3.25555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2054.044020][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 2054.046727][T28971] loop4: detected capacity change from 0 to 16 [ 2054.092701][T28971] erofs: (device loop4): mounted with root inode @ nid 36. [ 2054.160056][T28971] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 12 for nid 36, please upgrade kernel [ 2054.237707][T28971] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 12 for nid 36, please upgrade kernel [ 2054.277038][T28971] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-95] [ 2054.469600][T28986] netlink: 228 bytes leftover after parsing attributes in process `syz.1.25576'. [ 2054.486744][T28988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2054.505284][T28986] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz0 [ 2054.886819][T29004] loop5: detected capacity change from 0 to 33280 [ 2054.893758][T29006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.25586'. [ 2054.935501][T29004] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2054.987530][T29004] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2055.009275][T29004] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 2055.017796][T29004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2055.369546][T29026] IPv6: sit5: Disabled Multicast RS [ 2055.494842][T28994] loop4: detected capacity change from 0 to 32768 [ 2055.519444][T28994] (syz.4.25580,28994,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2055.597526][T28994] (syz.4.25580,28994,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2055.648148][T28994] JBD2: Ignoring recovery information on journal [ 2055.656429][T29004] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 2055.709827][T29004] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.25585: Directory hole found for htree leaf block 0 [ 2055.775955][T28994] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2055.960542][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 2056.393401][T29058] loop2: detected capacity change from 0 to 128 [ 2056.454714][T29058] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2056.507636][ T4285] ocfs2: Unmounting device (7,4) on (node local) [ 2057.096140][T29075] device geneve4 entered promiscuous mode [ 2057.138006][T29082] netlink: 'syz.2.25619': attribute type 2 has an invalid length. [ 2057.253613][T29084] loop5: detected capacity change from 0 to 33792 [ 2057.390572][T29084] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2057.449830][T29084] EXT4-fs error (device loop5): ext4_lookup:1860: comm syz.5.25621: inode #12: comm syz.5.25621: iget: illegal inode # [ 2057.511597][T29084] EXT4-fs (loop5): Remounting filesystem read-only [ 2057.658159][ T4871] EXT4-fs (loop5): unmounting filesystem. [ 2058.264261][T29092] loop4: detected capacity change from 0 to 32768 [ 2058.334158][T29115] netlink: 256 bytes leftover after parsing attributes in process `syz.2.25634'. [ 2058.358383][T29092] jfs_lookup: iget failed on inum 4 [ 2058.834971][T29121] nvme_rdma: malformed address passed: 1:4420 [ 2059.086777][T29137] netlink: 'syz.3.25644': attribute type 1 has an invalid length. [ 2059.115474][T29137] netlink: 220 bytes leftover after parsing attributes in process `syz.3.25644'. [ 2059.147467][T29137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25644'. [ 2059.315247][ T26] audit: type=1326 audit(1933.073:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2059.401098][ T26] audit: type=1326 audit(1933.101:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2059.477490][ T26] audit: type=1326 audit(1933.101:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2059.532391][ T26] audit: type=1326 audit(1933.101:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2059.589184][ T26] audit: type=1326 audit(1933.101:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2059.636950][ T26] audit: type=1326 audit(1933.157:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b7a94d9 code=0x7ffc0000 [ 2059.725272][ T26] audit: type=1326 audit(1933.166:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f4b769d0e code=0x7ffc0000 [ 2059.756297][T29156] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.25654'. [ 2059.778465][ T26] audit: type=1326 audit(1933.166:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f4b769d0e code=0x7ffc0000 [ 2059.848429][ T26] audit: type=1326 audit(1933.166:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f4b769d0e code=0x7ffc0000 [ 2059.958969][ T26] audit: type=1326 audit(1933.166:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29144 comm="syz.2.25649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f4b769d0e code=0x7ffc0000 [ 2060.068373][T29164] UBIFS error (pid: 29164): cannot open "ubi:0", error -19 [ 2060.536115][T29153] loop4: detected capacity change from 0 to 32768 [ 2060.538414][T29184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25668'. [ 2060.626689][T29184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25668'. [ 2060.665088][T29153] XFS (loop4): Mounting V5 Filesystem [ 2060.832570][T29153] XFS (loop4): Ending clean mount [ 2060.988924][ T4285] XFS (loop4): Unmounting Filesystem [ 2061.086720][T29209] ecryptfs_parse_options: eCryptfs: unrecognized option [ecrypt456789abcdef] [ 2061.126625][T29209] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2061.169349][T29209] Error parsing options; rc = [-22] [ 2062.003344][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2062.035701][T29251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2062.066685][T29251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2062.110513][T29251] device hsr0 entered promiscuous mode [ 2062.720056][T15365] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2062.787512][T29287] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2062.837748][T29291] netlink: 'syz.5.25716': attribute type 33 has an invalid length. [ 2062.845732][T29291] netlink: 152 bytes leftover after parsing attributes in process `syz.5.25716'. [ 2062.946531][T15365] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2062.966258][T15365] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2062.999335][T15365] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2063.040849][T15365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.051731][T15365] usb 3-1: Product: syz [ 2063.056087][T15365] usb 3-1: Manufacturer: syz [ 2063.081291][T15365] usb 3-1: SerialNumber: syz [ 2063.126687][T15365] usb 3-1: config 0 descriptor?? [ 2063.354784][T15365] mos7840 3-1:0.0: required endpoints missing [ 2063.367883][T29311] loop4: detected capacity change from 0 to 33280 [ 2063.433122][T29311] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 2063.490936][T29311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.25727: bg 0: block 255: padding at end of block bitmap is not set [ 2063.583407][T29311] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 2063.587454][T15365] usb 3-1: USB disconnect, device