last executing test programs: 9m31.889582037s ago: executing program 4 (id=6608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xff800}]}, 0x24}}, 0x0) 9m31.599478006s ago: executing program 4 (id=6612): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d0015000300000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d02802b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de60dd6e4edef3d93452a92307f00000e97030000000000000000000000007200"/216, 0xd8}], 0x1}, 0x40810) 9m31.244244757s ago: executing program 4 (id=6616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 9m30.980028176s ago: executing program 4 (id=6619): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9m30.326210867s ago: executing program 4 (id=6630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 9m29.59227273s ago: executing program 4 (id=6644): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) 9m29.27500144s ago: executing program 32 (id=6644): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) 4m24.62860603s ago: executing program 5 (id=11173): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 4m24.360131219s ago: executing program 5 (id=11178): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x500, &(0x7f0000000ac0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 4m23.751450298s ago: executing program 5 (id=11190): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) 4m23.301223623s ago: executing program 5 (id=11195): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 4m22.681838722s ago: executing program 5 (id=11203): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) utimes(0x0, &(0x7f0000000200)) 4m22.012265324s ago: executing program 5 (id=11215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e824087922e5e64ddd0800", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m21.572020368s ago: executing program 33 (id=11215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e824087922e5e64ddd0800", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.627055634s ago: executing program 0 (id=15266): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040201"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.1727974s ago: executing program 3 (id=15275): r0 = socket(0x29, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 1.84036034s ago: executing program 3 (id=15282): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 1.648692766s ago: executing program 3 (id=15286): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000140)) 1.495435722s ago: executing program 3 (id=15288): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 1.430721114s ago: executing program 2 (id=15289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x20000804) 1.333123467s ago: executing program 1 (id=15291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00'}) 1.259572329s ago: executing program 3 (id=15292): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@dir_resv_level}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) 1.23784653s ago: executing program 2 (id=15293): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) write$FUSE_STATFS(r0, 0x0, 0x0) 1.160947742s ago: executing program 1 (id=15295): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5, 0x2, 0x6}) 1.059574706s ago: executing program 6 (id=15296): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x90}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 1.014091347s ago: executing program 2 (id=15297): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbde, &(0x7f0000001f40)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 970.876449ms ago: executing program 1 (id=15298): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000000)='adfs\x00', 0x8007, 0x0) 923.329621ms ago: executing program 6 (id=15299): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$P9_RSTATu(r0, &(0x7f0000000200)={0x87, 0x7d, 0x2, {{0x0, 0x6c, 0x7, 0x1, {0x2, 0x4, 0x2}, 0x800000, 0x80000000, 0xc1, 0x5ef, 0x11, '/dev/vga_arbiter\x00', 0x11, '/dev/vga_arbiter\x00', 0x11, '/dev/vga_arbiter\x00', 0x6, '#@&.:@'}, 0x6, '/\'#_+['}}, 0x87) 794.116314ms ago: executing program 0 (id=15300): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) 732.663977ms ago: executing program 0 (id=15301): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0x6) 731.950027ms ago: executing program 1 (id=15302): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002100), 0x88000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000002140)={0x0, 0x3f0a2231cfdf7baf}) 679.066038ms ago: executing program 6 (id=15303): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x16, "5c83276f6c020086200db0e102ea1d0d85d4bc690000"}}) 582.134371ms ago: executing program 2 (id=15304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008e4}, 0x0) 566.662952ms ago: executing program 0 (id=15305): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) 527.858794ms ago: executing program 1 (id=15306): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20, 0x8}, &(0x7f00000001c0)=0x18) 444.036276ms ago: executing program 6 (id=15307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) 378.861518ms ago: executing program 0 (id=15308): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000002700)) 370.845728ms ago: executing program 2 (id=15309): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000a00)={0x2, 0x1, 0x4000000c, 0x2, 0x1b5, 0x0}) 327.29994ms ago: executing program 1 (id=15310): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="00541f"], 0x0, 0x0, 0x0, 0x0}) 199.467634ms ago: executing program 6 (id=15311): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x18}, 0x10) 151.194846ms ago: executing program 0 (id=15312): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x1) 74.872458ms ago: executing program 2 (id=15313): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x0) 26.671379ms ago: executing program 6 (id=15314): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000040)={0x200e, 0x1, 0x0, 0xfeff200e, 0x6e, 0x0}) 0s ago: executing program 3 (id=15315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) kernel console output (not intermixed with test programs): rsing attributes in process `syz.0.12937'. [ 1289.654994][ T4314] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1289.862036][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1289.892952][ T4314] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1289.913508][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.971938][ T4314] usb 3-1: config 0 descriptor?? [ 1290.029548][ T4314] smsusb:smsusb_probe: board id=8, interface number 0 [ 1290.067738][ T4314] smsusb:smsusb_probe: Device initialized with return code -19 [ 1290.258640][ T4314] usb 3-1: USB disconnect, device number 89 [ 1290.725389][ T987] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.12958'. [ 1291.330338][ T1008] device vlan0 left promiscuous mode [ 1291.354593][ T1008] device netdevsim0 left promiscuous mode [ 1291.378165][ T1008] device bridge1 left promiscuous mode [ 1291.399913][ T1008] device veth3 left promiscuous mode [ 1291.461401][ T1025] netlink: 'syz.2.12972': attribute type 3 has an invalid length. [ 1291.473353][ T1025] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12972'. [ 1291.762739][ T1039] loop0: detected capacity change from 0 to 8 [ 1291.972994][ T7044] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1292.181489][ T7044] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1292.200556][ T7044] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1292.217470][ T7044] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.247788][ T7044] usb 3-1: config 220 has no interface number 2 [ 1292.272957][ T7044] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1292.315847][ T7044] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1292.341474][ T7044] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1292.362856][ T7044] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1292.405459][ T7044] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1292.415881][ T7044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.431785][ T7044] usb 3-1: Product: syz [ 1292.436097][ T7044] usb 3-1: Manufacturer: syz [ 1292.444592][ T7044] usb 3-1: SerialNumber: syz [ 1292.449896][T16937] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1292.506353][T16941] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1292.643185][ T1070] loop1: detected capacity change from 0 to 16 [ 1292.688014][T16937] usb 7-1: Using ep0 maxpacket: 32 [ 1292.695489][T16937] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1292.704756][ T1070] erofs: (device loop1): mounted with root inode @ nid 36. [ 1292.706806][ T7044] usb 3-1: selecting invalid altsetting 0 [ 1292.722059][T16941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.739911][ T7044] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1292.745157][T16937] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1292.755604][T16941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.779071][ T7044] usb 3-1: No valid video chain found. [ 1292.787398][T16937] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.799135][T16941] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1292.816325][T16941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.825024][T16937] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.834243][T16941] usb 4-1: Product: syz [ 1292.838656][T16941] usb 4-1: Manufacturer: syz [ 1292.844133][T16941] usb 4-1: SerialNumber: syz [ 1292.858802][T16937] usb 7-1: string descriptor 0 read error: -22 [ 1292.872880][T16937] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1292.874868][ T7044] usb 3-1: selecting invalid altsetting 0 [ 1292.915461][T16937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.926447][ T7044] usbtest: probe of 3-1:220.1 failed with error -22 [ 1292.963299][ T7044] usb 3-1: USB disconnect, device number 90 [ 1292.976572][T16937] usb 7-1: 0:2 : does not exist [ 1293.123964][T16941] usb 4-1: 0:1 : does not exist [ 1293.129712][T16941] usb 4-1: unit 0 not found! [ 1293.168802][T16941] usb 4-1: USB disconnect, device number 83 [ 1293.220373][T16937] usb 7-1: USB disconnect, device number 6 [ 1293.345328][ T1080] binder: BC_ACQUIRE_RESULT not supported [ 1293.364471][ T1080] binder: 1079:1080 ioctl c0306201 200000000500 returned -22 [ 1293.437353][ T4711] udevd[4711]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1293.533163][ T1088] overlayfs: missing 'lowerdir' [ 1294.269739][ T4356] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1294.290497][ T1120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13017'. [ 1294.307123][ T1118] loop1: detected capacity change from 0 to 1764 [ 1294.476364][ T4356] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1294.485491][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.545514][ T4356] usb 4-1: Product: syz [ 1294.549816][ T4356] usb 4-1: Manufacturer: syz [ 1294.582550][ T4356] usb 4-1: SerialNumber: syz [ 1294.620107][ T4356] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1294.635273][ T1130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13021'. [ 1294.662858][ T1130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13021'. [ 1294.680832][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13023'. [ 1294.703423][ T1130] netlink: 'syz.1.13021': attribute type 6 has an invalid length. [ 1294.714967][ T1132] netlink: set zone limit has 8 unknown bytes [ 1294.748323][ T4356] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1295.220997][T16941] usb 4-1: USB disconnect, device number 84 [ 1295.894986][ T4356] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1295.913047][ T4356] ath9k_htc: Failed to initialize the device [ 1295.934850][T16941] usb 4-1: ath9k_htc: USB layer deinitialized [ 1296.789388][ T26] audit: type=1326 audit(1779261860.215:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1296.900977][ T26] audit: type=1326 audit(1779261860.215:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1296.925110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.987622][ T26] audit: type=1326 audit(1779261860.215:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.011775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.071244][ T26] audit: type=1326 audit(1779261860.215:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.184344][ T26] audit: type=1326 audit(1779261860.215:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.275717][ T26] audit: type=1326 audit(1779261860.215:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.299845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.348629][ T1190] loop0: detected capacity change from 0 to 32768 [ 1297.372605][ T26] audit: type=1326 audit(1779261860.215:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.507211][ T1233] netlink: 'syz.6.13069': attribute type 4 has an invalid length. [ 1297.516201][ T1233] netlink: 140 bytes leftover after parsing attributes in process `syz.6.13069'. [ 1297.569501][ T1190] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1297.585575][ T26] audit: type=1326 audit(1779261860.215:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.609705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.639229][ T26] audit: type=1326 audit(1779261860.215:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1209 comm="syz.6.13060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1297.755339][ T1206] loop3: detected capacity change from 0 to 32768 [ 1297.762876][ T1206] /dev/loop3: Can't open blockdev [ 1297.776072][ T1240] cgroup: Unexpected value for 'cpuset_v2_mode' [ 1297.824167][ T4370] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1297.856095][ T4274] XFS (loop0): Unmounting Filesystem [ 1298.070517][ T1246] overlayfs: missing 'workdir' [ 1298.187538][ T1248] Process accounting resumed [ 1298.229773][ T1252] netlink: 'syz.6.13077': attribute type 1 has an invalid length. [ 1298.628850][ T1266] loop3: detected capacity change from 0 to 164 [ 1298.936084][ T1277] loop6: detected capacity change from 0 to 256 [ 1299.007805][ T1277] FAT-fs (loop6): Directory bread(block 64) failed [ 1299.065679][ T1277] FAT-fs (loop6): Directory bread(block 65) failed [ 1299.102485][ T1277] FAT-fs (loop6): Directory bread(block 66) failed [ 1299.119370][ T1277] FAT-fs (loop6): Directory bread(block 67) failed [ 1299.151026][ T1277] FAT-fs (loop6): Directory bread(block 68) failed [ 1299.170853][ T1277] FAT-fs (loop6): Directory bread(block 69) failed [ 1299.190825][ T1277] FAT-fs (loop6): Directory bread(block 70) failed [ 1299.197417][ T1277] FAT-fs (loop6): Directory bread(block 71) failed [ 1299.221179][ T1277] FAT-fs (loop6): Directory bread(block 72) failed [ 1299.227797][ T1277] FAT-fs (loop6): Directory bread(block 73) failed [ 1299.417193][T16941] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1299.443087][ T1296] netlink: 6716 bytes leftover after parsing attributes in process `syz.1.13096'. [ 