last executing test programs: 11m34.735859503s ago: executing program 2 (id=9613): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) 11m34.53045271s ago: executing program 2 (id=9616): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x10, 0x6, 0x518, 0x0, 0x358, 0x1a0, 0x288, 0x358, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@local, @private2, [0x0, 0x0, 0x0, 0xffffffff], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'veth1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x11, 0x0, 0x7, 0x65}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x2a, "24390d4d8e6abaf968029911108a220a07a511dec200"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 11m34.380488284s ago: executing program 2 (id=9619): r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 11m34.20597263s ago: executing program 2 (id=9621): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 11m33.804739992s ago: executing program 2 (id=9625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000080)=0xc) 11m32.518511273s ago: executing program 2 (id=9638): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) 11m32.023169948s ago: executing program 32 (id=9638): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) 10m55.803048475s ago: executing program 4 (id=10075): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000080)={0xfd, 0x0, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) 10m55.587575181s ago: executing program 4 (id=10078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2a040, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4008ae06, 0x0) 10m55.336750409s ago: executing program 4 (id=10081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x42, 0xff, "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", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0xfffffffffffffff7, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) 10m55.167195515s ago: executing program 4 (id=10083): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m54.438180137s ago: executing program 4 (id=10090): r0 = syz_open_dev$sndctrl(&(0x7f0000001000), 0x0, 0x2000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0xc0045520, 0xffefff1f00000000) 10m53.438535629s ago: executing program 4 (id=10098): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x3136564e, 0x1, @discrete={0x1, 0x100}}) 10m53.172376626s ago: executing program 33 (id=10098): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x3136564e, 0x1, @discrete={0x1, 0x100}}) 10m49.003666488s ago: executing program 3 (id=10146): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 10m48.340601078s ago: executing program 3 (id=10153): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 10m47.96742073s ago: executing program 3 (id=10154): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000340)) 10m47.65592829s ago: executing program 3 (id=10158): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m47.040012279s ago: executing program 3 (id=10164): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="46b70a3f24f40140c9156f1799323e08c315dcb1eadd88ce122bcc12036e97eaee48b487c988934645a9", 0x2a}], 0x1, 0x0, 0x2) 10m46.591532533s ago: executing program 3 (id=10169): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r0, 0x0, 0x0) 10m46.011012111s ago: executing program 34 (id=10169): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r0, 0x0, 0x0) 2.761824074s ago: executing program 1 (id=19286): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x441) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ff401709666c651a87aa90390b40f8ffff08ffffffff0900ff05c8d5", 0x1c}, {&(0x7f0000000100)="676328c9ace0385893eee89e92eef47c5851cdf473297db053c0062e", 0x1c}], 0x2) 2.476677623s ago: executing program 1 (id=19291): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40000140, 0x0, 0x0) 2.301022018s ago: executing program 7 (id=19295): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="c09c15c2c393d7796602724b", 0xc}], 0x1, 0x2, 0x0) 2.203392361s ago: executing program 1 (id=19296): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 2.032148807s ago: executing program 7 (id=19299): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}}}, 0x30) 2.031671547s ago: executing program 1 (id=19300): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "00000000000000001000000000"}]}, 0x28}}, 0x0) 1.832543113s ago: executing program 0 (id=19303): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x4a, 0x1, 0x0, 0x800000, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) 1.770434865s ago: executing program 7 (id=19304): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40012001, 0x0) 1.770297545s ago: executing program 1 (id=19305): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201008300000020532b240040000102030109026900030104007f080b0100010a20020904000000010120000924010700060900b209040100000102200009040101010102200009050109000206998008250101181e000009040200000102200009040201", @ANYRES64], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1.59564835s ago: executing program 0 (id=19308): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 1.59228153s ago: executing program 7 (id=19309): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/247, 0xf7, 0xaa) 1.407962266s ago: executing program 7 (id=19312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffffff8, 0x0, r0, 0x3}, 0x50) 1.362173147s ago: executing program 0 (id=19313): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x0, 0x0, 0x288, 0x0, 0x0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1.313756399s ago: executing program 5 (id=19314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x22044000) 1.235291842s ago: executing program 6 (id=19315): r0 = socket(0x2b, 0x80801, 0x1) getpeername$l2tp6(r0, 0x0, 0x0) 1.234700422s ago: executing program 7 (id=19316): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.172798214s ago: executing program 0 (id=19317): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f00000000c0)={0x385200080, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.045605977s ago: executing program 6 (id=19318): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000200)) 1.044840877s ago: executing program 5 (id=19319): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) 874.276903ms ago: executing program 6 (id=19320): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0xff000000], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b], 0x2, [], 0x10000000, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16cff936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x0, [{}, {0x0, 0x6}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0xff], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 822.406174ms ago: executing program 5 (id=19321): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x35}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 699.974999ms ago: executing program 0 (id=19322): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f0000000280)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x84, 0x4b2, &(0x7f0000000580)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 662.221439ms ago: executing program 5 (id=19323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00080009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, 0x0}, 0x20) 629.290121ms ago: executing program 6 (id=19324): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc3}, 0x90) 414.463627ms ago: executing program 5 (id=19325): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3000401, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@userxattr}, {@nfs_export_on}]}) 284.990492ms ago: executing program 6 (id=19326): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x14}) 258.834092ms ago: executing program 0 (id=19327): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000600)) readv(r0, &(0x7f0000001c00)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001780)=""/170, 0xaa}], 0x2) 52.661879ms ago: executing program 1 (id=19328): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 38.593959ms ago: executing program 5 (id=19329): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xfff2, 0xfff1}, {0xb, 0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0xa, 0x0, 0x8000000, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x2, 0x1, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) 0s ago: executing program 6 (id=19330): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 7e [ 1682.003045][ T6918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.007256][T10879] netlink: 'syz.6.17038': attribute type 32 has an invalid length. [ 1682.027666][ T6918] usb 1-1: Product: syz [ 1682.031878][ T6918] usb 1-1: Manufacturer: syz [ 1682.057659][T21648] usb 8-1: Using ep0 maxpacket: 32 [ 1682.061709][ T6918] usb 1-1: SerialNumber: syz [ 1682.065063][T21648] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1682.072462][ T6918] usb 1-1: config 0 descriptor?? [ 1682.089905][ T6918] hub 1-1:0.0: bad descriptor, ignoring hub [ 1682.097546][T21648] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1682.099445][ T6918] hub: probe of 1-1:0.0 failed with error -5 [ 1682.132013][ T6918] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input100 [ 1682.144088][T21648] usb 8-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 1682.153172][ T6923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1682.203728][T21648] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.220191][T21648] usb 8-1: Product: syz [ 1682.224587][T21648] usb 8-1: Manufacturer: syz [ 1682.229217][T21648] usb 8-1: SerialNumber: syz [ 1682.350308][ T6923] usb 2-1: Using ep0 maxpacket: 32 [ 1682.370324][ T6923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1682.389330][ T6923] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1682.413648][ T6923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.448567][ T6923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1682.477622][ T6923] usb 2-1: string descriptor 0 read error: -22 [ 1682.484061][ T6923] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1682.503858][ T6923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.510034][T21648] usb 8-1: MIDIStreaming interface descriptor not found [ 1682.593195][ T6923] usb 2-1: 0:2 : does not exist [ 1682.599635][T21648] usb 8-1: USB disconnect, device number 36 [ 1682.735483][ T4835] udevd[4835]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1682.829787][ T4611] usb 2-1: USB disconnect, device number 15 [ 1683.087441][ T6923] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1683.310324][ T6923] usb 7-1: Using ep0 maxpacket: 16 [ 1683.318567][ T6923] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1683.333693][ T6923] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 1683.341702][ T6923] usb 7-1: config 0 has no interface number 0 [ 1683.365419][T10914] x_tables: duplicate underflow at hook 3 [ 1683.366490][ T6923] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1683.417781][ T6923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.440186][ T6923] usb 7-1: Product: syz [ 1683.461329][ T6923] usb 7-1: Manufacturer: syz [ 1683.477644][ T6923] usb 7-1: SerialNumber: syz [ 1683.527141][ T6923] usb 7-1: config 0 descriptor?? [ 1683.640239][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17059'. [ 1683.773068][ T6923] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1683.790667][ T6923] usb 7-1: No valid video chain found. [ 1683.834640][ T6923] usb 7-1: USB disconnect, device number 32 [ 1684.564064][T10955] delete_channel: no stack [ 1684.676770][T10962] loop6: detected capacity change from 0 to 1024 [ 1684.743373][T10962] overlayfs: filesystem on './file0' not supported [ 1685.020554][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17082'. [ 1685.061190][T10974] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1685.098868][T10978] netlink: 'syz.6.17084': attribute type 1 has an invalid length. [ 1685.945811][T11012] loop7: detected capacity change from 0 to 256 [ 1686.664951][T11031] loop5: detected capacity change from 0 to 4096 [ 1686.837424][T11036] loop6: detected capacity change from 0 to 4096 [ 1686.879167][T11036] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 1686.933976][T11041] loop1: detected capacity change from 0 to 1024 [ 1686.964622][T11041] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1687.053956][T11043] netlink: 72 bytes leftover after parsing attributes in process `syz.7.17117'. [ 1687.074384][T11043] netlink: 72 bytes leftover after parsing attributes in process `syz.7.17117'. [ 1687.316283][T11016] loop0: detected capacity change from 0 to 32768 [ 1687.391596][T11016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.17104 (11016) [ 1687.431794][ T3111] usb 1-1: USB disconnect, device number 30 [ 1687.451726][T11016] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1687.530857][T11016] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1687.539593][T11016] BTRFS info (device loop0): using free space tree [ 1687.699956][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17124'. [ 1687.759469][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17124'. [ 1687.781046][T11062] loop1: detected capacity change from 0 to 2048 [ 1687.832863][T11016] BTRFS info (device loop0): enabling ssd optimizations [ 1687.919442][T11062] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1687.955092][T11016] BTRFS error (device loop0): balance: invalid convert metadata profile single [ 1687.994186][T11080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1688.130396][ T4559] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1689.248205][T11111] netlink: 'syz.5.17141': attribute type 9 has an invalid length. [ 1689.432452][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17145'. [ 1689.482620][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17145'. [ 1689.507206][T11113] loop7: detected capacity change from 0 to 4096 [ 1690.163933][T11141] nftables ruleset with unbound chain [ 1690.676152][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17167'. [ 1690.894755][T11167] loop1: detected capacity change from 0 to 512 [ 1691.138388][T11175] loop5: detected capacity change from 0 to 65 [ 1691.287903][T11175] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1691.318368][T11147] syz.6.17158 (11147): drop_caches: 2 [ 1691.354300][T11167] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1691.412052][T11184] loop6: detected capacity change from 0 to 512 [ 1691.497667][T11184] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1691.600739][T27258] EXT4-fs (loop6): unmounting filesystem. [ 1691.657770][ T4557] EXT4-fs (loop1): unmounting filesystem. [ 1691.837341][T11196] netlink: 34 bytes leftover after parsing attributes in process `syz.7.17183'. [ 1692.093742][T11194] loop5: detected capacity change from 0 to 8192 [ 1692.142578][T11194] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1692.176835][T11194] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1692.186643][T11194] REISERFS (device loop5): using ordered data mode [ 1692.273035][T11212] binfmt_misc: register: failed to install interpreter file ./file2 [ 1692.309706][T11194] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1692.379433][T11194] REISERFS (device loop5): checking transaction log (loop5) [ 1692.459264][T11194] REISERFS (device loop5): Using r5 hash to sort names [ 1692.466492][T11194] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1692.616075][T11194] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1693.575952][T11252] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1694.035039][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17218'. [ 1694.039630][T11272] loop7: detected capacity change from 0 to 256 [ 1694.099866][T11272] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1694.965270][T11306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17235'. [ 1695.053500][T11308] autofs4:pid:11308:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1695.145580][ T3111] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1695.375085][ T3111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 1695.417694][ T3111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 1695.433532][T11293] loop1: detected capacity change from 0 to 32768 [ 1695.460721][ T3111] usb 8-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1695.481385][T11293] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.17229 (11293) [ 1695.504068][ T3111] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.536726][ T3111] usb 8-1: Product: syz [ 1695.541003][ T3111] usb 8-1: Manufacturer: syz [ 1695.547239][ T3111] usb 8-1: SerialNumber: syz [ 1695.566875][T11293] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1695.590196][ T3111] usb 8-1: config 0 descriptor?? [ 1695.621706][T11293] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1695.661742][T11293] BTRFS info (device loop1): force zlib compression, level 3 [ 1695.706412][T11293] BTRFS info (device loop1): enabling ssd optimizations [ 1695.716938][T11293] BTRFS info (device loop1): allowing degraded mounts [ 1695.773797][T11293] BTRFS info (device loop1): force clearing of disk cache [ 1695.785290][T11293] BTRFS info (device loop1): using free space tree [ 1695.832904][ T3111] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input101 [ 1695.905718][T11331] loop0: detected capacity change from 0 to 512 [ 1696.071755][T21648] usb 8-1: USB disconnect, device number 37 [ 1696.079323][T11293] BTRFS info (device loop1): rebuilding free space tree [ 1696.104685][T11293] BTRFS info (device loop1): checking UUID tree [ 1696.168188][T11331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1696.272408][T11331] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.17248: directory missing '..' [ 1696.430075][T11362] loop6: detected capacity change from 0 to 64 [ 1696.486674][ T4559] EXT4-fs (loop0): unmounting filesystem. [ 1696.500329][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1696.500343][ T26] audit: type=1800 audit(1601.864:640): pid=11362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.17253" name="bus" dev="loop6" ino=21 res=0 errno=0 [ 1696.560341][ T4557] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1697.268125][ T26] audit: type=1400 audit(1602.565:641): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=11378 comm="syz.5.17262" [ 1697.461193][T11384] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 1697.821532][ T1179] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1698.027476][ T1179] usb 6-1: Using ep0 maxpacket: 16 [ 1698.035036][ T1179] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1698.060428][ T1179] usb 6-1: config 254 has no interface number 0 [ 1698.079849][ T1179] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1698.101996][ T1179] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1698.160829][ T1179] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1698.203023][ T1179] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1698.220481][ T1179] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1698.243965][ T1179] usb 6-1: Product: syz [ 1698.248189][ T1179] usb 6-1: Manufacturer: syz [ 1698.252818][ T1179] usb 6-1: SerialNumber: syz [ 1698.298573][T11388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1698.500684][T11414] netlink: 'syz.0.17279': attribute type 6 has an invalid length. [ 1698.557600][T11388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1698.581211][ T1179] usbtest 6-1:254.235: Linux gadget zero [ 1698.586925][ T1179] usbtest 6-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1698.599093][T11387] loop1: detected capacity change from 0 to 32768 [ 1698.713837][T11387] XFS (loop1): Mounting V5 Filesystem [ 1698.826677][ T1179] usb 6-1: USB disconnect, device number 22 [ 1698.878443][T11387] XFS (loop1): Ending clean mount [ 1698.926280][T11387] XFS (loop1): Quotacheck needed: Please wait. [ 1699.027130][T11387] XFS (loop1): Quotacheck: Done. [ 1699.167524][ T4557] XFS (loop1): Unmounting Filesystem [ 1699.180673][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17288'. [ 1699.197631][ T6918] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1699.350287][T11443] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1699.406040][ T6918] usb 1-1: Using ep0 maxpacket: 32 [ 1699.426296][ T6918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.479414][ T6918] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1699.505288][ T6918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1699.548536][ T6918] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1699.566025][ T6918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.585190][ T6918] usb 1-1: Product: syz [ 1699.589995][ T6918] usb 1-1: Manufacturer: syz [ 1699.594722][T11453] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17295'. [ 1699.604007][ T6918] usb 1-1: SerialNumber: syz [ 1699.626681][ T6918] usb 1-1: config 0 descriptor?? [ 1699.710479][T11457] netlink: 'syz.6.17297': attribute type 3 has an invalid length. [ 1699.802529][T11459] loop5: detected capacity change from 0 to 1764 [ 1699.908970][ T6918] usb 1-1: USB disconnect, device number 31 [ 1700.310514][T11476] netlink: 'syz.5.17306': attribute type 3 has an invalid length. [ 1700.318746][T11476] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.17306'. [ 1700.842790][T11480] loop0: detected capacity change from 0 to 8192 [ 1700.897273][T11480] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1700.911754][T11480] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1700.923451][T11480] REISERFS (device loop0): using ordered data mode [ 1700.947776][T11480] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1700.985899][T11480] REISERFS (device loop0): checking transaction log (loop0) [ 1701.044461][T11480] REISERFS (device loop0): Using r5 hash to sort names [ 1701.055722][T11480] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1701.143535][T11480] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1701.511729][T11496] loop5: detected capacity change from 0 to 256 [ 1701.769751][T11465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.838599][T11465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.353876][T11465] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.363235][T11465] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.372430][T11465] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.418539][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1702.424953][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1702.501977][T11500] netlink: 'syz.0.17314': attribute type 30 has an invalid length. [ 1702.510070][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17314'. [ 1702.585458][T11500] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1702.607268][T11500] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1702.625140][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17321'. [ 1703.050696][T11521] loop1: detected capacity change from 0 to 8192 [ 1703.085110][T11521] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1703.119370][T11521] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1703.129725][T11521] REISERFS (device loop1): using ordered data mode [ 1703.143489][T11521] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1703.160499][T11521] REISERFS (device loop1): checking transaction log (loop1) [ 1703.167368][T11532] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1703.172068][T11521] REISERFS (device loop1): Using r5 hash to sort names [ 1703.191785][T11521] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1703.211025][T11521] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1703.548013][ T26] audit: type=1326 audit(1608.361:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1703.638510][ T26] audit: type=1326 audit(1608.361:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1703.767323][ T26] audit: type=1326 audit(1608.361:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1703.849248][ T26] audit: type=1326 audit(1608.361:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1703.916911][ T26] audit: type=1326 audit(1608.361:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1704.029422][ T26] audit: type=1326 audit(1608.380:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1704.094496][ T26] audit: type=1326 audit(1608.380:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.0.17334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77d6d9ce59 code=0x7ffc0000 [ 1704.518902][T11577] loop6: detected capacity change from 0 to 512 [ 1704.643919][T11581] netlink: 148 bytes leftover after parsing attributes in process `syz.0.17354'. [ 1704.670413][T11577] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1704.903174][T27258] EXT4-fs (loop6): unmounting filesystem. [ 1704.938979][ T26] audit: type=1326 audit(1609.644:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.5.17357" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25959ce59 code=0x7ffc0000 [ 1705.055348][ T26] audit: type=1326 audit(1609.644:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.5.17357" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25959ce59 code=0x7ffc0000 [ 1705.165277][T11581] netlink: 148 bytes leftover after parsing attributes in process `syz.0.17354'. [ 1705.166233][ T26] audit: type=1326 audit(1609.654:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.5.17357" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff25959ce59 code=0x7ffc0000 [ 1705.282606][T11599] loop6: detected capacity change from 0 to 2048 [ 1705.371346][T11605] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1705.431865][T11599] NILFS (loop6): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1705.447541][T11609] loop5: detected capacity change from 0 to 256 [ 1705.473777][T11599] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1705.508845][T11599] Remounting filesystem read-only [ 1705.531241][T11599] NILFS (loop6): error -5 truncating bmap (ino=16) [ 1705.541614][T11609] FAT-fs (loop5): Directory bread(block 1285) failed [ 1705.561874][T11609] FAT-fs (loop5): Directory bread(block 1286) failed [ 1705.621508][T11609] FAT-fs (loop5): Directory bread(block 1287) failed [ 1705.631336][T11609] FAT-fs (loop5): Directory bread(block 1288) failed [ 1705.668347][T11609] FAT-fs (loop5): Directory bread(block 1285) failed [ 1705.675122][T11609] FAT-fs (loop5): Directory bread(block 1286) failed [ 1705.681141][T27258] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1705.689911][T11609] FAT-fs (loop5): Directory bread(block 1287) failed [ 1705.697485][T11609] FAT-fs (loop5): Directory bread(block 1288) failed [ 1705.719680][T11609] FAT-fs (loop5): Directory bread(block 1285) failed [ 1705.752317][T11609] FAT-fs (loop5): Directory bread(block 1286) failed [ 1705.906933][T11620] loop6: detected capacity change from 0 to 256 [ 1706.311991][T11635] loop5: detected capacity change from 0 to 64 [ 1706.454785][T11639] bond0: (slave bond_slave_1): Enslaving as a backup interface with a down link [ 1706.536949][T11636] loop6: detected capacity change from 0 to 4096 [ 1707.176748][T11654] loop1: detected capacity change from 0 to 256 [ 1707.310718][T11630] syz.0.17374 (11630): drop_caches: 2 [ 1707.392115][T11636] ntfs: volume version 3.1. [ 1708.522810][T11690] loop5: detected capacity change from 0 to 4096 [ 1708.923076][T11700] loop1: detected capacity change from 0 to 4096 [ 1709.067972][T11690] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1709.094370][T11700] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1709.146822][T11700] ntfs3: loop1: Failed to load $MFT. [ 1709.496877][T11696] loop0: detected capacity change from 0 to 32768 [ 1709.531005][T11696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.17405 (11696) [ 1709.555278][T11688] syz.7.17402 (11688): drop_caches: 2 [ 1709.642366][T11696] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1709.758578][T11696] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1709.782565][T11696] BTRFS info (device loop0): force zlib compression, level 3 [ 1709.790044][T11696] BTRFS info (device loop0): enabling ssd optimizations [ 1709.869307][T11696] BTRFS info (device loop0): allowing degraded mounts [ 1709.876151][T11696] BTRFS info (device loop0): force clearing of disk cache [ 1709.905785][T11696] BTRFS info (device loop0): using free space tree [ 1710.292814][T11696] BTRFS info (device loop0): rebuilding free space tree [ 1710.382190][T11696] BTRFS info (device loop0): checking UUID tree [ 1710.716642][ T4559] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1710.905339][T11751] syz.5.17424 (11751): drop_caches: 2 [ 1710.914087][T11766] loop1: detected capacity change from 0 to 128 [ 1710.986259][T11766] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1711.041088][T11766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1711.354121][T11768] loop6: detected capacity change from 0 to 8192 [ 1712.360706][T11808] loop6: detected capacity change from 0 to 8 [ 1712.432364][T11808] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1712.461878][T11808] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1712.547061][T11815] netlink: 'syz.7.17453': attribute type 21 has an invalid length. [ 1712.555118][T11815] netlink: 164 bytes leftover after parsing attributes in process `syz.7.17453'. [ 1712.639445][T11817] device bridge3 entered promiscuous mode [ 1712.736583][T11823] loop5: detected capacity change from 0 to 512 [ 1712.926996][T11823] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1712.961696][T11823] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 1713.141318][T26096] EXT4-fs (loop5): unmounting filesystem. [ 1713.254279][T11840] ieee802154 phy0 wpan0: encryption failed: -22 [ 1713.794039][T11850] device xfrm0 entered promiscuous mode [ 1714.073622][T11863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1714.144472][T11867] netlink: 'syz.7.17478': attribute type 1 has an invalid length. [ 1714.194152][T11867] netlink: 'syz.7.17478': attribute type 1 has an invalid length. [ 1714.233414][T11867] netlink: 116376 bytes leftover after parsing attributes in process `syz.7.17478'. [ 1714.601737][T11877] netlink: 'syz.5.17482': attribute type 1 has an invalid length. [ 1714.653832][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17484'. [ 1715.196772][T11902] loop1: detected capacity change from 0 to 136 [ 1715.261232][T11902] Attempt to read inode for relocated directory [ 1715.289552][T11902] syz.1.17492: attempt to access beyond end of device [ 1715.289552][T11902] loop1: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 1715.371613][T11902] syz.1.17492: attempt to access beyond end of device [ 1715.371613][T11902] loop1: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 1715.437150][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1715.437166][ T26] audit: type=1800 audit(1619.336:663): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17492" name="file1" dev="loop1" ino=1487 res=0 errno=0 [ 1716.082595][T11883] loop7: detected capacity change from 0 to 32768 [ 1716.131034][T11883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.17483 (11883) [ 1716.191658][T11883] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1716.243450][T11883] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1716.320933][T11883] BTRFS info (device loop7): force zlib compression, level 3 [ 1716.347545][T11883] BTRFS info (device loop7): enabling ssd optimizations [ 1716.389395][T11883] BTRFS info (device loop7): allowing degraded mounts [ 1716.418325][T11883] BTRFS info (device loop7): force clearing of disk cache [ 1716.442579][T11883] BTRFS info (device loop7): using free space tree [ 1716.681723][T11952] netlink: 'syz.5.17508': attribute type 13 has an invalid length. [ 1716.730771][T11952] gretap0: refused to change device tx_queue_len [ 1716.770629][T11952] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1716.820503][T11883] BTRFS info (device loop7): rebuilding free space tree [ 1716.872483][T11883] BTRFS info (device loop7): checking UUID tree [ 