last executing test programs: 2.607018366s ago: executing program 1 (id=2018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.501455788s ago: executing program 1 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0xe, 0x0, &(0x7f0000000900)="35850000c70d85ffb782762f280d", 0x0, 0xffc2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.223924785s ago: executing program 1 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028008001f0000000000080009"], 0x44}}, 0x0) 1.869128893s ago: executing program 1 (id=2031): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e720c810102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10, 0x4, "fb5b1ff5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.685297748s ago: executing program 3 (id=2034): r0 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x40082) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x7, 0x2, 0x6d, 0x1}, 0x3, 0x6, 0x0, 0xed, 0x0, 0x8}}) 1.573809211s ago: executing program 3 (id=2036): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x18c04) 1.445117944s ago: executing program 3 (id=2039): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$usbmon(r0, 0x0, 0x0) 1.322507137s ago: executing program 3 (id=2042): r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000040), 0x4) 1.140139692s ago: executing program 3 (id=2043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xffffff6e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 960.679147ms ago: executing program 3 (id=2046): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000440)={[{@journal_async_commit}, {@heartbeat_none}, {@grpquota}, {@inode64}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@localflocks}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 959.339776ms ago: executing program 2 (id=2047): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x80, {{0xa, 0x4e23, 0x3ff, @mcast1, 0xf033}}}, 0x88) 765.387921ms ago: executing program 2 (id=2048): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 676.406813ms ago: executing program 0 (id=2049): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) 557.680366ms ago: executing program 0 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 557.355656ms ago: executing program 2 (id=2051): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 424.42804ms ago: executing program 2 (id=2052): r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000180), 0x14) 372.956931ms ago: executing program 0 (id=2053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x8, 0x9, 0x7fff0000}]}) removexattr(0x0, 0x0) 241.414465ms ago: executing program 2 (id=2054): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) iopl(0xe) 237.523194ms ago: executing program 0 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x35b}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x589c}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 193.845376ms ago: executing program 1 (id=2056): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x1000)=nil) 117.820868ms ago: executing program 0 (id=2057): r0 = semget$private(0x0, 0x4000000009, 0x42a) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000180)=""/11) 12.70751ms ago: executing program 2 (id=2058): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x3, 0x8, 0x543}, 0x10) 2.89316ms ago: executing program 1 (id=2059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 0 (id=2060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4000002}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 0000000000. [ 107.555392][ T6263] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 107.584233][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 107.959559][ T6278] loop2: detected capacity change from 0 to 512 [ 108.286396][ T6278] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.307828][ T6278] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 108.325051][ T6294] loop3: detected capacity change from 0 to 256 [ 108.346984][ T6278] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 108.362380][ T6278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.428016][ T6278] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.487334][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.679299][ T27] audit: type=1326 audit(1785153184.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 108.769659][ T27] audit: type=1326 audit(1785153184.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 108.800030][ T6306] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.822977][ T27] audit: type=1326 audit(1785153184.260:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 108.907242][ T27] audit: type=1326 audit(1785153184.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 109.003722][ T27] audit: type=1326 audit(1785153184.260:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 109.267893][ T6321] loop3: detected capacity change from 0 to 512 [ 109.318660][ T6321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.338975][ T6321] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.368410][ T6325] loop0: detected capacity change from 0 to 2048 [ 109.423958][ T6325] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.465391][ T6329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.604125][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.654107][ T6325] syz.0.230 (6325) used greatest stack depth: 19280 bytes left [ 109.851803][ T6337] loop1: detected capacity change from 0 to 2048 [ 109.874046][ T6337] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=301129, location=301129 [ 109.911379][ T6338] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.924065][ T6337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.980429][ T6338] bond1 (unregistering): Released all slaves [ 110.007848][ T6341] autofs4:pid:6341:autofs_fill_super: called with bogus options [ 110.272343][ T6345] batadv0: entered promiscuous mode [ 110.305436][ T6345] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 110.367442][ T6349] pimreg: entered allmulticast mode [ 110.416309][ T6351] loop3: detected capacity change from 0 to 256 [ 110.440563][ T6351] exfat: Deprecated parameter 'namecase' [ 110.506952][ T6351] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 110.921265][ T6365] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 111.022263][ T5784] udevd[5784]: symlink '../../loop2' '/dev/disk/by-diskseq/91.tmp-b7:2' failed: Read-only file system [ 111.037896][ T5789] udevd[5789]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 111.125830][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/98.tmp-b7:1' failed: Read-only file system [ 111.144490][ T5788] udevd[5788]: symlink '../../loop3' '/dev/disk/by-diskseq/100.tmp-b7:3' failed: Read-only file system [ 111.255728][ T5784] udevd[5784]: symlink '../../loop3' '/dev/disk/by-diskseq/100.tmp-b7:3' failed: Read-only file system [ 111.302959][ T5788] udevd[5788]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 111.373043][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/98.tmp-b7:1' failed: Read-only file system [ 111.403279][ T5789] udevd[5789]: symlink '../../loop2' '/dev/disk/by-diskseq/91.tmp-b7:2' failed: Read-only file system [ 111.451931][ T6382] loop1: detected capacity change from 0 to 1024 [ 111.485039][ T6382] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.514946][ T6382] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.259: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.542563][ T6382] Quota error (device loop1): write_blk: dquota write failed [ 111.563801][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/101.tmp-b7:1' failed: Read-only file system [ 111.596405][ T5789] udevd[5789]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 111.609416][ T6382] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 111.648597][ T6382] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.259: Failed to acquire dquot type 0 [ 111.664653][ T6382] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.259: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.697006][ T6382] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.259: Invalid inode bitmap blk 0 in block_group 0 [ 111.711153][ T3445] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.759176][ T6382] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 111.790396][ T3445] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 111.809255][ T6382] EXT4-fs (loop1): 1 orphan inode deleted [ 111.816604][ T6382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.836208][ T3445] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 111.875325][ T6388] loop3: detected capacity change from 0 to 512 [ 111.911928][ T6388] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 111.970219][ T6388] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 112.050346][ T6388] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.261: bad orphan inode 4 [ 112.111319][ T6388] EXT4-fs (loop3): 1 orphan inode deleted [ 112.130891][ T6388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.185641][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.241706][ T6388] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 4: comm syz.3.261: lblock 0 mapped to illegal pblock 4 (length 1) [ 112.395004][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 112.462042][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.547939][ T6411] loop1: detected capacity change from 0 to 32768 [ 113.570021][ T6411] XFS: attr2 mount option is deprecated. [ 113.580573][ T6415] loop2: detected capacity change from 0 to 32768 [ 113.624011][ T6415] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.645319][ T6411] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.742574][ T6455] warning: `syz.3.286' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.920662][ T6411] XFS (loop1): Ending clean mount [ 113.983233][ T6415] XFS (loop2): Ending clean mount [ 114.001406][ T6411] XFS (loop1): Quotacheck needed: Please wait. [ 114.149987][ T6411] XFS (loop1): Quotacheck: Done. [ 114.240895][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.318348][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.952839][ T6459] loop3: detected capacity change from 0 to 32768 [ 115.031125][ T6459] ERROR: (device loop3): diAllocAG: numfree > numinos [ 115.031125][ T6459] [ 115.071658][ T6459] ERROR: (device loop3): remounting filesystem as read-only [ 115.090737][ T23] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 115.104187][ T6459] ialloc: diAlloc returned -5! [ 115.303119][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.330593][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 115.364307][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 115.386785][ T6482] loop3: detected capacity change from 0 to 256 [ 115.394273][ T23] usb 3-1: language id specifier not provided by device, defaulting to English [ 115.435995][ T6482] FAT-fs (loop3): Directory bread(block 1285) failed [ 115.464019][ T23] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 115.480735][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.489224][ T6482] FAT-fs (loop3): Directory bread(block 1286) failed [ 115.495976][ T6482] FAT-fs (loop3): Directory bread(block 1287) failed [ 115.515890][ T6482] FAT-fs (loop3): Directory bread(block 1288) failed [ 115.617795][ T6482] FAT-fs (loop3): Directory bread(block 1285) failed [ 115.653747][ T6482] FAT-fs (loop3): Directory bread(block 1286) failed [ 115.671085][ T6488] netlink: 280 bytes leftover after parsing attributes in process `syz.0.302'. [ 115.680456][ T6482] FAT-fs (loop3): Directory bread(block 1287) failed [ 115.699603][ T6482] FAT-fs (loop3): Directory bread(block 1288) failed [ 115.721594][ T6482] FAT-fs (loop3): Directory bread(block 1285) failed [ 115.732933][ T6482] FAT-fs (loop3): Directory bread(block 1286) failed [ 115.970873][ T23] usb 3-1: low speed audio streaming not supported [ 115.979456][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.997900][ T23] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 116.029687][ T23] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 116.046025][ T5784] udevd[5784]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 116.076965][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/112.tmp-b7:3' failed: Read-only file system [ 116.168883][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 116.189557][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 116.197313][ T8] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 116.217753][ T5789] udevd[5789]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 116.228712][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.228756][ T8] usb 2-1: config 0 has no interface number 0 [ 116.228799][ T8] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.241341][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 116.250510][ T23] usb 3-1: USB disconnect, device number 3 [ 116.285573][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.286047][ T6500] ip6t_rpfilter: unknown options [ 116.297866][ T8] usb 2-1: Product: syz [ 116.309145][ T8] usb 2-1: Manufacturer: syz [ 116.326109][ T8] usb 2-1: SerialNumber: syz [ 116.344845][ T8] usb 2-1: config 0 descriptor?? [ 116.357869][ T8] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 116.367268][ T8] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 116.406667][ T6470] udevd[6470]: symlink '../../loop3' '/dev/disk/by-diskseq/112.tmp-b7:3' failed: Read-only file system [ 116.478309][ T6470] udevd[6470]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 116.528457][ T5784] udevd[5784]: symlink '../../loop3' '/dev/disk/by-diskseq/112.tmp-b7:3' failed: Read-only file system [ 116.568935][ T8] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 116.583647][ T8] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 116.643614][ T5789] udevd[5789]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 116.672451][ T6470] udevd[6470]: symlink '../../loop3' '/dev/disk/by-diskseq/112.tmp-b7:3' failed: Read-only file system [ 116.759896][ T5784] udevd[5784]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 116.824994][ T8] usb 2-1: USB disconnect, device number 3 [ 116.843267][ T5784] udevd[5784]: symlink '../../loop3' '/dev/disk/by-diskseq/112.tmp-b7:3' failed: Read-only file system [ 117.322210][ T6526] loop3: detected capacity change from 0 to 8192 [ 117.398315][ T6526] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.413923][ T6526] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.423540][ T6526] REISERFS (device loop3): using ordered data mode [ 117.430315][ T6526] reiserfs: using flush barriers [ 117.438408][ T6526] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.455703][ T6526] REISERFS (device loop3): checking transaction log (loop3) [ 117.713065][ T6526] REISERFS (device loop3): Using tea hash to sort names [ 117.741476][ T6526] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 118.135225][ T6524] loop2: detected capacity change from 0 to 32768 [ 118.206547][ T6524] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.629817][ T6524] XFS (loop2): Ending clean mount [ 118.649209][ T27] audit: type=1326 audit(1785153194.190:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 118.673102][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.753725][ T27] audit: type=1326 audit(1785153194.190:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 118.837469][ T27] audit: type=1326 audit(1785153194.200:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 118.892212][ T27] audit: type=1326 audit(1785153194.200:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 118.922436][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.996906][ T27] audit: type=1326 audit(1785153194.200:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 119.022585][ T27] audit: type=1326 audit(1785153194.200:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 119.058066][ T27] audit: type=1326 audit(1785153194.200:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 119.084979][ T27] audit: type=1326 audit(1785153194.200:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 119.187880][ T27] audit: type=1326 audit(1785153194.200:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 119.340501][ T6577] binfmt_misc: register: failed to install interpreter file ./file0 [ 119.461732][ T6581] ip6gre1: entered promiscuous mode [ 119.584714][ T27] audit: type=1326 audit(1785153195.140:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.1.348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 119.749813][ T6591] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 119.760980][ T6591] netlink: 'syz.0.349': attribute type 3 has an invalid length. [ 119.768732][ T6591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.349'. [ 119.854002][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'. [ 120.192471][ T6603] loop3: detected capacity change from 0 to 4096 [ 120.236523][ T6603] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 120.257807][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 120.282467][ T6603] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 120.769739][ T6620] ipt_REJECT: ECHOREPLY no longer supported. [ 121.053902][ T5784] udevd[5784]: symlink '../../loop3' '/dev/disk/by-diskseq/118.tmp-b7:3' failed: Read-only file system [ 121.080385][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.130005][ T6632] netlink: 'syz.3.369': attribute type 2 has an invalid length. [ 121.137771][ T6632] netlink: 'syz.3.369': attribute type 8 has an invalid length. [ 121.170518][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/108.tmp-b7:1' failed: Read-only file system [ 121.196713][ T6632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.369'. [ 121.206274][ T6608] loop2: detected capacity change from 0 to 32768 [ 121.290371][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 121.302618][ T23] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 121.339728][ T23] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 121.349692][ T6608] ERROR: (device loop2): diWrite: ixpxd invalid [ 121.349692][ T6608] [ 121.368814][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/118.tmp-b7:3' failed: Read-only file system [ 121.369512][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.404587][ T6608] ERROR: (device loop2): remounting filesystem as read-only [ 121.434614][ T6470] udevd[6470]: symlink '../../loop1' '/dev/disk/by-diskseq/108.tmp-b7:1' failed: Read-only file system [ 121.447081][ T6608] ERROR: (device loop2): txCommit: [ 121.447081][ T6608] [ 121.462440][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 121.493632][ T23] usb 1-1: config 1 has no interface number 0 [ 121.519162][ T23] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 121.548716][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.562241][ T5784] udevd[5784]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 121.582158][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/118.tmp-b7:3' failed: Read-only file system [ 121.632237][ T5784] udevd[5784]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 121.647535][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 121.688867][ T5789] udevd[5789]: symlink '../../loop1' '/dev/disk/by-diskseq/108.tmp-b7:1' failed: Read-only file system [ 121.817315][ T23] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 121.848580][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/118.tmp-b7:3' failed: Read-only file system [ 121.860483][ T23] snd_usb_pod 1-1:1.1: invalid control EP [ 121.866265][ T23] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 121.898105][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 121.926065][ T23] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 121.967298][ T6470] udevd[6470]: symlink '../../loop1' '/dev/disk/by-diskseq/108.tmp-b7:1' failed: Read-only file system [ 122.100062][ T23] usb 1-1: USB disconnect, device number 3 [ 122.444478][ T6662] loop3: detected capacity change from 0 to 4096 [ 122.493516][ T6666] loop1: detected capacity change from 0 to 256 [ 122.545456][ T6662] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 122.607085][ T6662] ntfs3: loop3: Failed to load $Extend (-22). [ 122.623154][ T6662] ntfs3: loop3: Failed to initialize $Extend. [ 123.160440][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 123.181210][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 124.469486][ T6736] bridge0: port 3(bond0) entered blocking state [ 124.501800][ T6736] bridge0: port 3(bond0) entered disabled state [ 124.521346][ T6736] bond0: entered allmulticast mode [ 124.526543][ T6736] bond_slave_0: entered allmulticast mode [ 124.564355][ T6736] bond_slave_1: entered allmulticast mode [ 124.572929][ T6740] loop2: detected capacity change from 0 to 64 [ 124.598335][ T6736] bond0: entered promiscuous mode [ 124.608793][ T6736] bond_slave_0: entered promiscuous mode [ 124.634710][ T6736] bond_slave_1: entered promiscuous mode [ 124.644313][ T6736] bridge0: port 3(bond0) entered blocking state [ 124.651021][ T6736] bridge0: port 3(bond0) entered forwarding state [ 125.143153][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'. [ 125.166665][ T6752] loop3: detected capacity change from 0 to 4096 [ 125.173609][ T6758] IPv6: Can't replace route, no match found [ 125.261885][ T6761] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.748981][ T6775] loop1: detected capacity change from 0 to 256 [ 125.802374][ T6779] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.087792][ T5789] udevd[5789]: symlink '../../loop2' '/dev/disk/by-diskseq/126.tmp-b7:2' failed: Read-only file system [ 126.087814][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/129.tmp-b7:1' failed: Read-only file system [ 126.137836][ T6470] udevd[6470]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 126.242454][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 126.287052][ T5784] udevd[5784]: symlink '../../loop2' '/dev/disk/by-diskseq/126.tmp-b7:2' failed: Read-only file system [ 126.334926][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 126.414268][ T5784] udevd[5784]: symlink '../../loop0' '/dev/disk/by-diskseq/96.tmp-b7:0' failed: Read-only file system [ 126.494952][ T5784] udevd[5784]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 126.518432][ T6801] loop0: detected capacity change from 0 to 256 [ 126.561566][ T5789] udevd[5789]: symlink '../../loop2' '/dev/disk/by-diskseq/126.tmp-b7:2' failed: Read-only file system [ 126.579241][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 126.593444][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 126.725064][ T6801] FAT-fs (loop0): Directory bread(block 64) failed [ 126.748689][ T6801] FAT-fs (loop0): Directory bread(block 65) failed [ 126.779388][ T6801] FAT-fs (loop0): Directory bread(block 66) failed [ 126.785999][ T6801] FAT-fs (loop0): Directory bread(block 67) failed [ 126.818566][ T6801] FAT-fs (loop0): Directory bread(block 68) failed [ 126.828102][ T6801] FAT-fs (loop0): Directory bread(block 69) failed [ 126.878273][ T6801] FAT-fs (loop0): Directory bread(block 70) failed [ 126.885734][ T6801] FAT-fs (loop0): Directory bread(block 71) failed [ 126.892931][ T6801] FAT-fs (loop0): Directory bread(block 72) failed [ 126.899825][ T6801] FAT-fs (loop0): Directory bread(block 73) failed [ 127.217080][ T6823] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 127.463804][ T6825] loop0: detected capacity change from 0 to 4096 [ 127.495483][ T6825] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 127.592697][ T6825] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 128.035986][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 128.150329][ T6854] loop3: detected capacity change from 0 to 164 [ 128.169289][ T971] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.272644][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 128.272660][ T27] audit: type=1326 audit(1785153203.830:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.273813][ T6854] Unsupported NM flag settings (240) [ 128.299579][ T27] audit: type=1326 audit(1785153203.830:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.361321][ T27] audit: type=1326 audit(1785153203.890:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.385382][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 128.393819][ T27] audit: type=1326 audit(1785153203.890:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.425481][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.440066][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.467430][ T971] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.513835][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.523238][ T27] audit: type=1326 audit(1785153203.890:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.563288][ T971] usb 1-1: config 0 descriptor?? [ 128.583055][ T971] hub 1-1:0.0: USB hub found [ 128.605439][ T27] audit: type=1326 audit(1785153203.890:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.689588][ T27] audit: type=1326 audit(1785153203.890:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.764416][ T27] audit: type=1326 audit(1785153203.890:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 128.819681][ T971] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 129.013731][ T971] usbhid 1-1:0.0: can't add hid device: -71 [ 129.030088][ T971] usbhid: probe of 1-1:0.0 failed with error -71 [ 129.084413][ T971] usb 1-1: USB disconnect, device number 4 [ 129.508157][ T6888] loop3: detected capacity change from 0 to 2048 [ 129.518842][ T6891] netlink: 'syz.1.492': attribute type 7 has an invalid length. [ 129.605124][ T6888] loop3: p4 < > [ 129.920338][ T6888] loop3: detected capacity change from 0 to 4096 [ 129.946824][ T6888] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 130.047348][ T6888] ntfs3: loop3: $Secure::$SDH is corrupted. [ 130.063839][ T6888] ntfs3: loop3: Failed to initialize $Secure (-22). [ 130.101906][ T6903] loop1: detected capacity change from 0 to 4096 [ 130.159468][ T6903] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 130.391495][ T6903] ntfs3: loop1: failed to convert "c46c" to cp437 [ 130.741624][ T6921] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 131.099439][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 131.118809][ T5784] udevd[5784]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 131.155134][ T5789] udevd[5789]: symlink '../../loop0' '/dev/disk/by-diskseq/134.tmp-b7:0' failed: Read-only file system [ 131.238383][ T5784] udevd[5784]: symlink '../../loop2' '/dev/disk/by-diskseq/126.tmp-b7:2' failed: Read-only file system [ 131.298309][ T5789] udevd[5789]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 131.357452][ T5784] udevd[5784]: symlink '../../loop0' '/dev/disk/by-diskseq/134.tmp-b7:0' failed: Read-only file system [ 131.393078][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/141.tmp-b7:3' failed: Read-only file system [ 131.443220][ T27] audit: type=1107 audit(1785153207.000:37): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÆÀ' [ 131.443978][ T5784] udevd[5784]: symlink '../../loop2' '/dev/disk/by-diskseq/126.tmp-b7:2' failed: Read-only file system [ 131.537653][ T5784] udevd[5784]: symlink '../../loop0' '/dev/disk/by-diskseq/134.tmp-b7:0' failed: Read-only file system [ 131.622680][ T5784] udevd[5784]: symlink '../../loop3' '/dev/disk/by-diskseq/141.tmp-b7:3' failed: Read-only file system [ 131.647979][ T5789] udevd[5789]: symlink '../../loop1' '/dev/disk/by-diskseq/142.tmp-b7:1' failed: Read-only file system [ 131.913844][ T6964] netlink: 10 bytes leftover after parsing attributes in process `syz.0.527'. [ 132.513259][ T6989] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 132.980744][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 133.033593][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040565][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189378][ T7013] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 