number 71 [ 2063.604809][T29311] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.25727: invalid indirect mapped block 1 (level 1) [ 2063.683367][T29311] EXT4-fs (loop4): 1 truncate cleaned up [ 2063.690069][T29311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2063.909354][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2063.988140][T29333] loop3: detected capacity change from 0 to 33280 [ 2064.036737][T29333] /dev/loop3: Can't open blockdev [ 2064.050811][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25737'. [ 2064.526696][T29351] device hsr0 entered promiscuous mode [ 2064.571579][T29351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2065.323782][T29353] loop5: detected capacity change from 0 to 32768 [ 2065.443491][T29353] XFS (loop5): Mounting V5 Filesystem [ 2065.497531][T29397] device wlan0 entered promiscuous mode [ 2065.544515][T29397] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2065.566850][T29353] XFS (loop5): Ending clean mount [ 2065.623497][T29392] loop4: detected capacity change from 0 to 4096 [ 2065.664031][T29392] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 2065.765297][ T4871] XFS (loop5): Unmounting Filesystem [ 2066.089316][T29410] netlink: 236 bytes leftover after parsing attributes in process `syz.2.25772'. [ 2066.703188][T29431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25782'. [ 2066.731452][T29431] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 2066.965105][T29448] loop4: detected capacity change from 0 to 64 [ 2067.813274][T29442] nvme nvme0: failed to connect socket: -512 [ 2068.836780][T29522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.25825'. [ 2069.558882][T29542] loop4: detected capacity change from 0 to 49152 [ 2069.589636][T29542] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 2069.635353][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25844'. [ 2069.695707][T29542] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.25836: bad orphan inode 65024 [ 2069.720056][T29542] EXT4-fs (loop4): mounted filesystem with ordered data mode. Quota mode: none. [ 2069.749559][T29542] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 26: comm syz.4.25836: bad entry in directory: inode out of bounds - offset=80, inode=4278190097, rec_len=16, size=4096 fake=0 [ 2070.020376][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2070.111655][T24170] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2070.317236][T24170] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.343881][T24170] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2070.380905][T24170] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 2070.430664][T24170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.463323][T24170] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 2070.580334][T29591] loop4: detected capacity change from 0 to 256 [ 2070.615370][T29591] exfat: Deprecated parameter 'utf8' [ 2070.631758][T29591] exfat: Deprecated parameter 'utf8' [ 2070.664239][T29591] exfat: Deprecated parameter 'utf8' [ 2070.678271][T24170] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 2070.699894][T29591] exfat: Deprecated parameter 'namecase' [ 2070.717722][T29591] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 2070.742683][T15365] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2070.773349][T24170] usb 4-1: USB disconnect, device number 90 [ 2071.001260][T15365] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 2071.009645][T15365] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.036078][T15365] usb 6-1: config 1 has no interface number 0 [ 2071.061790][T15365] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2071.115255][T15365] usb 6-1: config 1 interface 105 has no altsetting 0 [ 2071.124904][T15365] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2071.138546][T15365] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2071.156723][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25868'. [ 2071.165932][T15365] usb 6-1: Product: syz [ 2071.170211][T15365] usb 6-1: Manufacturer: syz [ 2071.181147][T15365] usb 6-1: SerialNumber: syz [ 2071.415566][T15365] aqc111: probe of 6-1:1.105 failed with error -22 [ 2071.575960][T29627] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 2071.609259][T29627] Error parsing options; rc = [-22] [ 2071.652221][T15365] usb 6-1: USB disconnect, device number 34 [ 2073.058425][T29691] loop4: detected capacity change from 0 to 256 [ 2073.261129][T29666] loop5: detected capacity change from 0 to 32768 [ 2073.447352][T29699] loop3: detected capacity change from 0 to 4096 [ 2073.460233][T29666] XFS (loop5): Mounting V5 Filesystem [ 2073.519001][T29713] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2073.563445][T29699] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 2073.621977][T29666] XFS (loop5): Ending clean mount [ 2073.672320][T29699] ntfs3: loop3: ino=19, mi_enum_attr [ 2073.791559][T29699] ntfs3: loop3: failed to convert "c46c" to euc-jp [ 2073.845314][T29699] ntfs3: loop3: ino=20, mi_enum_attr [ 2073.901181][ T4871] XFS (loop5): Unmounting Filesystem [ 2073.934976][T29725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.25920'. [ 2074.048842][T29727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25923'. [ 2074.447693][T29738] netlink: 'syz.1.25929': attribute type 1 has an invalid length. [ 2074.785368][T29751] netlink: 'syz.3.25935': attribute type 1 has an invalid length. [ 2074.796414][T29753] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25934'. [ 2074.848837][T29757] loop5: detected capacity change from 0 to 64 [ 2075.050083][T29763] loop4: detected capacity change from 0 to 33280 [ 2075.094662][T29763] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.25940: iget: bad i_size value: 38620345925642 [ 2075.152990][T29763] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.25940: couldn't read orphan inode 15 (err -117) [ 2075.291204][T29763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2075.418707][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2075.545564][T15365] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2075.643617][T29779] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2075.761272][T15365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2075.782813][T15365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2075.825474][T15365] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 2075.866439][T15365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.874651][T15365] usb 4-1: Product: syz [ 2075.918443][T15365] usb 4-1: Manufacturer: syz [ 2075.941799][T15365] usb 4-1: SerialNumber: syz [ 2075.977611][T15365] whiteheat 4-1:1.0: Connect Tech - WhiteHEAT converter detected [ 2076.133806][ T14] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2076.195151][T15365] usb 4-1: Connect Tech - WhiteHEAT: Couldn't get results [-90] [ 2076.217434][T15365] usb 4-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 2076.240751][T15365] usb 