1716.883832][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17512'. [ 1716.900694][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17512'. [ 1717.295106][T27456] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1717.320520][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17517'. [ 1717.352805][T11980] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1717.615200][T11990] netlink: 'syz.0.17521': attribute type 11 has an invalid length. [ 1717.663837][T11990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17521'. [ 1718.122275][T12006] loop6: detected capacity change from 0 to 256 [ 1719.612635][ T4611] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1719.814959][ T4611] usb 2-1: Using ep0 maxpacket: 32 [ 1719.822200][ T4611] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1719.841492][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1719.852542][ T4611] usb 2-1: config 0 has no interface number 0 [ 1719.880484][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1719.888524][ T4611] usb 2-1: config 0 has no interface number 0 [ 1719.927189][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1719.942363][T12055] usb usb8: usbfs: process 12055 (syz.7.17548) did not claim interface 0 before use [ 1719.943918][ T4611] usb 2-1: config 0 has no interface number 0 [ 1719.967421][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1719.975484][ T4611] usb 2-1: config 0 has no interface number 0 [ 1720.000142][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1720.025198][ T4611] usb 2-1: config 0 has no interface number 0 [ 1720.054518][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1720.062573][ T4611] usb 2-1: config 0 has no interface number 0 [ 1720.084113][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1720.092320][ T4611] usb 2-1: config 0 has no interface number 0 [ 1720.126022][ T4611] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1720.140628][ T4611] usb 2-1: config 0 has no interface number 0 [ 1720.162918][ T4611] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1720.172034][ T4611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.186235][ T4611] usb 2-1: Product: syz [ 1720.190454][ T4611] usb 2-1: Manufacturer: syz [ 1720.195463][ T4611] usb 2-1: SerialNumber: syz [ 1720.207972][ T4611] usb 2-1: config 0 descriptor?? [ 1720.238718][ T4611] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1720.262966][T12061] netlink: 'syz.7.17551': attribute type 9 has an invalid length. [ 1720.443669][ T4611] etas_es58x 2-1:0.2: Product info:  [ 1720.583413][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1720.823360][T12009] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.832262][T12009] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.841396][T12009] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.850486][T12009] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.873129][T12009] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1721.060024][ T4611] usb 2-1: USB disconnect, device number 16 [ 1721.084021][ T4611] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1722.053434][T12104] loop0: detected capacity change from 0 to 128 [ 1722.090763][T12104] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1722.159110][T12104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1722.316200][ T26] audit: type=1326 audit(1625.686:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.6.17576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1722.450283][ T26] audit: type=1326 audit(1625.760:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.6.17576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1722.510284][ T26] audit: type=1326 audit(1625.760:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.6.17576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1722.575761][ T26] audit: type=1326 audit(1625.760:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.6.17576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1722.787789][T12120] loop6: detected capacity change from 0 to 4096 [ 1722.837922][T12120] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1722.953642][T12132] loop7: detected capacity change from 0 to 256 [ 1722.972403][T12120] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 1722.994246][T12120] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1723.052096][T12120] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 1723.309018][T12139] binder: 12138:12139 ioctl 400c620e 200000000240 returned -22 [ 1723.380122][T12146] netlink: 132 bytes leftover after parsing attributes in process `syz.6.17593'. [ 1723.566666][T12152] loop1: detected capacity change from 0 to 256 [ 1723.593676][T12152] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 1724.495168][T12187] libceph: resolve '00' (ret=-3): failed [ 1724.559652][T12193] usb usb8: usbfs: process 12193 (syz.7.17615) did not claim interface 0 before use [ 1724.882192][T12195] loop1: detected capacity change from 0 to 4096 [ 1724.918525][T12195] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1724.978174][T12205] netlink: 'syz.0.17621': attribute type 9 has an invalid length. [ 1724.987944][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17622'. [ 1724.995781][T12205] netlink: 399 bytes leftover after parsing attributes in process `syz.0.17621'. [ 1725.097809][T12195] ntfs3: loop1: failed to convert "c46c" to iso8859-15 [ 1725.614601][T12225] loop0: detected capacity change from 0 to 2048 [ 1725.625354][T12229] netlink: 'syz.6.17633': attribute type 10 has an invalid length. [ 1725.647802][T12229] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1725.685367][T12225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1725.775816][T12236] loop5: detected capacity change from 0 to 8 [ 1725.967257][ T4559] EXT4-fs (loop0): unmounting filesystem. [ 1726.103276][T12247] loop7: detected capacity change from 0 to 16 [ 1726.143588][T12247] erofs: (device loop7): mounted with root inode @ nid 36. [ 1726.237524][T12247] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1726.247547][T12250] loop5: detected capacity change from 0 to 1024 [ 1726.323360][T12253] IPv6: sit1: Disabled Multicast RS [ 1726.334567][T12247] syz.7.17640: attempt to access beyond end of device [ 1726.334567][T12247] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1726.465266][T12247] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1726.530139][T12247] syz.7.17640: attempt to access beyond end of device [ 1726.530139][T12247] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1726.636351][T12247] syz.7.17640: attempt to access beyond end of device [ 1726.636351][T12247] loop7: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1726.707090][ T26] audit: type=1800 audit(1629.747:668): pid=12247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.17640" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1727.051334][T12274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1727.365542][T12288] loop5: detected capacity change from 0 to 64 [ 1727.793778][T12303] dlm: non-version read from control device 36 [ 1728.437594][T12326] loop0: detected capacity change from 0 to 64 [ 1728.784404][T12340] Non-string source [ 1729.024362][ T3111] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1729.070988][T12348] netlink: 'syz.0.17689': attribute type 2 has an invalid length. [ 1729.218229][T12318] loop6: detected capacity change from 0 to 32768 [ 1729.230071][ T3111] usb 2-1: Using ep0 maxpacket: 8 [ 1729.238318][ T3111] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1729.258755][ T3111] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1729.279497][ T3111] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1729.305561][ T3111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 127, changing to 10 [ 1729.338495][ T3111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1287, setting to 1024 [ 1729.356599][T12318] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1729.365335][ T3111] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1729.376176][ T3111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.384818][ T3111] usb 2-1: Product: syz [ 1729.389191][ T3111] usb 2-1: Manufacturer: syz [ 1729.394403][ T3111] usb 2-1: SerialNumber: syz [ 1729.401244][ T3111] usb 2-1: config 0 descriptor?? [ 1729.407856][T12336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1729.416598][ T3111] hub 2-1:0.0: bad descriptor, ignoring hub [ 1729.422775][ T3111] hub: probe of 2-1:0.0 failed with error -5 [ 1729.431738][ T3111] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input102 [ 1729.515382][T12318] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x2d5/0x1110, inode 0x1803 dinode [ 1729.533753][T12318] XFS (loop6): Unmount and run xfs_repair [ 1729.539605][T12318] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1729.621425][T12318] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1729.630341][T12318] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1729.683065][ T3111] usb 2-1: USB disconnect, device number 17 [ 1729.718859][T12318] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1729.741538][T12318] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1729.766413][T12318] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1729.784910][T12369] loop0: detected capacity change from 0 to 512 [ 1729.792256][T12318] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1729.803078][T12318] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1729.820793][T12318] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1730.003531][T27258] XFS (loop6): Unmounting Filesystem [ 1730.475051][T12385] loop1: detected capacity change from 0 to 512 [ 1730.493539][T12385] EXT4-fs: Ignoring removed nobh option [ 1730.523379][T12385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1730.540936][ T1179] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1730.579838][T12385] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.17704: iget: bad i_size value: 38620345925642 [ 1730.593252][T12385] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.17704: couldn't read orphan inode 15 (err -117) [ 1730.593761][T12392] netlink: 600 bytes leftover after parsing attributes in process `syz.0.17706'. [ 1730.627975][T12385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1730.752516][ T1179] usb 6-1: Using ep0 maxpacket: 32 [ 1730.772347][ T4557] EXT4-fs (loop1): unmounting filesystem. [ 1730.787640][ T1179] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1730.820046][ T1179] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.831839][ T1179] usb 6-1: config 0 has no interface number 0 [ 1730.842051][ T1179] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1730.884884][ T1179] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1730.917613][ T1179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.931010][ T1179] usb 6-1: Product: syz [ 1730.935214][ T1179] usb 6-1: Manufacturer: syz [ 1730.939836][ T1179] usb 6-1: SerialNumber: syz [ 1730.965330][ T1179] usb 6-1: config 0 descriptor?? [ 1730.980972][ T1179] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1731.031396][ T1179] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1731.202742][ T1179] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1731.210216][ T1179] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1731.458666][ T1179] usb 6-1: USB disconnect, device number 23 [ 1732.041271][T12431] loop0: detected capacity change from 0 to 4096 [ 1732.087670][T12431] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1732.157958][T12431] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1732.215294][T12431] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1732.253607][T12431] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1732.327250][T12431] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1732.396706][T12431] ntfs: volume version 3.1. [ 1732.427518][T12431] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1732.475370][T12431] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1732.545287][T12431] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1732.599773][T12431] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1732.624057][T12431] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1733.457729][T12488] loop0: detected capacity change from 0 to 64 [ 1733.486811][T12487] kernel read not supported for file / œ (pid: 12487 comm: syz.7.17745) [ 1733.535961][T12488] syz.0.17744: attempt to access beyond end of device [ 1733.535961][T12488] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1733.618253][T12488] Buffer I/O error on dev loop0, logical block 512, async page read [ 1733.673295][T12488] syz.0.17744: attempt to access beyond end of device [ 1733.673295][T12488] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1733.765218][T12488] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1734.411566][T12515] loop5: detected capacity change from 0 to 4096 [ 1734.664154][T26096] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1734.679538][T26096] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1734.921693][T12543] loop0: detected capacity change from 0 to 8 [ 1735.878316][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17785'. [ 1736.079366][T12581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17787'. [ 1736.517699][T12593] loop6: detected capacity change from 0 to 8 [ 1736.558845][T12593] SQUASHFS error: Failed to read block 0x62: -5 [ 1736.559382][T12569] loop7: detected capacity change from 0 to 32768 [ 1736.586656][T12593] squashfs image failed sanity check [ 1736.640306][T12569] XFS (loop7): Mounting V5 Filesystem [ 1736.691669][T12603] Cannot find del_set index 4 as target [ 1736.699440][T12593] Invalid option length (1047337) for dns_resolver key [ 1736.738882][T12569] XFS (loop7): Ending clean mount [ 1736.747569][T12569] XFS (loop7): Quotacheck needed: Please wait. [ 1736.824021][T12609] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1736.904217][T12569] XFS (loop7): Quotacheck: Done. [ 1737.227315][T27456] XFS (loop7): Unmounting Filesystem [ 1737.330816][T12620] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1737.426209][T12624] xt_TCPMSS: Only works on TCP SYN packets [ 1738.079314][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17816'. [ 1738.103755][T12649] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1738.103755][T12649] SÃȘØÈžZ§6ŸÂ' [ 1738.440667][T12661] loop6: detected capacity change from 0 to 512 [ 1738.494961][T12661] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1738.914852][T27258] EXT4-fs (loop6): unmounting filesystem. [ 1739.078426][ T4576] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1739.141016][T12682] loop6: detected capacity change from 0 to 2048 [ 1739.177264][T12682] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1739.260832][T12689] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1739.286381][ T4576] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1739.308286][ T4576] usb 6-1: string descriptor 0 read error: -22 [ 1739.337919][ T4576] usb 6-1: New USB device found, idVendor=420c, idProduct=1058, bcdDevice= 0.40 [ 1739.366138][ T4576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.399795][ T4576] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1739.561064][T12691] loop0: detected capacity change from 0 to 4096 [ 1739.618435][ T4576] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1739.708843][T12691] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1739.871336][ T4576] usb 6-1: USB disconnect, device number 24 [ 1739.970934][T12701] loop6: detected capacity change from 0 to 2048 [ 1740.094979][T12709] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1740.176381][ T4645] udevd[4645]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1741.242434][T12741] netlink: 'syz.6.17859': attribute type 1 has an invalid length. [ 1741.539904][T12755] netlink: 'syz.6.17864': attribute type 32 has an invalid length. [ 