133.229337][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.237865][ T7013] team0: Device veth1_macvtap failed to register rx_handler [ 133.429503][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 133.446473][ T5840] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.459705][ T5840] usb 4-1: config 0 has no interface number 0 [ 133.476853][ T5840] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.499975][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.508030][ T5840] usb 4-1: Product: syz [ 133.536117][ T5840] usb 4-1: Manufacturer: syz [ 133.555753][ T5840] usb 4-1: SerialNumber: syz [ 133.582974][ T5840] usb 4-1: config 0 descriptor?? [ 133.602716][ T5840] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.795087][ T7031] netlink: 'syz.2.561': attribute type 3 has an invalid length. [ 134.030808][ T5840] gspca_spca1528: reg_w err -71 [ 134.059893][ T5840] spca1528: probe of 4-1:0.1 failed with error -71 [ 134.114265][ T5840] usb 4-1: USB disconnect, device number 3 [ 134.481081][ T7056] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 134.481134][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 135.099223][ T971] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 135.325232][ T971] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 135.339191][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.352646][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.380348][ T971] usb 1-1: config 0 descriptor?? [ 135.393027][ T971] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 135.409365][ T7090] netlink: 'syz.2.589': attribute type 21 has an invalid length. [ 135.421143][ T7090] netlink: 128 bytes leftover after parsing attributes in process `syz.2.589'. [ 135.431137][ T7090] netlink: 'syz.2.589': attribute type 4 has an invalid length. [ 135.438980][ T7090] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 135.447755][ T7090] netlink: 3 bytes leftover after parsing attributes in process `syz.2.589'. [ 135.477949][ T7088] loop1: detected capacity change from 0 to 4096 [ 135.530970][ T7091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.566330][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.597058][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.645837][ T5840] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 135.645846][ T7088] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 135.673616][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.701842][ T5840] usb 4-1: Product: syz [ 135.706090][ T5840] usb 4-1: Manufacturer: syz [ 135.719308][ T5840] usb 4-1: SerialNumber: syz [ 135.810470][ T971] gp8psk: usb in 137 operation failed. [ 135.816583][ T971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 135.852652][ T971] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 135.874515][ T971] usb 1-1: USB disconnect, device number 5 [ 135.986063][ T5840] usb 4-1: unit 4 not found! [ 136.060739][ T5840] usb 4-1: USB disconnect, device number 4 [ 136.132673][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.463889][ T7110] loop0: detected capacity change from 0 to 512 [ 136.507104][ T7110] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.515872][ T7110] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 136.532321][ T7110] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 136.558421][ T7110] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.599: Failed to acquire dquot type 1 [ 136.581522][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.663905][ T7110] EXT4-fs (loop0): 1 truncate cleaned up [ 136.685932][ T7110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.816149][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.829586][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.852175][ T9] usb 3-1: config 220 has no interface number 2 [ 136.858562][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.895972][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 136.915085][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 136.932414][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 136.943553][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.972725][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.000383][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.018738][ T9] usb 3-1: Product: syz [ 137.028854][ T9] usb 3-1: Manufacturer: syz [ 137.046839][ T9] usb 3-1: SerialNumber: syz [ 137.332536][ T9] usb 3-1: selecting invalid altsetting 0 [ 137.351362][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 137.367902][ T9] usb 3-1: No valid video chain found. [ 137.402072][ T9] usb 3-1: selecting invalid altsetting 0 [ 137.416509][ T9] usbtest: probe of 3-1:220.1 failed with error -22 [ 137.478807][ T9] usb 3-1: USB disconnect, device number 4 [ 137.552560][ T7135] loop3: detected capacity change from 0 to 8 [ 137.593533][ T7135] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 137.627137][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop3 [ 137.711146][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop3 [ 137.726199][ T7139] netlink: 666 bytes leftover after parsing attributes in process `syz.1.613'. [ 138.189394][ T27] audit: type=1326 audit(1785153213.750:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.269616][ T27] audit: type=1326 audit(1785153213.750:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.352584][ T27] audit: type=1326 audit(1785153213.750:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.438522][ T27] audit: type=1326 audit(1785153213.760:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.479763][ T27] audit: type=1326 audit(1785153213.770:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.503617][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.554060][ T7167] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 138.562653][ T27] audit: type=1326 audit(1785153213.770:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.586481][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.669287][ T27] audit: type=1326 audit(1785153213.770:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.694270][ T971] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.737622][ T27] audit: type=1326 audit(1785153213.770:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.3.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 138.889913][ T971] usb 3-1: config index 0 descriptor too short (expected 65230, got 72) [ 138.920494][ T971] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.930213][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.938295][ T971] usb 3-1: Product: syz [ 138.960375][ T971] usb 3-1: Manufacturer: syz [ 138.965064][ T971] usb 3-1: SerialNumber: syz [ 139.008030][ T971] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.104807][ T5845] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.428381][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fe77) [ 139.483861][ T7191] cgroup: release_agent respecified [ 139.763993][ T23] usb 3-1: USB disconnect, device number 5 [ 139.772484][ T7199] syz.0.644 uses obsolete (PF_INET,SOCK_PACKET) [ 139.830987][ T28] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 140.011426][ T7207] netlink: 'syz.3.647': attribute type 21 has an invalid length. [ 140.020199][ T7207] netlink: 128 bytes leftover after parsing attributes in process `syz.3.647'. [ 140.032116][ T28] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 140.042707][ T7207] netlink: 'syz.3.647': attribute type 5 has an invalid length. [ 140.045548][ T28] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 140.064295][ T7207] netlink: 'syz.3.647': attribute type 6 has an invalid length. [ 140.074571][ T7207] netlink: 3 bytes leftover after parsing attributes in process `syz.3.647'. [ 140.083768][ T28] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 140.093541][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.102473][ T28] usb 2-1: Product: syz [ 140.109365][ T28] usb 2-1: Manufacturer: syz [ 140.119168][ T28] usb 2-1: SerialNumber: syz [ 140.157450][ T5845] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 140.167015][ T5845] ath9k_htc: Failed to initialize the device [ 140.177444][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 140.263694][ T7209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.648'. [ 140.284582][ T7209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.379320][ T28] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 140.419763][ T28] usb 2-1: USB disconnect, device number 4 [ 141.097413][ T7238] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 141.118312][ T7238] netlink: 17 bytes leftover after parsing attributes in process `syz.2.662'. [ 141.304971][ T7247] gre1: entered promiscuous mode [ 141.540937][ T7256] loop1: detected capacity change from 0 to 16 [ 141.637775][ T7256] erofs: (device loop1): mounted with root inode @ nid 36. [ 141.660123][ T7260] netlink: 7 bytes leftover after parsing attributes in process `syz.2.673'. [ 141.709885][ T7260] netlink: 7 bytes leftover after parsing attributes in process `syz.2.673'. [ 141.736042][ T7256] syz.1.671: attempt to access beyond end of device [ 141.736042][ T7256] loop1: rw=524288, sector=8, nr_sectors = 64 limit=16 [ 141.794987][ T7256] syz.1.671: attempt to access beyond end of device [ 141.794987][ T7256] loop1: rw=0, sector=8, nr_sectors = 64 limit=16 [ 141.824185][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 141.824199][ T27] audit: type=1800 audit(1785153217.380:47): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.671" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 141.873725][ T7266] loop0: detected capacity change from 0 to 512 [ 141.982155][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.040111][ T7266] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.187572][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.533002][ T7290] loop0: detected capacity change from 0 to 128 [ 143.015850][ T7307] loop1: detected capacity change from 0 to 1024 [ 143.094867][ T7307] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 143.143694][ T7307] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 143.198487][ T7307] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.245137][ T7307] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.692: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 143.268484][ T7307] EXT4-fs (loop1): no journal found [ 143.279285][ T7307] EXT4-fs (loop1): can't get journal size [ 143.321465][ T7307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.359187][ T5845] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.482567][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.553925][ T5845] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.574374][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.589336][ T5845] usb 1-1: Product: syz [ 143.594236][ T5845] usb 1-1: Manufacturer: syz [ 143.598896][ T5845] usb 1-1: SerialNumber: syz [ 143.650451][ T5845] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.694910][ T28] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.235903][ T5845] usb 1-1: USB disconnect, device number 6 [ 144.357205][ T7343] gtp0: entered promiscuous mode [ 144.365089][ T7343] gtp0: entered allmulticast mode [ 144.794787][ T28] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 144.817123][ T28] ath9k_htc: Failed to initialize the device [ 144.855991][ T5845] usb 1-1: ath9k_htc: USB layer deinitialized [ 145.660386][ T7398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.725'. [ 146.372178][ T7388] loop0: detected capacity change from 0 to 32768 [ 146.518683][ T7388] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.838470][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 147.069262][ T7410] loop1: detected capacity change from 0 to 32768 [ 147.140774][ T7410] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.239141][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.744'. [ 147.248911][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 147.276601][ T7410] XFS (loop1): Ending clean mount [ 147.520526][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.052707][ T7486] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.753'. [ 148.082677][ T7487] netlink: zone id is out of range [ 148.105406][ T7487] netlink: zone id is out of range [ 148.139900][ T7487] netlink: zone id is out of range [ 148.148577][ T7487] netlink: zone id is out of range [ 148.184955][ T7487] netlink: zone id is out of range [ 148.204712][ T7487] netlink: get zone limit has 4 unknown bytes [ 148.363148][ T7494] netlink: 'syz.0.756': attribute type 2 has an invalid length. [ 148.384055][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 148.669273][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.923528][ T8] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 148.952258][ T8] usb 2-1: config 0 has no interface number 0 [ 148.968640][ T8] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 148.979833][ T7509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.761'. [ 148.999622][ T8] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 149.039145][ T8] usb 2-1: config 0 interface 255 has no altsetting 0 [ 149.056468][ T7511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.094524][ T8] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 149.109289][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.158149][ T8] usb 2-1: Product: syz [ 149.163452][ T8] usb 2-1: Manufacturer: syz [ 149.168115][ T8] usb 2-1: SerialNumber: syz [ 149.219153][ T8] usb 2-1: config 0 descriptor?? [ 149.491031][ T9] usb 2-1: USB disconnect, device number 5 [ 150.274455][ T7543] loop0: detected capacity change from 0 to 4096 [ 150.373842][ T7553] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.444348][ T7558] netlink: 'syz.1.778': attribute type 30 has an invalid length. [ 150.601100][ T7562] xt_l2tp: v2 doesn't support IP mode [ 151.544997][ T7603] netlink: 'syz.0.796': attribute type 21 has an invalid length. [ 151.827725][ T7617] dlm: Unknown command passed to