last executing test programs: 3.267314207s ago: executing program 0 (id=13858): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) 3.064039613s ago: executing program 0 (id=13863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a300000000064000000060a1104e2ff0000000000000500000008000b40000000000900010073797a30000000003c0004803800018008000100667764"], 0xd8}}, 0x0) 2.83712028s ago: executing program 0 (id=13866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x572cde730737e46d, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x0, 0x12}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0xa, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e21, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e22, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x3}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x111fa8a615f9e339) 2.614088578s ago: executing program 0 (id=13869): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$uac1(0x0, 0x93, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000406b1d010140001402030109028100030106b0090904000000010100000a24010500070201020924030402030306d609040100000102000009040101136691c691266b4c01010102092ab609050109400000400507250180310b0009040200000102000009040201"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 1.149538583s ago: executing program 2 (id=13876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200aaaaaaaaaaaa000008000900018000"], 0x30}}, 0x0) 1.036119937s ago: executing program 3 (id=13877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.022643008s ago: executing program 1 (id=13878): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ppoll(&(0x7f00000001c0)=[{r0, 0x69c}], 0x1, 0x0, 0x0, 0x0) 1.010511258s ago: executing program 2 (id=13879): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4810c, 0x780}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 869.757183ms ago: executing program 0 (id=13880): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) getegid() 840.551124ms ago: executing program 3 (id=13881): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'user.', '\x00'}, 0x0, 0x0) 796.238655ms ago: executing program 1 (id=13882): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') writev(r0, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000680)="38f5", 0x2}], 0x2) 695.525018ms ago: executing program 2 (id=13883): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x12, 0x7f, 0x5, 0x3, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e22}]}, 0x18}}, 0x20008000) 684.302449ms ago: executing program 0 (id=13884): syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4c200, 0x0, 0x0, 0x0, 0x0, 0x0) 633.31362ms ago: executing program 3 (id=13885): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x14, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x4, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 507.738174ms ago: executing program 1 (id=13886): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff8001}}], 0x18}, 0x24008004) 463.108925ms ago: executing program 3 (id=13887): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2) 409.791177ms ago: executing program 2 (id=13888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) 337.127789ms ago: executing program 1 (id=13889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, &(0x7f0000000240)=0x76) 249.588232ms ago: executing program 3 (id=13890): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) 209.995423ms ago: executing program 2 (id=13891): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x20407, @empty, 0x200}}, 0x24) 161.286275ms ago: executing program 1 (id=13892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 120.672846ms ago: executing program 3 (id=13893): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000001240)="$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") mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 56.249508ms ago: executing program 2 (id=13894): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000000)) 0s ago: executing program 1 (id=13895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) kernel console output (not intermixed with test programs): [ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.870252][ T5819] usb 3-1: config 0 descriptor?? [ 1505.933830][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12002'. [ 1505.955740][ T605] bridge0: port 3(dummy0) entered disabled state [ 1506.066702][ T609] smb3: Unexpected value for 'rdma' [ 1506.114863][ T605] dummy0 (unregistering): left allmulticast mode [ 1506.130141][ T605] dummy0 (unregistering): left promiscuous mode [ 1506.143245][ T605] bridge0: port 3(dummy0) entered disabled state [ 1506.309620][ T5819] ath6kl: Failed to submit usb control message: -71 [ 1506.325827][ T5819] ath6kl: unable to send the bmi data to the device: -71 [ 1506.333017][ T5819] ath6kl: Unable to send get target info: -71 [ 1506.360436][ T5819] ath6kl: Failed to init ath6kl core: -71 [ 1506.366550][ T617] overlay: Bad value for 'metacopy' [ 1506.383654][ T5819] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1506.446858][ T5819] usb 3-1: USB disconnect, device number 100 [ 1506.702263][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12013'. [ 1506.913236][ T633] loop3: detected capacity change from 0 to 1024 [ 1506.960653][ T633] hfsplus: invalid length 32517 has been