1741.548161][T12755] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1741.815491][T12766] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17872'. [ 1742.052798][T12774] loop6: detected capacity change from 0 to 128 [ 1742.101736][T12774] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1742.174155][T12774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1742.567044][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17882'. [ 1742.687336][T12794] cgroup: Need name or subsystem set [ 1742.859691][T12798] netlink: 'syz.1.17887': attribute type 2 has an invalid length. [ 1743.138766][T12808] netlink: 320 bytes leftover after parsing attributes in process `syz.1.17892'. [ 1743.226303][T12780] loop0: detected capacity change from 0 to 32768 [ 1743.353236][T12780] ERROR: (device loop0): diAllocAG: numfree > numinos [ 1743.353236][T12780] [ 1743.401286][T12780] ERROR: (device loop0): remounting filesystem as read-only [ 1743.430948][T12780] ialloc: diAlloc returned -5! [ 1743.461166][T12819] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17898'. [ 1743.499074][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17898'. [ 1743.510298][T12821] loop1: detected capacity change from 0 to 512 [ 1743.541984][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17898'. [ 1743.565519][T12821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1743.700910][T12821] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1743.770396][ T4557] EXT4-fs (loop1): unmounting filesystem. [ 1744.064369][ T3111] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1744.154850][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17908'. [ 1744.291451][ T3111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.313717][ T3111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.369070][ T3111] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1744.401328][ T3111] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.427325][ T3111] usb 8-1: Product: syz [ 1744.431808][ T3111] usb 8-1: Manufacturer: syz [ 1744.466739][ T3111] usb 8-1: SerialNumber: syz [ 1744.501059][ T3111] usb 8-1: config 0 descriptor?? [ 1744.523175][ T3111] usb 8-1: Found UVC 0.00 device syz (18ec:3288) [ 1744.533447][ T3111] usb 8-1: No valid video chain found. [ 1744.659359][T12862] netlink: 6 bytes leftover after parsing attributes in process `syz.1.17916'. [ 1744.759640][ T4576] usb 8-1: USB disconnect, device number 38 [ 1745.154076][T12879] loop5: detected capacity change from 0 to 1024 [ 1745.360761][T12887] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.17929' sets config #2 [ 1745.365480][T10703] hfsplus: b-tree write err: -5, ino 25 [ 1745.417540][T10703] hfsplus: b-tree write err: -5, ino 4 [ 1745.423143][T10703] hfsplus: b-tree write err: -5, ino 2 [ 1745.600097][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17931'. [ 1745.917315][T12911] lo speed is unknown, defaulting to 1000 [ 1745.957984][T12911] lo speed is unknown, defaulting to 1000 [ 1745.964261][T12911] lo speed is unknown, defaulting to 1000 [ 1746.243990][T12923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1746.450042][T12911] infiniband syz2: set active [ 1746.454864][ T1179] lo speed is unknown, defaulting to 1000 [ 1746.467487][T12911] infiniband syz2: added lo [ 1746.574276][T12911] RDS/IB: syz2: added [ 1746.608120][T12911] smc: adding ib device syz2 with port count 1 [ 1746.614390][T12911] smc: ib device syz2 port 1 has pnetid [ 1746.678925][ T3111] lo speed is unknown, defaulting to 1000 [ 1746.690572][T12911] lo speed is unknown, defaulting to 1000 [ 1747.120053][T12911] lo speed is unknown, defaulting to 1000 [ 1747.154645][T12951] loop0: detected capacity change from 0 to 4096 [ 1747.201214][T12957] netlink: 'syz.5.17962': attribute type 3 has an invalid length. [ 1747.224878][T12951] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1747.589028][T12911] lo speed is unknown, defaulting to 1000 [ 1747.605367][T12965] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 1748.031888][T12911] lo speed is unknown, defaulting to 1000 [ 1748.131667][T12986] loop0: detected capacity change from 0 to 2048 [ 1748.203707][T12986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1748.272952][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1748.272968][ T26] audit: type=1800 audit(1649.647:674): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17975" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 1748.504953][T12911] lo speed is unknown, defaulting to 1000 [ 1748.696765][T13000] loop6: detected capacity change from 0 to 64 [ 1748.778516][T13004] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17986'. [ 1749.139052][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.175814][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.197353][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.206819][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.284156][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.313915][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.350603][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.364055][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.391744][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17992'. [ 1749.760076][T13028] loop6: detected capacity change from 0 to 4096 [ 1749.787230][T13028] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1749.888668][T13028] ntfs: (device loop6): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1749.935563][T13028] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1749.986015][T13028] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1750.028757][T13028] ntfs: volume version 3.1. [ 1750.100631][T13008] loop5: detected capacity change from 0 to 32768 [ 1750.154046][T13008] jfs_strtoUCS: char2uni returned -22. [ 1750.168341][T13042] netlink: 'syz.1.18005': attribute type 1 has an invalid length. [ 1750.184592][T13008] charset = cp932, char = 0xfc [ 1750.191513][T13028] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 1750.232148][T13028] ntfs: (device loop6): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 1750.234381][T13042] netlink: 'syz.1.18005': attribute type 2 has an invalid length. [ 1750.275551][T13044] loop0: detected capacity change from 0 to 512 [ 1750.366134][T13044] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1750.437796][T13044] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 1750.465191][T13044] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1750.520157][T13044] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1750.541613][T21581] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1750.574657][T21581] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1750.609185][T13044] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.18006: bad orphan inode 14 [ 1750.627698][T13051] x_tables: duplicate underflow at hook 3 [ 1750.675683][T13044] ext4_test_bit(bit=13, block=18) = 1 [ 1750.681146][T13044] is_bad_inode(inode)=0 [ 1750.757600][T13044] NEXT_ORPHAN(inode)=0 [ 1750.761734][T13044] max_ino=32 [ 1750.764967][T13044] i_nlink=1 [ 1750.808161][T13055] loop7: detected capacity change from 0 to 2048 [ 1750.811776][T13044] EXT4-fs (loop0): 1 truncate cleaned up [ 1750.820257][T13044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1750.868384][T13055] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1750.950767][T13062] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1751.035725][T13055] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 147 [ 1751.051116][ T4559] EXT4-fs (loop0): unmounting filesystem. [ 1751.093392][T13055] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1751.206462][T13055] Remounting filesystem read-only [ 1751.214340][T13066] netlink: 'syz.5.18017': attribute type 1 has an invalid length. [ 1751.245303][T13055] NILFS (loop7): error -5 truncating bmap (ino=15) [ 1751.279857][T13055] syz.7.18012: attempt to access beyond end of device [ 1751.279857][T13055] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1751.364366][T13055] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 1751.581584][T27456] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 1752.126342][T13102] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1752.209626][T13105] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1752.264834][T13105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1752.488569][T13117] loop6: detected capacity change from 0 to 512 [ 1752.545372][T21650] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1752.568184][T13117] EXT4-fs: Ignoring removed mblk_io_submit option [ 1752.604683][T13124] openvswitch: netlink: EtherType 0 is less than min 600 [ 1752.629491][T13117] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1752.675274][T13117] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.18039: attempt to clear invalid blocks 2 len 1 [ 1752.769375][T13117] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1752.786025][T21650] usb 6-1: config 128 interface 0 has no altsetting 0 [ 1752.792903][T21650] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1752.827738][T13117] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.18039: invalid indirect mapped block 1819239214 (level 0) [ 1752.834407][T21650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.905866][T13117] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.18039: invalid indirect mapped block 1819239214 (level 1) [ 1752.991358][T13117] EXT4-fs (loop6): 1 truncate cleaned up [ 1753.018984][T13117] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1753.137976][T21650] comedi comedi5: could not set alternate setting 3 in high speed [ 1753.173150][T21650] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1753.235625][T21650] usbduxsigma: probe of 6-1:128.0 failed with error -71 [ 1753.255388][T21650] usb 6-1: USB disconnect, device number 25 [ 1753.308399][T27258] EXT4-fs (loop6): unmounting filesystem. [ 1753.788824][T13157] loop0: detected capacity change from 0 to 4096 [ 1753.834876][T13157] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1754.002172][T13169] netlink: 'syz.1.18063': attribute type 3 has an invalid length. [ 1754.519754][T13187] comedi comedi4: bad chanlist[0]=0x04000009 chan=9 range length=2 [ 1754.762353][T13196] loop1: detected capacity change from 0 to 164 [ 1754.802571][T13196] Unable to read rock-ridge attributes [ 1754.807736][T13200] __nla_validate_parse: 11 callbacks suppressed [ 1754.807755][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18078'. [ 1754.822969][T13196] Unable to read rock-ridge attributes [ 1754.829910][T13202] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.18079'. [ 1754.839766][T13200] netlink: 31 bytes leftover after parsing attributes in process `syz.7.18078'. [ 1754.849455][T13200] netlink: 'syz.7.18078': attribute type 3 has an invalid length. [ 1754.891701][T13200] netlink: 'syz.7.18078': attribute type 2 has an invalid length. [ 1754.896346][T13196] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1754.919252][T13200] netlink: 31 bytes leftover after parsing attributes in process `syz.7.18078'. [ 1754.927958][T13202] bridge_slave_1: default FDB implementation only supports local addresses [ 1755.003519][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18081'. [ 1755.479906][T13224] netlink: 188 bytes leftover after parsing attributes in process `syz.6.18087'. [ 1755.484202][T13221] netlink: 'syz.1.18088': attribute type 1 has an invalid length. [ 1756.037844][T13247] netlink: 'syz.0.18100': attribute type 11 has an invalid length. [ 1756.046180][ T1179] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1756.250748][ T1179] usb 8-1: Using ep0 maxpacket: 32 [ 1756.258129][ T1179] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.307935][ T1179] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1756.350504][ T1179] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.358564][ T1179] usb 8-1: Product: syz [ 1756.388587][ T1179] usb 8-1: Manufacturer: syz [ 1756.402565][ T1179] usb 8-1: SerialNumber: syz [ 1756.430195][ T1179] usb 8-1: config 0 descriptor?? [ 1756.456853][T13261] delete_channel: no stack [ 1756.468256][ T1179] usb 8-1: bad CDC descriptors [ 1756.468658][ T1179] usb 8-1: unsupported MDLM descriptors [ 1756.635462][T13265] loop1: detected capacity change from 0 to 1024 [ 1756.749578][ T4576] usb 8-1: USB disconnect, device number 39 [ 1756.927221][T13276] usb usb7: usbfs: process 13276 (syz.1.18114) did not claim interface 0 before use [ 1756.946779][T13278] sctp: [Deprecated]: syz.0.18116 (pid 13278) Use of int in maxseg socket option. [ 1756.946779][T13278] Use struct sctp_assoc_value instead [ 1757.579960][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18123'. [ 1757.893544][T13312] loop7: detected capacity change from 0 to 2048 [ 1757.983945][T13312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1758.259894][T13322] netlink: 'syz.0.18131': attribute type 21 has an invalid length. [ 1759.020537][T13351] loop6: detected capacity change from 0 to 164 [ 1759.095613][T13351] ISOFS: unable to read i-node block [ 1759.104784][T13351] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1759.706236][T13328] loop1: detected capacity change from 0 to 40427 [ 1759.790603][T13328] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1760.010517][T13328] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1760.189960][T13328] syz.1.18133: attempt to access beyond end of device [ 1760.189960][T13328] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1760.465625][ T4557] syz-executor: attempt to access beyond end of device [ 1760.465625][ T4557] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1760.898410][T13401] loop7: detected capacity change from 0 to 256 [ 1760.952699][T21650] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1761.080772][T13405] overlayfs: missing 'lowerdir' [ 1761.151031][T21650] usb 6-1: Using ep0 maxpacket: 16 [ 1761.168905][T21650] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1761.199379][T21650] usb 6-1: config 0 has no interface number 0 [ 1761.221228][T21650] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1761.256080][T21648] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1761.266250][T21650] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1761.289416][T21650] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1761.297667][T21650] usb 6-1: Product: syz [ 1761.328012][T21650] usb 6-1: SerialNumber: syz [ 1761.343424][T21650] usb 6-1: config 0 descriptor?? [ 1761.372951][T21650] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input110 [ 1761.505096][T21648] usb 8-1: Using ep0 maxpacket: 32 [ 1761.512857][T21648] usb 8-1: config 4 has an invalid interface number: 228 but max is 0 [ 1761.536546][T13417] loop6: detected capacity change from 0 to 2048 [ 1761.548631][T21648] usb 8-1: config 4 has no interface number 0 [ 1761.554806][T21648] usb 8-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 1761.586397][T21648] usb 8-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 1761.656853][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.667899][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.675141][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.686610][ T52] block nbd1: Attempted send on invalid socket [ 1761.692848][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1761.702376][T21648] usb 8-1: config 4 interface 228 has no altsetting 0 [ 1761.711489][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.718736][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.726511][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.734265][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.741689][T21650] usb 6-1: USB disconnect, device number 26 [ 1761.749399][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1761.756392][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1761.766059][T21650] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1761.796794][T21648] usb 8-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1761.807414][T21648] usb 8-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1761.816116][T21648] usb 