4-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 2076.272807][T15365] usb 4-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 2076.337204][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 2076.345583][ T14] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2076.377129][ T14] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 2076.414319][ T14] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 2076.446946][T15365] usb 4-1: USB disconnect, device number 91 [ 2076.452715][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2076.480144][ T14] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2076.514709][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.540481][ T14] usb 3-1: Product: syz [ 2076.554031][ T14] usb 3-1: Manufacturer: syz [ 2076.569179][ T14] usb 3-1: SerialNumber: syz [ 2076.590712][ T14] usb 3-1: config 0 descriptor?? [ 2076.641249][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25962'. [ 2076.751524][T29815] netlink: 1 bytes leftover after parsing attributes in process `syz.4.25964'. [ 2076.832257][ T14] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input146 [ 2077.085067][ T14] usb 3-1: USB disconnect, device number 72 [ 2077.085263][ C1] synaptics_usb 3-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2077.493382][T15048] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2077.717235][T15048] usb 4-1: Using ep0 maxpacket: 32 [ 2077.726608][T15048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.766656][T15048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2077.792171][T15048] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2077.812985][T15048] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2077.839655][T15048] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 2077.874679][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.899013][T15048] usb 4-1: Product: syz [ 2077.903270][T15048] usb 4-1: Manufacturer: syz [ 2077.920322][T15048] usb 4-1: SerialNumber: syz [ 2078.219989][T15048] usb 4-1: USB disconnect, device number 92 [ 2078.830875][T29891] netlink: 'syz.2.26002': attribute type 1 has an invalid length. [ 2078.980133][T29893] loop4: detected capacity change from 0 to 36864 [ 2079.013684][T29893] EXT4-fs: Ignoring removed nobh option [ 2079.032770][T29893] EXT4-fs: Ignoring removed bh option [ 2079.100549][T29893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2079.146555][T29905] AppArmor: change_hat: Invalid input '0' [ 2079.182977][T29893] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 2079.321738][T29914] x_tables: unsorted underflow at hook 3 [ 2079.353879][T29915] program syz.3.26012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2079.385366][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2079.669494][T29927] loop3: detected capacity change from 0 to 1024 [ 2080.013108][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26026'. [ 2080.680701][T29973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26041'. [ 2080.720528][T29975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2081.098069][T29991] ebt_limit: overflow, try lower: 0/0 [ 2081.521326][T30008] nvme_fabrics: testsubsysbä±@(¸¾—çyöëþ c¼Ð*‡ÒûÆ=é4 šc}²É)£«¹j™i„Q`Ç®T5í�eÏ3»¢š’W²vÖÕ€SH/¼íîíÕ{íüdUÃÃëoá' ¦c.€ |S¯Ž01 ¯ÁŽjt nÃü€€jÛ‰‰v£ÖÔ[âAl mÚõv•BünUBsý»Ñ«È2�h¤—PaJš|•˜‚­¤¸2³K©¼îhH@|òqÝ@M3Õë…ú)/¯(Ñ/äI×`Œ˜²ÖuWz‚= needs to be < 223 bytes [ 2081.677563][T30015] CIFS mount error: No usable UNC path provided in device string! [ 2081.677563][T30015] [ 2081.706955][T30015] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2082.041946][T30031] ebt_among: dst integrity fail: 200 [ 2082.347853][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 2082.347885][ T26] audit: type=1326 audit(1954.602:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.5.26074" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2082.446663][ T26] audit: type=1326 audit(1954.621:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.5.26074" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2082.508682][ T26] audit: type=1326 audit(1954.621:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.5.26074" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2082.562596][ T26] audit: type=1326 audit(1954.621:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.5.26074" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2082.619444][T24575] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2082.649568][T30060] loop5: detected capacity change from 0 to 1024 [ 2082.812497][ T26] audit: type=1326 audit(1955.042:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.1.26080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 2082.874609][T24575] usb 4-1: Using ep0 maxpacket: 16 [ 2082.881724][T24575] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2082.883791][ T26] audit: type=1326 audit(1955.060:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.1.26080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 2082.926291][T24575] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 2082.946129][T30068] loop5: detected capacity change from 0 to 512 [ 2082.960463][T24575] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 2082.993255][T24575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2083.014461][ T26] audit: type=1326 audit(1955.079:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.1.26080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 2083.048947][T24575] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2083.087830][T24575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.096031][T24575] usb 4-1: Product: syz [ 2083.129588][ T26] audit: type=1326 audit(1955.079:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.1.26080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c7a94d9 code=0x7ffc0000 [ 2083.136229][T24575] usb 4-1: Manufacturer: syz [ 2083.203375][T24575] usb 4-1: SerialNumber: syz [ 2083.226530][T24575] usb 4-1: config 0 descriptor?? [ 2083.232824][T30046] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2083.272454][T24575] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2083.303776][T30074] comedi comedi0: comedi_config --init_data is deprecated [ 2083.521465][T30084] syz.5.26089: attempt to access beyond end of device [ 2083.521465][T30084] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2083.607688][T30088] netlink: 456 bytes leftover after parsing attributes in process `syz.4.26092'. [ 2083.953320][ T14] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2084.022191][T24579] usb 4-1: USB disconnect, device number 93 [ 2084.130577][T30112] netlink: 'syz.5.26104': attribute type 21 has an invalid length. [ 2084.148185][T30112] IPv6: NLM_F_CREATE should be specified when creating new route [ 2084.156588][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 2084.163766][ T14] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 2084.179285][T30112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2084.186592][T30112] IPv6: NLM_F_CREATE should