1299.634939][T16941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.658299][T16941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1299.685318][T16941] usb 4-1: config 1 has no interface number 0 [ 1299.700806][T16941] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1299.746000][T16941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1299.757956][T16941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.766537][T16941] usb 4-1: Product: syz [ 1299.770908][T16941] usb 4-1: Manufacturer: syz [ 1299.775986][T16941] usb 4-1: SerialNumber: syz [ 1299.811732][T16941] usb 4-1: selecting invalid altsetting 1 [ 1299.859223][ T1311] xt_bpf: check failed: parse error [ 1300.214271][ T1292] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1300.245590][T16941] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1300.261313][T16941] cdc_ncm 4-1:1.1: bind() failure [ 1300.298984][T16941] usb 4-1: USB disconnect, device number 85 [ 1300.373420][ T26] audit: type=1326 audit(1779261863.529:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1327 comm="syz.2.13111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1300.439174][ T1333] loop0: detected capacity change from 0 to 64 [ 1300.586301][ T4356] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1300.775039][ T1344] cgroup: noprefix used incorrectly [ 1300.792074][ T4356] usb 7-1: Using ep0 maxpacket: 16 [ 1300.801942][ T4356] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1300.817456][ T4356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.825784][ T4356] usb 7-1: Product: syz [ 1300.829987][ T4356] usb 7-1: Manufacturer: syz [ 1300.834621][ T4356] usb 7-1: SerialNumber: syz [ 1300.864360][ T4356] usb 7-1: config 0 descriptor?? [ 1300.888533][ T4356] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 1301.120435][ T4356] usb 7-1: clie_3_5_startup: get config number bad return length: 0 [ 1301.137353][ T4356] visor: probe of 7-1:0.0 failed with error -5 [ 1301.178053][ T1356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13125'. [ 1301.381445][ T4356] usb 7-1: USB disconnect, device number 7 [ 1301.453785][ T1368] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1301.973048][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13141'. [ 1302.164339][ T1390] loop1: detected capacity change from 0 to 4096 [ 1302.239573][ T1390] __ntfs_error: 8 callbacks suppressed [ 1302.239595][ T1390] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1302.297520][ T1390] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1302.376205][ T1390] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1302.415790][ T1390] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1302.470379][ T1390] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1302.534560][ T1390] ntfs: volume version 3.1. [ 1302.591174][ T1390] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1302.623212][ T1390] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1302.654664][ T1390] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1302.671125][ T1390] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1302.691752][ T1390] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1303.667025][ T1442] netlink: 'syz.6.13166': attribute type 1 has an invalid length. [ 1304.265941][ T1467] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 1467 comm: syz.2.13179) [ 1304.290809][ T1469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13180'. [ 1304.335661][ T1470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13181'. [ 1304.379251][ T4356] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1304.541783][ T1480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13186'. [ 1304.594759][ T4356] usb 1-1: Using ep0 maxpacket: 32 [ 1304.601889][ T4356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.645500][ T4356] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1304.664600][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.692425][ T1482] team0 speed is unknown, defaulting to 1000 [ 1304.712283][ T4356] usb 1-1: config 0 descriptor?? [ 1304.728492][ T1482] team0 speed is unknown, defaulting to 1000 [ 1304.737836][ T4356] usb 1-1: bad CDC descriptors [ 1304.764168][ T1482] team0 speed is unknown, defaulting to 1000 [ 1304.834818][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13190'. [ 1304.971345][ T4356] usb 1-1: USB disconnect, device number 96 [ 1305.329187][ T1482] infiniband syg0: set down [ 1305.334087][ T4356] team0 speed is unknown, defaulting to 1000 [ 1305.361367][ T1482] infiniband syg0: added team0 [ 1305.421631][ T1482] RDS/IB: syg0: added [ 1305.425747][ T1482] smc: adding ib device syg0 with port count 1 [ 1305.436297][ T1482] smc: ib device syg0 port 1 has pnetid [ 1305.443690][ T4356] team0 speed is unknown, defaulting to 1000 [ 1305.451925][ T1482] team0 speed is unknown, defaulting to 1000 [ 1305.572582][ T1482] team0 speed is unknown, defaulting to 1000 [ 1305.746226][ T1508] loop6: detected capacity change from 0 to 64 [ 1306.092564][ T1482] team0 speed is unknown, defaulting to 1000 [ 1306.350171][ T4356] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1306.384876][ T1482] team0 speed is unknown, defaulting to 1000 [ 1306.523897][ T1534] device bridge7 entered promiscuous mode [ 1306.559533][ T4356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1306.571265][ T1536] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.13213' sets config #2 [ 1306.574498][ T1482] team0 speed is unknown, defaulting to 1000 [ 1306.589300][ T4356] usb 7-1: not running at top speed; connect to a high speed hub [ 1306.621444][ T4356] usb 7-1: config 249 has an invalid interface number: 203 but max is 0 [ 1306.629957][ T4356] usb 7-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.664257][T17807] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1306.673217][ T4356] usb 7-1: config 249 has no interface number 0 [ 1306.707158][ T4356] usb 7-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.739559][ T4356] usb 7-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.772480][ T4356] usb 7-1: config 249 interface 203 has no altsetting 0 [ 1306.807650][ T4356] usb 7-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 1306.846035][ T4356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.869746][ T4356] usb 7-1: Product: syz [ 1306.881166][ T4356] usb 7-1: Manufacturer: syz [ 1306.885820][ T4356] usb 7-1: SerialNumber: syz [ 1306.892897][T17807] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1306.912056][T17807] usb 1-1: config 0 has no interface number 0 [ 1306.923060][T17807] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.965744][T17807] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1306.975219][T17807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.991796][T17807] usb 1-1: Product: syz [ 1306.996054][T17807] usb 1-1: Manufacturer: syz [ 1307.009062][T17807] usb 1-1: SerialNumber: syz [ 1307.022279][T17807] usb 1-1: config 0 descriptor?? [ 1307.083505][T17807] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1307.148091][ T4356] rtl8150 7-1:249.203: couldn't find required endpoints [ 1307.159069][ T4356] rtl8150: probe of 7-1:249.203 failed with error -5 [ 1307.199446][ T4356] usb 7-1: USB disconnect, device number 8 [ 1307.292415][ C1] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1307.355627][ T1554] netlink: 'syz.1.13222': attribute type 21 has an invalid length. [ 1307.366189][ T1554] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13222'. [ 1307.400287][ T1554] netlink: 'syz.1.13222': attribute type 5 has an invalid length. [ 1307.415537][ T1554] netlink: 'syz.1.13222': attribute type 6 has an invalid length. [ 1307.428099][ T1554] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13222'. [ 1307.530246][ T4356] usb 1-1: USB disconnect, device number 97 [ 1307.543989][ T4356] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1307.639013][ T1563] comedi comedi4: bad chanlist[0]=0x00080007 chan=7 range length=2 [ 1308.113472][ T1584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13237'. [ 1308.609157][ T1608] netlink: 92 bytes leftover after parsing attributes in process `syz.6.13248'. [ 1308.671403][ T1608] netlink: 'syz.6.13248': attribute type 1 has an invalid length. [ 1308.854314][T16941] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1308.920450][ T1618] loop3: detected capacity change from 0 to 736 [ 1309.081961][T16941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.112731][T16941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.133881][T16941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1309.180760][T16941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1309.240160][T16941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.274321][T16941] usb 2-1: config 0 descriptor?? [ 1309.298023][T16941] hub 2-1:0.0: USB hub found [ 1309.524141][T16941] hub 2-1:0.0: 9 ports detected [ 1309.532414][T16941] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1309.747276][T16941] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1309.758202][T16941] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1309.853570][T16941] usb 2-1: USB disconnect, device number 94 [ 1310.038576][T17807] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1310.261061][T17807] usb 1-1: Using ep0 maxpacket: 16 [ 1310.272438][T17807] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1310.308897][T17807] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1310.377176][T17807] usb 1-1: Product: syz [ 1310.387409][T17807] usb 1-1: Manufacturer: syz [ 1310.402399][T17807] usb 1-1: SerialNumber: syz [ 1310.430907][T17807] usb 1-1: config 0 descriptor?? [ 1310.466597][T17807] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1310.703751][T16937] usb 1-1: USB disconnect, device number 98 [ 1311.225970][ T1696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13289'. [ 1311.252367][ T1696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13289'. [ 1311.267774][ T1696] netlink: 7 bytes leftover after parsing attributes in process `syz.1.13289'. [ 1311.554862][ T1686] loop3: detected capacity change from 0 to 32768 [ 1311.713077][T16937] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1311.951153][T16937] usb 1-1: Using ep0 maxpacket: 16 [ 1311.958606][T16937] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1311.992383][T16937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.025865][T16937] usb 1-1: config 0 has no interface number 0 [ 1312.056284][T17807] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1312.070501][T16937] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1312.098560][T16937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.127963][T16937] usb 1-1: Product: syz [ 1312.137002][T16937] usb 1-1: Manufacturer: syz [ 1312.147458][T16937] usb 1-1: SerialNumber: syz [ 1312.174904][T16937] usb 1-1: config 0 descriptor?? [ 1312.310010][T17807] usb 4-1: Using ep0 maxpacket: 32 [ 1312.327935][T17807] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1312.380326][T17807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.430361][T16937] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 1312.444338][T17807] usb 4-1: config 0 descriptor?? [ 1312.452243][T16937] usb 1-1: No valid video chain found. [ 1312.514866][ T1735] netlink: 'syz.6.13308': attribute type 21 has an invalid length. [ 1312.543069][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.701076][T17807] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1312.709132][ T4314] usb 1-1: USB disconnect, device number 99 [ 1312.723391][T17807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1312.758048][T17807] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1312.778654][T17807] usb 4-1: media controller created [ 1312.803693][T17807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1313.011371][ T1751] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13315'. [ 1313.033449][T17807] DVB: Unable to find symbol dib7000p_attach() [ 1313.040333][ T1751] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13315'. [ 1313.050158][T17807] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1313.273040][T17807] rc_core: IR keymap rc-dib0700-rc5 not found [ 1313.279242][T17807] Registered IR keymap rc-empty [ 1313.304570][T17807] dvb-usb: could not initialize remote control. [ 1313.333321][T17807] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1313.371014][T17807] usb 4-1: USB disconnect, device number 86 [ 1313.437900][T17807] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1313.503535][ T1767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13323'. [ 1313.895770][ T1784] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1313.943224][ T1787] netlink: 'syz.3.13332': attribute type 1 has an invalid length. [ 1313.963959][ T1787] netlink: 'syz.3.13332': attribute type 3 has an invalid length. [ 1313.984059][ T1787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13332'. [ 1315.295785][ T1843] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1315.731355][ T1862] netlink: 'syz.6.13368': attribute type 4 has an invalid length. [ 1315.758463][ T1862] netlink: 17 bytes leftover after parsing attributes in process `syz.6.13368'. [ 1316.994776][ T1925] loop0: detected capacity change from 0 to 512 [ 1317.044672][ T1925] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1317.056299][ T1925] __quota_error: 13 callbacks suppressed [ 1317.056315][ T1925] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 1317.072942][ T1925] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1317.088124][ T1925] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1317.113848][ T1925] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.13397: bad orphan inode 14 [ 1317.200802][ T1925] ext4_test_bit(bit=13, block=18) = 1 [ 1317.211383][ T1925] is_bad_inode(inode)=0 [ 1317.215617][ T1925] NEXT_ORPHAN(inode)=0 [ 1317.238309][ T1925] max_ino=32 [ 1317.241584][ T1925] i_nlink=1 [ 1317.248458][ T1925] EXT4-fs (loop0): 1 truncate cleaned up [ 1317.270517][ T1925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1317.436004][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1317.964587][ T1961] No such timeout policy "syz1" [ 1318.008671][ T1962] loop0: detected capacity change from 0 to 512 [ 1318.015811][ T1962] EXT4-fs: Ignoring removed bh option [ 1318.084178][ T1962] EXT4-fs: Ignoring removed mblk_io_submit option [ 1318.133710][ T1962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1318.198314][ T1970] ALSA: mixer_oss: invalid OSS volume 'w' [ 1318.219057][ T1962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1318.239286][ T1962] ext4 filesystem being mounted at /2705/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.372255][ T1962] EXT4-fs error (device loop0): ext4_ext_remove_space:2930: inode #15: comm syz.0.13416: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1318.406408][ T1962] EXT4-fs error (device loop0): ext4_evict_inode:292: comm syz.0.13416: couldn't truncate inode 15 (err -117) [ 