8-1: Product: syz [ 1761.820543][T21648] usb 8-1: Manufacturer: syz [ 1761.825176][T21648] usb 8-1: SerialNumber: syz [ 1762.063502][T13427] loop1: detected capacity change from 0 to 4096 [ 1762.086167][T21648] usb 8-1: invalid MIDI in EP 0 [ 1762.103048][T13427] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1762.147344][T13427] ntfs3: loop1: mft corrupted [ 1762.152143][T13427] ntfs3: loop1: Failed to load $Volume. [ 1762.182411][T21648] snd-usb-audio: probe of 8-1:4.228 failed with error -22 [ 1762.253898][T21648] usb 8-1: USB disconnect, device number 40 [ 1762.272632][ T6394] udevd[6394]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1762.795592][T13449] loop5: detected capacity change from 0 to 256 [ 1763.539352][T13466] loop0: detected capacity change from 0 to 4096 [ 1763.577068][T13466] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1763.758410][T13482] loop6: detected capacity change from 0 to 512 [ 1763.785948][T13482] EXT4-fs: Ignoring removed nobh option [ 1763.869298][T13482] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1763.953305][T13482] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.18207: corrupted inode contents [ 1764.044785][T13482] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1764.078568][T13482] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.18207: corrupted inode contents [ 1764.127287][T13482] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.18207: mark_inode_dirty error [ 1764.150027][T13482] EXT4-fs (loop6): 1 orphan inode deleted [ 1764.160476][T13482] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1764.169110][T13493] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1764.350981][T27258] EXT4-fs (loop6): unmounting filesystem. [ 1764.989760][T13487] loop1: detected capacity change from 0 to 32768 [ 1765.149111][T13490] loop5: detected capacity change from 0 to 32768 [ 1765.164078][T13487] XFS (loop1): Mounting V5 Filesystem [ 1765.247146][T13490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.18211 (13490) [ 1765.272408][T13497] loop0: detected capacity change from 0 to 40427 [ 1765.321451][T13490] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1765.340461][T13490] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1765.354367][T13487] XFS (loop1): Ending clean mount [ 1765.362264][T13490] BTRFS info (device loop5): using free space tree [ 1765.370498][T13487] XFS (loop1): Quotacheck needed: Please wait. [ 1765.384732][T13497] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1765.523271][T13497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1765.573077][T13487] XFS (loop1): Quotacheck: Done. [ 1765.712749][T13497] syz.0.18215: attempt to access beyond end of device [ 1765.712749][T13497] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1765.832337][T13490] BTRFS info (device loop5): enabling ssd optimizations [ 1765.843565][ T4557] XFS (loop1): Unmounting Filesystem [ 1765.923104][T13544] loop7: detected capacity change from 0 to 2048 [ 1765.999337][ T4559] syz-executor: attempt to access beyond end of device [ 1765.999337][ T4559] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1766.016399][T13544] UDF-fs: error (device loop7): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 1766.055160][T26096] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1766.077274][T13544] UDF-fs: Scanning with blocksize 512 failed [ 1766.122978][T13544] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1766.176733][T13544] UDF-fs: Scanning with blocksize 1024 failed [ 1766.224438][T13544] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1766.308674][T13544] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1766.341470][T13544] UDF-fs: Scanning with blocksize 2048 failed [ 1766.374761][T13544] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1766.415956][T13544] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1766.523151][T13544] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1766.531208][T13544] UDF-fs: Scanning with blocksize 4096 failed [ 1766.542988][T13544] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1766.664101][T13544] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1766.698823][T13544] exFAT-fs (loop7): unable to read boot sector [ 1766.705074][T13544] exFAT-fs (loop7): failed to read boot sector [ 1766.738048][T13544] exFAT-fs (loop7): failed to recognize exfat type [ 1767.574209][T13575] loop6: detected capacity change from 0 to 4096 [ 1767.627208][T13583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18242'. [ 1767.636784][T13575] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1767.741699][T13575] ntfs3: loop6: failed to convert "c46c" to cp437 [ 1768.234273][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1768.234293][ T26] audit: type=1326 audit(1668.080:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.329040][ T26] audit: type=1326 audit(1668.080:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.432119][ T26] audit: type=1326 audit(1668.080:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.579858][ T26] audit: type=1326 audit(1668.107:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.629095][ T26] audit: type=1326 audit(1668.107:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.667563][ T26] audit: type=1326 audit(1668.107:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.734797][ T26] audit: type=1326 audit(1668.107:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.775873][ T26] audit: type=1326 audit(1668.107:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.18251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1768.821432][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18258'. [ 1768.839786][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18258'. [ 1768.972457][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18261'. [ 1768.983887][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1768.990229][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1769.026663][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18261'. [ 1769.057220][T13623] loop7: detected capacity change from 0 to 1024 [ 1769.541131][T13639] loop5: detected capacity change from 0 to 2048 [ 1769.622994][T13646] loop1: detected capacity change from 0 to 256 [ 1769.676808][T13639] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1769.715860][T13646] FAT-fs (loop1): Directory bread(block 64) failed [ 1769.769171][T13646] FAT-fs (loop1): Directory bread(block 65) failed [ 1769.791101][T13646] FAT-fs (loop1): Directory bread(block 66) failed [ 1769.825513][T13646] FAT-fs (loop1): Directory bread(block 67) failed [ 1769.826634][T13652] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1769.865478][T13646] FAT-fs (loop1): Directory bread(block 68) failed [ 1769.884992][T26096] EXT4-fs (loop5): unmounting filesystem. [ 1769.900639][T13646] FAT-fs (loop1): Directory bread(block 69) failed [ 1769.949891][T13646] FAT-fs (loop1): Directory bread(block 70) failed [ 1769.997828][T13646] FAT-fs (loop1): Directory bread(block 71) failed [ 1770.028730][T13646] FAT-fs (loop1): Directory bread(block 72) failed [ 1770.037080][T13646] FAT-fs (loop1): Directory bread(block 73) failed [ 1770.617458][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18283'. [ 1770.740709][T13681] netlink: 'syz.7.18287': attribute type 46 has an invalid length. [ 1770.741020][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18286'. [ 1771.342713][T13706] netlink: 220 bytes leftover after parsing attributes in process `syz.0.18298'. [ 1772.036606][ T26] audit: type=1400 audit(1671.587:683): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47 [ 1772.415915][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18321'. [ 1772.614799][T13761] netlink: 'syz.6.18326': attribute type 15 has an invalid length. [ 1772.646284][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18326'. [ 1773.254136][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18337'. [ 1773.293280][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18337'. [ 1773.742359][T13804] loop6: detected capacity change from 0 to 64 [ 1773.833432][T13799] loop1: detected capacity change from 0 to 4096 [ 1773.961902][T13812] netlink: 196 bytes leftover after parsing attributes in process `syz.7.18350'. [ 1773.967590][T13799] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1774.002131][T13812] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1774.324730][T13823] netlink: 276 bytes leftover after parsing attributes in process `syz.0.18356'. [ 1774.621041][T13833] netlink: 'syz.0.18362': attribute type 1 has an invalid length. [ 1774.837209][T13842] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18366'. [ 1775.534052][T13864] netlink: 'syz.6.18377': attribute type 21 has an invalid length. [ 1775.664078][T13836] loop1: detected capacity change from 0 to 32768 [ 1775.769680][T13836] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 1775.769680][T13836] [ 1775.828747][T13836] ERROR: (device loop1): remounting filesystem as read-only [ 1775.841293][T13836] ialloc: diAlloc returned -5! [ 1775.909798][T13877] loop5: detected capacity change from 0 to 512 [ 1775.983013][T13877] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1776.117628][T13877] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1776.197127][T13877] Quota error (device loop5): write_blk: dquota write failed [ 1776.204736][T13877] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1776.214039][T13877] Quota error (device loop5): write_blk: dquota write failed [ 1776.221815][T13877] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1776.231769][T13877] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.18383: Failed to acquire dquot type 1 [ 1776.244981][T13877] EXT4-fs (loop5): 1 truncate cleaned up [ 1776.252837][T13877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1776.335045][T13877] Quota error (device loop5): write_blk: dquota write failed [ 1776.371208][T13877] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1776.445670][T13877] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.18383: Failed to acquire dquot type 1 [ 1776.618549][T26096] EXT4-fs (loop5): unmounting filesystem. [ 1776.661166][T13900] loop6: detected capacity change from 0 to 164 [ 1776.738876][T13900] iso9660: Corrupted directory entry in block 3 of inode 1792 [ 1776.855371][T13907] netlink: 'syz.0.18396': attribute type 1 has an invalid length. [ 1776.867280][T13907] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.18396'. [ 1777.519785][T13932] loop6: detected capacity change from 0 to 8 [ 1778.446605][T13925] loop7: detected capacity change from 0 to 32768 [ 1778.487486][T13964] loop0: detected capacity change from 0 to 64 [ 1778.764782][ T1179] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1778.983703][ T1179] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1779.003118][ T1179] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1779.013007][ T1179] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1779.090403][ T1179] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1779.099539][ T1179] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1779.127628][ T1179] usb 7-1: Product: syz [ 1779.131871][ T1179] usb 7-1: Manufacturer: syz [ 1779.163478][ T1179] usb 7-1: SerialNumber: syz [ 1779.170576][ T1179] usb 7-1: config 0 descriptor?? [ 1779.198311][ T1179] hub 7-1:0.0: bad descriptor, ignoring hub [ 1779.204273][ T1179] hub: probe of 7-1:0.0 failed with error -5 [ 1779.257457][ T1179] usb 7-1: selecting invalid altsetting 0 [ 1779.663758][T21650] usb 7-1: USB disconnect, device number 33 [ 1779.765897][T14003] binder: 14002:14003 ioctl c018620c 0 returned -14 [ 1780.056366][T14013] usb usb9: usbfs: process 14013 (syz.5.18448) did not claim interface 1 before use [ 1781.046973][T14044] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1781.225376][T14052] loop7: detected capacity change from 0 to 256 [ 1781.278664][T14052] FAT-fs (loop7): Directory bread(block 1285) failed [ 1781.286639][T14052] FAT-fs (loop7): Directory bread(block 1286) failed [ 1781.342608][T14052] FAT-fs (loop7): Directory bread(block 1287) failed [ 1781.349578][T14052] FAT-fs (loop7): Directory bread(block 1288) failed [ 1781.449382][T14052] FAT-fs (loop7): Directory bread(block 1285) failed [ 1781.460296][T14052] FAT-fs (loop7): Directory bread(block 1286) failed [ 1781.489616][T14052] FAT-fs (loop7): Directory bread(block 1287) failed [ 1781.516007][T14052] FAT-fs (loop7): Directory bread(block 1288) failed [ 1781.559362][T14052] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 1782.320356][T14091] netlink: 'syz.6.18484': attribute type 1 has an invalid length. [ 1782.447657][ T4611] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1782.594596][T14105] autofs4:pid:14105:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 1782.638999][T14105] autofs4:pid:14105:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1782.678372][ T4611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1782.715009][ T4611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1782.746835][ T4611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1782.759526][ T26] audit: type=1326 audit(1681.482:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1782.812566][ T4611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1782.837663][ T26] audit: type=1326 audit(1681.482:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1782.867404][ T4611] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1782.888748][ T4611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.909989][ T4611] usb 6-1: Product: syz [ 1782.923450][ T4611] usb 6-1: Manufacturer: syz [ 1782.931853][ T4611] usb 6-1: SerialNumber: syz [ 1782.954933][ T26] audit: type=1326 audit(1681.482:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1782.976695][ T4611] usb 6-1: config 0 descriptor?? [ 1783.067672][ T26] audit: type=1326 audit(1681.482:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1783.109860][T14121] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[27456] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14121] [ 1783.148670][ T26] audit: type=1326 audit(1681.509:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1783.209553][ T4611] adutux 6-1:0.0: Could not retrieve serial number [ 1783.214559][ T26] audit: type=1326 audit(1681.509:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1783.216288][ T4611] adutux: probe of 6-1:0.0 failed with error -5 [ 1783.325410][ T26] audit: type=1326 audit(1681.509:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1783.342789][T14127] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18504'. [ 1783.440199][ T26] audit: type=1326 audit(1681.509:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1783.493395][ T4611] usb 6-1: USB disconnect, device number 27 [ 1783.549452][ T26] audit: type=1326 audit(1681.509:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.18496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1783.816632][ T26] audit: type=1326 audit(1682.460:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14142 comm="syz.7.18512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572859ce59 code=0x7ffc0000 [ 1784.593044][T21650] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1784.675913][T14179] loop6: detected capacity change from 0 to 512 [ 1784.809620][T21650] usb 8-1: Using ep0 maxpacket: 16 [ 1784.822951][T14179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1784.835413][T21650] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1784.845112][T21650] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.855250][T21650] usb 8-1: Product: syz [ 1784.859594][T21650] usb 8-1: Manufacturer: syz [ 1784.866140][T21650] usb 8-1: SerialNumber: syz [ 1784.875593][T21650] usb 8-1: config 0 descriptor?? [ 1785.124277][T21650] speedtch 8-1:0.0: speedtch_bind: data interface not found! [ 1785.131744][T21650] speedtch 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1785.158352][T27258] EXT4-fs (loop6): unmounting filesystem. [ 1785.176880][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18537'. [ 1785.370388][T21650] usb 8-1: USB disconnect, device number 41 [ 1786.443168][T14237] loop1: detected capacity change from 0 to 4096 [ 1786.531017][T14237] ntfs: volume version 3.1. [ 1786.567370][T14250] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1786.622020][T14237] overlayfs: failed to resolve './bus': -2 [ 1786.805166][T14256] bridge0: port 1(veth1_to_bond) entered blocking state [ 1786.825478][T14256] bridge0: port 1(veth1_to_bond) entered disabled state [ 1786.834372][T14258] loop6: detected capacity change from 0 to 8 [ 1786.868396][T14256] device veth1_to_bond entered promiscuous mode [ 1786.908013][T14258] SQUASHFS error: Failed to read block 0x738: -5 [ 1786.944126][T14258] SQUASHFS error: Unable to read metadata cache entry [736] [ 1787.179427][T14268] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1787.198564][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18573'. [ 1787.466970][T14278] netlink: 'syz.0.18579': attribute type 1 has an invalid length. [ 1787.503899][T14278] netlink: 'syz.0.18579': attribute type 2 has an invalid length. [ 1787.713236][T14292] bridge0: port 3(veth1_to_bond) entered blocking state [ 1787.765914][T14292] bridge0: port 3(veth1_to_bond) entered disabled state [ 1787.808525][T14292] device veth1_to_bond entered promiscuous mode [ 1788.113006][T14304] netlink: 'syz.5.18590': attribute type 1 has an invalid length. [ 1788.344490][T14315] ip6t_srh: unknown srh match flags 5294 [ 1788.688203][T21650] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1788.740641][T14327] nfs: Deprecated parameter 'nointr' [ 1788.906774][T21650] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.919427][T14332] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1788.924310][T21650] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1788.956459][T21650] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1788.975259][T21650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.995162][T21650] usb 7-1: Product: syz [ 1789.035081][T21650] usb 7-1: Manufacturer: syz [ 1789.049807][T21650] usb 7-1: SerialNumber: syz [ 1789.073470][T21650] usb 7-1: config 0 descriptor?? [ 1789.108832][T21650] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1789.141769][T21650] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1789.170619][T21650] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1789.206602][T21650] usb 7-1: media controller created [ 1789.270766][T21650] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1789.519307][T21650] DVB: Unable to find symbol tda10046_attach() [ 1789.542830][T21650] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1789.585175][T21650] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1789.643443][T21648] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1789.843611][T21650] dvb_usb_m920x: probe of 7-1:0.0 failed with error -71 [ 1789.871518][T21648] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1789.879690][T21648] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1789.891981][T21650] usb 7-1: USB disconnect, device number 34 [ 1789.908310][T21648] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1789.937946][T21648] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1789.945906][T14362] Cannot find add_set index 65532 as target [ 1789.977684][T21648] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1789.997005][T21648] usb 2-1: Product: syz [ 1790.001506][T21648] usb 2-1: Manufacturer: syz [ 1790.006133][T21648] usb 2-1: SerialNumber: syz [ 1790.055924][T21648] usb 2-1: config 0 descriptor?? [ 1790.077577][T21648] hub 2-1:0.0: bad descriptor, ignoring hub [ 1790.094320][T21648] hub: probe of 2-1:0.0 failed with error -5 [ 1790.125097][T21648] usb 2-1: selecting invalid altsetting 0 [ 1790.487135][T21650] usb 2-1: USB disconnect, device number 18 [ 1790.751005][T14388] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1791.925634][T14435] infiniband syz2: set down [ 1791.971326][T14435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1792.003675][ T4611] lo speed is unknown, defaulting to 1000 [ 1792.010888][ T4611] lo speed is unknown, defaulting to 1000 [ 1793.309080][T14491] netlink: 'syz.1.18681': attribute type 1 has an invalid length. [ 1793.389317][T14485] xt_CT: No such helper "snmp" [ 1793.639338][ T4611] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1793.780489][ T4576] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1793.834442][ T4611] usb 1-1: Using ep0 maxpacket: 8 [ 1793.841418][ T4611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.874923][ T4611] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1793.895779][ T4611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.928272][ T4611] usb 1-1: Product: syz [ 1793.933022][ T4611] usb 1-1: Manufacturer: syz [ 1793.937665][ T4611] usb 1-1: SerialNumber: syz [ 1793.962640][ T4611] usb 1-1: config 0 descriptor?? [ 1793.977855][ T4576] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.990474][ T4611] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1793.996660][ T4611] usb 1-1: selecting invalid altsetting 1 [ 1794.003388][ T4576] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1794.062366][ T4576] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1794.093543][ T4576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.108172][ T4576] usb 2-1: config 0 descriptor?? [ 1794.365469][ T4576] usb 2-1: USB disconnect, device number 19 [ 1794.459091][ T4611] usb 1-1: USB disconnect, device number 32 [ 1794.520183][T14505] loop5: detected capacity change from 0 to 40427 [ 1794.548230][T14505] F2FS-fs (loop5): invalid crc value [ 1794.611823][T14505] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1794.627330][ T5420] udevd[5420]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1794.774985][T14535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18700'. [ 1794.834696][T14505] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1795.981216][T14574] netlink: 144 bytes leftover after parsing attributes in process `syz.7.18720'. [ 1796.003885][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18718'. [ 1796.516526][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18731'. [ 1796.553870][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18731'. [ 1796.562941][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18731'. [ 1796.714121][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18734'. [ 1796.881763][T14611] loop6: detected capacity change from 0 to 128 [ 1797.302190][T14623] xt_hashlimit: size too large, truncated to 1048576 [ 1797.308934][T14623] xt_hashlimit: max too large, truncated to 1048576 [ 1798.379917][T14663] loop6: detected capacity change from 0 to 4096 [ 1798.436903][T14663] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1798.556697][T14663] ntfs3: loop6: failed to convert "c46c" to cp850 [ 1799.874443][T14729] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18795'. [ 1800.058583][T14734] loop6: detected capacity change from 0 to 1024 [ 1800.216020][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1800.216039][ T26] audit: type=1800 audit(1697.588:710): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.18798" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1800.659751][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18809'. [ 1800.733682][T14763] netlink: 'syz.5.18810': attribute type 6 has an invalid length. [ 1800.920351][T14769] netlink: 140 bytes leftover after parsing attributes in process `syz.6.18815'. [ 1800.929686][T14769] netlink: 48 bytes leftover after parsing attributes in process `syz.6.18815'. [ 1801.319980][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18823'. [ 1801.726110][T14802] loop1: detected capacity change from 0 to 2048 [ 1801.768497][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18834'. [ 1801.777946][T14806] xt_TCPMSS: Only works on TCP SYN packets [ 1801.823950][T14802] loop1: p1 < > p3 p4 [ 1801.828132][T14802] loop1: partition table partially beyond EOD, truncated [ 1801.863948][T14802] loop1: p3 start 458752 is beyond EOD, truncated [ 1801.870447][T14802] loop1: p4 start 268435456 is beyond EOD, truncated [ 1802.040333][T14818] loop0: detected capacity change from 0 to 128 [ 1802.062760][T14817] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 1802.436150][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18845'. [ 1802.469387][T14833] tc_dump_action: action bad kind [ 1802.810145][T14849] loop5: detected capacity change from 0 to 128 [ 1803.039619][T14855] loop0: detected capacity change from 0 to 512 [ 1803.084745][T14855] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.18856: inode #1792: comm syz.0.18856: iget: illegal inode # [ 1803.132834][T14855] EXT4-fs (loop0): Remounting filesystem read-only [ 1803.139439][T14855] EXT4-fs (loop0): no journal found [ 1803.173587][T14855] EXT4-fs (loop0): can't get journal size [ 1803.199934][T14855] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1803.226365][T14862] x_tables: unsorted entry at hook 1 [ 1803.271404][T14855] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1803.285567][T14855] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1803.412687][T14855] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.18856: Logical block already allocated [ 1803.487028][T14855] EXT4-fs (loop0): Remounting filesystem read-only [ 1803.599283][ T4559] EXT4-fs (loop0): unmounting filesystem. [ 1803.798561][T14875] netlink: 'syz.0.18865': attribute type 1 has an invalid length. [ 1803.849192][T14875] netlink: 228 bytes leftover after parsing attributes in process `syz.0.18865'. [ 1803.896725][T14879] loop1: detected capacity change from 0 to 2048 [ 1803.947483][T14850] loop6: detected capacity change from 0 to 40427 [ 1803.958566][T14879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1804.029546][T14850] F2FS-fs (loop6): invalid crc value [ 1804.078311][T14850] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1804.119453][T14890] loop5: detected capacity change from 0 to 64 [ 1804.129490][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18869'. [ 1804.291290][T14892] loop1: detected capacity change from 0 to 256 [ 1804.335120][T14892] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1804.391733][T14892] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1804.400603][T14850] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1804.429345][T14892] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1804.495700][ T4611] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1804.714943][ T4611] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1804.745799][ T4611] usb 6-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1804.784638][ T4611] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1804.815423][ T4611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 63311, setting to 1024 [ 1804.859733][ T4611] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1804.928436][ T4611] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1804.962950][ T4611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.980102][ T4611] usb 6-1: Product: syz [ 1804.985089][ T4611] usb 6-1: Manufacturer: syz [ 1804.989899][ T4611] usb 6-1: SerialNumber: syz [ 1805.001701][ T4611] usb 6-1: config 0 descriptor?? [ 1805.012261][T14890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1805.054862][T14890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1805.077728][ C1] usb 6-1: NFC: Urb failure (status -71) [ 1805.086276][ C1] usb 6-1: NFC: Urb failure (status -71) [ 1805.094655][ T4611] usb 6-1: NFC: Unable to get FW version [ 1805.102236][ T4611] pn533_usb: probe of 6-1:0.0 failed with error -71 [ 1805.326232][ T4611] usb 6-1: USB disconnect, device number 28 [ 1805.760289][T14931] netlink: 'syz.7.18890': attribute type 1 has an invalid length. [ 1805.781661][T14932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1806.226750][T14946] netlink: 14 bytes leftover after parsing attributes in process `syz.7.18896'. [ 1806.500954][T14959] netlink: 'syz.7.18902': attribute type 2 has an invalid length. [ 1806.553852][T14959] netlink: 224 bytes leftover after parsing attributes in process `syz.7.18902'. [ 1807.868699][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18931'. [ 1808.036689][T15020] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18935'. [ 1808.532846][T15042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18945'. [ 1808.808417][T15053] CIFS mount error: No usable UNC path provided in device string! [ 1808.808417][T15053] [ 1808.840224][T15053] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1809.321965][T21650] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1809.340588][T15075] loop0: detected capacity change from 0 to 164 [ 1809.407208][T15075] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1809.565905][T21650] usb 8-1: Using ep0 maxpacket: 8 [ 1809.573064][T21650] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1809.592285][T21650] usb 8-1: config 0 has no interface number 0 [ 1809.627247][T21650] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1809.647664][T21650] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.669525][T21650] usb 8-1: Product: syz [ 1809.673737][T21650] usb 8-1: Manufacturer: syz [ 1809.711711][T21650] usb 8-1: SerialNumber: syz [ 1809.732246][T15082] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1809.741297][T21650] usb 8-1: config 0 descriptor?? [ 1809.974073][T21650] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 1809.982773][T21650] usb 8-1: Failed to initialize entity for entity 6 [ 1810.004656][T21650] usb 8-1: Failed to register entities (-22). [ 1810.031600][ T4611] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1810.109069][T15098] loop1: detected capacity change from 0 to 256 [ 1810.162957][T15098] FAT-fs (loop1): Directory bread(block 64) failed [ 1810.169558][T15098] FAT-fs (loop1): Directory bread(block 65) failed [ 1810.187808][T15098] FAT-fs (loop1): Directory bread(block 66) failed [ 1810.233253][T15098] FAT-fs (loop1): Directory bread(block 67) failed [ 1810.235320][T21650] usb 8-1: USB disconnect, device number 42 [ 1810.258203][T15098] FAT-fs (loop1): Directory bread(block 68) failed [ 1810.270026][ T4611] usb 1-1: Using ep0 maxpacket: 32 [ 1810.286880][ T4611] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1810.305070][ T4611] usb 1-1: config 0 has no interface number 0 [ 1810.311222][ T4611] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1810.334908][T15098] FAT-fs (loop1): Directory bread(block 69) failed [ 1810.341574][T15098] FAT-fs (loop1): Directory bread(block 70) failed [ 1810.356301][ T4611] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1810.366897][T15098] FAT-fs (loop1): Directory bread(block 71) failed [ 1810.382782][T15098] FAT-fs (loop1): Directory bread(block 72) failed [ 1810.396285][T15098] FAT-fs (loop1): Directory bread(block 73) failed [ 1810.416186][ T4611] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1810.429621][ T4611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.455069][ T4611] usb 1-1: Product: syz [ 1810.459734][ T4611] usb 1-1: Manufacturer: syz [ 1810.464386][ T4611] usb 1-1: SerialNumber: syz [ 1810.510324][ T4611] usb 1-1: config 0 descriptor?? [ 1810.737298][ T4611] radio-si470x 1-1:0.35: this is not a si470x device. [ 1810.835129][T15114] loop6: detected capacity change from 0 to 8 [ 1810.873189][T15114] SQUASHFS error: Failed to read block 0x6de: -5 [ 1810.898383][T15114] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1810.906272][T15114] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1810.956729][ T4611] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1810.982541][ T4611] usb 1-1: USB disconnect, device number 33 [ 1811.134709][T15124] cgroup: none used incorrectly [ 1811.559404][T15142] netlink: 132 bytes leftover after parsing attributes in process `syz.6.18995'. [ 1811.624356][ T4611] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1811.854255][ T4611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.873200][T15155] loop0: detected capacity change from 0 to 256 [ 1811.898546][ T4611] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1811.935075][T15155] FAT-fs (loop0): Directory bread(block 64) failed [ 1811.935782][ T4611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.956318][T15155] FAT-fs (loop0): Directory bread(block 65) failed [ 1811.974777][ T4611] usb 2-1: Product: syz [ 1811.992224][ T4611] usb 2-1: Manufacturer: syz [ 1812.004437][ T4611] usb 2-1: SerialNumber: syz [ 1812.010931][T15155] FAT-fs (loop0): Directory bread(block 66) failed [ 1812.025823][ T4611] usb 2-1: config 0 descriptor?? [ 1812.043749][T15155] FAT-fs (loop0): Directory bread(block 67) failed [ 1812.076567][T15155] FAT-fs (loop0): Directory bread(block 68) failed [ 1812.096647][T15155] FAT-fs (loop0): Directory bread(block 69) failed [ 1812.122746][T15155] FAT-fs (loop0): Directory bread(block 70) failed [ 1812.142643][T15155] FAT-fs (loop0): Directory bread(block 71) failed [ 1812.190174][T15155] FAT-fs (loop0): Directory bread(block 72) failed [ 1812.196776][T15155] FAT-fs (loop0): Directory bread(block 73) failed [ 1812.267160][ T4611] cdc_subset: probe of 2-1:0.0 failed with error -22 [ 1812.562167][ T4611] usb 2-1: USB disconnect, device number 20 [ 1812.760832][T15177] netlink: 'syz.7.19010': attribute type 3 has an invalid length. [ 1812.774066][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19010'. [ 1812.815386][T15177] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19010'. [ 1812.828061][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19011'. [ 1812.862779][T15181] loop0: detected capacity change from 0 to 128 [ 1812.948983][T15181] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1812.989599][T15181] hpfs: filesystem error: improperly stopped [ 1812.995666][T15181] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1813.032918][T15181] hpfs: You really don't want any checks? You are crazy... [ 1813.040197][T15181] hpfs: Code page index out of array [ 1813.072503][T15181] hpfs: code page support is disabled [ 1813.084381][T15181] hpfs: hpfs_map_4sectors(): unaligned read [ 1813.141311][T15181] hpfs: hpfs_map_4sectors(): unaligned read [ 1813.147284][T15181] hpfs: filesystem error: unable to find root dir [ 1813.723818][T15210] loop0: detected capacity change from 0 to 736 [ 1813.814829][T15214] loop6: detected capacity change from 0 to 64 [ 1813.899978][T15214] hfs: keylen 40 too large [ 1814.372976][T15227] netlink: 'syz.7.19034': attribute type 1 has an invalid length. [ 1814.523553][T15198] loop1: detected capacity change from 0 to 40427 [ 1814.566788][T15198] F2FS-fs (loop1): invalid crc value [ 1814.588267][T15198] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1814.763949][T15198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1815.053704][T15213] loop5: detected capacity change from 0 to 32768 [ 1815.098301][T15213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.19028 (15213) [ 1815.160131][T15213] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1815.232225][T15213] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1815.240957][T15213] BTRFS info (device loop5): using free space tree [ 1815.590241][T15213] BTRFS info (device loop5): enabling ssd optimizations [ 1815.658808][T15277] loop7: detected capacity change from 0 to 2048 [ 1815.762229][T26096] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1815.781385][T15277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1816.044437][T15282] loop6: detected capacity change from 0 to 4096 [ 1816.467039][T21650] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1816.505398][T15282] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1816.574170][T15282] ntfs3: loop6: Failed to load $Extend. [ 1816.718070][T15296] loop0: detected capacity change from 0 to 1024 [ 1816.742418][T21650] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1816.770382][T21650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.811427][T21650] usb 2-1: Product: syz [ 1816.833220][T21650] usb 2-1: Manufacturer: syz [ 1816.868062][T21650] usb 2-1: SerialNumber: syz [ 1816.896677][T21650] r8152-cfgselector 2-1: config 0 descriptor?? [ 1816.917084][T15300] netlink: 52 bytes leftover after parsing attributes in process `syz.5.19061'. [ 1817.047265][T21581] hfsplus: b-tree write err: -5, ino 25 [ 1817.089872][T21581] hfsplus: b-tree write err: -5, ino 4 [ 1817.146097][T21581] hfsplus: b-tree write err: -5, ino 2 [ 1817.211754][T15310] 9p: Unknown access argument z: -22 [ 1817.368791][T21650] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1817.398142][T21650] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 1817.475976][T15316] misc userio: No port type given on /dev/userio [ 1817.654293][T15323] netlink: 'syz.6.19072': attribute type 2 has an invalid length. [ 1817.684473][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19072'. [ 1817.773919][T15327] netlink: 'syz.7.19074': attribute type 13 has an invalid length. [ 1818.172436][T15341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19080'. [ 1818.289181][T15343] binder: 15342:15343 ioctl c018620c 200000000700 returned -22 [ 1818.889251][T15332] loop6: detected capacity change from 0 to 32768 [ 1818.933739][T15332] [ 1818.933739][T15332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1818.933739][T15332] [ 1818.987114][T15332] ERROR: (device loop6): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1818.987114][T15332] [ 1819.193009][T10703] [ 1819.193009][T10703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.193009][T10703] [ 1819.235947][T10703] [ 1819.235947][T10703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.235947][T10703] [ 1819.261319][T27258] [ 1819.261319][T27258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.261319][T27258] [ 1819.291030][ T106] [ 1819.291030][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.291030][ T106] [ 1819.316279][T27258] [ 1819.316279][T27258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.316279][T27258] [ 1820.154726][T15371] loop5: detected capacity change from 0 to 32768 [ 1820.227618][T15371] ea_get: invalid extended attribute [ 1820.234077][T15371] ffff888057dc5670: 04 00 00 00 .... [ 1820.318810][T15401] ipt_rpfilter: unknown options [ 1820.614611][ T26] audit: type=1326 audit(1716.417:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1820.638303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1820.714222][ T26] audit: type=1326 audit(1716.454:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1820.845179][ T26] audit: type=1326 audit(1716.454:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1820.930785][ T26] audit: type=1326 audit(1716.454:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1821.042343][ T26] audit: type=1326 audit(1716.454:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1821.156953][T15415] xt_CT: No such helper "snmp_trap" [ 1821.179950][ T26] audit: type=1326 audit(1716.454:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1821.257896][ T26] audit: type=1326 audit(1716.454:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1821.407565][ T26] audit: type=1326 audit(1716.454:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1821.431357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.441976][T15435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1821.548309][ T26] audit: type=1326 audit(1716.454:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.6.19113" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1822.305261][ T26] audit: type=1326 audit(1717.977:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.6.19142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e19ce59 code=0x7ffc0000 [ 1822.645601][T15483] delete_channel: no stack [ 1822.826839][ T4611] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1823.043447][ T4611] usb 2-1: Using ep0 maxpacket: 16 [ 1823.052706][ T4611] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1823.087830][ T4611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.125139][ T4611] usb 2-1: Product: syz [ 1823.129508][ T4611] usb 2-1: Manufacturer: syz [ 1823.140506][ T4611] usb 2-1: SerialNumber: syz [ 1823.187559][ T4611] usb 2-1: config 0 descriptor?? [ 1823.416619][ T4611] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1823.433564][ T4611] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1823.673918][ T4611] usb 2-1: USB disconnect, device number 22 [ 1823.906901][T15497] loop6: detected capacity change from 0 to 32768 [ 1823.913975][T15532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1823.950418][T15497] ea_get: invalid extended attribute [ 1823.970857][T15497] ffff888057dc4d30: 04 00 00 00 .... [ 1824.351978][T15542] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1824.755340][ T4611] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1824.937353][T15566] loop1: detected capacity change from 0 to 256 [ 1824.972059][ T4611] usb 1-1: Using ep0 maxpacket: 8 [ 1824.980790][ T4611] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1825.011562][T15566] FAT-fs (loop1): Directory bread(block 64) failed [ 1825.029680][T15566] FAT-fs (loop1): Directory bread(block 65) failed [ 1825.043636][ T4611] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1825.069159][T15566] FAT-fs (loop1): Directory bread(block 66) failed [ 1825.086560][ T4611] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1825.096636][T15566] FAT-fs (loop1): Directory bread(block 67) failed [ 1825.113134][T15566] FAT-fs (loop1): Directory bread(block 68) failed [ 1825.116914][ T4611] usb 1-1: config 8 interface 0 has no altsetting 0 [ 1825.150114][ T4611] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1825.150835][T15566] FAT-fs (loop1): Directory bread(block 69) failed [ 1825.177152][T15566] FAT-fs (loop1): Directory bread(block 70) failed [ 1825.181594][ T4611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.198978][T15566] FAT-fs (loop1): Directory bread(block 71) failed [ 1825.210008][T15566] FAT-fs (loop1): Directory bread(block 72) failed [ 1825.220628][ T4611] usb 1-1: Product: syz [ 1825.225120][T15566] FAT-fs (loop1): Directory bread(block 73) failed [ 1825.238860][ T4611] usb 1-1: Manufacturer: syz [ 1825.264463][ T4611] usb 1-1: SerialNumber: syz [ 1825.521975][ T4611] usb 1-1: selecting invalid altsetting 0 [ 1825.594951][ T4611] snd-usb-audio: probe of 1-1:8.0 failed with error -12 [ 1825.630632][ T4611] usb 1-1: USB disconnect, device number 34 [ 1825.682644][T18623] udevd[18623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1825.800269][T15560] loop7: detected capacity change from 0 to 32768 [ 1825.871397][T15560] ea_get: invalid extended attribute [ 1825.880097][T15560] ffff888041715670: 04 00 00 00 .... [ 1825.887012][T15582] loop5: detected capacity change from 0 to 64 [ 1825.964024][T15582] syz.5.19196: attempt to access beyond end of device [ 1825.964024][T15582] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1825.999678][T15582] Buffer I/O error on dev loop5, logical block 512, async page read [ 1826.016984][T15582] syz.5.19196: attempt to access beyond end of device [ 1826.016984][T15582] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1826.077395][T15582] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1826.153134][T21650] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1826.356535][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19201'. [ 1826.390573][T21650] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1826.436185][T21650] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.449615][T21650] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1826.476213][T21650] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1826.510515][T21650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.532600][T21650] usb 2-1: Product: syz [ 1826.536824][T21650] usb 2-1: Manufacturer: syz [ 1826.576883][T21650] usb 2-1: SerialNumber: syz [ 1826.602659][T21650] usb 2-1: selecting invalid altsetting 1 [ 1826.629430][T21650] usb 2-1: unit 6 not found! [ 1826.892250][T15610] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1827.044083][T21650] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1827.104858][T21650] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1827.141706][T21650] usb 2-1: USB disconnect, device number 23 [ 1827.245338][T15623] netlink: 96 bytes leftover after parsing attributes in process `syz.6.19217'. [ 1827.279826][T15623] netlink: 658 bytes leftover after parsing attributes in process `syz.6.19217'. [ 1827.391348][ T4645] udevd[4645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.431409][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19220'. [ 1827.721981][T15643] xt_cgroup: invalid path, errno=-2 [ 1827.963411][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19231'. [ 1828.244034][T21650] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1828.380084][T15670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.460559][T21650] usb 6-1: Using ep0 maxpacket: 32 [ 1828.467688][T21650] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1828.501830][T21650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.525291][T21650] usb 6-1: config 0 descriptor?? [ 1828.560237][T21650] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1828.807965][T15684] loop6: detected capacity change from 0 to 2048 [ 1828.839617][T15684] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1828.871808][T15688] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1828.893199][T15688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1828.943051][T15689] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1828.943563][T15684] syz.6.19246: attempt to access beyond end of device [ 1828.943563][T15684] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1828.999371][T21650] gspca_sunplus: reg_w_riv err -71 [ 1829.005664][T21650] sunplus: probe of 6-1:0.0 failed with error -71 [ 1829.043639][T21650] usb 6-1: USB disconnect, device number 29 [ 1829.104107][T15684] syz.6.19246: attempt to access beyond end of device [ 1829.104107][T15684] loop6: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1829.149560][T15684] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 1829.160752][T15684] NILFS (loop6): error -5 reading inode: ino=12 [ 1829.454829][T15709] loop7: detected capacity change from 0 to 512 [ 1829.592715][T15709] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1829.659846][T15718] loop0: detected capacity change from 0 to 4096 [ 1829.669714][T15718] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1829.772550][T15718] ntfs3: loop0: ino=5, "/" directory corrupted [ 1829.839064][T27456] EXT4-fs (loop7): unmounting filesystem. [ 1830.362441][T15738] loop5: detected capacity change from 0 to 512 [ 1830.463728][T15738] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1830.522671][T15738] fscrypt (loop5, inode 15): Error -61 getting encryption context [ 1830.663665][T15748] loop6: detected capacity change from 0 to 4096 [ 1830.716738][T26096] EXT4-fs (loop5): unmounting filesystem. [ 1830.804496][T15748] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1830.860031][T15748] ntfs3: loop6: Failed to load $Extend. [ 1831.653461][T15784] netlink: 'syz.5.19292': attribute type 9 has an invalid length. [ 1831.700916][T15784] netlink: 'syz.5.19292': attribute type 7 has an invalid length. [ 1831.730770][T15784] netlink: 'syz.5.19292': attribute type 8 has an invalid length. [ 1832.491068][T21650] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1832.608222][T15824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1832.707816][T21650] usb 2-1: Using ep0 maxpacket: 32 [ 1832.736086][T21650] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1832.758472][T21650] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1832.782816][T21650] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 