be set when creating new route [ 2084.193948][T30112] IPv6: NLM_F_CREATE should be set when creating new route [ 2084.201227][T30112] IPv6: NLM_F_CREATE should be set when creating new route [ 2084.209901][ T14] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.224312][ T14] usb 3-1: config 3 has no interface number 0 [ 2084.230533][ T14] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2084.241841][ T14] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2084.266063][ T14] usb 3-1: config 3 interface 45 has no altsetting 0 [ 2084.281465][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 2084.298848][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.314513][ T14] usb 3-1: Product: syz [ 2084.322368][ T14] usb 3-1: Manufacturer: syz [ 2084.332912][ T14] usb 3-1: SerialNumber: syz [ 2084.565955][T15048] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2084.621111][ T14] usb 3-1: USB disconnect, device number 73 [ 2084.707270][T30118] netlink: 'syz.3.26107': attribute type 46 has an invalid length. [ 2084.734078][T30118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26107'. [ 2084.779529][T15048] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2084.798235][T15048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.825341][T15048] usb 2-1: config 0 descriptor?? [ 2084.848269][T15048] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2084.873834][T27035] udevd[27035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2085.192699][T30128] loop3: detected capacity change from 0 to 512 [ 2085.278131][T15048] gspca_stv06xx: I2C: Read error writing address: -71 [ 2085.298830][T15048] usb 2-1: USB disconnect, device number 71 [ 2085.548700][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26118'. [ 2085.592617][T30143] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2085.618748][T30143] overlayfs: missing 'lowerdir' [ 2085.741738][T30151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26123'. [ 2085.756737][T30152] loop5: detected capacity change from 0 to 256 [ 2085.783855][T30152] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2086.584337][T30183] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 2086.668726][T30187] netlink: 'syz.4.26141': attribute type 2 has an invalid length. [ 2086.691714][T30187] netlink: 'syz.4.26141': attribute type 1 has an invalid length. [ 2086.699832][T30187] netlink: 'syz.4.26141': attribute type 1 has an invalid length. [ 2086.743082][T30187] netlink: 'syz.4.26141': attribute type 2 has an invalid length. [ 2086.774244][T30187] netlink: 'syz.4.26141': attribute type 1 has an invalid length. [ 2086.807664][T30187] netlink: 'syz.4.26141': attribute type 2 has an invalid length. [ 2086.830273][T30187] netlink: 'syz.4.26141': attribute type 2 has an invalid length. [ 2086.838838][T30168] loop2: detected capacity change from 0 to 32768 [ 2086.861534][T30187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.26141'. [ 2086.884213][T15048] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2086.908718][T30168] JBD2: Ignoring recovery information on journal [ 2087.091989][T15048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2087.115151][T15048] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 2087.125143][T30168] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2087.160578][T15048] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 2087.160718][ T4330] (kworker/u4:5,4330,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 2087.194420][T15048] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2087.236536][T15048] usb 6-1: config 129 has no interface number 0 [ 2087.268864][T15048] usb 6-1: config 129 has no interface number 1 [ 2087.290476][T15048] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2087.336556][T15048] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2087.369910][T15048] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2087.408621][T15048] usb 6-1: config 129 interface 135 has no altsetting 0 [ 2087.415693][T15048] usb 6-1: config 129 interface 5 has no altsetting 0 [ 2087.436135][T15048] usb 6-1: string descriptor 0 read error: -22 [ 2087.444029][ T4287] ocfs2: Unmounting device (7,2) on (node local) [ 2087.493964][T15048] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2087.503125][T15048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.588857][T15048] usb 6-1: MIDIStreaming interface descriptor not found [ 2087.622644][ T26] audit: type=1326 audit(1959.529:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30210 comm="syz.3.26152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2087.772039][ T26] audit: type=1326 audit(1959.538:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30210 comm="syz.3.26152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2087.907803][ T26] audit: type=1326 audit(1959.538:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30210 comm="syz.3.26152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2087.930718][T15048] usb 6-1: USB disconnect, device number 35 [ 2088.048703][ T26] audit: type=1326 audit(1959.538:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30210 comm="syz.3.26152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2088.242342][T30227] block device autoloading is deprecated and will be removed. [ 2088.607789][T30249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26168'. [ 2088.628452][T30249] netlink: 'syz.4.26168': attribute type 2 has an invalid length. [ 2088.692533][T15048] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2088.850267][T15365] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2088.897318][T15048] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2088.916506][T15048] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2088.937315][T15048] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 2088.970005][T15048] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2088.992175][T15048] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2089.006966][T30262] loop5: detected capacity change from 0 to 4096 [ 2089.013640][T15048] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 2089.022747][T15048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.040808][T30262] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 2089.068261][T15365] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 2089.091442][T30239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2089.091469][T15365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.110551][T30239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2089.142266][T30262] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 2089.150370][T30239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2089.175297][T15048] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 2089.193246][T30262] ntfs3: loop5: ino=1c, mi_enum_attr [ 2089.312764][ T47] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 2089.323737][ T4871] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 2089.330087][ T4871] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 2089.344715][ T4871] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 2089.378622][ T58] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 2089.387487][ T4871] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 2089.593379][T15365] dln2 4-1:1.0: failed to initialize hardware [ 2089.626732][T15048] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 2089.639846][T15365] dln2: probe of 4-1:1.0 failed with error -110 [ 2089.660002][T15048] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 2089.679147][T15365] usb 4-1: USB disconnect, device number 94 [ 2089.706462][T15048] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 2089.751429][T15048] usb 3-1: USB disconnect, device number 74 [ 2089.757419][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 2089.805337][T15048] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 2089.828222][T30279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.26183'. [ 2089.855052][T15048] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 2089.881251][T15048] mos7720 3-1:1.0: device disconnected [ 2089.996963][T24170] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2090.200144][T24170] usb 2-1: Using ep0 maxpacket: 16 [ 2090.211692][T24170] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2090.220848][T24170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.281770][T24170] usb 2-1: Product: syz [ 2090.296452][T24170] usb 2-1: Manufacturer: syz [ 2090.301110][T24170] usb 2-1: SerialNumber: syz [ 2090.327848][T24170] r8152-cfgselector 2-1: config 0 descriptor?? [ 2090.352924][T30297] netlink: 'syz.5.26191': attribute type 10 has an invalid length. [ 2090.369879][T30297] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2090.383508][T30297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2090.499999][T30303] bond0: option use_carrier: invalid value (9) [ 2090.791296][T24170] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2090.818858][T24170] r8152-cfgselector 2-1: USB disconnect, device number 72 [ 2090.930629][T30322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26203'. [ 2091.111689][T30329] loop2: detected capacity change from 0 to 256 [ 2092.103578][T30355] loop2: detected capacity change from 0 to 49152 [ 2092.138679][T30355] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 2092.245772][T30355] EXT4-fs (loop2): mounted filesystem with ordered data mode. Quota mode: none. [ 2092.502488][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 2092.628600][T15058] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2092.831760][T15058] usb 2-1: Using ep0 maxpacket: 16 [ 2092.840333][T15058] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2092.863416][T15058] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 2092.880097][T15058] usb 2-1: config 4 has no interface number 0 [ 2092.889988][T15058] usb 2-1: config 4 interface 127 has no altsetting 0 [ 2092.926590][T15058] usb 2-1: string descriptor 0 read error: -22 [ 2092.938649][T15058] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 2092.958790][T15058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.238984][T24170] usb 2-1: USB disconnect, device number 73 [ 2094.229028][T15365] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2094.429064][T15365] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2094.440924][T15365] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 2094.460011][T15365] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 2094.477764][T15365] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2094.497856][T15365] usb 2-1: config 129 has no interface number 0 [ 2094.513927][T15365] usb 2-1: config 129 has no interface number 1 [ 2094.527646][T15365] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2094.556788][T15365] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2094.580030][T15365] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2094.608420][T15365] usb 2-1: config 129 interface 135 has no altsetting 0 [ 2094.625132][T15365] usb 2-1: config 129 interface 5 has no altsetting 0 [ 2094.644823][T15365] usb 2-1: string descriptor 0 read error: -22 [ 2094.658485][T15365] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2094.679525][T15365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.727781][T15365] usb 2-1: MIDIStreaming interface descriptor not found [ 2094.965978][T24579] usb 2-1: USB disconnect, device number 74 [ 2096.598794][T30499] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 2097.194496][T30523] netlink: 'syz.4.26299': attribute type 10 has an invalid length. [ 2097.226805][T30523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26299'. [ 2097.255783][T30523] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2097.312042][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2097.644270][T30546] xt_l2tp: v2 doesn't support IP mode [ 2097.752359][T30549] netlink: 'syz.2.26313': attribute type 2 has an invalid length. [ 2097.782591][T30549] netlink: 'syz.2.26313': attribute type 11 has an invalid length. [ 2097.800687][T30549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26313'. [ 2098.748018][T30593] block device autoloading is deprecated and will be removed. [ 2099.191995][T30616] loop3: detected capacity change from 0 to 736 [ 2099.482053][T24170] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2099.489924][T15365] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2099.690078][T24170] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 2099.701325][T15365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.709166][T24170] usb 3-1: config 0 has no interface number 0 [ 2099.718854][T24170] usb 3-1: config 0 interface 3 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 2099.720879][T15365] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2099.752403][T24170] usb 3-1: config 0 interface 3 has no altsetting 0 [ 2099.759732][T15365] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2099.770446][T24170] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 2099.788789][T24170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.795219][T15365] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2099.816721][T24170] usb 3-1: Product: syz [ 2099.821025][T15365] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2099.830173][T24170] usb 3-1: Manufacturer: syz [ 2099.830193][T24170] usb 3-1: SerialNumber: syz [ 2099.841807][T24170] usb 3-1: config 0 descriptor?? [ 2099.857587][T15365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.043389][T30645] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2100.092796][T24170] usb 3-1: USB disconnect, device number 75 [ 2100.326161][T15365] usb 2-1: USB disconnect, device number 75 [ 2100.399788][ T26] audit: type=1326 audit(1971.486:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.452190][ T26] audit: type=1326 audit(1971.486:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.504323][T30661] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.508966][ T26] audit: type=1326 audit(1971.514:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.576270][ T26] audit: type=1326 audit(1971.514:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.623162][ T26] audit: type=1326 audit(1971.514:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.646834][ C1] vkms_vblank_simulate: vblank timer overrun [ 2100.657525][ T26] audit: type=1326 audit(1971.514:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.681328][ C1] vkms_vblank_simulate: vblank timer overrun [ 2100.715249][ T26] audit: type=1326 audit(1971.514:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.772391][ T26] audit: type=1326 audit(1971.514:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2100.843310][ T26] audit: type=1326 audit(1971.514:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.5.26365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2101.043655][T30676] netlink: 64 bytes leftover after parsing attributes in process `syz.2.26374'. [ 2101.385696][T30690] netlink: 'syz.2.26382': attribute type 21 has an invalid length. [ 2101.592502][T30700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26386'. [ 2101.851364][T30711] device bridge13 entered promiscuous mode [ 2102.459319][T30742] befs: (nullb0): No write support. Marking filesystem read-only [ 2102.491158][T30742] befs: (nullb0): invalid magic header [ 2102.924359][ T26] audit: type=1326 audit(1973.842:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30760 comm="syz.5.26418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60765a94d9 code=0x7ffc0000 [ 2103.144441][T30772] loop2: detected capacity change from 0 to 256 [ 2103.235008][T30774] loop3: detected capacity change from 0 to 33280 [ 2103.301279][T30774] /dev/loop3: Can't open blockdev [ 2103.894607][T30795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26432'. [ 2104.397913][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26443'. [ 2104.812982][T30834] netlink: 'syz.1.26453': attribute type 9 has an invalid length. [ 2105.059196][T30847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26459'. [ 2105.125656][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.283881][T30859] netlink: 36 bytes leftover after parsing attributes in process `syz.5.26463'. [ 2106.886346][T15047] wg2 speed is unknown, defaulting to 1000 [ 2107.453876][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26481'. [ 2107.764384][T15047] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2107.967604][T15047] usb 3-1: Using ep0 maxpacket: 16 [ 2107.974683][T15047] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 2108.007153][T15047] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2108.037603][T15047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.059943][T15047] usb 3-1: Product: syz [ 2108.074891][T15047] usb 3-1: Manufacturer: syz [ 2108.079718][T15047] usb 3-1: SerialNumber: syz [ 2108.107294][T15047] r8152-cfgselector 3-1: config 0 descriptor?? [ 2108.298339][T30935] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.26500'. [ 2108.320553][T30935] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.26500'. [ 2108.554597][T15047] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2108.575143][T15047] r8152-cfgselector 3-1: USB disconnect, device number 76 [ 2108.697616][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26510'. [ 2108.699186][T30953] xt_CONNSECMARK: invalid mode: 66 [ 2110.292726][T31013] netlink: 'syz.2.26537': attribute type 1 has an invalid length. [ 2110.307903][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26537'. [ 2110.561855][T31028] syz.1.26544 uses old SIOCAX25GETINFO [ 2110.588371][T15047] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2110.687124][T31031] usb usb1: usbfs: process 31031 (syz.2.26546) did not claim interface 0 before use [ 2110.786542][T31025] loop4: detected capacity change from 0 to 49152 [ 2110.792413][ T7] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2110.803254][T15047] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 2110.807492][T31025] EXT4-fs: Ignoring removed i_version option [ 2110.828368][T15047] usb 4-1: config 0 has no interface number 0 [ 2110.854260][T15047] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2110.876562][T31025] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2110.899605][T15047] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2110.909223][T15047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.916626][T31025] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 2110.935502][T15047] usb 4-1: config 0 descriptor?? [ 2110.949726][T31025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2110.967134][T15047] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input150 [ 2111.026897][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 2111.034448][ T7] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 2111.053344][T31025] EXT4-fs (loop4): mounted filesystem with journalled data mode. Quota mode: journalled. [ 2111.059320][ T7] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2111.080320][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2111.097212][ T7] usb 6-1: config 1 has no interface number 0 [ 2111.112424][ T7] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2111.133037][ T7] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2111.155250][ T7] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2111.164335][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.231258][ T7] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 2111.281895][T15047] usb 4-1: USB disconnect, device number 95 [ 2111.353100][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 2111.448598][ T7] snd_usb_pod 6-1:1.1: invalid control EP [ 2111.454429][ T7] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 2111.484059][ T7] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 2111.519198][ T7] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 2111.639443][T31052] netlink: 'syz.1.26555': attribute type 8 has an invalid length. [ 2111.697717][ T7] usb 6-1: USB disconnect, device number 36 [ 2112.011183][T31056] lo speed is unknown, defaulting to 1000 [ 2112.131664][T31064] loop2: detected capacity change from 0 to 34816 [ 2112.161330][T31056] wg2 speed is unknown, defaulting to 1000 [ 2112.204290][T31064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2112.244242][T31064] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.26561: path /5238/file1: bad entry in directory: inode out of bounds - offset=0, inode=622082, rec_len=12, size=2048 fake=1 [ 2112.300701][T31064] EXT4-fs (loop2): Remounting filesystem read-only [ 2112.362361][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 2112.667560][T31077] trusted_key: encrypted_key: keylen parameter is missing [ 2112.893990][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 2112.894007][ T26] audit: type=1326 audit(2000000009.283:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2112.933605][T31087] VFS: could not find a valid V7 on nullb0. [ 2112.977553][ T26] audit: type=1326 audit(2000000009.311:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.052490][ T26] audit: type=1326 audit(2000000009.329:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.137209][ T26] audit: type=1326 audit(2000000009.348:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.220299][ T26] audit: type=1326 audit(2000000009.348:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.316308][ T26] audit: type=1326 audit(2000000009.348:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.412245][ T26] audit: type=1326 audit(2000000009.348:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.494827][ T26] audit: type=1326 audit(2000000009.348:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2113.544076][T31114] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2113.594327][ T26] audit: type=1326 audit(2000000009.348:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31083 comm="syz.3.26571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffaa25a94d9 code=0x7ffc0000 [ 2114.047099][T30219] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2114.078710][T30219] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.121774][T30219] Buffer I/O error on dev loop6p8, logical block 1, async page read [ 2114.396554][T31148] SET target dimension over the limit! [ 2114.506850][T31154] ceph: Unknown parameter 'port' [ 2114.600558][T31160] loop2: detected capacity change from 0 to 8 [ 2114.642597][T31160] SQUASHFS error: Unable to read inode 0xa7 [ 2114.751439][T31166] loop5: detected capacity change from 0 to 16 [ 2114.808454][T31166] erofs: (device loop5): mounted with root inode @ nid 36. [ 2114.843285][T31166] syz.5.26610: attempt to access beyond end of device [ 2114.843285][T31166] loop5: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 2114.907801][T31166] syz.5.26610: attempt to access beyond end of device [ 2114.907801][T31166] loop5: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 2114.947880][T31166] syz.5.26610: attempt to access beyond end of device [ 2114.947880][T31166] loop5: rw=0, sector=16, nr_sectors = 8 limit=16 [ 2114.972475][ T26] audit: type=1800 audit(2000000011.227:3136): pid=31166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.26610" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 2115.011767][T31176] netlink: 'syz.3.26615': attribute type 1 has an invalid length. [ 2115.187961][ T7] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 2115.395949][ T7] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2115.427223][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.448874][ T7] usb 3-1: Product: syz [ 2115.453091][ T7] usb 3-1: Manufacturer: syz [ 2115.470505][ T7] usb 3-1: SerialNumber: syz [ 2115.483729][ T7] usb 3-1: config 0 descriptor?? [ 2115.510787][ T7] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 2115.729076][T15047] usb 3-1: USB disconnect, device number 77 [ 2115.761577][T31206] ksmbd: Unknown IPC event: 4, ignore. [ 2115.958324][ T7] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2116.163325][ T7] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 2116.193456][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.429915][ T7] dln2 2-1:1.0: USB write failed: -110 [ 2116.435617][ T7] dln2 2-1:1.0: failed to initialize hardware [ 2116.445515][ C0] dln2 2-1:1.0: short response: 0 [ 2116.478921][ T7] dln2: probe of 2-1:1.0 failed with error -110 [ 2116.589748][T31242] CIFS mount error: No usable UNC path provided in device string! [ 2116.589748][T31242] [ 2116.603560][T31244] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2116.632313][T31242] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2116.667277][ T7] usb 2-1: USB disconnect, device number 76 [ 2117.149590][T31268] netlink: 160 bytes leftover after parsing attributes in process `syz.3.26660'. [ 2117.190000][T31252] lo speed is unknown, defaulting to 1000 [ 2117.537479][T31252] wg2 speed is unknown, defaulting to 1000 [ 2117.566860][T31280] device wlan0 entered promiscuous mode [ 2117.572618][T31280] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2117.896671][T31295] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 2118.247273][T30858] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2118.268693][T31313] netlink: 'syz.2.26682': attribute type 1 has an invalid length. [ 2118.453119][T30858] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2118.471892][T30858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.513138][T30858] usb 4-1: config 0 descriptor?? [ 2118.878350][T15047] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2118.974044][T30858] ath6kl: Failed to submit usb control message: -71 [ 2118.986190][T30858] ath6kl: unable to send the bmi data to the device: -71 [ 2119.008567][T30858] ath6kl: Unable to send get target info: -71 [ 2119.028215][T30858] ath6kl: Failed to init ath6kl core: -71 [ 2119.083447][T15047] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.093817][T30858] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 2119.115362][T15047] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2119.132651][T30858] usb 4-1: USB disconnect, device number 96 [ 2119.160532][T15047] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 2119.188609][T15047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2119.209533][T15047] usb 3-1: Product: syz [ 2119.226946][T15047] usb 3-1: Manufacturer: syz [ 2119.239914][T31346] netlink: 148 bytes leftover after parsing attributes in process `syz.1.26697'. [ 2119.276985][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 2119.276999][ T26] audit: type=1326 audit(2000000015.256:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31347 comm="syz.4.26698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2119.341319][ T26] audit: type=1326 audit(2000000015.284:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31347 comm="syz.4.26698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2119.398750][ T26] audit: type=1326 audit(2000000015.284:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31347 comm="syz.4.26698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2119.459321][T15047] speedtch 3-1:1.0: speedtch_bind: data interface not found! [ 2119.470800][T15047] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 2119.489784][ T26] audit: type=1326 audit(2000000015.284:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31347 comm="syz.4.26698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2119.563454][ T26] audit: type=1326 audit(2000000015.284:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31347 comm="syz.4.26698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192b5a94d9 code=0x7ffc0000 [ 2119.689996][T15047] usb 3-1: USB disconnect, device number 78 [ 2119.895834][T31369] SET target dimension over the limit! [ 2120.002517][T31374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26711'. [ 