1318.519176][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1318.923153][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13430'. [ 1319.026045][ T2004] netlink: 'syz.6.13433': attribute type 1 has an invalid length. [ 1319.242760][ T2012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13437'. [ 1319.267074][ T2013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1319.288541][ T2013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1319.736151][ T2033] netlink: 'syz.0.13449': attribute type 4 has an invalid length. [ 1320.521341][T16937] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1320.593265][ T2072] loop3: detected capacity change from 0 to 512 [ 1320.636978][ T2072] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1320.711372][ T2072] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1320.726953][T16937] usb 1-1: Using ep0 maxpacket: 16 [ 1320.734422][T16937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.760404][ T2072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1320.808262][ T2077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13470'. [ 1320.818551][T16937] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1320.851526][ T2072] EXT4-fs (loop3): unmounting filesystem. [ 1320.864767][T16937] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1320.891765][ T2079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1320.924232][T16937] usb 1-1: Product: syz [ 1320.944274][ T2079] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1320.966671][T16937] usb 1-1: config 0 descriptor?? [ 1320.986760][T16937] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1321.045185][ T2084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13472'. [ 1321.070808][ T2084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13472'. [ 1321.415381][T16937] gspca_spca501: reg write: error -71 [ 1321.421312][T16937] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1321.445359][T16937] spca501: probe of 1-1:0.0 failed with error -22 [ 1321.483016][T16937] usb 1-1: USB disconnect, device number 100 [ 1321.658824][ T4356] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1321.869021][ T4356] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.886265][ T4356] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1321.906844][ T4356] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1321.929634][ T4356] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1321.938734][ T4356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.957972][ T4356] usb 7-1: Product: syz [ 1321.967460][ T4356] usb 7-1: Manufacturer: syz [ 1321.993900][ T4356] usb 7-1: SerialNumber: syz [ 1322.167984][ T7044] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1322.241193][ T4356] usb 7-1: USB disconnect, device number 9 [ 1322.328611][ T2135] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1322.388368][ T7044] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1322.407004][ T7044] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1322.425037][ T7044] usb 2-1: Product: syz [ 1322.429401][ T7044] usb 2-1: Manufacturer: syz [ 1322.434023][ T7044] usb 2-1: SerialNumber: syz [ 1322.456715][ T7044] usb 2-1: config 0 descriptor?? [ 1322.469376][ T7044] ch341 2-1:0.0: ch341-uart converter detected [ 1322.592301][ T2143] tmpfs: Bad value for 'mpol' [ 1322.906589][ T7044] usb 2-1: failed to send control message: -71 [ 1322.926497][ T7044] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1322.959066][ T7044] usb 2-1: USB disconnect, device number 95 [ 1322.976803][ T7044] ch341 2-1:0.0: device disconnected [ 1323.246441][ T2166] Cannot find map_set index 65503 as target [ 1323.641285][T16937] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1323.789836][ T2186] xt_hashlimit: size too large, truncated to 1048576 [ 1323.858138][T16937] usb 1-1: Using ep0 maxpacket: 16 [ 1323.868479][T16937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1323.915181][T16937] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1323.952689][T16937] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1323.962726][T16937] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1323.998926][T16937] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1324.009092][T16937] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1324.030256][T16937] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1324.053035][T16937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.087595][T16937] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1324.277324][ T2196] device bridge_slave_0 left promiscuous mode [ 1324.316286][ T2196] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1324.324856][T16937] scsi host1: usb-storage 1-1:1.0 [ 1324.367636][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.537497][ T2199] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1324.583419][ T4356] usb 1-1: USB disconnect, device number 101 [ 1325.055214][ T2217] cgroup: none used incorrectly [ 1325.493604][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13546'. [ 1325.602505][ T4314] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1325.812401][ T4314] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1325.833366][ T4314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.873251][ T4314] usb 7-1: Product: syz [ 1325.884987][ T4314] usb 7-1: Manufacturer: syz [ 1325.928753][ T4314] usb 7-1: SerialNumber: syz [ 1325.952949][ T4314] usb 7-1: config 0 descriptor?? [ 1325.956285][ T2254] netlink: 'syz.2.13554': attribute type 4 has an invalid length. [ 1325.996929][ T2254] netlink: 204 bytes leftover after parsing attributes in process `syz.2.13554'. [ 1326.185776][ T4314] mos7840 7-1:0.0: required endpoints missing [ 1326.230160][ T2264] overlayfs: missing 'lowerdir' [ 1326.415038][ T2271] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13563'. [ 1326.432226][ T4314] usb 7-1: USB disconnect, device number 10 [ 1326.438585][ T2271] netlink: 'syz.0.13563': attribute type 1 has an invalid length. [ 1326.451662][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13563'. [ 1326.555032][ T2277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13566'. [ 1326.672325][ T2283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13569'. [ 1326.707604][ T7044] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1326.760606][ T2285] program syz.0.13571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1326.935065][ T7044] usb 2-1: Using ep0 maxpacket: 32 [ 1326.942718][ T7044] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1326.966111][ T2294] autofs4:pid:2294:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1326.974184][ T7044] usb 2-1: config 4 has no interface number 0 [ 1326.995555][ T7044] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.025692][ T7044] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.040061][ T7044] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1327.052642][ T7044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.075060][ T7044] hub 2-1:4.128: USB hub found [ 1327.151647][ T2297] netlink: 'syz.2.13576': attribute type 1 has an invalid length. [ 1327.210236][ T2299] netlink: 180 bytes leftover after parsing attributes in process `syz.0.13577'. [ 1327.268934][ T2302] netlink: 'syz.6.13578': attribute type 21 has an invalid length. [ 1327.305260][ T7044] hub 2-1:4.128: 21 ports detected [ 1327.310504][ T7044] hub 2-1:4.128: Using single TT (err -22) [ 1327.338831][ T7044] hub 2-1:4.128: insufficient power available to use all downstream ports [ 1327.477969][ T2312] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13583'. [ 1327.504610][ T2312] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13583'. [ 1327.534892][ T7044] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 1327.553494][ T7044] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 1327.629111][ T7044] usb 2-1: USB disconnect, device number 96 [ 1327.983354][ T2332] xt_hashlimit: size too large, truncated to 1048576 [ 1328.126784][ T4356] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1328.345336][ T4356] usb 1-1: Using ep0 maxpacket: 16 [ 1328.352306][ T4356] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1328.394750][ T4356] usb 1-1: config 0 has no interface number 0 [ 1328.419249][ T4356] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1328.429151][ T4356] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1328.484868][ T4356] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1328.494110][ T4356] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1328.523065][ T2345] tmpfs: Bad value for 'mpol' [ 1328.527914][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.546959][ T4356] usb 1-1: Product: syz [ 1328.568842][ T4356] usb 1-1: Manufacturer: syz [ 1328.588884][ T4356] usb 1-1: SerialNumber: syz [ 1328.622281][ T4356] usb 1-1: config 0 descriptor?? [ 1328.635569][ T2325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1328.657377][ T2325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1328.907857][ T2325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1328.915162][ T2325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1329.156870][ T4356] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1329.182582][ T4356] usb 1-1: USB disconnect, device number 102 [ 1329.394355][T31307] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1329.604074][T31307] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1329.648699][T31307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.677714][ T2395] loop6: detected capacity change from 0 to 512 [ 1329.701594][ T2395] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1329.707735][T31307] usb 2-1: Product: syz [ 1329.735036][ T2395] EXT4-fs (loop6): 1 truncate cleaned up [ 1329.746728][ T2395] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1329.766044][T31307] usb 2-1: Manufacturer: syz [ 1329.770714][T31307] usb 2-1: SerialNumber: syz [ 1329.804225][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1329.854435][T31307] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1329.915526][ T7044] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1330.011904][T16941] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1330.235745][T16937] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1330.246746][T16941] usb 4-1: Using ep0 maxpacket: 8 [ 1330.259069][T16941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.279402][T16941] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 1330.292621][T16941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.334588][T16941] usb 4-1: config 0 descriptor?? [ 1330.347384][ T2418] loop6: detected capacity change from 0 to 128 [ 1330.414270][T16941] usb 2-1: USB disconnect, device number 97 [ 1330.422400][ T2418] FAT-fs (loop6): Directory bread(block 32) failed [ 1330.442937][ T2418] FAT-fs (loop6): Directory bread(block 33) failed [ 1330.453932][ T2418] FAT-fs (loop6): Directory bread(block 34) failed [ 1330.468777][T16937] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1330.478591][ T2418] FAT-fs (loop6): Directory bread(block 35) failed [ 1330.498001][ T2418] FAT-fs (loop6): Directory bread(block 36) failed [ 1330.505629][ T2418] FAT-fs (loop6): Directory bread(block 37) failed [ 1330.512988][ T2418] FAT-fs (loop6): Directory bread(block 38) failed [ 1330.514207][T16937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.519535][ T2418] FAT-fs (loop6): Directory bread(block 39) failed [ 1330.519770][ T2418] FAT-fs (loop6): Directory bread(block 40) failed [ 1330.541521][ T2418] FAT-fs (loop6): Directory bread(block 41) failed [ 1330.571988][T16937] usb 1-1: config 0 descriptor?? [ 1330.593086][T17807] usb 4-1: USB disconnect, device number 87 [ 1330.600476][T16937] cp210x 1-1:0.0: cp210x converter detected [ 1330.860998][ T2429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13631'. [ 1330.876074][ T2429] netlink: 'syz.2.13631': attribute type 1 has an invalid length. [ 1330.964915][ T2371] Process accounting paused [ 1331.012787][ T2435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13633'. [ 1331.045478][T16937] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1331.056022][T16937] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1331.076633][T16937] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1331.084926][ T7044] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1331.091997][ T7044] ath9k_htc: Failed to initialize the device [ 1331.110327][T16941] usb 2-1: ath9k_htc: USB layer deinitialized [ 1331.135238][T16937] usb 1-1: USB disconnect, device number 103 [ 1331.203076][T16937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1331.239216][T16937] cp210x 1-1:0.0: device disconnected [ 1331.286250][ T2444] usb usb8: usbfs: process 2444 (syz.2.13636) did not claim interface 0 before use [ 1331.569242][ T2460] loop1: detected capacity change from 0 to 512 [ 1331.571073][ T2455] loop3: detected capacity change from 0 to 1764 [ 1331.654938][ T2460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1331.680568][ T2460] ext4 filesystem being mounted at /2727/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.835681][ T2469] binder: 2467:2469 ioctl c0046209 9999999999999999 returned -22 [ 1331.861331][ T2460] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.13642: directory missing '..' [ 1332.022122][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 1332.162769][ T2483] loop6: detected capacity change from 0 to 512 [ 1332.230412][ T2483] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.13652: inode has both inline data and extents flags [ 1332.275812][ T2483] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.13652: couldn't read orphan inode 15 (err -117) [ 1332.289143][ T2483] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1332.559107][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1332.987263][ T7044] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1333.144351][ T2535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1333.189951][ T7044] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1333.215675][ T7044] usb 3-1: config 8 has no interface number 0 [ 1333.244334][ T7044] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1333.275421][ T7044] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1333.315604][ T7044] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1333.354722][ T7044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.391034][ T2511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1333.555106][ T2550] CIFS mount error: No usable UNC path provided in device string! [ 1333.555106][ T2550] [ 1333.565180][ T2550] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1333.655548][ T7044] usb 3-1: string descriptor 0 read error: -71 [ 1333.686530][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 1333.862923][ T2561] tmpfs: Bad value for 'mpol' [ 1333.892909][ T2563] program syz.0.13683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1333.908957][ T2563] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1334.016625][ T2542] loop6: detected