corrected to 255 [ 1507.471971][ T653] geneve1: entered allmulticast mode [ 1507.989698][ T674] loop2: detected capacity change from 0 to 47 [ 1508.115264][ T7606] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1508.406861][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.437600][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.472277][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.498831][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.534581][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.554245][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.590429][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.621221][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.647012][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.682317][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12042'. [ 1508.694251][ T700] netlink: 'syz.1.12047': attribute type 2 has an invalid length. [ 1508.876094][ T705] delete_channel: no stack [ 1510.103054][ T5819] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1510.285962][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 1510.299204][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1510.308876][ T5819] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1510.320154][ T5819] usb 2-1: config 0 has no interface number 0 [ 1510.336592][ T5819] usb 2-1: config 0 interface 18 has no altsetting 0 [ 1510.361162][ T5819] usb 2-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=58.21 [ 1510.370607][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.378639][ T5819] usb 2-1: Product: syz [ 1510.407143][ T5819] usb 2-1: Manufacturer: syz [ 1510.417990][ T5819] usb 2-1: SerialNumber: syz [ 1510.430457][ T5819] usb 2-1: config 0 descriptor?? [ 1510.463200][ T5818] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1510.634215][ T5818] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1510.663135][ T5818] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1510.675026][ T5819] asix: probe of 2-1:0.18 failed with error -22 [ 1510.691407][ T5818] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1510.703266][ T5819] usb 2-1: USB disconnect, device number 78 [ 1510.712656][ T5818] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1510.722939][ T5818] usb 4-1: Manufacturer: syz [ 1510.727997][ T5818] usb 4-1: SerialNumber: syz [ 1510.728063][ T7606] udevd[7606]: setting owner of /dev/bus/usb/002/078 to uid=0, gid=0 failed: No such file or directory [ 1510.926472][ T784] veth4: entered promiscuous mode [ 1510.937840][ T784] veth4: entered allmulticast mode [ 1510.977787][ T5818] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 1510.990170][ T5818] usb 4-1: USB disconnect, device number 86 [ 1511.696024][ T813] netlink: 'syz.1.12099': attribute type 1 has an invalid length. [ 1512.458376][ T841] netlink: 'syz.2.12115': attribute type 7 has an invalid length. [ 1512.528902][ T842] loop0: detected capacity change from 0 to 2048 [ 1512.589250][ T842] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 1512.645487][ T842] FAT-fs (loop0): bogus number of reserved sectors [ 1512.652093][ T842] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1512.841493][ T849] tmpfs: Bad value for 'mpol' [ 1512.893281][ T850] loop1: detected capacity change from 0 to 1024 [ 1512.963896][ T850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1513.131763][ T825] loop3: detected capacity change from 0 to 32768 [ 1513.225043][ T825] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1513.234506][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1513.270803][ T28] audit: type=1326 audit(1539.214:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.420423][ T28] audit: type=1326 audit(1539.214:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.552797][ T28] audit: type=1326 audit(1539.257:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.579663][ T877] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1513.601587][ T825] XFS (loop3): Ending clean mount [ 1513.661758][ T28] audit: type=1326 audit(1539.257:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.754009][ T28] audit: type=1326 audit(1539.257:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.827792][ T28] audit: type=1326 audit(1539.257:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.862852][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1513.905711][ T5844] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1513.929380][ T28] audit: type=1326 audit(1539.257:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1513.952905][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.037515][ T28] audit: type=1326 audit(1539.257:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1514.061081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.103496][ T885] loop0: detected capacity change from 0 to 2048 [ 1514.113165][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 1514.129188][ T5844] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1514.144976][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1514.162887][ T5844] usb 3-1: Product: syz [ 1514.172703][ T5844] usb 3-1: Manufacturer: syz [ 1514.182185][ T5844] usb 3-1: SerialNumber: syz [ 1514.195084][ T5844] usb 3-1: config 0 descriptor?? [ 1514.197777][ T885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1514.213076][ T5844] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1514.225678][ T28] audit: type=1326 audit(1539.257:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=865 comm="syz.0.12123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1514.370719][ T885] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1514.622678][ T5844] gspca_sn9c2028: read1 error -71 [ 1514.639834][ T5844] gspca_sn9c2028: read1 error -71 [ 1514.666905][ T5844] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 1514.690769][ T5844] usb 3-1: USB disconnect, device number 101 [ 1514.890744][ T908] __nla_validate_parse: 31 callbacks suppressed [ 1514.890760][ T908] netlink: 800 bytes leftover after parsing attributes in process `syz.0.12141'. [ 1514.927905][ T908] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.12141'. [ 1514.946599][ T914] netlink: 'syz.3.12142': attribute type 7 has an invalid length. [ 1514.954467][ T914] netlink: 'syz.3.12142': attribute type 5 has an invalid length. [ 1514.963791][ T914] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12142'. [ 1515.104945][ T920] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1515.362712][ T28] audit: type=1326 audit(1541.456:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=933 comm="syz.3.12148" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7979ce59 code=0x7ffc0000 [ 1515.533297][ T943] loop1: detected capacity change from 0 to 22 [ 1515.553098][ T943] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1515.599166][ T943] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1515.662638][ T947] netlink: 'syz.3.12153': attribute type 1 has an invalid length. [ 1516.129882][ T5844] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1516.169895][ T969] Non-string source [ 1516.316579][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 1516.328495][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.362980][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.393328][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1516.429561][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.457392][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12169'. [ 1516.458372][ T5844] usb 4-1: config 0 descriptor?? [ 1516.482936][ T5844] hub 4-1:0.0: USB hub found [ 1516.645555][ T982] loop0: detected capacity change from 0 to 256 [ 1516.685855][ T5844] hub 4-1:0.0: 1 port detected [ 1516.744984][ T982] FAT-fs (loop0): Directory bread(block 64) failed [ 1516.756905][ T982] FAT-fs (loop0): Directory bread(block 65) failed [ 1516.785448][ T982] FAT-fs (loop0): Directory bread(block 66) failed [ 1516.814896][ T982] FAT-fs (loop0): Directory bread(block 67) failed [ 1516.841104][ T982] FAT-fs (loop0): Directory bread(block 68) failed [ 1516.866137][ T982] FAT-fs (loop0): Directory bread(block 69) failed [ 1516.872905][ T982] FAT-fs (loop0): Directory bread(block 70) failed [ 1516.889162][ T5844] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1516.911962][ T5844] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1516.919787][ T982] FAT-fs (loop0): Directory bread(block 71) failed [ 1516.941110][ T982] FAT-fs (loop0): Directory bread(block 72) failed [ 1516.948052][ T982] FAT-fs (loop0): Directory bread(block 73) failed [ 1516.957491][ T5844] usbhid 4-1:0.0: can't add hid device: -71 [ 1516.968815][ T5844] usbhid: probe of 4-1:0.0 failed with error -71 [ 1517.017568][ T5844] usb 4-1: USB disconnect, device number 87 [ 1517.846327][ T5844] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1518.050692][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 1518.059883][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.079875][T26537] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 1518.087833][ T5844] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1518.120121][ T5844] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1518.136444][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.164209][ T5844] usb 3-1: Product: syz [ 1518.168449][ T5844] usb 3-1: Manufacturer: syz [ 1518.177053][ T5844] usb 3-1: SerialNumber: syz [ 1518.185602][ T5844] r8152-cfgselector 3-1: config 0 descriptor?? [ 1518.301756][T26537] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.329483][T26537] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1518.346494][T26537] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1518.363641][T26537] usb 1-1: string descriptor 0 read error: -22 [ 1518.383098][T26537] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1518.400168][ T5844] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1518.426848][T26537] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1518.455736][T26537] usb 1-1: 0:2 : does not exist [ 1518.500252][T26537] usb-storage 1-1:1.1: USB Mass Storage device detected [ 1518.513209][T25537] usb 3-1: config 0 descriptor?? [ 1518.642028][ T5844] usb 3-1: USB disconnect, device number 102 [ 1518.648725][T25537] usb 3-1: can't set config #0, error -71 [ 1518.868827][T26537] us122l: couldn't allocate write buffer [ 1518.883021][T26537] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 1518.917552][T26537] usb 1-1: USB disconnect, device number 70 [ 1519.404082][ T1063] ip6tnl2: entered allmulticast mode [ 1519.419713][ T1067] comedi comedi4: bad chanlist[0]=0x00200007 chan=7 range length=2 [ 