2120.015582][T31376] loop4: detected capacity change from 0 to 256 [ 2120.032742][T31374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26711'. [ 2120.299299][T31387] xt_nfacct: accounting object `' does not exist [ 2120.535481][T31394] loop3: detected capacity change from 0 to 2048 [ 2120.686519][T30219] udevd[30219]: incorrect nilfs2 checksum on /dev/loop3 [ 2120.813463][T31408] autofs4:pid:31408:autofs_fill_super: called with bogus options [ 2121.317757][T31401] loop2: detected capacity change from 0 to 32768 [ 2121.333415][T31401] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.26724 (31401) [ 2121.413536][T31401] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2121.445107][T31401] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 2121.488452][T31401] BTRFS info (device loop2): using free space tree [ 2121.552794][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2121.731400][T31401] BTRFS info (device loop2): enabling ssd optimizations [ 2122.280201][ T4287] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2122.468207][T31466] loop3: detected capacity change from 0 to 33280 [ 2122.546861][T31466] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 2122.594676][T31472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26752'. [ 2122.612071][T31466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 2122.662896][T31466] System zones: 1-12 [ 2122.686619][T31466] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 2122.706456][T31466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2122.819700][T30219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (30219) [ 2123.140864][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 2123.412460][T31490] netlink: 388 bytes leftover after parsing attributes in process `syz.1.26758'. [ 2123.857884][T31478] loop5: detected capacity change from 0 to 32768 [ 2123.907408][T31478] ea_get: invalid extended attribute [ 2124.572181][T31514] cgroup: Name too long [ 2124.791453][T31526] overlayfs: missing 'lowerdir' [ 2125.290710][T31550] loop2: detected capacity change from 0 to 256 [ 2125.371532][T31555] netlink: 'syz.4.26791': attribute type 1 has an invalid length. [ 2126.173575][T31587] loop4: detected capacity change from 0 to 2048 [ 2126.200118][T31587] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2126.242100][T31587] NILFS (loop4): mounting unchecked fs [ 2126.281809][T31587] NILFS (loop4): recovery complete [ 2126.309444][T31590] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2127.217665][T31615] loop5: detected capacity change from 0 to 2048 [ 2127.298962][T31615] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2127.342125][T31615] NILFS (loop5): mounting unchecked fs [ 2127.390878][T31624] netlink: 'syz.1.26824': attribute type 4 has an invalid length. [ 2127.411510][T30219] udevd[30219]: incorrect nilfs2 checksum on /dev/loop5 [ 2127.425752][T31624] netlink: 152 bytes leftover after parsing attributes in process `syz.1.26824'. [ 2127.426950][T31615] NILFS (loop5): recovery complete [ 2127.478089][T31629] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2128.515870][T31673] loop3: detected capacity change from 0 to 512 [ 2129.439051][T31706] x_tables: unsorted underflow at hook 4 [ 2129.487979][T31680] loop2: detected capacity change from 0 to 32768 [ 2129.571702][T31680] XFS (loop2): Mounting V5 Filesystem [ 2129.691626][T31680] XFS (loop2): Ending clean mount [ 2129.715059][T31725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26868'. [ 2129.735317][T31680] XFS (loop2): Quotacheck needed: Please wait. [ 2129.769534][T31725] netlink: 1 bytes leftover after parsing attributes in process `syz.5.26868'. [ 2129.833420][T31680] XFS (loop2): Quotacheck: Done. [ 2130.013529][ T4287] XFS (loop2): Unmounting Filesystem [ 2130.045591][T31736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26875'. [ 2130.454367][T31749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2130.527458][T30858] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2130.591665][T30856] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2130.754187][T30858] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2130.773237][T30858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.796862][T30856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2130.808226][T30858] usb 4-1: config 0 descriptor?? [ 2130.813504][T30856] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 2130.824982][T30858] cp210x 4-1:0.0: cp210x converter detected [ 2130.842636][T30856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.871232][T30856] usb 2-1: config 0 descriptor?? [ 2130.902947][T30856] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 2130.919260][T30856] rndis_host: probe of 2-1:0.0 failed with error -22 [ 2130.926522][T30855] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2131.117894][T30856] usb 2-1: USB disconnect, device number 77 [ 2131.152898][T30855] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 2131.169061][T30855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.188212][T30855] usb 6-1: Product: syz [ 2131.197983][T30855] usb 6-1: Manufacturer: syz [ 2131.211823][T30855] usb 6-1: SerialNumber: syz [ 2131.225627][T30855] usb 6-1: config 0 descriptor?? [ 2131.246302][T30855] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2131.258861][T30858] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 2131.267297][T30858] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2131.275172][T30858] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 2131.287091][T30858] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2131.311246][T30858] usb 4-1: USB disconnect, device number 97 [ 2131.332075][T30858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2131.353980][T30858] cp210x 4-1:0.0: device disconnected [ 2131.418975][T31777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26894'. [ 2131.682889][T30855] gspca_m5602: Failed to find a sensor [ 2131.688530][T30855] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 2131.716461][T30855] usb 6-1: USB disconnect, device number 37 [ 2131.822520][T31789] loop2: detected capacity change from 0 to 64 [ 2131.908230][ T58] kworker/u4:4: attempt to access beyond end of device [ 2131.908230][ T58] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 2131.933035][ T58] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 2132.097846][T31798] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.26905'. [ 2133.531234][T31864] x_tables: unsorted entry at hook 3 [ 2134.735138][T31914] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2170.845476][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2236.566810][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2242.042413][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2302.288309][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2368.009322][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2433.730692][ T1283] ieee802154 phy1 wpan1: encryption failed: -22