capacity change from 0 to 32768 [ 1334.107271][ T4356] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1334.132857][ T2542] XFS (loop6): Mounting V5 Filesystem [ 1334.164120][ T2542] XFS (loop6): Ending clean mount [ 1334.237981][ T7044] ir_toy 3-1:8.177: could not write reset command: -110 [ 1334.245152][ T7044] ir_toy: probe of 3-1:8.177 failed with error -110 [ 1334.288657][ T7044] usb 3-1: USB disconnect, device number 91 [ 1334.324052][ T4356] usb 4-1: Using ep0 maxpacket: 16 [ 1334.345728][T29535] XFS (loop6): Unmounting Filesystem [ 1334.360326][ T4356] usb 4-1: config 0 has no interfaces? [ 1334.369429][ T2587] loop1: detected capacity change from 0 to 64 [ 1334.390594][ T4356] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1334.408179][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.416784][ T4356] usb 4-1: Product: syz [ 1334.421063][ T4356] usb 4-1: Manufacturer: syz [ 1334.427808][ T4356] usb 4-1: SerialNumber: syz [ 1334.451025][ T4356] r8152-cfgselector 4-1: config 0 descriptor?? [ 1334.709227][ T4356] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1334.931314][ T4314] usb 4-1: USB disconnect, device number 88 [ 1335.550967][ T2625] loop0: detected capacity change from 0 to 4096 [ 1335.585635][ T2625] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1335.721623][ T2625] ntfs3: loop0: failed to convert "c46c" to cp857 [ 1335.920142][ T2642] overlayfs: missing 'lowerdir' [ 1336.879611][ T2691] loop3: detected capacity change from 0 to 512 [ 1336.903312][ T2691] /dev/loop3: Can't open blockdev [ 1336.979942][ T4711] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1337.697112][ T2734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1337.893065][ T2744] x_tables: duplicate entry at hook 3 [ 1337.899944][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13752'. [ 1337.923429][ T2742] netlink: 'syz.1.13752': attribute type 2 has an invalid length. [ 1338.109692][ T2746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13754'. [ 1338.181103][ T2751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13756'. [ 1338.234232][ T2751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13756'. [ 1338.302107][ T2756] xt_limit: Overflow, try lower: 1207959552/384 [ 1338.546878][ T2764] netlink: 'syz.0.13763': attribute type 1 has an invalid length. [ 1338.555937][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13763'. [ 1338.834848][ T2781] loop0: detected capacity change from 0 to 512 [ 1338.877151][ T2781] FAT-fs (loop0): Unrecognized mount option "shortnutf8=1" or missing value [ 1339.069098][ T2789] loop6: detected capacity change from 0 to 1024 [ 1339.090765][ T2748] loop1: detected capacity change from 0 to 32768 [ 1339.098735][ T2789] EXT4-fs: inline encryption not supported [ 1339.174969][ T2748] XFS (loop1): Mounting V5 Filesystem [ 1339.202197][ T2789] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1339.220943][T31309] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1339.353607][ T2748] XFS (loop1): Ending clean mount [ 1339.381994][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1339.432511][T31309] usb 1-1: Using ep0 maxpacket: 8 [ 1339.440089][T31309] usb 1-1: config 0 has an invalid interface number: 88 but max is 3 [ 1339.487449][T31309] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 1339.517490][T31309] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1339.547207][T31309] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1339.567334][T31309] usb 1-1: config 0 has no interface number 0 [ 1339.592094][T31309] usb 1-1: config 0 has no interface number 1 [ 1339.643472][T31309] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1339.650229][T31309] usb 1-1: config 0 interface 250 has no altsetting 0 [ 1339.684053][T31309] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1339.725188][T31309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.736705][T31309] usb 1-1: config 0 descriptor?? [ 1339.756523][ T4278] XFS (loop1): Unmounting Filesystem [ 1339.984941][T31309] usb 1-1: string descriptor 0 read error: -71 [ 1340.029589][T31309] usb 1-1: USB disconnect, device number 104 [ 1340.792169][T31309] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1341.019433][T31309] usb 3-1: Using ep0 maxpacket: 8 [ 1341.026486][T31309] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1341.049669][T31309] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1341.068281][T31309] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1341.082865][T31309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 127, changing to 10 [ 1341.117056][T31309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1287, setting to 1024 [ 1341.163129][T31309] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1341.187962][T31309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.211626][T31309] usb 3-1: Product: syz [ 1341.225778][T31309] usb 3-1: Manufacturer: syz [ 1341.236266][T31309] usb 3-1: SerialNumber: syz [ 1341.260044][T31309] usb 3-1: config 0 descriptor?? [ 1341.265841][ T2851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1341.287545][T31309] hub 3-1:0.0: bad descriptor, ignoring hub [ 1341.312409][T31309] hub: probe of 3-1:0.0 failed with error -5 [ 1341.321104][T31309] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input82 [ 1341.330480][ T4356] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1341.539912][ T4356] usb 1-1: Using ep0 maxpacket: 16 [ 1341.547429][ T4356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.584612][ T4356] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1341.603148][T16941] usb 3-1: USB disconnect, device number 92 [ 1341.603286][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 1341.619753][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.628479][ T4356] usb 1-1: Product: syz [ 1341.632694][ T4356] usb 1-1: Manufacturer: syz [ 1341.643473][ T4356] usb 1-1: SerialNumber: syz [ 1341.654991][ T4356] usb 1-1: config 0 descriptor?? [ 1341.681536][ T4356] asix: probe of 1-1:0.0 failed with error -22 [ 1341.831430][ T2894] loop6: detected capacity change from 0 to 4096 [ 1341.892086][ T4356] usb 1-1: USB disconnect, device number 105 [ 1341.920477][ T2894] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1342.034671][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13816'. [ 1342.114805][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1342.157804][ T2901] loop1: detected capacity change from 0 to 4096 [ 1342.198097][ T2901] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1342.311648][ T2901] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1342.341188][ T2901] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1342.391340][ T2901] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1342.410020][ T2901] ntfs: volume version 3.1. [ 1342.504763][ T2918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13821'. [ 1342.524760][ T2901] ntfs: (device loop1): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1342.590552][ T4314] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1342.669520][ T4278] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1342.741453][ T2915] xt_CT: No such helper "pptp" [ 1342.799111][ T4314] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1342.827595][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1342.867272][ T4314] usb 4-1: Product: syz [ 1342.884563][ T4314] usb 4-1: config 0 descriptor?? [ 1342.907080][ T2926] device geneve3 entered promiscuous mode [ 1342.914317][ T4314] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1342.935753][ T4314] usb 4-1: Detected FT232H [ 1343.074023][ T2932] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1343.101122][ T2932] bond0: (slave lo): Error: Device type is different from other slaves [ 1343.336005][ T4314] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1343.352435][ T4314] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1343.381555][ T4314] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1343.414650][ T4314] usb 4-1: USB disconnect, device number 89 [ 1343.465271][ T4314] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1343.488218][ T4314] ftdi_sio 4-1:0.0: device disconnected [ 1343.632982][ T2948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13836'. [ 1344.157348][ T2967] device ip6tnl2 entered promiscuous mode [ 1344.908094][ T2965] loop3: detected capacity change from 0 to 32768 [ 1345.352434][ T3009] netlink: 'syz.0.13867': attribute type 1 has an invalid length. [ 1345.779113][ T3017] loop0: detected capacity change from 0 to 4096 [ 1345.804083][ T2990] loop6: detected capacity change from 0 to 32768 [ 1345.824943][ T3017] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1345.844211][ T2990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.13858 (2990) [ 1345.914925][ T2990] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1345.934173][ T3021] xt_CT: No such helper "snmp_trap" [ 1345.944423][ T2990] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1346.000098][ T2990] BTRFS info (device loop6): using free space tree [ 1346.408551][ T2990] BTRFS info (device loop6): enabling ssd optimizations [ 1346.618278][T29535] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1347.158388][T16937] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1347.322948][ T3082] SET target dimension over the limit! [ 1347.391307][T16937] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.430554][T16937] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1347.459054][T16937] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1347.485303][T16937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.516849][T16937] usb 2-1: Product: syz [ 1347.537261][ T3088] netlink: 168 bytes leftover after parsing attributes in process `syz.6.13896'. [ 1347.541706][T16937] usb 2-1: Manufacturer: syz [ 1347.551072][T16937] usb 2-1: SerialNumber: syz [ 1347.566319][ T3089] cgroup: Unknown subsys name 'pcr' [ 1347.589695][T16937] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1347.610108][T16937] usb 2-1: selecting invalid altsetting 0 [ 1347.647773][T16937] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1347.863446][ T4316] usb 2-1: USB disconnect, device number 98 [ 1347.928801][ T3098] netlink: 'syz.0.13902': attribute type 32 has an invalid length. [ 1348.634442][ T3123] device geneve2 entered promiscuous mode [ 1348.675810][ T3133] loop6: detected capacity change from 0 to 16 [ 1348.708892][ T3133] erofs: (device loop6): mounted with root inode @ nid 36. [ 1348.729643][ T3133] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1348.733911][ T3131] netlink: 766 bytes leftover after parsing attributes in process `syz.0.13917'. [ 1348.750467][ T3133] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1348.772154][ T3133] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1348.809348][ T3133] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 1348.848441][ T26] audit: type=1800 audit(1779261908.266:268): pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.13918" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1349.613813][ T3154] loop0: detected capacity change from 0 to 4096 [ 1349.625091][ T3156] netlink: 'syz.6.13928': attribute type 10 has an invalid length. [ 1349.642387][ T3156] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13928'. [ 1349.655509][ T3154] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1349.703330][ T3156] netlink: 'syz.6.13928': attribute type 10 has an invalid length. [ 1349.734743][ T3154] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1349.752150][ T3156] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13928'. [ 1349.758755][ T3154] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1349.780577][ T3126] loop3: detected capacity change from 0 to 40427 [ 1349.796513][ T3154] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1349.859705][ T3154] ntfs: volume version 3.1. [ 1349.881487][ T4370] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1349.967348][ T3154] ntfs: (device loop0): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1350.096154][ T3162] netlink: 'syz.6.13931': attribute type 1 has an invalid length. [ 1350.159958][ T4274] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1350.532002][ T4316] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1350.706294][ T3183] netlink: 'syz.0.13941': attribute type 4 has an invalid length. [ 1350.748566][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 1350.755840][ T3187] cgroup: subsys name conflicts with all [ 1350.762140][ T4316] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1350.781068][ T4316] usb 2-1: config 0 has no interface number 0 [ 1350.791041][ T4316] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1350.826978][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.853896][ T4316] usb 2-1: Product: syz [ 1350.865659][ T4316] usb 2-1: Manufacturer: syz [ 1350.879069][ T4316] usb 2-1: SerialNumber: syz [ 1350.904144][ T4316] usb 2-1: config 0 descriptor?? [ 1351.072712][ T3195] device ip6tnl2 entered promiscuous mode [ 1351.145335][ T4316] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1351.163440][ T4316] usb 2-1: No valid video chain found. [ 1351.198338][ T4316] usb 2-1: USB disconnect, device number 99 [ 1351.515715][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13953'. [ 1351.714020][ T3216] netlink: 72 bytes leftover after parsing attributes in process `syz.6.13956'. [ 1351.734019][ T3218] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1351.744621][ T3218] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1351.994542][ T4314] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 1352.225723][ T4314] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1352.244319][ T4314] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1352.252553][ T4314] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1352.270597][ T4314] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1352.285947][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1352.300056][ T3243] netlink: 'syz.0.13969': attribute type 9 has an invalid length. [ 1352.309883][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1352.334870][ T4314] usb 3-1: string descriptor 0 read error: -22 [ 1352.341586][ T3243] netlink: 'syz.0.13969': attribute type 7 has an invalid length. [ 1352.347158][ T4314] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1352.349420][ T3243] netlink: 'syz.0.13969': attribute type 8 has an invalid length. [ 1352.416395][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.444790][ T4314] usb 3-1: config 0 descriptor?? [ 1352.453772][ T3219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1352.470972][ T4314] hub 3-1:0.0: bad descriptor, ignoring hub [ 1352.480583][ T4314] hub: probe of 3-1:0.0 failed with error -5 [ 1352.498890][ T4314] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input83 [ 1352.641369][ T3249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13972'. [ 1352.747579][T16937] usb 3-1: USB