1519.845531][T26537] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1520.021144][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1520.046054][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1520.070344][T26537] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1520.091920][T26537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.099976][T26537] usb 4-1: Product: syz [ 1520.116331][T26537] usb 4-1: Manufacturer: syz [ 1520.126882][T26537] usb 4-1: SerialNumber: syz [ 1520.143470][T26537] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1520.169366][ T5819] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1520.275370][ T1091] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1520.505934][ C1] usb 4-1: ath9k_htc: invalid pkt_len (fd7e) [ 1520.726094][ T5842] usb 4-1: USB disconnect, device number 88 [ 1520.755102][ T1105] loop1: detected capacity change from 0 to 512 [ 1520.795909][ T1105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1520.889016][ T1105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.003520][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.036343][ T1117] loop2: detected capacity change from 0 to 128 [ 1521.200773][ T5819] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1521.219561][T26537] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1521.227789][ T5819] ath9k_htc: Failed to initialize the device [ 1521.248446][ T5842] usb 4-1: ath9k_htc: USB layer deinitialized [ 1521.424509][T26537] usb 1-1: Using ep0 maxpacket: 16 [ 1521.463927][T26537] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1521.480340][T26537] usb 1-1: config 0 has no interface number 0 [ 1521.486517][T26537] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1521.518265][T26537] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1521.540308][T26537] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1521.556532][T26537] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1521.574964][T26537] usb 1-1: Product: syz [ 1521.579189][T26537] usb 1-1: SerialNumber: syz [ 1521.612360][T26537] usb 1-1: config 0 descriptor?? [ 1521.649951][T26537] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1521.678300][T26537] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input81 [ 1521.970314][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1522.168347][T26537] usb 1-1: USB disconnect, device number 71 [ 1522.189337][T26537] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1522.295355][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1522.295371][ T28] audit: type=1326 audit(1548.902:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.12247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1522.370160][ T28] audit: type=1326 audit(1548.934:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.12247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1522.400538][ T28] audit: type=1326 audit(1548.945:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.12247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1522.439174][ T1161] netlink: 264 bytes leftover after parsing attributes in process `syz.1.12248'. [ 1522.453329][ T28] audit: type=1326 audit(1548.945:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.12247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1522.496566][ T1161] netlink: 264 bytes leftover after parsing attributes in process `syz.1.12248'. [ 1522.525700][ T1161] netlink: 175 bytes leftover after parsing attributes in process `syz.1.12248'. [ 1522.556718][ T28] audit: type=1326 audit(1548.945:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.12247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1522.812990][ T1172] netlink: 'syz.0.12254': attribute type 1 has an invalid length. [ 1522.822415][ T1171] libceph: resolve '0..' (ret=-3): failed [ 1522.839380][ T1175] loop2: detected capacity change from 0 to 8 [ 1522.849402][ T1172] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12254'. [ 1522.897366][ T1175] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1522.904968][ T1175] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1522.944289][ T1175] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1522.951837][ T1175] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1523.004280][ T1175] SQUASHFS error: Failed to read block 0x4de: -5 [ 1523.028843][ T1175] SQUASHFS error: Failed to read block 0x4de: -5 [ 1523.047097][ T1175] SQUASHFS error: Failed to read block 0x4de: -5 [ 1523.053850][ T1175] SQUASHFS error: Failed to read block 0x4de: -5 [ 1523.071559][ T1175] SQUASHFS error: Failed to read block 0x4de: -5 [ 1523.093143][ T1175] SQUASHFS error: Failed to read block 0x4de: -5 [ 1523.099698][ T1175] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1523.132990][ T28] audit: type=1800 audit(1549.803:219): pid=1175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12255" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1523.221655][ T1183] loop3: detected capacity change from 0 to 512 [ 1523.348865][ T28] audit: type=1326 audit(1550.018:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1188 comm="syz.0.12263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1523.411612][ T1183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1523.465279][ T28] audit: type=1326 audit(1550.018:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1188 comm="syz.0.12263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1523.526362][ T1183] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1523.544530][ T28] audit: type=1326 audit(1550.082:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1188 comm="syz.0.12263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1523.576735][ T1183] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.12259: Failed to acquire dquot type 0 [ 1523.683009][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1523.990127][ T1211] netlink: 'syz.3.12270': attribute type 4 has an invalid length. [ 1524.007098][ T1211] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.12270'. [ 1524.288980][ T1225] IPv6: NLM_F_CREATE should be specified when creating new route [ 1524.378036][ T1231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.398183][ T1231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.408220][ T1231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.419073][ T1231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.429386][ T1231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.445063][ T1231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.596539][ T1237] ubi8: attaching mtd0 [ 1524.600697][ T1237] ubi8 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 1524.726086][ T1241] loop3: detected capacity change from 0 to 8 [ 1524.759402][ T1243] loop1: detected capacity change from 0 to 128 [ 1524.807984][ T1241] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1524.839121][ T1243] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1524.853124][ T1241] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1524.913559][ T1241] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1524.939206][ T1241] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1524.948178][ T1241] SQUASHFS error: Failed to read block 0x4de: -5 [ 1524.954675][ T1241] SQUASHFS error: Failed to read block 0x4de: -5 [ 1525.003527][ T1241] SQUASHFS error: Failed to read block 0x4de: -5 [ 1525.010030][ T1241] SQUASHFS error: Failed to read block 0x4de: -5 [ 1525.017716][ T1241] SQUASHFS error: Failed to read block 0x4de: -5 [ 1525.025439][ T1241] SQUASHFS error: Failed to read block 0x4de: -5 [ 1525.032892][ T1241] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1525.090820][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1525.558301][ T1260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12293'. [ 1525.584828][ T1260] netlink: ct family unspecified [ 1525.596450][ T1260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1525.966325][ T1276] loop2: detected capacity change from 0 to 512 [ 1526.001793][ T1276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.244642][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.272326][ T1284] : renamed from veth0_to_bond (while UP) [ 1526.335825][ T1274] loop1: detected capacity change from 0 to 32768 [ 1526.785846][ T1299] loop2: detected capacity change from 0 to 16 [ 1526.821410][ T1299] erofs: (device loop2): mounted with root inode @ nid 36. [ 1527.017251][ T1307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12314'. [ 1527.567412][ T5845] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1527.783116][ T5845] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1527.812622][ T5845] usb 1-1: not running at top speed; connect to a high speed hub [ 1527.829021][ T5845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.857568][ T5845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1527.903099][ T5845] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1527.935643][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.966996][ T5845] usb 1-1: Product: syz [ 1527.972650][ T5845] usb 1-1: Manufacturer: syz [ 1527.977578][ T5845] usb 1-1: SerialNumber: syz [ 1528.258953][ T1354] cgroup: Invalid name [ 1528.266846][ T5845] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1528.275401][ T5845] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1528.359175][ T5845] usb 1-1: USB disconnect, device number 72 [ 1528.442015][ T1358] netlink: 'syz.3.12339': attribute type 21 has an invalid length. [ 1528.466379][ T1360] loop1: detected capacity change from 0 to 256 [ 1528.507537][ T1358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12339'. [ 1528.629363][ T1360] FAT-fs (loop1): Directory bread(block 64) failed [ 1528.635956][ T1360] FAT-fs (loop1): Directory bread(block 65) failed [ 1528.665045][ T1360] FAT-fs (loop1): Directory bread(block 66) failed [ 1528.686989][ T1360] FAT-fs (loop1): Directory bread(block 67) failed [ 1528.693667][ T1360] FAT-fs (loop1): Directory bread(block 68) failed [ 1528.700652][ T1360] FAT-fs (loop1): Directory bread(block 69) failed [ 1528.707661][ T1360] FAT-fs (loop1): Directory bread(block 70) failed [ 1528.723273][ T1360] FAT-fs (loop1): Directory bread(block 71) failed [ 1528.744606][ T1360] FAT-fs (loop1): Directory bread(block 72) failed [ 1528.751368][ T1360] FAT-fs (loop1): Directory bread(block 73) failed [ 1529.253360][T20268] Bluetooth: hci0: command tx timeout [ 1529.302185][ T1382] overlay: Unknown parameter '\' [ 1529.551552][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1529.619354][ T1396] tmpfs: Bad value for 'mpol' [ 1530.099022][ T1418] loop2: detected capacity change from 0 to 512 [ 1530.122601][ T1418] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1530.161593][ T1418] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 