DLM device : 11 [ 151.827725][ T7617] [ 151.985618][ T7623] netlink: 'syz.3.805': attribute type 2 has an invalid length. [ 152.078801][ T7622] loop0: detected capacity change from 0 to 4096 [ 152.205389][ T7629] geneve2: entered promiscuous mode [ 152.218918][ T7629] geneve2: entered allmulticast mode [ 152.303844][ T7631] bridge_slave_0: left allmulticast mode [ 152.339173][ T7631] bridge_slave_0: left promiscuous mode [ 152.361370][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.431364][ T7631] bridge_slave_1: left allmulticast mode [ 152.459356][ T7631] bridge_slave_1: left promiscuous mode [ 152.494416][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.515107][ T7631] bond0: (slave bond_slave_0): Releasing backup interface [ 152.577534][ T7631] bond0: (slave bond_slave_1): Releasing backup interface [ 152.678856][ T7631] team0: Port device team_slave_0 removed [ 152.713807][ T7631] team0: Port device team_slave_1 removed [ 152.731031][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.738494][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.748717][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.756742][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.864286][ T7643] netlink: 396 bytes leftover after parsing attributes in process `syz.1.814'. [ 153.026076][ T7651] loop1: detected capacity change from 0 to 8 [ 153.314707][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 153.533846][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 153.699693][ T7679] netlink: 148 bytes leftover after parsing attributes in process `syz.1.832'. [ 153.745957][ T7681] loop3: detected capacity change from 0 to 64 [ 154.046244][ T7691] loop0: detected capacity change from 0 to 512 [ 154.099277][ T7691] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 154.233807][ T7691] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.838: casefold flag without casefold feature [ 154.253507][ T7701] loop1: detected capacity change from 0 to 256 [ 154.314523][ T7691] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.838: couldn't read orphan inode 15 (err -117) [ 154.358834][ T7691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.442042][ T7691] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #2: block 4: comm syz.0.838: lblock 0 mapped to illegal pblock 4 (length 1) [ 154.645136][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.312258][ T7741] netlink: 'syz.0.862': attribute type 1 has an invalid length. [ 155.336648][ T7741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.862'. [ 155.691670][ T7756] loop2: detected capacity change from 0 to 16 [ 155.716237][ T7756] erofs: (device loop2): mounted with root inode @ nid 36. [ 155.733928][ T7761] netlink: 'syz.0.871': attribute type 21 has an invalid length. [ 155.755284][ T7761] netlink: 'syz.0.871': attribute type 15 has an invalid length. [ 155.770466][ T7756] cifs: Unknown parameter 'cache_strategy' [ 155.788865][ T7761] netlink: 156 bytes leftover after parsing attributes in process `syz.0.871'. [ 155.839272][ T7761] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.847207][ T7761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.854533][ T7761] IPv6: NLM_F_CREATE should be set when creating new route [ 155.861864][ T7761] IPv6: NLM_F_CREATE should be set when creating new route [ 155.869165][ T7761] IPv6: NLM_F_CREATE should be set when creating new route [ 156.095942][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.876'. [ 156.118364][ T7772] loop1: detected capacity change from 0 to 256 [ 156.135105][ T7772] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.137419][ T27] audit: type=1326 audit(1785153231.690:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 156.150796][ T7770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'. [ 156.191486][ T7772] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 156.221118][ T7772] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d) [ 156.268562][ T27] audit: type=1326 audit(1785153231.690:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 156.293595][ T27] audit: type=1326 audit(1785153231.710:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 156.318426][ T27] audit: type=1326 audit(1785153231.710:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 156.342694][ T27] audit: type=1326 audit(1785153231.710:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 156.419907][ T7778] loop3: detected capacity change from 0 to 8 [ 156.443491][ T7778] SQUASHFS error: Unable to read directory block [629:26] [ 156.888410][ T7793] netlink: 'syz.3.887': attribute type 3 has an invalid length. [ 156.905873][ T7793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.887'. [ 157.019301][ T7796] netlink: 'syz.0.888': attribute type 7 has an invalid length. [ 157.660634][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.898'. [ 157.918812][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.901'. [ 158.208105][ T7805] loop0: detected capacity change from 0 to 32768 [ 158.222158][ T7805] (syz.0.892,7805,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.277345][ T7805] (syz.0.892,7805,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.315727][ T7805] JBD2: Ignoring recovery information on journal [ 158.433174][ T7838] loop2: detected capacity change from 0 to 4096 [ 158.444160][ T7805] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 159.068727][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 159.119712][ T7854] netlink: 31 bytes leftover after parsing attributes in process `syz.3.914'. [ 159.128650][ T7854] netlink: 'syz.3.914': attribute type 3 has an invalid length. [ 159.156591][ T7854] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 159.166605][ T7854] netlink: 31 bytes leftover after parsing attributes in process `syz.3.914'. [ 159.180243][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 159.322408][ T7858] netlink: 'syz.1.916': attribute type 11 has an invalid length. [ 159.334572][ T7858] netlink: 'syz.1.916': attribute type 4 has an invalid length. [ 159.509386][ T7862] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.683431][ T7868] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 159.701541][ T7868] netlink: 'syz.1.922': attribute type 2 has an invalid length. [ 160.485976][ T7902] loop3: detected capacity change from 0 to 512 [ 160.613742][ T7902] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.937: bg 0: block 127: padding at end of block bitmap is not set [ 160.644626][ T7902] EXT4-fs (loop3): Remounting filesystem read-only [ 160.694897][ T7902] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.937: cleanup dec ref error -28 [ 160.753913][ T7902] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 160.817396][ T7902] EXT4-fs (loop3): 1 orphan inode deleted [ 160.827411][ T7902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.034452][ T7922] loop1: detected capacity change from 0 to 256 [ 161.385060][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.658372][ T7940] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.123492][ T7960] loop3: detected capacity change from 0 to 256 [ 162.150621][ T7959] loop1: detected capacity change from 0 to 512 [ 162.182406][ T7959] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 162.215956][ T7959] EXT4-fs (loop1): 1 truncate cleaned up [ 162.249341][ T7959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.295185][ T7959] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 162.367829][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.521382][ T7969] netlink: 64 bytes leftover after parsing attributes in process `syz.0.970'. [ 162.549216][ T7969] netlink: 64 bytes leftover after parsing attributes in process `syz.0.970'. [ 162.592660][ T7971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.971'. [ 162.726447][ T7976] loop1: detected capacity change from 0 to 1024 [ 162.790140][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.839966][ T7976] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.903398][ T7976] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.975: corrupted xattr block 128: invalid size in ea xattr [ 163.049646][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.249426][ T7995] netlink: 'syz.0.982': attribute type 10 has an invalid length. [ 163.275389][ T7995] netlink: 2 bytes leftover after parsing attributes in process `syz.0.982'. [ 163.299175][ T7995] hsr0: entered promiscuous mode [ 163.304520][ T7995] bridge0: port 4(hsr0) entered blocking state [ 163.379299][ T7995] bridge0: port 4(hsr0) entered disabled state [ 163.386192][ T7995] hsr0: entered allmulticast mode [ 163.400904][ T7995] hsr_slave_0: entered allmulticast mode [ 163.427012][ T7995] hsr_slave_1: entered allmulticast mode [ 163.450787][ T7995] bridge0: port 4(hsr0) entered blocking state [ 163.457197][ T7995] bridge0: port 4(hsr0) entered forwarding state [ 163.467958][ T8003] loop3: detected capacity change from 0 to 2048 [ 163.533329][ T8003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.574553][ T8003] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 163.594996][ T8007] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 163.695621][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 163.755617][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.795674][ T8013] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 163.819227][ T8013] netlink: 220 bytes leftover after parsing attributes in process `syz.0.990'. [ 164.769079][ T8049] loop0: detected capacity change from 0 to 512 [ 164.834739][ T8049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.951218][ T8049] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.141431][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.656429][ T8083] loop1: detected capacity change from 0 to 1024 [ 165.798650][ T8090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1028'. [ 165.906396][ T8083] hfsplus: keylen 65060 too large [ 166.024089][ T8094] loop2: detected capacity change from 0 to 1024 [ 166.053192][ T8097] loop3: detected capacity change from 0 to 512 [ 166.072999][ T8097] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.144277][ T8102] IPv6: Can't replace route, no match found [ 166.170452][ T8097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.193073][ T8094] hfsplus: catalog record size mismatch (type 4, got 20, expected 10) [ 166.251678][ T8097] ext4 filesystem being mounted at /245/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.402456][ T8108] loop2: detected capacity change from 0 to 1024 [ 166.444469][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.494593][ T8142] usb usb8: usbfs: process 8142 (syz.0.1049) did not claim interface 0 before use [ 167.719869][ T8150] loop1: detected capacity change from 0 to 256 [ 167.740620][ T8150] FAT-fs (loop1): bogus logical sector size 128 [ 167.746996][ T8150] FAT-fs (loop1): Can't find a valid FAT filesystem [ 167.785697][ T8150] FAT-fs (loop1): bogus logical sector size 128 [ 167.812955][ T8150] FAT-fs (loop1): Can't find a valid FAT filesystem [ 167.939585][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.172792][ T28] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 168.192240][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.219123][ T28] usb 3-1: Product: syz [ 168.233973][ T28] usb 3-1: Manufacturer: syz [ 168.238651][ T28] usb 3-1: SerialNumber: syz [ 168.267289][ T28] usb 3-1: config 0 descriptor?? [ 168.282635][ T28] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 168.432968][ T8175] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 168.473146][ T8175] team0: Device vxcan1 is of different type [ 168.715045][ T28] sonixb 3-1:0.0: Error writing register 01: -71 [ 168.726871][ T28] sonixb: probe of 3-1:0.0 failed with error -71 [ 168.741881][ T28] usb 3-1: USB disconnect, device number 6 [ 169.694744][ T8182] loop3: detected capacity change from 0 to 32768 [ 169.718461][ T8182] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 169.718569][ T8182] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 169.817303][ T8182] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 169.876105][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 169.908964][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 169.945137][ T8] kworker/0:0: attempt to access beyond end of device [ 169.945137][ T8] loop3: rw=0, sector=43980465111760, nr_sectors = 8 limit=32768 [ 170.068573][ T8] gfs2: fsid=syz:syz.0: jid=0: Failed [ 170.093594][ T8182] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 170.612055][ T8236] loop2: detected capacity change from 0 to 512 [ 170.710211][ T8236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.748207][ T8236] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.884382][ T27] audit: type=1326 audit(1785153246.440:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 170.932488][ T8236] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 170.946794][ T27] audit: type=1326 audit(1785153246.470:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 170.976211][ T8236] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 170.996911][ T8236] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1094: Failed to acquire dquot type 0 [ 171.039107][ T27] audit: type=1326 audit(1785153246.490:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 171.175454][ T27] audit: type=1326 audit(1785153246.490:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 171.277970][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.021875][ T8253] loop3: detected capacity change from 0 to 40427 [ 172.079170][ T8253] F2FS-fs (loop3): invalid crc value [ 172.104438][ T8253] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.271814][ T8253] F2FS-fs (loop3): Start checkpoint disabled! [ 172.323222][ T8253] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 172.642271][ T8297] netlink: 'syz.1.1122': attribute type 8 has an invalid length. [ 172.677250][ T8295] loop2: detected capacity change from 0 to 4096 [ 172.705462][ T8295] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 173.274270][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1128'. [ 173.292566][ T8312] capability: warning: `syz.1.1129' uses deprecated v2 capabilities in a way that may be insecure [ 173.889219][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 174.350347][ T8354] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 174.719531][ T8366] loop1: detected capacity change from 0 to 1024 [ 174.863563][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 175.233498][ T8356] loop0: detected capacity change from 0 to 32768 [ 175.302286][ T8356] JBD2: Ignoring recovery information on journal [ 175.326832][ T8356] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 175.336564][ T8356] JBD2: bad block at offset 32 [ 175.388788][ T8356] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 175.417633][ T8386] loop2: detected capacity change from 0 to 4096 [ 175.557103][ T8386] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 175.575036][ T8388] xt_hashlimit: size too large, truncated to 1048576 [ 175.602242][ T8386] ntfs3: loop2: Failed to load $Extend (-22). [ 175.637137][ T8386] ntfs3: loop2: Failed to initialize $Extend. [ 175.649344][ T8388] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 175.771798][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 176.585845][ T8412] loop3: detected capacity change from 0 to 512 [ 176.629371][ T8412] EXT4-fs: Ignoring removed nobh option [ 176.653283][ T8414] vlan1: entered allmulticast mode [ 176.657006][ T8416] loop2: detected capacity change from 0 to 256 [ 176.658525][ T8414] veth0_vlan: entered allmulticast mode [ 176.679751][ T8412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 176.729912][ T8412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.743512][ T8416] exfat: Deprecated parameter 'utf8' [ 176.763056][ T8416] exfat: Deprecated parameter 'namecase' [ 176.789782][ T8416] exfat: Deprecated parameter 'namecase' [ 176.795603][ T8416] exfat: Deprecated parameter 'utf8' [ 176.837463][ T8412] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 176.860661][ T8416] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 176.898922][ T8412] EXT4-fs (loop3): 1 truncate cleaned up [ 176.907027][ T8412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.137617][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.177836][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 177.224914][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'. [ 177.239100][ T8426] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1181'. [ 177.307415][ T8430] loop3: detected capacity change from 0 to 1024 [ 177.389673][ T8430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.515458][ T8430] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.1183: inode #12: comm syz.3.1183: iget: illegal inode # [ 177.575513][ T8430] EXT4-fs (loop3): Remounting filesystem read-only [ 177.645923][ T8424] loop0: detected capacity change from 0 to 32768 [ 177.681202][ T8424] (syz.0.1180,8424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.695268][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.731423][ T8424] (syz.0.1180,8424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.913875][ T8424] JBD2: Ignoring recovery information on journal [ 178.146711][ T8424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 178.526095][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 179.171510][ T8486] SET target dimension over the limit! [ 179.548049][ T8501] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1212'. [ 179.719361][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.827244][ T8511] loop0: detected capacity change from 0 to 16 [ 179.855621][ T8511] erofs: (device loop0): mounted with root inode @ nid 36. [ 179.912718][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 179.922886][ T8511] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 179.939234][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.980904][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 179.998815][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.999555][ T8511] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 180.018631][ T9] usb 3-1: Product: syz [ 180.033821][ T9] usb 3-1: Manufacturer: syz [ 180.038586][ T9] usb 3-1: SerialNumber: syz [ 180.049147][ T8511] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 180.081156][ T9] usb 3-1: config 0 descriptor?? [ 180.092577][ T9] usb 3-1: bad CDC descriptors [ 180.098035][ T9] usb 3-1: unsupported MDLM descriptors [ 180.318590][ T8525] loop0: detected capacity change from 0 to 512 [ 180.358906][ T8525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.361865][ T5840] usb 3-1: USB disconnect, device number 7 [ 180.382342][ T8525] EXT4-fs (loop0): Test dummy encryption mode enabled [ 180.470492][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1222: iget: bad extra_isize 58 (inode size 256) [ 180.494790][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1222: error while reading EA inode 11 err=-117 [ 180.530981][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1222: iget: bad extra_isize 58 (inode size 256) [ 180.593763][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1222: error while reading EA inode 11 err=-117 [ 180.658078][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1222: iget: bad extra_isize 58 (inode size 256) [ 180.697244][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1222: error while reading EA inode 18 err=-117 [ 180.711548][ T8536] loop3: detected capacity change from 0 to 256 [ 180.740884][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1222: iget: bad extra_isize 58 (inode size 256) [ 180.758355][ T8525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1222: error while reading EA inode 18 err=-117 [ 180.806663][ T8525] EXT4-fs (loop0): 1 orphan inode deleted [ 180.827810][ T8525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.960283][ T8525] EXT4-fs error (device loop0): __ext4_iget:5079: inode #14: block 1886221359: comm syz.0.1222: invalid block [ 181.044003][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.376504][ T8553] loop2: detected capacity change from 0 to 2048 [ 181.476532][ T8556] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.582872][ T8553] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 181.602753][ T8553] Remounting filesystem read-only [ 181.985286][ T8555] loop3: detected capacity change from 0 to 32768 [ 182.042264][ T8555] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 182.070059][ T8555] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.180201][ T8555] XFS (loop3): Ending clean mount [ 182.237871][ T8555] XFS (loop3): Quotacheck needed: Please wait. [ 182.342567][ T8584] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.417982][ T8555] XFS (loop3): Quotacheck: Done. [ 182.556099][ T8562] loop2: detected capacity change from 0 to 32768 [ 182.565446][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.675738][ T8588] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 182.716688][ T8562] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 182.841513][ T8562] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792 [ 182.904010][ T8562] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 182.939143][ T8562] OCFS2: File system is now read-only. [ 182.960205][ T8562] (syz.2.1241,8562,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 182.987044][ T8562] (syz.2.1241,8562,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 183.035385][ T8562] (syz.2.1241,8562,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 183.076046][ T8562] (syz.2.1241,8562,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 183.098966][ T8562] (syz.2.1241,8562,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 183.135453][ T8562] (syz.2.1241,8562,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 183.165042][ T8562] (syz.2.1241,8562,1):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 183.187283][ T8562] (syz.2.1241,8562,1):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 183.226298][ T8562] (syz.2.1241,8562,1):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 183.259303][ T8562] (syz.2.1241,8562,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 183.267898][ T8562] (syz.2.1241,8562,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 183.297022][ T8562] (syz.2.1241,8562,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 183.334050][ T8562] (syz.2.1241,8562,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 183.355802][ T8562] (syz.2.1241,8562,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 183.386132][ T8562] (syz.2.1241,8562,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 183.397410][ T8562] (syz.2.1241,8562,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 183.425501][ T8562] (syz.2.1241,8562,1):ocfs2_mknod:298 ERROR: status = -30 [ 183.453585][ T8562] (syz.2.1241,8562,1):ocfs2_mknod:502 ERROR: status = -30 [ 183.466182][ T8562] (syz.2.1241,8562,1):ocfs2_mkdir:659 ERROR: status = -30 [ 183.539753][ T8562] syz.2.1241 (8562) used greatest stack depth: 18840 bytes left [ 183.615535][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 183.859453][ T5845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.050233][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 184.058945][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.068722][ T5845] usb 2-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 184.089216][ T5845] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.126362][ T5845] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 184.146827][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.173526][ T5845] usb 2-1: Product: syz [ 184.178096][ T5845] usb 2-1: Manufacturer: syz [ 184.208927][ T5845] usb 2-1: SerialNumber: syz [ 184.257829][ T8626] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1268'. [ 184.311444][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 184.460158][ T5845] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 184.504420][ T5845] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 184.684576][ T5845] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 184.713607][ T5845] usb 2-1: USB disconnect, device number 6 [ 184.853285][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.009751][ T27] audit: type=1326 audit(1785153260.560:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.0.1278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 185.072290][ T27] audit: type=1326 audit(1785153260.560:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.0.1278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 185.127908][ T8650] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 185.136239][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 185.136351][ T27] audit: type=1326 audit(1785153260.560:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.0.1278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 185.188895][ T27] audit: type=1326 audit(1785153260.560:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.0.1278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 185.233537][ T27] audit: type=1326 audit(1785153260.560:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.0.1278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 185.414556][ T8660] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 185.422863][ T8660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1284'. [ 185.433296][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 185.499140][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 185.567005][ T8662] loop1: detected capacity change from 0 to 128 [ 185.641682][ T8662] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 185.689148][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 185.696793][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.727631][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 185.750175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.779137][ T9] usb 4-1: Product: syz [ 185.785114][ T9] usb 4-1: Manufacturer: syz [ 185.799370][ T9] usb 4-1: SerialNumber: syz [ 185.821601][ T9] usb 4-1: config 0 descriptor?? [ 186.067058][ T9] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 186.200076][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1292'. [ 186.216012][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'. [ 186.268083][ T9] usb 4-1: USB disconnect, device number 5 [ 187.079245][ T8709] loop2: detected capacity change from 0 to 2048 [ 187.106114][ T8709] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.200393][ T8712] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.273519][ T8714] loop0: detected capacity change from 0 to 1024 [ 187.326561][ T8714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.417277][ T8714] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.448902][ T8714] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1308: corrupted xattr block 128: bad e_name length [ 187.643897][ T8727] No such timeout policy "syz0" [ 187.670379][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.708027][ T8729] loop1: detected capacity change from 0 to 64 [ 187.737976][ T8731] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1316'. [ 187.910671][ T8736] openvswitch: netlink: Message has 245 unknown bytes. [ 187.917638][ T8736] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.564701][ T8763] netlink: 'syz.2.1331': attribute type 7 has an invalid length. [ 188.617685][ T8763] netlink: 'syz.2.1331': attribute type 8 has an invalid length. [ 