disconnect, device number 93 [ 1353.500241][ T3283] loop1: detected capacity change from 0 to 256 [ 1353.899951][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13994'. [ 1353.938770][ T3296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13995'. [ 1353.987589][ T3303] netlink: 'syz.2.13997': attribute type 2 has an invalid length. [ 1354.020743][ T3303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13997'. [ 1354.462282][ T3319] loop0: detected capacity change from 0 to 512 [ 1354.576133][ T3325] loop1: detected capacity change from 0 to 64 [ 1354.625374][ T3319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1354.645102][ T3330] loop3: detected capacity change from 0 to 64 [ 1354.649491][ T3319] ext4 filesystem being mounted at /2812/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.672855][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1354.679189][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1354.739105][ T4711] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1354.820992][ T3334] x_tables: unsorted underflow at hook 1 [ 1354.853844][ T3319] EXT4-fs error (device loop0): ext4_xattr_block_find:1826: inode #15: comm syz.0.14006: corrupted xattr block 33 [ 1354.950281][ T3319] EXT4-fs (loop0): Remounting filesystem read-only [ 1355.115405][ T3343] netlink: 'syz.2.14016': attribute type 8 has an invalid length. [ 1355.123295][ T3343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1355.140410][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1355.227519][ T3350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14019'. [ 1355.271448][ T3350] device geneve2 entered promiscuous mode [ 1355.665019][ T3372] ieee802154 phy0 wpan0: encryption failed: -90 [ 1356.219666][ T3392] device vti0 entered promiscuous mode [ 1356.955402][ T3423] loop1: detected capacity change from 0 to 1024 [ 1356.989883][ T3423] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1357.032360][ T3423] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #32: comm syz.1.14051: iget: special inode unallocated [ 1357.069294][ T3423] EXT4-fs (loop1): no journal found [ 1357.074584][ T3423] EXT4-fs (loop1): can't get journal size [ 1357.094198][ T3423] EXT4-fs (loop1): filesystem is read-only [ 1357.100376][ T3423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1357.280382][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 1357.455157][ T3447] program syz.3.14060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.711240][ T3456] loop0: detected capacity change from 0 to 512 [ 1357.776781][ T3456] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1357.807997][ T3456] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1357.839811][ T3462] device vti1 entered promiscuous mode [ 1357.896950][ T3456] System zones: 0-1, 15-15, 18-18, 34-34 [ 1357.943557][ T3456] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1357.950393][ T3456] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1358.012372][ T3456] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1358.042946][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14075'. [ 1358.076857][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14075'. [ 1358.106943][ T3456] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1358.129988][ T3456] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.14065: bad orphan inode 16 [ 1358.155533][ T3456] ext4_test_bit(bit=15, block=18) = 1 [ 1358.191941][ T3456] is_bad_inode(inode)=0 [ 1358.196166][ T3456] NEXT_ORPHAN(inode)=0 [ 1358.200264][ T3456] max_ino=32 [ 1358.217067][ T3466] loop1: detected capacity change from 0 to 4096 [ 1358.234752][ T3456] i_nlink=2 [ 1358.263963][ T3456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1358.317468][ T3456] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1358.334126][ T3466] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1358.384170][ T3466] ntfs3: loop1: Failed to load $Extend. [ 1358.512004][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1358.583646][ T3482] loop3: detected capacity change from 0 to 4096 [ 1358.593288][ T4278] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 1358.600107][ T4278] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 1358.639296][ T3482] /dev/loop3: Can't open blockdev [ 1358.863768][ T3492] netlink: 600 bytes leftover after parsing attributes in process `syz.2.14084'. [ 1359.414178][ T3513] binfmt_misc: register: failed to install interpreter file ./file2 [ 1359.479554][ T3517] loop6: detected capacity change from 0 to 2048 [ 1359.561257][ T3517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1359.849877][ T3530] loop6: detected capacity change from 0 to 128 [ 1359.857523][ T3530] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1359.925997][ T3530] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1360.480812][ T3561] netlink: 'syz.6.14115': attribute type 13 has an invalid length. [ 1360.655243][ T3570] ip6t_rpfilter: unknown options [ 1361.881450][ T3655] Zero length message leads to an empty skb [ 1361.903337][ T3659] loop1: detected capacity change from 0 to 16 [ 1361.951855][ T3659] erofs: (device loop1): mounted with root inode @ nid 36. [ 1362.017446][ T3659] syz.1.14147: attempt to access beyond end of device [ 1362.017446][ T3659] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1362.085770][ T3659] syz.1.14147: attempt to access beyond end of device [ 1362.085770][ T3659] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1362.136399][ T26] audit: type=1800 audit(1779261920.533:269): pid=3659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14147" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1362.156172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.691417][ T3701] loop1: detected capacity change from 0 to 128 [ 1362.753056][ T3701] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 1362.959859][ T4278] sysv_free_block: flc_count > flc_size [ 1362.965484][ T4278] sysv_free_block: flc_count > flc_size [ 1363.004363][ T4278] sysv_free_block: flc_count > flc_size [ 1363.010031][ T4278] sysv_free_block: flc_count > flc_size [ 1363.064042][ T4278] sysv_free_block: flc_count > flc_size [ 1363.073953][ T4278] sysv_free_block: flc_count > flc_size [ 1363.080156][ T4278] sysv_free_block: flc_count > flc_size [ 1363.111246][ T4278] sysv_free_block: flc_count > flc_size [ 1363.116898][ T4278] sysv_free_block: flc_count > flc_size [ 1363.150563][ T4278] sysv_free_block: flc_count > flc_size [ 1363.207115][ T4278] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1363.676635][ T3746] Process accounting resumed [ 1363.852978][ T3759] loop1: detected capacity change from 0 to 128 [ 1363.874235][ T3759] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1363.959103][ T3759] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1364.203576][ T26] audit: type=1326 audit(1779261922.435:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.1.14185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1364.237358][T16937] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1364.326120][ T26] audit: type=1326 audit(1779261922.444:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.1.14185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1364.382429][ T26] audit: type=1326 audit(1779261922.444:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.1.14185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1364.427598][ T26] audit: type=1326 audit(1779261922.444:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.1.14185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1364.451749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.452995][ T3790] lo speed is unknown, defaulting to 1000 [ 1364.500194][T16937] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1364.529860][T16937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.557199][T16937] usb 1-1: config 0 has no interface number 0 [ 1364.574569][T16937] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1364.605592][T16937] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1364.640994][T16937] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1364.659706][T16937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.668066][T16937] usb 1-1: Product: syz [ 1364.679014][T16937] usb 1-1: Manufacturer: syz [ 1364.684040][T16937] usb 1-1: SerialNumber: syz [ 1364.706482][T16937] usb 1-1: config 0 descriptor?? [ 1364.873616][ T3790] wg1 speed is unknown, defaulting to 1000 [ 1364.884375][ T3790] team0 speed is unknown, defaulting to 1000 [ 1365.177005][ T4314] usb 1-1: USB disconnect, device number 106 [ 1365.552884][ T26] audit: type=1326 audit(1779261923.681:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3863 comm="syz.3.14205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c7b9ce59 code=0x7ffc0000 [ 1365.629223][ T26] audit: type=1326 audit(1779261923.681:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3863 comm="syz.3.14205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c7b9ce59 code=0x7ffc0000 [ 1365.666262][ T26] audit: type=1326 audit(1779261923.681:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3863 comm="syz.3.14205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c7b9ce59 code=0x7ffc0000 [ 1365.698864][ T26] audit: type=1326 audit(1779261923.681:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3863 comm="syz.3.14205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fd3c7b9ce59 code=0x7ffc0000 [ 1365.750575][ T26] audit: type=1326 audit(1779261923.681:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3863 comm="syz.3.14205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c7b9ce59 code=0x7ffc0000 [ 1365.780274][ T3872] loop6: detected capacity change from 0 to 1024 [ 1365.797348][ T26] audit: type=1326 audit(1779261923.681:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3863 comm="syz.3.14205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c7b9ce59 code=0x7ffc0000 [ 1365.831686][ T3872] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1365.860251][ T3872] EXT4-fs error (device loop6): ext4_get_journal_inode:5762: inode #32: comm syz.6.14207: iget: special inode unallocated [ 1365.882186][ T3872] EXT4-fs (loop6): no journal found [ 1365.888074][ T3872] EXT4-fs (loop6): can't get journal size [ 1365.906317][ T3872] EXT4-fs (loop6): filesystem is read-only [ 1365.912247][ T3872] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1365.946861][ T3872] EXT4-fs error (device loop6): ext4_lookup:1850: inode #2: comm syz.6.14207: bad inode number: 12 [ 1366.271641][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1367.233941][ T3953] xt_TCPMSS: Only works on TCP SYN packets [ 1367.691856][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14242'. [ 1367.720242][ T3976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14242'. [ 1367.756250][ T3976] netlink: 'syz.3.14242': attribute type 1 has an invalid length. [ 1368.148364][ T4356] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1368.239097][ T4006] tmpfs: Bad value for 'mpol' [ 1368.370820][ T4356] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1368.390744][ T4356] usb 3-1: config 0 has no interface number 0 [ 1368.427257][ T4356] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1368.466367][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.508522][ T4356] usb 3-1: Product: syz [ 1368.512767][ T4356] usb 3-1: Manufacturer: syz [ 1368.531786][ T4356] usb 3-1: SerialNumber: syz [ 1368.555084][ T4356] usb 3-1: config 0 descriptor?? [ 1369.014691][ T4356] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1369.033397][ T4356] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1369.060992][ T4356] asix: probe of 3-1:0.251 failed with error -5 [ 1369.081407][ T4356] usb 3-1: USB disconnect, device number 94 [ 1369.164872][ T4046] 9p: Unknown access argument z: -22 [ 1369.303191][ T4031] loop0: detected capacity change from 0 to 32768 [ 1369.343504][ T4031] (syz.0.14261,4031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1369.365630][ T4050] loop3: detected capacity change from 0 to 2048 [ 1369.375103][ T4050] /dev/loop3: Can't open blockdev [ 1369.376124][ T4031] (syz.0.14261,4031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1369.455096][ T4031] JBD2: Ignoring recovery information on journal [ 1369.594994][ T4031] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1369.697797][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14269'. [ 1369.841255][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 1370.051268][ T4094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14277'. [ 1370.086359][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14278'. [ 1370.300459][ T4104] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14280'. [ 1371.383920][ T4117] loop6: detected capacity change from 0 to 32768 [ 1371.423849][ T4117] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.14285 (4117) [ 1371.530561][ T4117] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1371.550465][ T4117] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1371.592086][ T4117] BTRFS info (device loop6): force zlib compression, level 3 [ 1371.611238][ T4117] BTRFS info (device loop6): turning on flush-on-commit [ 1371.641462][ T4117] BTRFS info (device loop6): max_inline at 4096 [ 1371.669531][ T4117] BTRFS info (device loop6): using free space tree [ 1371.907847][ T4117] BTRFS info (device loop6): enabling ssd optimizations [ 1372.104433][T29535] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1372.326427][ T4215] loop0: detected capacity change from 0 to 4096 [ 1372.418638][ T4215] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1372.515832][ T4215] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1372.754790][ T4231] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.14318'. [ 1372.787903][ T4233] sctp: [Deprecated]: syz.1.14319 (pid 4233) Use of int in max_burst socket option. [ 1372.787903][ T4233] Use struct sctp_assoc_value instead [ 1372.796447][ T4231] netlink: 43 bytes leftover after parsing attributes in process `syz.3.14318'. [ 1373.254219][ T4259] netlink: 'syz.3.14324': attribute type 3 has an invalid length. [ 1373.296118][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14324'. [ 1373.327302][ T4259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14324'. [ 1373.603898][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14333'. [ 1373.980903][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1374.268917][ T4352] netlink: 'syz.2.14346': attribute type 30 has an invalid length. [ 1374.734526][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1374.734553][ T26] audit: type=1326 audit(1779261932.154:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.6.14354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1374.828537][ T26] audit: type=1326 audit(1779261932.154:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.6.14354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1374.941684][ T26] audit: type=1326 