1530.187669][ T1418] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1530.196967][ T1418] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.12368: Allocating blocks 41-42 which overlap fs metadata [ 1530.227967][ T1417] loop3: detected capacity change from 0 to 4096 [ 1530.242415][ T1417] __ntfs_warning: 4 callbacks suppressed [ 1530.242430][ T1417] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1530.278642][T26537] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1530.317120][ T1418] EXT4-fs (loop2): Remounting filesystem read-only [ 1530.323932][ T1418] Quota error (device loop2): write_blk: dquota write failed [ 1530.324962][ T1417] ntfs: volume version 3.1. [ 1530.350392][ T1418] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1530.379344][ T1418] EXT4-fs (loop2): 1 truncate cleaned up [ 1530.416618][ T1418] EXT4-fs (loop2): pa ffff888076dec658: logic 1, phys. 41, len 23 [ 1530.421425][ T1417] ntfs: (device loop3): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1530.448600][ T1418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1530.502430][T26537] usb 2-1: Using ep0 maxpacket: 32 [ 1530.531176][T26537] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1530.548625][T26537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.573587][T26537] usb 2-1: Product: syz [ 1530.582449][T26537] usb 2-1: Manufacturer: syz [ 1530.596176][T26537] usb 2-1: SerialNumber: syz [ 1530.609034][T26537] usb 2-1: config 0 descriptor?? [ 1530.631624][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.653010][T26537] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1530.857574][T26537] gspca_sn9c2028: read1 error -71 [ 1530.881709][T26537] gspca_sn9c2028: read1 error -71 [ 1530.895136][T26537] gspca_sn9c2028: read1 error -71 [ 1530.900325][T26537] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 1530.937004][T26537] usb 2-1: USB disconnect, device number 79 [ 1531.885909][ T1472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12394'. [ 1531.975110][ T1474] ieee802154 phy0 wpan0: encryption failed: -22 [ 1532.223769][ T1486] loop2: detected capacity change from 0 to 2048 [ 1532.273569][ T1486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.404457][ T1486] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #12: block 2: comm syz.2.12401: lblock 0 mapped to illegal pblock 2 (length 1) [ 1532.569338][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.684931][ T1500] loop3: detected capacity change from 0 to 4096 [ 1532.708605][ T1500] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1532.906196][ T1500] ntfs3: loop3: ino=0, attr_set_size [ 1532.934645][ T1509] loop1: detected capacity change from 0 to 1024 [ 1532.963317][ T1500] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1533.000251][ T1509] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1533.009979][ T1509] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1533.020203][ T1509] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.12410: Failed to acquire dquot type 0 [ 1533.033878][ T1509] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1533.053532][ T1509] EXT4-fs (loop1): 1 truncate cleaned up [ 1533.075868][ T1509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1533.104337][ T1509] Quota error (device loop1): do_check_range: Getting block 64 out of range 0-5 [ 1533.142130][ T1512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12412'. [ 1533.183472][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.826775][ T1576] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1535.278357][ T1593] netlink: 'syz.3.12452': attribute type 3 has an invalid length. [ 1535.348819][ T1593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12452'. [ 1535.750035][ T1605] loop2: detected capacity change from 0 to 764 [ 1535.829261][ T1607] loop3: detected capacity change from 0 to 2048 [ 1535.838518][ T1605] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1535.907916][ T1607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.135009][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.344064][ T1592] loop1: detected capacity change from 0 to 32768 [ 1536.416278][ T1592] jfs_lookup: iget failed on inum 32 [ 1536.463208][ T1592] jfs_lookup: iget failed on inum 32 [ 1536.922969][ T1634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12468'. [ 1536.943292][ T1634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12468'. [ 1537.095659][ T1614] loop2: detected capacity change from 0 to 32768 [ 1537.174844][ T1643] (null): rxe_set_mtu: Set mtu to 4096 [ 1537.209479][ T1643] lo speed is unknown, defaulting to 1000 [ 1537.269147][ T1643] lo speed is unknown, defaulting to 1000 [ 1537.321752][ T1643] lo speed is unknown, defaulting to 1000 [ 1537.848188][ T1660] loop1: detected capacity change from 0 to 256 [ 1538.005527][T26537] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1538.030791][ T1643] infiniband syz0: set active [ 1538.039021][ T5819] lo speed is unknown, defaulting to 1000 [ 1538.047098][ T1643] infiniband syz0: added lo [ 1538.058104][ T1643] syz0: rxe_create_cq: returned err = -12 [ 1538.065864][ T1643] infiniband syz0: Couldn't create ib_mad CQ [ 1538.077778][ T1643] infiniband syz0: Couldn't open port 1 [ 1538.184915][ T1643] RDS/IB: syz0: added [ 1538.190861][ T1643] smc: adding ib device syz0 