188.646489][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.662558][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.700205][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.736214][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.749458][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.759617][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.767080][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.809164][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.833872][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.848487][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.857561][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.865308][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.873530][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.892732][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.913215][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.924076][ T8770] x_tables: duplicate entry at hook 2 [ 188.950367][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 188.957821][ T5840] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 189.023129][ T5840] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 189.374504][ T8776] fido_id[8776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.603441][ T8798] loop0: detected capacity change from 0 to 256 [ 189.620231][ T8798] exfat: Deprecated parameter 'namecase' [ 189.638372][ T8798] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 189.699365][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 189.767259][ T8801] batadv1: entered promiscuous mode [ 189.788527][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.409488][ T8824] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 190.471410][ T8824] bond3 (unregistering): Released all slaves [ 190.777492][ T8843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.874397][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 190.921566][ T8847] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 190.934995][ T8847] bond1 (unregistering): Released all slaves [ 190.941376][ T5845] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.965230][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 190.969726][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.141290][ T5845] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.169816][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.198811][ T5845] usb 4-1: Product: syz [ 191.204169][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.219130][ T5845] usb 4-1: Manufacturer: syz [ 191.223779][ T5845] usb 4-1: SerialNumber: syz [ 191.229809][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 191.251038][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 191.263033][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 191.275175][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.294190][ T23] usb 1-1: config 0 descriptor?? [ 191.503906][ T8865] loop1: detected capacity change from 0 to 512 [ 191.520886][ T23] ath6kl: Failed to submit usb control message: -71 [ 191.546794][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 191.575746][ T23] ath6kl: Unable to send get target info: -71 [ 191.607781][ T23] ath6kl: Failed to init ath6kl core: -71 [ 191.631785][ T23] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 191.656306][ T23] usb 1-1: USB disconnect, device number 7 [ 191.710553][ T5845] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 191.758486][ T5845] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 191.780496][ T5845] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 191.807441][ T5845] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 191.821066][ T5845] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 191.840039][ T5845] lan78xx: probe of 4-1:1.0 failed with error -71 [ 191.868293][ T5845] usb 4-1: USB disconnect, device number 6 [ 192.030520][ T8878] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 192.485997][ T5155] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.689177][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 192.710120][ T5155] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 192.714661][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 192.737257][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.747354][ T5155] usb 1-1: Product: syz [ 192.767756][ T5155] usb 1-1: Manufacturer: syz [ 192.777018][ T5155] usb 1-1: SerialNumber: syz [ 192.794029][ T5155] r8152-cfgselector 1-1: config 0 descriptor?? [ 193.233952][ T5155] r8152-cfgselector 1-1: Unknown version 0x0000 [ 193.260521][ T5155] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 193.298502][ T8923] geneve1: entered promiscuous mode [ 193.656816][ T8937] loop3: detected capacity change from 0 to 256 [ 194.069556][ T5845] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.153462][ T8953] loop0: detected capacity change from 0 to 256 [ 194.198989][ T8955] loop2: detected capacity change from 0 to 512 [ 194.223392][ T8955] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 194.249842][ T5155] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.249889][ T8955] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #11: comm syz.2.1422: corrupted inode contents [ 194.291919][ T5845] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 194.305862][ T8955] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #11: comm syz.2.1422: mark_inode_dirty error [ 194.312265][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.334671][ T8955] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1422: invalid indirect mapped block 1 (level 1) [ 194.348928][ T8955] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #11: comm syz.2.1422: corrupted inode contents [ 194.358187][ T5845] usb 2-1: Product: syz [ 194.365716][ T5845] usb 2-1: Manufacturer: syz [ 194.368524][ T8955] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 194.377937][ T5845] usb 2-1: SerialNumber: syz [ 194.380144][ T8955] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #11: comm syz.2.1422: corrupted inode contents [ 194.397241][ T8955] EXT4-fs error (device loop2): ext4_truncate:4302: inode #11: comm syz.2.1422: mark_inode_dirty error [ 194.410297][ T8955] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 194.419835][ T8955] EXT4-fs (loop2): 1 truncate cleaned up [ 194.429116][ T5155] usb 4-1: Using ep0 maxpacket: 8 [ 194.441000][ T8955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.454266][ T5845] usb 2-1: config 0 descriptor?? [ 194.464601][ T5155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.477230][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.484803][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 194.492111][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.505906][ T5845] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 194.534815][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.549854][ T8955] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.1422: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 194.585734][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 194.597371][ T5155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 194.617670][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 194.658043][ T5155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 194.677990][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.699767][ T5155] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 194.734137][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.763481][ T5155] usb 4-1: Product: syz [ 194.767723][ T5155] usb 4-1: Manufacturer: syz [ 194.789258][ T5155] usb 4-1: SerialNumber: syz [ 194.815852][ T5155] usb 4-1: config 0 descriptor?? [ 194.821755][ T8961] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1425'. [ 194.831634][ T8946] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.847521][ T8946] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.873854][ T5155] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 194.923755][ T5845] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 194.938207][ T5845] sq905c 2-1:0.0: Reading version command failed [ 194.946333][ T5845] sq905c: probe of 2-1:0.0 failed with error -71 [ 194.976928][ T5845] usb 2-1: USB disconnect, device number 7 [ 195.307768][ T9] usb 4-1: USB disconnect, device number 7 [ 195.374014][ T8972] loop0: detected capacity change from 0 to 1764 [ 195.417421][ T8972] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 195.433107][ T8974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1430'. [ 195.458358][ T8974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1430'. [ 195.987331][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 196.009773][ T8990] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1438'. [ 197.687828][ T9061] loop1: detected capacity change from 0 to 16 [ 197.704991][ T9061] erofs: (device loop1): mounted with root inode @ nid 36. [ 197.750061][ T9053] loop2: detected capacity change from 0 to 8192 [ 197.768507][ T9064] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 197.797913][ T9053] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.873328][ T9068] comedi comedi0: No channels found! [ 197.881820][ T9053] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 197.933901][ T9053] REISERFS (device loop2): using ordered data mode [ 197.959560][ T9070] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 197.969226][ T9053] reiserfs: using flush barriers [ 197.990296][ T9053] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.049683][ T9053] REISERFS (device loop2): checking transaction log (loop2) [ 198.101955][ T9053] REISERFS (device loop2): Using r5 hash to sort names [ 198.129787][ T9053] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 198.397482][ T9082] loop3: detected capacity change from 0 to 16 [ 198.449789][ T9082] erofs: (device loop3): mounted with root inode @ nid 36. [ 198.510529][ T9082] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 198.548731][ T9082] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 198.579885][ T9085] bond0: Unable to set up delay as MII monitoring is disabled [ 198.589885][ T9082] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 198.615549][ T9082] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 198.649281][ T9082] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 198.683170][ T27] audit: type=1800 audit(1785153274.230:62): pid=9082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1483" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 198.813751][ T9092] loop1: detected capacity change from 0 to 128 [ 198.845283][ T9092] EXT4-fs (loop1): Test dummy encryption mode enabled [ 198.888955][ T9092] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.932211][ T9092] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.989269][ T28] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 199.052049][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.179136][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 199.196284][ T28] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 199.207395][ T28] usb 3-1: config 252 has no interface number 0 [ 199.219502][ T9102] cgroup: subsys name conflicts with all [ 199.233537][ T28] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 199.259115][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.287653][ T28] usb 3-1: Product: syz [ 199.292795][ T28] usb 3-1: Manufacturer: syz [ 199.297472][ T28] usb 3-1: SerialNumber: syz [ 199.379220][ T28] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 199.553923][ T28] usb 3-1: USB disconnect, device number 8 [ 199.560017][ T981] usb 3-1: Failed to submit usb control message: -71 [ 199.567111][ T981] usb 3-1: unable to send the bmi data to the device: -71 [ 199.584543][ T981] usb 3-1: unable to get target info from device [ 199.609092][ T981] usb 3-1: could not get target info (-71) [ 199.615324][ T981] usb 3-1: could not probe fw (-71) [ 200.316072][ T9135] loop1: detected capacity change from 0 to 64 [ 200.609499][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1511'. [ 200.695743][ T9147] loop0: detected capacity change from 0 to 256 [ 200.715519][ T9147] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 201.173876][ T9139] loop3: detected capacity change from 0 to 32768 [ 201.198193][ T9139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1509 (9139) [ 201.293887][ T9139] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.323694][ T9139] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 201.352172][ T9139] BTRFS info (device loop3): using free space tree [ 201.533942][ T9139] BTRFS info (device loop3): enabling ssd optimizations [ 201.566812][ T9139] BTRFS info (device loop3): auto enabling async discard [ 201.703346][ T9146] loop2: detected capacity change from 0 to 32768 [ 201.740168][ T9146] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.804747][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.945308][ T9146] XFS (loop2): Ending clean mount [ 202.264919][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.359412][ T5784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5784) [ 202.657945][ T9201] bond3: option miimon: invalid value (18446744073709551614) [ 202.718170][ T9201] bond3: option miimon: allowed values 0 - 2147483647 [ 202.781650][ T9201] bond3 (unregistering): Released all slaves [ 203.536039][ T9196] loop0: detected capacity change from 0 to 32768 [ 203.876297][ T9240] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 204.253120][ T9254] netlink: 'syz.1.1553': attribute type 2 has an invalid length. [ 204.631375][ T9266] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 205.273487][ T9294] ip6t_srh: unknown srh match flags 4000 [ 205.783804][ T9312] loop2: detected capacity change from 0 to 256 [ 205.805335][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 205.887109][ T9312] FAT-fs (loop2): Directory bread(block 64) failed [ 205.894992][ T9312] FAT-fs (loop2): Directory bread(block 65) failed [ 205.906663][ T9312] FAT-fs (loop2): Directory bread(block 66) failed [ 205.916693][ T9312] FAT-fs (loop2): Directory bread(block 67) failed [ 205.931371][ T9312] FAT-fs (loop2): Directory bread(block 68) failed [ 205.961496][ T9312] FAT-fs (loop2): Directory bread(block 69) failed [ 205.968189][ T9312] FAT-fs (loop2): Directory bread(block 70) failed [ 205.986119][ T9312] FAT-fs (loop2): Directory bread(block 71) failed [ 205.994415][ T9312] FAT-fs (loop2): Directory bread(block 72) failed [ 206.016693][ T9312] FAT-fs (loop2): Directory bread(block 73) failed [ 206.466151][ T9331] SET target dimension over the limit! [ 206.837481][ T9342] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1595'. [ 207.282571][ T9359] Illegal XDP return value 4294967274 on prog (id 75) dev N/A, expect packet loss! [ 207.371054][ T27] audit: type=1326 audit(1785153282.930:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.1608" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 207.454383][ T27] audit: type=1326 audit(1785153282.930:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.1608" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 207.528766][ T27] audit: type=1326 audit(1785153282.960:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.1608" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 207.631689][ T9373] loop2: detected capacity change from 0 to 64 [ 207.638079][ T27] audit: type=1326 audit(1785153282.960:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.1608" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e5b9de99 code=0x7ffc0000 [ 207.735184][ T9373] hfs: keylen 40 too large [ 208.367588][ T9403] loop3: detected capacity change from 0 to 256 [ 208.377714][ T9403] exfat: Deprecated parameter 'namecase' [ 208.388575][ T9403] exfat: Deprecated parameter 'namecase' [ 208.539071][ T9403] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 209.154028][ T9427] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 209.170019][ T9427] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 209.284914][ T9431] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 209.669695][ T9443] loop3: detected capacity change from 0 to 256 [ 211.598657][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1677'. [ 211.629694][ T9503] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1677'. [ 211.638833][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1677'. [ 211.752767][ T9510] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1680'. [ 212.229385][ T28] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 212.394162][ T9537] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 212.407017][ T9537] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 212.451593][ T28] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 212.477152][ T28] usb 2-1: config 8 has no interface number 0 [ 212.490074][ T28] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 212.519409][ T28] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 212.541752][ T28] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 212.559134][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.567230][ T28] usb 2-1: Product: syz [ 212.589744][ T28] usb 2-1: Manufacturer: syz [ 212.594519][ T28] usb 2-1: SerialNumber: syz [ 212.610565][ T9542] loop2: detected capacity change from 0 to 1024 [ 212.684424][ T9542] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 212.762999][ T12] hfsplus: b-tree write err: -5, ino 25 [ 212.780646][ T12] hfsplus: b-tree write err: -5, ino 4 [ 212.808513][ T12] hfsplus: b-tree write err: -5, ino 2 [ 212.904523][ T28] usb 2-1: USB disconnect, device number 8 [ 213.970396][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'. [ 214.123428][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.329214][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 214.346675][ T9] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 214.366439][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.379404][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.401568][ T9] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 214.415621][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.448521][ T9] usb 1-1: config 0 descriptor?? [ 214.457173][ T9] pxrc 1-1:0.0: Could not find endpoint [ 214.489371][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 214.562031][ T9609] loop2: detected capacity change from 0 to 512 [ 214.578074][ T9609] EXT4-fs: Ignoring removed i_version option [ 214.605669][ T9609] EXT4-fs: Ignoring removed bh option [ 214.674314][ T9609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.689126][ T9] usb 1-1: USB disconnect, device number 9 [ 214.695312][ T9609] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.815932][ T9618] block nbd3: NBD_DISCONNECT [ 214.823914][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.866368][ T9620] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 214.876786][ T9620] comedi comedi3: 8255: I/O port conflict (0x13600,4) [ 214.910099][ T9620] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 215.188781][ T9630] ip6tnl2: entered allmulticast mode [ 216.128749][ T5845] IPVS: starting estimator thread 0... [ 216.232723][ T981] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 216.241889][ T9669] IPVS: using max 19 ests per chain, 45600 per kthread [ 216.276150][ T5845] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 216.289432][ T981] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 216.672521][ T9687] overlayfs: missing 'lowerdir' [ 216.729298][ T9689] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1768'. [ 217.109371][ T971] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 217.189836][ T971] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 217.257422][ T9675] loop3: detected capacity change from 0 to 32768 [ 217.313648][ T9701] bond1 (unregistering): Released all slaves [ 217.323033][ T9675] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 217.323033][ T9675] [ 217.346301][ T9675] ERROR: (device loop3): remounting filesystem as read-only [ 217.371606][ T9675] ialloc: diAlloc returned -5! [ 217.644979][ T9704] tc_dump_action: action bad kind [ 217.997654][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 218.013941][ T9710] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 218.023479][ T9710] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1779'. [ 219.549391][ T5845] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 219.755894][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 219.771792][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 219.798484][ T5845] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 219.817099][ T5845] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 219.852587][ T5845] usb 3-1: Product: syz [ 219.856831][ T5845] usb 3-1: Manufacturer: syz [ 219.864922][ T5845] usb 3-1: SerialNumber: syz [ 219.869744][ T9769] tipc: Can't bind to reserved service type 2 [ 220.013681][ T9770] loop1: detected capacity change from 0 to 4096 [ 220.023959][ T9772] loop3: detected capacity change from 0 to 512 [ 220.057435][ T9772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.066715][ T9770] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 220.103915][ T5845] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 220.124220][ T9772] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 220.140847][ T5845] usb 3-1: Handspring Visor / Palm OS: port 126, is for Console use [ 220.142892][ T9772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 220.157480][ T9772] System zones: 0-1, 15-15, 18-18, 34-34 [ 220.165250][ T9772] EXT4-fs (loop3): orphan cleanup on readonly fs [ 220.172950][ T9772] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 220.182629][ T9772] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 220.197468][ T9772] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 220.207916][ T9772] EXT4-fs (loop3): 1 truncate cleaned up [ 220.215665][ T9772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.230270][ T5845] usb 3-1: Handspring Visor / Palm OS: port 123, is for unknown use [ 220.238325][ T5845] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 220.254365][ T9772] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 220.275703][ T9770] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 220.313638][ T9770] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 220.317670][ T5845] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 220.336681][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.360222][ T5845] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 220.436719][ T5845] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 220.485492][ T5845] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 220.523059][ T5845] usb 3-1: USB disconnect, device number 9 [ 220.554612][ T5845] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 220.599606][ T5845] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 220.640514][ T5845] visor 3-1:1.0: device disconnected [ 220.707943][ T9783] No such timeout policy "syz1" [ 220.709861][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 220.951086][ T9791] mmap: syz.0.1818 (9791): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 221.320861][ T9808] loop1: detected capacity change from 0 to 65 [ 221.361606][ T9808] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 222.104749][ T9836] loop1: detected capacity change from 0 to 256 [ 222.603610][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 222.902735][ T9861] Cannot find del_set index 286 as target [ 223.326674][ T9880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1861'. [ 223.385199][ T9880] vlan0: entered promiscuous mode [ 224.091864][ T9910] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 224.109926][ T28] kernel write not supported for file /910/clear_refs (pid: 28 comm: kworker/1:1) [ 224.281776][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 224.307486][ T9914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 224.334285][ T9914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 224.383140][ T9892] loop1: detected capacity change from 0 to 32768 [ 224.471511][ T9892] JBD2: Ignoring recovery information on journal [ 224.703750][ T9892] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 224.857161][ T9934] loop2: detected capacity change from 0 to 256 [ 224.879198][ T9892] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 224.929267][ T9892] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 224.945009][ T9892] OCFS2: File system is now read-only. [ 224.958396][ T9892] (syz.1.1866,9892,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 225.015807][ T9892] (syz.1.1866,9892,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 225.057031][ T9892] (syz.1.1866,9892,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 225.069737][ T9934] FAT-fs (loop2): Directory bread(block 64) failed [ 225.076388][ T9934] FAT-fs (loop2): Directory bread(block 65) failed [ 225.099232][ T9892] (syz.1.1866,9892,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 225.108032][ T9934] FAT-fs (loop2): Directory bread(block 66) failed [ 225.128223][ T9892] (syz.1.1866,9892,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 225.139661][ T9934] FAT-fs (loop2): Directory bread(block 67) failed [ 225.146427][ T9934] FAT-fs (loop2): Directory bread(block 68) failed [ 225.149576][ T9892] (syz.1.1866,9892,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 225.195698][ T9934] FAT-fs (loop2): Directory bread(block 69) failed [ 225.202861][ T9934] FAT-fs (loop2): Directory bread(block 70) failed [ 225.217999][ T9934] FAT-fs (loop2): Directory bread(block 71) failed [ 225.225664][ T9892] (syz.1.1866,9892,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 225.234026][ T9934] FAT-fs (loop2): Directory bread(block 72) failed [ 225.249118][ T9934] FAT-fs (loop2): Directory bread(block 73) failed [ 225.264651][ T9892] (syz.1.1866,9892,0):ocfs2_mknod:385 ERROR: status = -30 [ 225.285701][ T9892] (syz.1.1866,9892,0):ocfs2_mknod:502 ERROR: status = -30 [ 225.293728][ T27] audit: type=1326 audit(1785153300.850:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.319097][ T9892] (syz.1.1866,9892,0):ocfs2_mkdir:659 ERROR: status = -30 [ 225.332421][ T27] audit: type=1326 audit(1785153300.880:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.395536][ T27] audit: type=1326 audit(1785153300.900:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.448492][ T27] audit: type=1326 audit(1785153300.900:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.524973][ T27] audit: type=1326 audit(1785153300.910:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.561933][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 225.594953][ T27] audit: type=1326 audit(1785153300.910:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.671636][ T27] audit: type=1326 audit(1785153300.910:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.743693][ T27] audit: type=1326 audit(1785153300.940:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 225.809101][ T27] audit: type=1326 audit(1785153300.940:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.3.1891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2dc239de99 code=0x7ffc0000 [ 226.429270][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.580308][ T9975] delete_channel: no stack [ 226.619669][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 226.627386][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.639642][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.679150][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.722196][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.729489][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'. [ 226.751650][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 226.769118][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.777191][ T8] usb 2-1: Product: syz [ 226.801979][ T8] usb 2-1: Manufacturer: syz [ 226.806702][ T8] usb 2-1: SerialNumber: syz [ 226.824243][ T8] usb 2-1: config 0 descriptor?? [ 226.844405][ T8] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 226.881283][ T9970] loop3: detected capacity change from 0 to 32768 [ 227.003095][ T9970] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 227.035316][ T9988] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 227.064008][ T8] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 227.071886][ T8] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 227.082109][ T8] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 227.177251][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 227.276386][ T8] usb 2-1: USB disconnect, device number 9 [ 227.366435][ T9994] unsupported nla_type 33542 [ 227.693371][T10006] bond3: Removing last arp target with arp_interval on [ 227.949330][ T5845] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 228.149539][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 228.176371][ T5845] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 228.206148][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.237779][ T5845] usb 1-1: Product: syz [ 228.252952][ T5845] usb 1-1: Manufacturer: syz [ 228.257632][ T5845] usb 1-1: SerialNumber: syz [ 228.280518][ T5845] usb 1-1: config 0 descriptor?? [ 228.462460][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 228.728548][ T5845] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 228.769138][ T5845] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 228.853364][T10045] 0xfffffffffffffffd-0x000000020000 : "" [ 228.875049][T10047] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1942'. [ 228.879974][T10045] mtd: partition "" is out of reach -- disabled [ 228.908954][ T5845] peak_usb: probe of 1-1:0.0 failed with error -71 [ 228.942081][T10045] ftl_cs: FTL header not found. [ 228.947663][ T5845] usb 1-1: USB disconnect, device number 10 [ 229.359486][T10056] mmap: syz.2.1946 (10056) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.313056][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 230.394797][T10088] binder: 10087:10088 ioctl c018620c 200000000100 returned -22 [ 230.903939][ T27] audit: type=1326 audit(1785153306.460:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.0.