audit(1779261932.191:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.6.14354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1375.023725][ T26] audit: type=1326 audit(1779261932.191:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.6.14354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1375.114844][ T26] audit: type=1326 audit(1779261932.191:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.6.14354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb5f9ce59 code=0x7ffc0000 [ 1375.183695][ T4403] loop6: detected capacity change from 0 to 128 [ 1375.310355][ T4711] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1375.364612][ T4403] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.057417][T16941] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1376.180912][ T4457] loop6: detected capacity change from 0 to 2048 [ 1376.251942][ T4465] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1376.265315][T16941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1376.296796][T16941] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1376.361323][T16941] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1376.401058][T16941] usb 3-1: string descriptor 0 read error: -22 [ 1376.419025][T16941] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1376.429234][T16941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.779080][ T4487] 9pnet_fd: p9_fd_create_tcp (4487): problem connecting socket to 127.0.0.1 [ 1376.926799][T16941] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1376.953923][T16941] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1377.083462][T16941] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1377.137456][T16941] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1377.223236][T16941] usb 3-1: USB disconnect, device number 95 [ 1378.260871][ T4601] loop1: detected capacity change from 0 to 128 [ 1378.927616][ T4586] loop0: detected capacity change from 0 to 32768 [ 1379.014465][ T4586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.14412 (4586) [ 1379.044352][ T4641] loop1: detected capacity change from 0 to 256 [ 1379.086956][ T4586] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1379.118603][ T4586] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1379.155039][ T4586] BTRFS info (device loop0): using free space tree [ 1379.611063][ T4586] BTRFS info (device loop0): enabling ssd optimizations [ 1379.786263][ T4705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14442'. [ 1379.893230][ T4274] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1380.835544][ T4756] loop1: detected capacity change from 0 to 1024 [ 1380.922994][ T4756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1381.194650][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 1381.411749][ T4795] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1381.901695][ T4826] x_tables: duplicate entry at hook 2 [ 1382.063479][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14487'. [ 1382.215259][ T4844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14489'. [ 1382.544850][ T4865] program syz.0.14498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1382.606851][ T4865] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1382.816342][ T4886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14505'. [ 1382.844705][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14505'. [ 1382.980409][ T6878] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1383.186309][ T6878] usb 7-1: Using ep0 maxpacket: 8 [ 1383.209442][ T6878] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 1383.237037][ T6878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1383.270019][ T6878] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1383.287725][ T6878] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1383.305429][ T6878] usb 7-1: Product: syz [ 1383.306169][T16942] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1383.314737][ T6878] usb 7-1: Manufacturer: syz [ 1383.327192][ T6878] usb 7-1: SerialNumber: syz [ 1383.346877][ T6878] usb 7-1: config 0 descriptor?? [ 1383.374862][ T6878] smsusb:smsusb_probe: board id=2, interface number 0 [ 1383.413905][ T6878] smsusb:smsusb_probe: Device initialized with return code -19 [ 1383.454851][ T4924] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1383.533070][T16942] usb 4-1: Using ep0 maxpacket: 32 [ 1383.543293][T16942] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1383.574462][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.597695][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.631111][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.639203][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.664975][ T6878] usb 7-1: USB disconnect, device number 11 [ 1383.693660][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.715866][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.736670][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.757377][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.775458][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.792905][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.800513][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.824054][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.838240][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.857160][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.886434][T16942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1383.907501][T16942] usb 4-1: config 0 has no interface number 0 [ 1383.920956][T16942] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1383.941125][T16942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.952058][T16942] usb 4-1: Product: syz [ 1383.962134][T16942] usb 4-1: Manufacturer: syz [ 1383.977127][T16942] usb 4-1: SerialNumber: syz [ 1383.994617][T16942] usb 4-1: config 0 descriptor?? [ 1384.027512][T16942] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 1384.254148][T16942] etas_es58x 4-1:0.2: Product info:  [ 1384.551522][T16942] usb 4-1: USB disconnect, device number 90 [ 1384.558453][T16942] etas_es58x 4-1:0.2: Disconnecting syz syz [ 1386.121655][ T5074] xt_CT: No such helper "pptp" [ 1386.165899][T31309] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1386.373344][T31309] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1386.387738][T31309] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1386.427282][T31309] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1386.470165][T31309] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1386.500188][T31309] usb 7-1: Manufacturer: syz [ 1386.518946][T31309] usb 7-1: config 0 descriptor?? [ 1386.555273][T31309] igorplugusb 7-1:0.0: endpoint incorrect [ 1386.789563][T31309] usb 7-1: USB disconnect, device number 12 [ 1386.835714][ T5127] nft_compat: unsupported protocol 5 [ 1387.854659][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14585'. [ 1388.237410][ T5157] loop3: detected capacity change from 0 to 32768 [ 1388.300741][ T5157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.14577 (5157) [ 1388.418259][ T5157] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1388.459455][ T5157] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1388.506936][ T5157] BTRFS info (device loop3): using free space tree [ 1388.881357][ T5157] BTRFS info (device loop3): enabling ssd optimizations [ 1389.035828][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14605'. [ 1389.087473][ T4270] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1389.429287][ T5288] loop0: detected capacity change from 0 to 256 [ 1389.874756][ T5311] tmpfs: Bad value for 'mpol' [ 1390.033202][ T5315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14621'. [ 1390.598196][T31309] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1390.813694][T31309] usb 3-1: Using ep0 maxpacket: 8 [ 1390.830037][T31309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1390.878614][T31309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1390.888365][T31309] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1390.927068][T31309] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 1390.968373][T31309] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1390.987005][ T7003] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1391.001573][T31309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.036315][T31309] usb 3-1: config 0 descriptor?? [ 1391.061881][ T5331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1391.203579][ T7003] usb 4-1: Using ep0 maxpacket: 32 [ 1391.210770][ T7003] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1391.274649][ T7003] usb 4-1: config 0 has no interface number 0 [ 1391.305022][ T7003] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1391.337276][ T7003] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1391.376507][ T7003] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1391.407829][ T7003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.429695][ T7003] usb 4-1: Product: syz [ 1391.437969][ T7003] usb 4-1: Manufacturer: syz [ 1391.485208][ T7003] usb 4-1: SerialNumber: syz [ 1391.498569][ T7003] usb 4-1: config 0 descriptor?? [ 1391.536988][ T7003] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1391.555683][T31309] usb 3-1: USB disconnect, device number 96 [ 1391.565064][ T4276] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 1391.756660][ T7003] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 1391.763741][ T7003] quatech2: probe of 4-1:0.51 failed with error -90 [ 1391.896837][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14642'. [ 1391.993803][T31309] usb 4-1: USB disconnect, device number 91 [ 1392.268380][ T7003] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1392.319153][ T5437] autofs4:pid:5437:autofs_fill_super: called with bogus options [ 1392.501644][ T7003] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1392.531513][ T7003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.542834][ T7003] usb 7-1: Product: syz [ 1392.552962][ T7003] usb 7-1: Manufacturer: syz [ 1392.572958][ T7003] usb 7-1: SerialNumber: syz [ 1392.595865][ T7003] usb 7-1: config 0 descriptor?? [ 1392.617193][ T7003] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1393.020171][ T5477] netlink: 'syz.3.14664': attribute type 3 has an invalid length. [ 1393.029009][ T5477] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1393.048894][ T7003] gspca_sunplus: reg_w_riv err -71 [ 1393.054113][ T7003] sunplus: probe of 7-1:0.0 failed with error -71 [ 1393.083102][ T7003] usb 7-1: USB disconnect, device number 13 [ 1393.477988][ T5508] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20001 [ 1393.530449][ T5512] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1393.587089][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14674'. [ 1393.660576][ T5517] loop1: detected capacity change from 0 to 2048 [ 1393.740711][ T5517] UDF-fs: error (device loop1): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 1393.766213][ T5517] UDF-fs: Scanning with blocksize 512 failed [ 1393.841480][ T5517] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1393.869024][ T5517] UDF-fs: Scanning with blocksize 1024 failed [ 1393.915320][ T5517] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1393.967676][ T5517] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1393.998799][ T5517] UDF-fs: Scanning with blocksize 2048 failed [ 1394.058058][ T5517] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1394.110486][ T5517] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1394.158439][ T5517] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1394.177371][ T5517] UDF-fs: Scanning with blocksize 4096 failed [ 1394.199228][ T5517] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1394.303491][ T5517] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1394.324937][ T5517] exFAT-fs (loop1): unable to read boot sector [ 1394.331160][ T5517] exFAT-fs (loop1): failed to read boot sector [ 1394.386578][ T5517] exFAT-fs (loop1): failed to recognize exfat type [ 1394.724821][ T129] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1394.960774][ T129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1395.000362][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.023879][ T129] usb 4-1: Product: syz [ 1395.036561][ T129] usb 4-1: Manufacturer: syz [ 1395.041320][ T129] usb 4-1: SerialNumber: syz [ 1395.083221][ T129] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1395.156721][ T129] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1395.177117][ T5597] loop1: detected capacity change from 0 to 512 [ 1395.185655][ T5603] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14701'. [ 1395.207855][ T5597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1395.221756][ T5603] tc_dump_action: action bad kind [ 1395.262363][ T5597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1395.358796][ T5597] ext4 filesystem being mounted at /2949/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.469821][ T5597] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.14700: verity file corrupted; can't find descriptor [ 1395.529835][ T5597] EXT4-fs (loop1): Remounting filesystem read-only [ 1395.550724][ T5597] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 1395.596188][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14706'. [ 1395.635516][ T7003] usb 4-1: USB disconnect, device number 92 [ 1395.748324][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 1396.156690][ T5654] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1396.234963][ T5660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14718'. [ 1396.267167][ T5654] Process accounting paused [ 1396.357089][ T129] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1396.379296][ T129] ath9k_htc: Failed to initialize the device [ 1396.390255][ T7003] usb 4-1: ath9k_htc: USB layer deinitialized [ 1396.554681][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14722'. [ 1397.227669][ T5726] 9pnet: Could not find request transport: fӃciXrr26qW5IeC2%ҿq[(z8ӓ [ 1397.888146][ T5771] loop6: detected capacity change from 0 to 1024 [ 1397.903352][ T5771] EXT4-fs: Ignoring removed mblk_io_submit option [ 1397.978791][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1398.039692][ T5771] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1398.272678][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1398.655594][ T5810] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14763'. [ 1399.037001][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1399.308074][ T5800] loop3: detected capacity change from 0 to 32768 [ 1399.617411][ T5814] loop0: detected capacity change from 0 to 32768 [ 1399.669377][ T5814] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.14765 (5814) [ 1399.730772][ T5814] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1399.772614][ T5814] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1399.820575][ T5814] BTRFS info (device loop0): enabling ssd optimizations [ 1399.842384][ T5814] BTRFS