1832.811738][T21650] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1832.848692][T21650] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1832.857884][T21650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.877980][T21650] usb 2-1: Product: syz [ 1832.882501][T21650] usb 2-1: Manufacturer: syz [ 1832.887127][T21650] usb 2-1: SerialNumber: syz [ 1832.916836][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1832.916852][ T26] audit: type=1326 audit(1727.779:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.5.19319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25959ce59 code=0x7ffc0000 [ 1832.980329][ T26] audit: type=1326 audit(1727.807:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.5.19319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff25959ce59 code=0x7ffc0000 [ 1833.011520][ T26] audit: type=1326 audit(1727.807:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.5.19319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25959ce59 code=0x7ffc0000 [ 1833.032703][ T4611] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1833.141781][T21650] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1833.161352][T21650] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1833.240084][ T4611] usb 8-1: Using ep0 maxpacket: 16 [ 1833.254554][T21650] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1833.256860][ T4611] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1833.300115][T15844] loop0: detected capacity change from 0 to 512 [ 1833.312816][T21650] usb 2-1: USB disconnect, device number 24 [ 1833.325404][ T4611] usb 8-1: config 0 has no interface number 0 [ 1833.336572][ T4611] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1833.370437][T15844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1833.378437][T18624] udevd[18624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1833.413631][ T4611] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1833.437891][ T4611] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1833.451683][T15844] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1833.463385][ T4611] usb 8-1: Product: syz [ 1833.472907][T15844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 1833.481033][ T4611] usb 8-1: SerialNumber: syz [ 1833.488146][ T4611] usb 8-1: config 0 descriptor?? [ 1833.495185][T15844] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1833.506455][T15844] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1833.515635][ T4611] cm109 8-1:0.8: invalid payload size 208, expected 4 [ 1833.523949][ T4611] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input113 [ 1833.534296][T15844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1833.552152][T15844] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.19322: Abort forced by user [ 1833.567324][T15844] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 1833.638706][T15850] overlayfs: missing 'lowerdir' [ 1833.673273][ T4559] EXT4-fs (loop0): unmounting filesystem. [ 1833.968388][ C1] cm109 8-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1833.968417][ C1] ------------[ cut here ]------------ [ 1833.968513][ C1] URB ffff888056865c00 submitted while active [ 1833.969102][ C1] WARNING: CPU: 1 PID: 15827 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff9/0x1920 [ 1833.969141][ C1] Modules linked in: [ 1833.969156][ C1] CPU: 1 PID: 15827 Comm: syz.7.19316 Not tainted syzkaller #0 [ 1833.969181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1833.969196][ C1] RIP: 0010:usb_submit_urb+0xff9/0x1920 [ 1833.969222][ C1] Code: b5 2e 8b 89 ea e8 9a e3 ff 03 e9 f7 fb ff ff e8 ad a6 5b fb c6 05 c1 b3 e4 07 01 48 c7 c7 e0 b3 2e 8b 48 89 de e8 17 15 27 fb <0f> 0b e9 7d f0 ff ff e8 8b a6 5b fb eb 21 e8 84 a6 5b fb 44 8b 6c [ 1833.969243][ C1] RSP: 0018:ffffc900001e0840 EFLAGS: 00010046 [ 1833.969266][ C1] RAX: a9a04dacb15c5900 RBX: ffff888056865c00 RCX: 0000000000040000 [ 1833.969284][ C1] RDX: ffffc90002332000 RSI: 0000000000000aaa RDI: 0000000000000aab [ 1833.969301][ C1] RBP: 000000000000000f R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 1833.969319][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 1833.969337][ C1] R13: 0000000000000a20 R14: ffff888056865c08 R15: ffff8880683a1848 [ 1833.969355][ C1] FS: 000055558c8f1500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1833.969376][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1833.969394][ C1] CR2: 00007ffd0e47afc8 CR3: 0000000061ac7000 CR4: 00000000003506e0 [ 1833.969417][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1833.969432][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1833.969448][ C1] Call Trace: [ 1833.969458][ C1] [ 1833.969469][ C1] ? _raw_spin_lock+0x40/0x40 [ 1833.969501][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1833.969530][ C1] cm109_urb_irq_callback+0x701/0xc70 [ 1833.969625][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 1833.969666][ C1] dummy_timer+0x8d0/0x3330 [ 1833.969755][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1833.969790][ C1] ? lock_chain_count+0x20/0x20 [ 1833.969835][ C1] ? dummy_free_streams+0x530/0x530 [ 1833.969870][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 1833.969907][ C1] ? dummy_free_streams+0x530/0x530 [ 1833.969940][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1833.969966][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1833.970005][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1833.970036][ C1] handle_softirqs+0x2a1/0x930 [ 1833.970090][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1833.970118][ C1] ? do_softirq+0x210/0x210 [ 1833.970146][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1833.970173][ C1] __irq_exit_rcu+0x13b/0x230 [ 1833.970196][ C1] ? irq_exit_rcu+0x20/0x20 [ 1833.970230][ C1] irq_exit_rcu+0x5/0x20 [ 1833.970250][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1833.970277][ C1] [ 1833.970285][ C1] [ 1833.970296][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1833.970326][ C1] RIP: 0010:unwind_next_frame+0x13a/0x20b0 [ 1833.970362][ C1] Code: 89 f0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 48 89 44 24 78 42 0f b6 04 28 84 c0 0f 85 25 19 00 00 4c 89 b4 24 80 00 00 00 <45> 0f b6 36 48 8b 44 24 28 42 80 3c 28 00 4c 8b 7c 24 08 74 08 4c [ 1833.970382][ C1] RSP: 0018:ffffc900032976b0 EFLAGS: 00000246 [ 1833.970403][ C1] RAX: 0000000000000000 RBX: ffffc90003297788 RCX: ffffffff96c01100 [ 1833.970419][ C1] RDX: dffffc0000000000 RSI: ffffffff81bb22e0 RDI: ffffffff81392adf [ 1833.970437][ C1] RBP: ffffc900032977d0 R08: ffffc90003297850 R09: 0000000000000002 [ 1833.970454][ C1] R10: dffffc0000000000 R11: fffff52000652efd R12: ffffffff81bb22e0 [ 1833.970471][ C1] R13: dffffc0000000000 R14: ffffc900032977bd R15: ffffc900032977d8 [ 1833.970492][ C1] ? __kmalloc+0xb0/0x240 [ 1833.970557][ C1] ? __kmalloc+0xb0/0x240 [ 1833.970587][ C1] ? unwind_next_frame+0xaf/0x20b0 [ 1833.970627][ C1] ? __kmalloc+0xb0/0x240 [ 1833.970664][ C1] ? stack_trace_save+0xf0/0xf0 [ 1833.970718][ C1] arch_stack_walk+0x10c/0x140 [ 1833.970777][ C1] ? __kmalloc+0xb0/0x240 [ 1833.970812][ C1] stack_trace_save+0xa6/0xf0 [ 1833.970840][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1833.970879][ C1] ? memset+0x1e/0x40 [ 1833.970921][ C1] kasan_set_track+0x4b/0x70 [ 1833.970969][ C1] ? kasan_set_track+0x4b/0x70 [ 1833.970996][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 1833.971025][ C1] ? __kmalloc+0xb0/0x240 [ 1833.971107][ C1] ? __kmem_cache_alloc_node+0x140/0x260 [ 1833.971135][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1833.971166][ C1] ? kobject_get_path+0xac/0x220 [ 1833.971189][ C1] __kmalloc+0xb0/0x240 [ 1833.971224][ C1] kobject_get_path+0xac/0x220 [ 1833.971253][ C1] kobject_uevent_env+0x286/0x8a0 [ 1833.971281][ C1] ? gadget_unbind_driver+0x301/0x420 [ 1833.971322][ C1] ? gadget_bind_driver+0x750/0x750 [ 1833.971357][ C1] device_release_driver_internal+0x4be/0x850 [ 1833.971418][ C1] driver_detach+0x1ef/0x2d0 [ 1833.971450][ C1] bus_remove_driver+0x11c/0x230 [ 1833.971476][ C1] ? sysfs_remove_groups+0x8a/0xa0 [ 1833.971509][ C1] usb_gadget_unregister_driver+0x4a/0x70 [ 1833.971541][ C1] raw_release+0xd6/0x260 [ 1833.971617][ C1] ? raw_open+0x510/0x510 [ 1833.971649][ C1] __fput+0x22c/0x920 [ 1833.971687][ C1] task_work_run+0x1d0/0x260 [ 1833.971747][ C1] ? task_work_cancel+0x220/0x220 [ 1833.971783][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1833.971820][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1833.971853][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1833.971886][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1833.971912][ C1] do_syscall_64+0x58/0xa0 [ 1833.971943][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1833.971972][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1833.972003][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1833.972030][ C1] RIP: 0033:0x7f572859ce59 [ 1833.972050][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1833.972069][ C1] RSP: 002b:00007ffce22f6928 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1833.972095][ C1] RAX: 0000000000000000 RBX: 00007ffce22f6a10 RCX: 00007f572859ce59 [ 1833.972112][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1833.972127][ C1] RBP: 00000000001a5c65 R08: 0000000000000001 R09: 0000000000000000 [ 1833.972143][ C1] R10: 0000001b2e520000 R11: 0000000000000246 R12: 00007ffce22f6a50 [ 1833.972159][ C1] R13: 00007f5728815fac R14: 00000000001a6185 R15: 00007f5728815fa0 [ 1833.972194][ C1] [ 1833.972205][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1833.972216][ C1] CPU: 1 PID: 15827 Comm: syz.7.19316 Not tainted syzkaller #0 [ 1833.972238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1833.972250][ C1] Call Trace: [ 1833.972259][ C1] [ 1833.972268][ C1] dump_stack_lvl+0x188/0x24e [ 1833.972298][ C1] ? memcpy+0x3c/0x60 [ 1833.972321][ C1] ? show_regs_print_info+0x12/0x12 [ 1833.972352][ C1] ? load_image+0x400/0x400 [ 1833.972392][ C1] panic+0x2e5/0x730 [ 1833.972422][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1833.972463][ C1] __warn+0x2f8/0x4f0 [ 1833.972485][ C1] ? usb_submit_urb+0xff9/0x1920 [ 1833.972510][ C1] ? usb_submit_urb+0xff9/0x1920 [ 1833.972531][ C1] report_bug+0x2ba/0x4f0 [ 1833.972583][ C1] ? usb_submit_urb+0xff9/0x1920 [ 1833.972611][ C1] handle_bug+0x3a/0x70 [ 1833.972642][ C1] exc_invalid_op+0x16/0x40 [ 1833.972674][ C1] asm_exc_invalid_op+0x16/0x20 [ 1833.972700][ C1] RIP: 0010:usb_submit_urb+0xff9/0x1920 [ 1833.972730][ C1] Code: b5 2e 8b 89 ea e8 9a e3 ff 03 e9 f7 fb ff ff e8 ad a6 5b fb c6 05 c1 b3 e4 07 01 48 c7 c7 e0 b3 2e 8b 48 89 de e8 17 15 27 fb <0f> 0b e9 7d f0 ff ff e8 8b a6 5b fb eb 21 e8 84 a6 5b fb 44 8b 6c [ 1833.972747][ C1] RSP: 0018:ffffc900001e0840 EFLAGS: 00010046 [ 1833.972767][ C1] RAX: a9a04dacb15c5900 RBX: ffff888056865c00 RCX: 0000000000040000 [ 1833.972784][ C1] RDX: ffffc90002332000 RSI: 0000000000000aaa RDI: 0000000000000aab [ 1833.972800][ C1] RBP: 000000000000000f R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 1833.972816][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 1833.972832][ C1] R13: 0000000000000a20 R14: ffff888056865c08 R15: ffff8880683a1848 [ 1833.972867][ C1] ? _raw_spin_lock+0x40/0x40 [ 1833.972895][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1833.972921][ C1] cm109_urb_irq_callback+0x701/0xc70 [ 1833.972960][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 1833.972998][ C1] dummy_timer+0x8d0/0x3330 [ 1833.973058][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1833.973092][ C1] ? lock_chain_count+0x20/0x20 [ 1833.973134][ C1] ? dummy_free_streams+0x530/0x530 [ 1833.973168][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 1833.973200][ C1] ? dummy_free_streams+0x530/0x530 [ 1833.973232][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1833.973256][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1833.973292][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1833.973319][ C1] handle_softirqs+0x2a1/0x930 [ 1833.973347][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1833.973373][ C1] ? do_softirq+0x210/0x210 [ 1833.973399][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1833.973424][ C1] __irq_exit_rcu+0x13b/0x230 [ 1833.973446][ C1] ? irq_exit_rcu+0x20/0x20 [ 1833.973479][ C1] irq_exit_rcu+0x5/0x20 [ 1833.973497][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1833.973520][ C1] [ 1833.973528][ C1] [ 1833.973536][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1833.973562][ C1] RIP: 0010:unwind_next_frame+0x13a/0x20b0 [ 1833.973587][ C1] Code: 89 f0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 48 89 44 24 78 42 0f b6 04 28 84 c0 0f 85 25 19 00 00 4c 89 b4 24 80 00 00 00 <45> 0f b6 36 48 8b 44 24 28 42 80 3c 28 00 4c 8b 7c 24 08 74 08 4c [ 1833.973605][ C1] RSP: 0018:ffffc900032976b0 EFLAGS: 00000246 [ 1833.973623][ C1] RAX: 0000000000000000 RBX: ffffc90003297788 RCX: ffffffff96c01100 [ 1833.973637][ C1] RDX: dffffc0000000000 RSI: ffffffff81bb22e0 RDI: ffffffff81392adf [ 1833.973653][ C1] RBP: ffffc900032977d0 R08: ffffc90003297850 R09: 0000000000000002 [ 1833.973669][ C1] R10: dffffc0000000000 R11: fffff52000652efd R12: ffffffff81bb22e0 [ 1833.973685][ C1] R13: dffffc0000000000 R14: ffffc900032977bd R15: ffffc900032977d8 [ 1833.973703][ C1] ? __kmalloc+0xb0/0x240 [ 1833.973748][ C1] ? __kmalloc+0xb0/0x240 [ 1833.973775][ C1] ? unwind_next_frame+0xaf/0x20b0 [ 1833.973813][ C1] ? __kmalloc+0xb0/0x240 [ 1833.973848][ C1] ? stack_trace_save+0xf0/0xf0 [ 1833.973874][ C1] arch_stack_walk+0x10c/0x140 [ 1833.973905][ C1] ? __kmalloc+0xb0/0x240 [ 1833.973939][ C1] stack_trace_save+0xa6/0xf0 [ 1833.973966][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1833.973999][ C1] ? memset+0x1e/0x40 [ 1833.974019][ C1] kasan_set_track+0x4b/0x70 [ 1833.974045][ C1] ? kasan_set_track+0x4b/0x70 [ 1833.974069][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 1833.974094][ C1] ? __kmalloc+0xb0/0x240 [ 1833.974169][ C1] ? __kmem_cache_alloc_node+0x140/0x260 [ 1833.974196][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1833.974224][ C1] ? kobject_get_path+0xac/0x220 [ 1833.974245][ C1] __kmalloc+0xb0/0x240 [ 1833.974279][ C1] kobject_get_path+0xac/0x220 [ 1833.974308][ C1] kobject_uevent_env+0x286/0x8a0 [ 1833.974334][ C1] ? gadget_unbind_driver+0x301/0x420 [ 1833.974365][ C1] ? gadget_bind_driver+0x750/0x750 [ 1833.974396][ C1] device_release_driver_internal+0x4be/0x850 [ 1833.974434][ C1] driver_detach+0x1ef/0x2d0 [ 1833.974464][ C1] bus_remove_driver+0x11c/0x230 [ 1833.974487][ C1] ? sysfs_remove_groups+0x8a/0xa0 [ 1833.974516][ C1] usb_gadget_unregister_driver+0x4a/0x70 [ 1833.974544][ C1] raw_release+0xd6/0x260 [ 1833.974575][ C1] ? raw_open+0x510/0x510 [ 1833.974603][ C1] __fput+0x22c/0x920 [ 1833.974635][ C1] task_work_run+0x1d0/0x260 [ 1833.974662][ C1] ? task_work_cancel+0x220/0x220 [ 1833.974695][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1833.974738][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1833.974768][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1833.974800][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1833.974824][ C1] do_syscall_64+0x58/0xa0 [ 1833.974852][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1833.974879][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1833.974908][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1833.974933][ C1] RIP: 0033:0x7f572859ce59 [ 1833.974952][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1833.974969][ C1] RSP: 002b:00007ffce22f6928 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1833.974992][ C1] RAX: 0000000000000000 RBX: 00007ffce22f6a10 RCX: 00007f572859ce59 [ 1833.975008][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1833.975023][ C1] RBP: 00000000001a5c65 R08: 0000000000000001 R09: 0000000000000000 [ 1833.975037][ C1] R10: 0000001b2e520000 R11: 0000000000000246 R12: 00007ffce22f6a50 [ 1833.975052][ C1] R13: 00007f5728815fac R14: 00000000001a6185 R15: 00007f5728815fa0 [ 1833.975080][ C1] [ 1833.975369][ C1] Kernel Offset: disabled [ 1835.223875][ C1] Rebooting in 86400 seconds..