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 230.982886][ T27] audit: type=1326 audit(1785153306.460:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.0.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 231.037823][ T27] audit: type=1326 audit(1785153306.490:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.0.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 231.115866][ T27] audit: type=1326 audit(1785153306.490:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.0.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1659de99 code=0x7ffc0000 [ 231.190915][T10118] loop2: detected capacity change from 0 to 256 [ 231.242353][T10120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.496958][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 231.556876][T10128] syz.3.1982 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.667370][T10132] IPv6: NLM_F_REPLACE set, but no existing node found! [ 231.746707][T10106] loop1: detected capacity change from 0 to 32768 [ 231.847321][T10106] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 231.939390][T10148] 0xfffffffffffffffd-0x000000020000 : "" [ 231.957606][T10148] mtd: partition "" is out of reach -- disabled [ 232.003117][T10106] XFS (loop1): Ending clean mount [ 232.030326][T10148] ftl_cs: FTL header not found. [ 232.181222][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 232.198068][T10153] loop2: detected capacity change from 0 to 2048 [ 232.284780][T10153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.040084][T10178] 0xfffffffffffffffd-0x000000020000 : "" [ 233.045804][T10178] mtd: partition "" is out of reach -- disabled [ 233.083679][T10178] ftl_cs: FTL header not found. [ 233.205816][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 233.407238][ T27] audit: type=1326 audit(1785153308.960:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 233.479099][ T27] audit: type=1326 audit(1785153308.960:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 233.569570][ T27] audit: type=1326 audit(1785153309.000:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 233.671296][ T27] audit: type=1326 audit(1785153309.000:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 233.696530][ T27] audit: type=1326 audit(1785153309.010:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 233.736185][ T27] audit: type=1326 audit(1785153309.010:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.1.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebc19de99 code=0x7ffc0000 [ 233.767232][T10204] tmpfs: Bad value for 'mpol' [ 233.957587][T10213] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2016'. [ 234.147920][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 234.347036][T10224] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 234.605890][T10233] loop2: detected capacity change from 0 to 256 [ 234.952722][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.159666][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 235.171252][ T5845] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 235.189140][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.197384][ T5845] usb 2-1: Product: syz [ 235.201674][ T5845] usb 2-1: Manufacturer: syz [ 235.206322][ T5845] usb 2-1: SerialNumber: syz [ 235.213373][ T5845] r8152-cfgselector 2-1: config 0 descriptor?? [ 235.237984][T10256] bond1: entered allmulticast mode [ 235.243913][T10256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.251903][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 235.661545][ T5845] r8152-cfgselector 2-1: Unknown version 0x0000 [ 235.676574][ T5845] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 235.995285][T10269] loop3: detected capacity change from 0 to 32768 [ 236.023760][T10269] (syz.3.2046,10269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.064884][T10269] (syz.3.2046,10269,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.135599][T10269] JBD2: Ignoring recovery information on journal [ 236.226240][T10269] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 236.480473][T10269] [ 236.482873][T10269] ====================================================== [ 236.489921][T10269] WARNING: possible circular locking dependency detected [ 236.496985][T10269] syzkaller #0 Not tainted [ 236.501430][T10269] ------------------------------------------------------ [ 236.508507][T10269] syz.3.2046/10269 is trying to acquire lock: [ 236.514606][T10269] ffff88805c908660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 236.526237][T10269] [ 236.526237][T10269] but task is already holding lock: [ 236.533660][T10269] ffff88805c9086f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 236.544334][T10269] [ 236.544334][T10269] which lock already depends on the new lock. [ 236.544334][T10269] [ 236.554802][T10269] [ 236.554802][T10269] the existing dependency chain (in reverse order) is: [ 236.563947][T10269] [ 236.563947][T10269] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 236.571829][T10269] down_read+0x46/0x2e0 [ 236.576571][T10269] ocfs2_init_acl+0x30a/0x770 [ 236.581817][T10269] ocfs2_mknod+0x1427/0x2310 [ 236.586987][T10269] ocfs2_create+0x196/0x430 [ 236.592069][T10269] path_openat+0x1705/0x3270 [ 236.597228][T10269] do_filp_open+0x1f2/0x430 [ 236.602291][T10269] do_sys_openat2+0x134/0x1d0 [ 236.607569][T10269] __x64_sys_openat+0x139/0x160 [ 236.612987][T10269] do_syscall_64+0x55/0xb0 [ 236.617975][T10269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.624439][T10269] [ 236.624439][T10269] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 236.633009][T10269] down_read+0x46/0x2e0 [ 236.637741][T10269] ocfs2_start_trans+0x3a8/0x6f0 [ 236.643256][T10269] ocfs2_mknod+0xf33/0x2310 [ 236.648326][T10269] ocfs2_mkdir+0x196/0x430 [ 236.653309][T10269] vfs_mkdir+0x2a5/0x470 [ 236.658132][T10269] do_mkdirat+0x1dc/0x450 [ 236.663029][T10269] __x64_sys_mkdirat+0x89/0xa0 [ 236.668352][T10269] do_syscall_64+0x55/0xb0 [ 236.673329][T10269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.679787][T10269] [ 236.679787][T10269] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 236.687319][T10269] ocfs2_start_trans+0x2a9/0x6f0 [ 236.692829][T10269] ocfs2_setattr+0xc84/0x1bf0 [ 236.698075][T10269] notify_change+0xb05/0xde0 [ 236.703243][T10269] chmod_common+0x257/0x400 [ 236.708314][T10269] do_fchmodat+0x10c/0x1e0 [ 236.713303][T10269] __x64_sys_fchmodat+0x7d/0x90 [ 236.718719][T10269] do_syscall_64+0x55/0xb0 [ 236.723700][T10269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.730153][T10269] [ 236.730153][T10269] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 236.738980][T10269] __lock_acquire+0x37ef/0x7d80 [ 236.744400][T10269] lock_acquire+0x19e/0x420 [ 236.749471][T10269] down_write+0x97/0x200 [ 236.754288][T10269] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 236.760838][T10269] ocfs2_xattr_set+0x63a/0x13a0 [ 236.766354][T10269] ocfs2_set_acl+0x4d4/0x580 [ 236.771518][T10269] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 236.777029][T10269] vfs_set_acl+0x80f/0xa70 [ 236.782007][T10269] path_setxattr+0x362/0x590 [ 236.787175][T10269] __x64_sys_setxattr+0xbb/0xd0 [ 236.792601][T10269] do_syscall_64+0x55/0xb0 [ 236.797589][T10269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.804054][T10269] [ 236.804054][T10269] other info that might help us debug this: [ 236.804054][T10269] [ 236.814495][T10269] Chain exists of: [ 236.814495][T10269] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 236.814495][T10269] [ 236.829784][T10269] Possible unsafe locking scenario: [ 236.829784][T10269] [ 236.837291][T10269] CPU0 CPU1 [ 236.842695][T10269] ---- ---- [ 236.848111][T10269] lock(&oi->ip_xattr_sem); [ 236.852754][T10269] lock(&journal->j_trans_barrier); [ 236.860610][T10269] lock(&oi->ip_xattr_sem); [ 236.867785][T10269] lock(&ocfs2_file_ip_alloc_sem_key); [ 236.873383][T10269] [ 236.873383][T10269] *** DEADLOCK *** [ 236.873383][T10269] [ 236.881567][T10269] 3 locks held by syz.3.2046/10269: [ 236.886804][T10269] #0: ffff8880599fe418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 236.896123][T10269] #1: ffff88805c9089d8 (&type->i_mutex_dir_key#21){+.+.}-{3:3}, at: vfs_set_acl+0x368/0xa70 [ 236.906389][T10269] #2: ffff88805c9086f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 236.917526][T10269] [ 236.917526][T10269] stack backtrace: [ 236.923494][T10269] CPU: 0 PID: 10269 Comm: syz.3.2046 Not tainted syzkaller #0 [ 236.930997][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 236.941102][T10269] Call Trace: [ 236.944422][T10269] [ 236.947413][T10269] dump_stack_lvl+0x18c/0x250 [ 236.952138][T10269] ? load_image+0x420/0x420 [ 236.956695][T10269] ? show_regs_print_info+0x20/0x20 [ 236.961949][T10269] ? print_circular_bug+0x12b/0x1a0 [ 236.967196][T10269] check_noncircular+0x2fc/0x400 [ 236.972195][T10269] ? look_up_lock_class+0x75/0x140 [ 236.977370][T10269] ? print_deadlock_bug+0x5d0/0x5d0 [ 236.982626][T10269] ? lockdep_lock+0xf5/0x230 [ 236.987258][T10269] ? _find_first_zero_bit+0xd6/0x100 [ 236.992585][T10269] __lock_acquire+0x37ef/0x7d80 [ 236.997498][T10269] ? verify_lock_unused+0x140/0x140 [ 237.002761][T10269] ? _raw_spin_unlock+0x40/0x40 [ 237.007673][T10269] ? verify_lock_unused+0x140/0x140 [ 237.012926][T10269] lock_acquire+0x19e/0x420 [ 237.017497][T10269] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 237.023785][T10269] ? __might_sleep+0xe0/0xe0 [ 237.028410][T10269] ? read_lock_is_recursive+0x20/0x20 [ 237.033820][T10269] down_write+0x97/0x200 [ 237.038108][T10269] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 237.044299][T10269] ? down_read_killable+0x340/0x340 [ 237.049541][T10269] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 237.055538][T10269] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 237.061449][T10269] ? up_write+0x1be/0x410 [ 237.065801][T10269] ocfs2_xattr_set+0x63a/0x13a0 [ 237.070684][T10269] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 237.076438][T10269] ? __lock_acquire+0x1336/0x7d80 [ 237.081503][T10269] ? __lock_acquire+0x7d80/0x7d80 [ 237.086559][T10269] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.091622][T10269] ? __rwlock_init+0x150/0x150 [ 237.096431][T10269] ? do_raw_spin_unlock+0x121/0x230 [ 237.101662][T10269] ? _raw_spin_unlock+0x28/0x40 [ 237.106555][T10269] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 237.112301][T10269] ocfs2_set_acl+0x4d4/0x580 [ 237.116924][T10269] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 237.122057][T10269] ? read_lock_is_recursive+0x20/0x20 [ 237.127485][T10269] ? ocfs2_xattr_get+0x260/0x260 [ 237.132460][T10269] ? evm_inode_set_acl+0xbc/0x430 [ 237.137502][T10269] ? down_write+0x16e/0x200 [ 237.142107][T10269] ? evm_revalidate_status+0x4f/0xb0 [ 237.147417][T10269] ? ima_inode_set_acl+0x81/0x170 [ 237.152457][T10269] ? make_vfsuid+0x67/0xb0 [ 237.156924][T10269] ? inode_owner_or_capable+0xf0/0x1c0 [ 237.162400][T10269] vfs_set_acl+0x80f/0xa70 [ 237.166853][T10269] path_setxattr+0x362/0x590 [ 237.171493][T10269] ? simple_xattrs_free+0x150/0x150 [ 237.176746][T10269] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 237.182748][T10269] ? lock_chain_count+0x20/0x20 [ 237.187619][T10269] __x64_sys_setxattr+0xbb/0xd0 [ 237.192496][T10269] do_syscall_64+0x55/0xb0 [ 237.196953][T10269] ? clear_bhb_loop+0x40/0x90 [ 237.201674][T10269] ? clear_bhb_loop+0x40/0x90 [ 237.206384][T10269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.212304][T10269] RIP: 0033:0x7f2dc239de99 [ 237.216742][T10269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.236379][T10269] RSP: 002b:00007f2dc3211028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 237.244811][T10269] RAX: ffffffffffffffda RBX: 00007f2dc2625fa0 RCX: 00007f2dc239de99 [ 237.252807][T10269] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 237.260823][T10269] RBP: 00007f2dc2433eaf R08: 0000000000000000 R09: 0000000000000000 [ 237.268821][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.276801][T10269] R13: 00007f2dc2626038 R14: 00007f2dc2625fa0 R15: 00007ffff5c4c588 [ 237.284807][T10269] [ 237.287949][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.331120][ T5772] ocfs2: Unmounting device (7,3) on (node local)