info (device loop0): not using ssd optimizations [ 1399.867258][ T5814] BTRFS info (device loop0): turning off barriers [ 1399.899871][ T5814] BTRFS info (device loop0): using free space tree [ 1399.918460][ T5855] loop3: detected capacity change from 0 to 1764 [ 1400.098695][ T7003] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1400.277829][ T5890] loop3: detected capacity change from 0 to 64 [ 1400.308646][ T7003] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1400.337255][ T7003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.377983][ T7003] usb 3-1: Product: syz [ 1400.393643][ T7003] usb 3-1: Manufacturer: syz [ 1400.398322][ T7003] usb 3-1: SerialNumber: syz [ 1400.447727][ T7003] usb 3-1: config 0 descriptor?? [ 1400.476768][ T7003] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1400.662098][ T6878] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1400.693800][ T5839] syz.1.14774 (5839): drop_caches: 3 [ 1400.694564][ T4274] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1400.902824][ T6878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1400.903319][ T7003] gspca_sunplus: reg_w_riv err -71 [ 1400.924650][ T7003] sunplus: probe of 3-1:0.0 failed with error -71 [ 1400.936305][ T6878] usb 4-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1400.947106][ T7003] usb 3-1: USB disconnect, device number 97 [ 1400.988192][ T6878] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1401.023451][ T6878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 63311, setting to 1024 [ 1401.113679][ T6878] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1401.160002][ T6878] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1401.213091][ T6878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.253215][ T6878] usb 4-1: Product: syz [ 1401.257468][ T6878] usb 4-1: Manufacturer: syz [ 1401.295647][ T6878] usb 4-1: SerialNumber: syz [ 1401.302551][ T6878] usb 4-1: config 0 descriptor?? [ 1401.309169][ T5890] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1401.335600][ T5890] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1401.374372][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1401.383165][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1401.394525][ T6878] usb 4-1: NFC: Unable to get FW version [ 1401.401008][ T6878] pn533_usb: probe of 4-1:0.0 failed with error -71 [ 1401.627273][ T9088] usb 4-1: USB disconnect, device number 93 [ 1401.953168][ T5965] loop1: detected capacity change from 0 to 4096 [ 1402.053957][ T5973] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1402.125061][ T5965] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 1402.167205][ T5965] Remounting filesystem read-only [ 1402.826009][ T6015] comedi comedi2: c6xdigio: I/O port conflict (0x8,3) [ 1403.002897][ T6024] loop6: detected capacity change from 0 to 16 [ 1403.056099][ T6030] xt_connbytes: Forcing CT accounting to be enabled [ 1403.063258][ T6024] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 1403.099281][ T6030] set match dimension is over the limit! [ 1403.463320][ T6053] device macvtap0 entered promiscuous mode [ 1403.905073][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14834'. [ 1404.064643][ T6031] loop0: detected capacity change from 0 to 32768 [ 1404.172834][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14837'. [ 1404.208668][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14837'. [ 1404.607701][ T6061] loop3: detected capacity change from 0 to 32768 [ 1405.045818][ T4370] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4370) [ 1405.372625][ T6136] netlink: 'syz.1.14858': attribute type 10 has an invalid length. [ 1405.562355][ T6143] netlink: 'syz.1.14859': attribute type 3 has an invalid length. [ 1405.722834][ T6111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1405.944676][ T6158] netlink: 'syz.0.14865': attribute type 10 has an invalid length. [ 1406.085418][ T6158] team0: Device veth1_vlan failed to register rx_handler [ 1406.290360][ T6170] netlink: 'syz.3.14869': attribute type 10 has an invalid length. [ 1406.314987][ T6128] loop6: detected capacity change from 0 to 40427 [ 1406.325726][ T6170] infiniband syg0: set down [ 1406.358548][ T6128] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1406.407993][ T6128] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1406.424126][ T6128] F2FS-fs (loop6): invalid crc value [ 1406.503108][ T6128] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1406.554281][ T4297] smc: removing ib device syg0 [ 1406.636130][ T6170] team0 (unregistering): Port device team_slave_0 removed [ 1406.669301][ T6128] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1406.685013][ T6128] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1406.721096][ T6170] team0 (unregistering): Port device team_slave_1 removed [ 1406.783264][T16934] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1406.807630][T16937] team0 speed is unknown, defaulting to 1000 [ 1406.837161][T31309] infiniband syg0: ib_query_port failed (-19) [ 1406.989236][T16934] usb 1-1: Using ep0 maxpacket: 8 [ 1406.998998][T16934] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1407.019117][T16934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.038534][T16934] usb 1-1: Product: syz [ 1407.047930][T16934] usb 1-1: Manufacturer: syz [ 1407.058528][T16934] usb 1-1: SerialNumber: syz [ 1407.083151][T16934] usb 1-1: config 0 descriptor?? [ 1407.088376][ T6210] loop1: detected capacity change from 0 to 128 [ 1407.121852][T16934] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1407.151965][T16937] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1407.188137][ T6210] befs: (loop1): No write support. Marking filesystem read-only [ 1407.242339][ T6210] befs: (loop1): invalid magic header [ 1407.400845][T16937] usb 3-1: Using ep0 maxpacket: 16 [ 1407.432772][T16937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1407.460759][T16937] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1407.479867][ T6220] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14879'. [ 1407.489212][T16937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.497270][T16937] usb 3-1: Product: syz [ 1407.509458][T16937] usb 3-1: Manufacturer: syz [ 1407.519791][T16937] usb 3-1: SerialNumber: syz [ 1407.561406][T16934] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 1407.575910][T16934] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1407.613666][T16934] usb 1-1: USB disconnect, device number 107 [ 1407.808142][T16937] usb 3-1: MIDIStreaming interface descriptor not found [ 1407.910528][T16937] usb 3-1: USB disconnect, device number 98 [ 1408.066730][ T4850] udevd[4850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.340067][ T6280] netlink: 'syz.0.14885': attribute type 5 has an invalid length. [ 1408.570363][ T6290] device batadv2 entered promiscuous mode [ 1408.732092][ T26] audit: type=1326 audit(1779261963.536:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1408.840601][ T26] audit: type=1326 audit(1779261963.545:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1408.978688][ T26] audit: type=1326 audit(1779261963.545:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1409.046080][ T26] audit: type=1326 audit(1779261963.545:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1409.110874][ T26] audit: type=1326 audit(1779261963.545:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1409.272594][ T26] audit: type=1326 audit(1779261963.545:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1409.329566][ T26] audit: type=1326 audit(1779261963.545:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1409.480956][ T26] audit: type=1326 audit(1779261963.545:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.14893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7583b9ce59 code=0x7ffc0000 [ 1409.517911][ T6340] loop3: detected capacity change from 0 to 764 [ 1409.593523][ T6340] Symlink component flag not implemented [ 1409.614906][ T6340] Symlink component flag not implemented [ 1409.903695][ T6363] loop3: detected capacity change from 0 to 64 [ 1410.438026][ T6396] loop3: detected capacity change from 0 to 64 [ 1410.543629][ T4711] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1411.107073][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14932'. [ 1411.364378][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14939'. [ 1411.385385][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14939'. [ 1411.459277][ T26] audit: type=1326 audit(1779261966.056:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.14940" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1411.575026][ T26] audit: type=1326 audit(1779261966.056:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.14940" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1411.664977][ T6462] loop0: detected capacity change from 0 to 1024 [ 1411.686461][ T6464] device batadv1 entered promiscuous mode [ 1411.755425][ T6462] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1411.801564][ T6462] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1411.898951][ T6462] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1411.983794][ T6462] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 1412.100308][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1412.218548][ T6490] netlink: 'syz.3.14946': attribute type 1 has an invalid length. [ 1412.270885][ T6490] netlink: 'syz.3.14946': attribute type 2 has an invalid length. [ 1412.652192][ T6511] loop6: detected capacity change from 0 to 256 [ 1412.698448][ T6511] FAT-fs (loop6): Directory bread(block 1285) failed [ 1412.755589][ T6511] FAT-fs (loop6): Directory bread(block 1286) failed [ 1412.784377][ T6511] FAT-fs (loop6): Directory bread(block 1287) failed [ 1412.795482][ T6511] FAT-fs (loop6): Directory bread(block 1288) failed [ 1412.889555][ T6511] FAT-fs (loop6): Directory bread(block 1285) failed [ 1412.931899][ T6511] FAT-fs (loop6): Directory bread(block 1286) failed [ 1412.948102][ T6511] FAT-fs (loop6): Directory bread(block 1287) failed [ 1412.969922][ T6511] FAT-fs (loop6): Directory bread(block 1288) failed [ 1412.990604][ T6511] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 1413.280090][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14964'. [ 1413.509952][ T6556] netlink: 'syz.3.14969': attribute type 12 has an invalid length. [ 1413.554677][ T6556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14969'. [ 1414.027788][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14981'. [ 1414.052127][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14981'. [ 1414.072826][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14981'. [ 1414.344111][ T6604] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14987'. [ 1414.543746][ T6614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1415.898243][ T6691] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1416.009418][ T6688] loop6: detected capacity change from 0 to 4096 [ 1416.085994][ T6688] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1416.293585][ T6688] ntfs3: loop6: failed to convert "c46c" to cp850 [ 1416.339119][ T6716] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.523360][ T129] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1416.731022][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.752287][ T6740] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1416.766312][ T129] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1416.799526][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.819466][ T129] usb 3-1: Product: syz [ 1416.823707][ T129] usb 3-1: Manufacturer: syz [ 1416.834607][ T129] usb 3-1: SerialNumber: syz [ 1416.859984][ T129] usb 3-1: config 0 descriptor?? [ 1416.965293][ T6752] netlink: 'syz.6.15037': attribute type 1 has an invalid length. [ 1417.028237][ T6743] loop1: detected capacity change from 0 to 4096 [ 1417.076567][ T6743] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1417.101362][ T129] cdc_subset: probe of 3-1:0.0 failed with error -22 [ 1417.209947][ T6743] ntfs3: loop1: failed to convert "c46c" to macromanian [ 1417.338008][T31309] usb 3-1: USB disconnect, device number 99 [ 1417.368469][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15041'. [ 1417.410376][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15041'. [ 1418.087023][ T6816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15053'. [ 1418.719592][ T6808] loop3: detected capacity change from 0 to 32768 [ 1419.150780][ T4711] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by udevd (4711) [ 1419.288625][ T6867] loop6: detected capacity change from 0 to 256 [ 1419.396824][ T6867] FAT-fs (loop6): Directory bread(block 64) failed [ 1419.403470][ T6867] FAT-fs (loop6): Directory bread(block 65) failed [ 1419.460228][ T6867] FAT-fs (loop6): Directory bread(block 66) failed [ 1419.466846][ T6867] FAT-fs (loop6): Directory bread(block 67) failed [ 1419.514302][ T6867] FAT-fs (loop6): Directory bread(block 68) failed [ 1419.520988][ T6867] FAT-fs (loop6): Directory bread(block 69) failed [ 1419.584668][ T6867] FAT-fs (loop6): Directory bread(block 70) failed [ 1419.620633][ T6867] FAT-fs (loop6): Directory bread(block 71) failed [ 1419.652891][ T6867] FAT-fs (loop6): Directory bread(block 72) failed [ 1419.663762][ T6867] FAT-fs (loop6): Directory bread(block 73) failed [ 1419.844109][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1419.844125][ T26] audit: type=1800 audit(1779261973.790:314): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15070" name="file1" dev="loop6" ino=1048694 res=0 errno=0 [ 1420.275212][ T6917] netlink: 'syz.3.15085': attribute type 1 has an invalid length. [ 1420.835203][T16934] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1421.051969][T16934] usb 4-1: Using ep0 maxpacket: 32 [ 1421.059182][T16934] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1421.084477][T16934] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1421.110368][T16934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1421.138669][T16934] usb 4-1: config 1 has no interface number 0 [ 1421.155938][T16934] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1421.189131][T16934] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1421.221932][T16934] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1421.237860][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1421.237911][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1421.311985][T16934] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1421.321149][T16934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.357213][T16934] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1421.573598][T16934] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 1421.580345][T16934] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1421.615907][T16934] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 1421.795997][ T6993] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15108'. [ 1421.815276][T16937] usb 4-1: USB disconnect, device number 94 [ 1422.011403][ T6970] loop1: detected capacity change from 0 to 32768 [ 1422.088882][ T6970] JBD2: Ignoring recovery information on journal [ 1422.150941][ T6970] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1422.461025][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 1422.643454][ T26] audit: type=1326 audit(1779261976.375:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.2.15121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1422.741058][ T26] audit: type=1326 audit(1779261976.375:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.2.15121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1422.816258][ T26] audit: type=1326 audit(1779261976.430:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.2.15121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1422.934441][ T26] audit: type=1326 audit(1779261976.430:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.2.15121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1423.018396][ T26] audit: type=1326 audit(1779261976.430:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.2.15121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4999ce59 code=0x7ffc0000 [ 1423.187779][ T7064] program syz.2.15127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.620554][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1423.914176][ T7099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.206660][ T7114] loop1: detected capacity change from 0 to 16 [ 1424.236463][ T7114] erofs: (device loop1): mounted with root inode @ nid 36. [ 1424.493254][ T6878] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1424.707563][ T6878] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1424.735494][ T6878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.743565][ T6878] usb 7-1: Product: syz [ 1424.803910][ T6878] usb 7-1: Manufacturer: syz [ 1424.808610][ T6878] usb 7-1: SerialNumber: syz [ 1424.847296][ T6878] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1424.956168][ T6878] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1425.244363][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15160'. [ 1425.277452][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15160'. [ 1426.165741][ T6878] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1426.172963][ T6878] ath9k_htc: Failed to initialize the device [ 1426.244082][ T6878] usb 7-1: ath9k_htc: USB layer deinitialized [ 1426.285299][ T7185] loop1: detected capacity change from 0 to 32768 [ 1426.367056][ T7185] JBD2: Ignoring recovery information on journal [ 1426.556531][ T7185] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1426.582474][T16934] usb 7-1: USB disconnect, device number 14 [ 1426.697367][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 1426.801359][ T7239] loop3: detected capacity change from 0 to 64 [ 1426.882802][ T4370] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1426.934852][T16937] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1427.151542][T16937] usb 3-1: Using ep0 maxpacket: 16 [ 1427.159248][T16937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.231529][T16937] usb 3-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 1427.242518][ T7261] ubi31: attaching mtd0 [ 1427.255554][ T7262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1427.281319][T16937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.308767][ T7261] ubi31: scanning is finished [ 1427.313563][ T7261] ubi31: empty MTD device detected [ 1427.319295][T16937] usb 3-1: Product: syz [ 1427.323496][T16937] usb 3-1: Manufacturer: syz [ 1427.330017][T16937] usb 3-1: SerialNumber: syz [ 1427.346134][T16937] usb 3-1: config 0 descriptor?? [ 1427.376918][ T7268] netlink: 'syz.3.15187': attribute type 2 has an invalid length. [ 1427.420698][ T7268] netlink: 'syz.3.15187': attribute type 8 has an invalid length. [ 1427.455177][ T7268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15187'. [ 1427.493913][ T7261] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1427.527058][ T7261] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1427.541020][ T7276] netlink: 204 bytes leftover after parsing attributes in process `syz.6.15189'. [ 1427.573900][ T7261] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1427.587342][T16937] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1427.610603][ T7261] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1427.635072][ T7261] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1427.651046][ T7261] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1427.659176][ T7261] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2439789096 [ 1427.727392][ T7261] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1427.763912][ T7273] ubi31: background thread "ubi_bgt31d" started, PID 7273 [ 1427.811313][T31309] usb 3-1: USB disconnect, device number 100 [ 1428.304184][ T7312] sock: sock_timestamping_bind_phc: sock not bind to device [ 1428.648200][ T7333] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1428.648200][ T7333] SȘȞZ6' [ 1428.878529][ T7344] Process accounting resumed [ 1429.290101][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15228'. [ 1429.401615][ T7404] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 1429.539491][ T7381] loop3: detected capacity change from 0 to 32768 [ 1429.610894][ T4711] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1429.629652][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15223'. [ 1429.653566][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15223'. [ 1429.857010][ T7428] tmpfs: Bad value for 'mpol' [ 1430.061748][ T7436] netlink: 'syz.6.15231': attribute type 2 has an invalid length. [ 1430.090315][ T7436] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.15231'. [ 1430.614038][ T7459] loop6: detected capacity change from 0 to 512 [ 1430.654988][ T7422] loop1: detected capacity change from 0 to 40427 [ 1430.697695][ T7422] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 1430.717581][ T7459] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1430.743696][ T7422] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1430.752459][ T7422] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 1430.768728][ T7422] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 1430.798006][ T7422] F2FS-fs (loop1): invalid crc value [ 1430.868281][ T7422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1431.028929][ T7422] F2FS-fs (loop1): Start checkpoint disabled! [ 1431.053870][T29535] EXT4-fs (loop6): unmounting filesystem. [ 1431.096053][ T7422] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1431.103172][ T7422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1431.282967][ T7422] syz.1.15224: attempt to access beyond end of device [ 1431.282967][ T7422] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1431.452995][T16937] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1431.473572][ T7499] loop6: detected capacity change from 0 to 64 [ 1431.480404][ T7498] ipt_CLUSTERIP: bad num_local_nodes 32 [ 1431.535726][ T7499] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1431.602982][T29697] kworker/u4:4: attempt to access beyond end of device [ 1431.602982][T29697] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1431.662230][T16937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.680324][T16937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1431.743976][T16937] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1431.785111][T16937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1431.819274][T16937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.849876][T16937] usb 4-1: Product: syz [ 1431.866281][T16937] usb 4-1: Manufacturer: syz [ 1431.877515][T16937] usb 4-1: SerialNumber: syz [ 1431.902760][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15254'. [ 1431.931261][T16937] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 1431.938266][T16937] cdc_mbim 4-1:1.0: bind() failure [ 1432.388263][ T7533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15261'. [ 1432.434900][ T7537] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15263'. [ 1432.720982][ T7000] usb 4-1: USB disconnect, device number 95 [ 1432.904744][ T129] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1433.121704][ T129] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1433.129820][ T129] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.162557][ T129] usb 1-1: config 0 has no interface number 0 [ 1433.173522][ T129] usb 1-1: config 0 interface 2 has no altsetting 0 [ 1433.194441][ T129] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1433.215694][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.235075][ T129] usb 1-1: Product: syz [ 1433.241158][ T129] usb 1-1: Manufacturer: syz [ 1433.245809][ T129] usb 1-1: SerialNumber: syz [ 1433.290414][ T129] usb 1-1: config 0 descriptor?? [ 1433.326740][ T7594] loop6: detected capacity change from 0 to 8 [ 1433.422811][ T7594] SQUASHFS error: Unable to read directory block [1d0:0] [ 1433.491717][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15283'. [ 1433.758179][T16937] usb 1-1: USB disconnect, device number 108 [ 1433.782359][T16937] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1434.055337][ T7654] netlink: 'syz.6.15294': attribute type 1 has an invalid length. [ 1434.068846][ T7654] netlink: 216 bytes leftover after parsing attributes in process `syz.6.15294'. [ 1434.079402][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15294'. [ 1434.299738][ T93] block nbd1: Attempted send on invalid socket [ 1434.307586][ T93] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1434.327805][ T7668] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 1434.959652][ T7659] loop3: detected capacity change from 0 to 32768 [ 1435.031600][ T7659] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1435.076296][ T7659] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 1435.176922][ T4270] INFO: trying to register non-static key. [ 1435.182807][ T4270] The code is fine but needs lockdep annotation, or maybe [ 1435.189955][ T4270] you didn't initialize this object before use? [ 1435.196226][ T4270] turning off the locking correctness validator. [ 1435.202573][ T4270] CPU: 0 PID: 4270 Comm: syz-executor Not tainted syzkaller #0 [ 1435.210146][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1435.220248][ T4270] Call Trace: [ 1435.223555][ T4270] [ 1435.226510][ T4270] dump_stack_lvl+0x188/0x24e [ 1435.231243][ T4270] ? show_regs_print_info+0x12/0x12 [ 1435.236488][ T4270] ? load_image+0x400/0x400 [ 1435.241036][ T4270] ? _find_next_bit+0x11e/0x130 [ 1435.246006][ T4270] ? __is_module_percpu_address+0x279/0x3b0 [ 1435.251942][ T4270] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1435.257824][ T4270] assign_lock_key+0x201/0x230 [ 1435.262729][ T4270] ? SOFTIRQ_verbose+0x10/0x10 [ 1435.267556][ T4270] ? verify_lock_unused+0x140/0x140 [ 1435.272839][ T4270] ? deref_stack_reg+0x19f/0x230 [ 1435.277854][ T4270] register_lock_class+0x21d/0x870 [ 1435.277893][ T4270] ? mark_lock+0x94/0x320 [ 1435.277924][ T4270] ? is_dynamic_key+0x260/0x260 [ 1435.277955][ T4270] ? __lock_acquire+0x13cf/0x7d10 [ 1435.277985][ T4270] ? __lock_acquire+0x7d10/0x7d10 [ 1435.278018][ T4270] __lock_acquire+0x16f/0x7d10 [ 1435.278059][ T4270] ? is_bpf_text_address+0x28b/0x2a0 [ 1435.278140][ T4270] ? kernel_text_address+0x9c/0xd0 [ 1435.278196][ T4270] ? verify_lock_unused+0x140/0x140 [ 1435.278228][ T4270] ? stack_trace_save+0xf0/0xf0 [ 1435.278255][ T4270] ? arch_stack_walk+0xf2/0x140 [ 1435.278319][ T4270] ? verify_lock_unused+0x140/0x140 [ 1435.338100][ T4270] ? stack_trace_save+0xa6/0xf0 [ 1435.343009][ T4270] lock_acquire+0x1bb/0x4a0 [ 1435.347553][ T4270] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1435.353610][ T4270] ? memset+0x1e/0x40 [ 1435.357705][ T4270] ? read_lock_is_recursive+0x10/0x10 [ 1435.363127][ T4270] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1435.369406][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 1435.374652][ T4270] _raw_spin_lock_irqsave+0xb0/0x100 [ 1435.379973][ T4270] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1435.385911][ T4270] ? _raw_spin_lock+0x40/0x40 [ 1435.390629][ T4270] ? ktime_get+0x247/0x270 [ 1435.395078][ T4270] ocfs2_mark_lockres_freeing+0x159/0x600 [ 1435.400837][ T4270] ? kasan_quarantine_put+0xd4/0x220 [ 1435.406163][ T4270] ? ocfs2_dlm_shutdown+0x240/0x240 [ 1435.411406][ T4270] ? ocfs2_journal_shutdown+0x673/0xc20 [ 1435.416984][ T4270] ? ocfs2_journal_init+0xdb0/0xdb0 [ 1435.422230][ T4270] ? __kmem_cache_free+0xb6/0x1f0 [ 1435.427365][ T4270] ocfs2_dlm_shutdown+0x36/0x240 [ 1435.432358][ T4270] ocfs2_dismount_volume+0x47f/0x940 [ 1435.437746][ T4270] ? ocfs2_enable_quotas+0x490/0x490 [ 1435.443073][ T4270] ? clear_inode+0x150/0x150 [ 1435.447716][ T4270] ? ocfs2_free_inode+0x20/0x20 [ 1435.452602][ T4270] generic_shutdown_super+0x130/0x340 [ 1435.458005][ T4270] kill_block_super+0x7c/0xe0 [ 1435.462721][ T4270] deactivate_locked_super+0x93/0xf0 [ 1435.468049][ T4270] cleanup_mnt+0x42c/0x4b0 [ 1435.472508][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 1435.477753][ T4270] task_work_run+0x1d0/0x260 [ 1435.482377][ T4270] ? task_work_cancel+0x220/0x220 [ 1435.487437][ T4270] ? exit_to_user_mode_loop+0x3b/0x110 [ 1435.492936][ T4270] exit_to_user_mode_loop+0xe6/0x110 [ 1435.498283][ T4270] exit_to_user_mode_prepare+0xee/0x180 [ 1435.503874][ T4270] syscall_exit_to_user_mode+0x16/0x40 [ 1435.509366][ T4270] do_syscall_64+0x58/0xa0 [ 1435.513818][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 1435.518538][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 1435.523246][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.529171][ T4270] RIP: 0033:0x7fd3c7b9e097 [ 1435.533582][ T4270] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1435.553195][ T4270] RSP: 002b:00007ffe406806c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1435.561639][ T4270] RAX: 0000000000000000 RBX: 00007fd3c7c321ca RCX: 00007fd3c7b9e097 [ 1435.569617][ T4270] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe40680780 [ 1435.577612][ T4270] RBP: 00007ffe40680780 R08: 00007ffe40681780 R09: 00000000ffffffff [ 1435.585596][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe40681810 [ 1435.593578][ T4270] R13: 00007fd3c7c321ca R14: 000000000014f8ac R15: 00007ffe40681850 [ 1435.601555][ T4270] [ 1435.604645][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.621965][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 1435.688994][ T129] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1435.907042][ T129] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1435.916270][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.925936][ T129] usb 2-1: config 0 descriptor?? [ 1436.373066][ T129] usb 2-1: Cannot set MAC address [ 1436.378873][ T129] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1436.391517][ T129] usb 2-1: USB disconnect, device number 100