with port count 1 [ 1538.200726][ T1643] smc: ib device syz0 port 1 has pnetid [ 1538.210674][T26537] usb 4-1: Using ep0 maxpacket: 32 [ 1538.217670][ T5819] lo speed is unknown, defaulting to 1000 [ 1538.230544][T26537] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1538.246422][ T1643] lo speed is unknown, defaulting to 1000 [ 1538.253443][T26537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.267844][T26537] usb 4-1: config 0 descriptor?? [ 1538.287587][T26537] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1538.710782][T26537] gspca_nw80x: reg_r err -71 [ 1538.715774][T26537] nw80x: probe of 4-1:0.0 failed with error -71 [ 1538.734161][T26537] usb 4-1: USB disconnect, device number 89 [ 1538.781890][ T1643] lo speed is unknown, defaulting to 1000 [ 1539.092754][ T1667] loop1: detected capacity change from 0 to 32768 [ 1539.157406][ T1643] lo speed is unknown, defaulting to 1000 [ 1539.198999][ T1667] XFS (loop1): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1539.290947][ T1667] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x1803 dinode [ 1539.340241][ T1667] XFS (loop1): Unmount and run xfs_repair [ 1539.346036][ T1667] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1539.375948][ T1667] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1539.388498][ T1667] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1539.422016][ T1667] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1539.457796][ T1667] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1539.507736][ T1667] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1539.539967][ T1667] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1539.568043][ T1667] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1539.596680][ T1667] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1539.705922][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1539.793397][ T1643] lo speed is unknown, defaulting to 1000 [ 1540.599616][ T1706] netlink: 'syz.1.12502': attribute type 21 has an invalid length. [ 1540.624119][ T1699] loop2: detected capacity change from 0 to 32768 [ 1540.658486][ T1699] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1540.896176][ T7606] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1541.135265][ T1719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12508'. [ 1541.178434][ T1719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12508'. [ 1541.669478][ T1737] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12516'. [ 1541.859608][ T1745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12520'. [ 1542.037682][ T1747] loop2: detected capacity change from 0 to 2048 [ 1542.058869][ T1751] netlink: 'syz.1.12523': attribute type 21 has an invalid length. [ 1542.073971][ T1747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1542.246172][ T1754] No such timeout policy "syz1" [ 1543.057947][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12540'. [ 1543.532195][ T1805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12549'. [ 1543.708814][ T1814] loop3: detected capacity change from 0 to 16 [ 1543.720070][ T1814] erofs: (device loop3): mounted with root inode @ nid 36. [ 1543.762395][ T1814] syz.3.12554: attempt to access beyond end of device [ 1543.762395][ T1814] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1543.788766][ T1817] netlink: 'syz.1.12555': attribute type 6 has an invalid length. [ 1543.801051][ T1814] syz.3.12554: attempt to access beyond end of device [ 1543.801051][ T1814] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1543.876531][ T1814] syz.3.12554: attempt to access beyond end of device [ 1543.876531][ T1814] loop3: rw=524288, sector=1572872, nr_sectors = 48 limit=16 [ 1543.933780][ T1814] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1543.985173][ T28] audit: type=1800 audit(1572.173:226): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12554" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1544.384903][ T1830] futex_wake_op: syz.1.12561 tries to shift op by 32; fix this program [ 1544.609238][ T1836] loop3: detected capacity change from 0 to 256 [ 1544.686477][ T1836] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1545.145272][ T1856] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12574'. [ 1545.155035][ T1856] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12574'. [ 1545.165406][ T1856] netlink: 19 bytes leftover after parsing attributes in process `syz.1.12574'. [ 1545.233919][ T1854] loop3: detected capacity change from 0 to 4096 [ 1545.351079][ T1861] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1545.629690][ T5819] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1545.832477][ T5819] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1545.850685][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.862571][ T5819] usb 3-1: Product: syz [ 1545.878968][ T5819] usb 3-1: Manufacturer: syz [ 1545.893418][ T5819] usb 3-1: SerialNumber: syz [ 1545.919973][ T5819] r8152-cfgselector 3-1: config 0 descriptor?? [ 1545.945909][ T28] audit: type=1326 audit(1574.276:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.007790][ T28] audit: type=1326 audit(1574.276:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.032108][ T28] audit: type=1326 audit(1574.276:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.057048][ T28] audit: type=1326 audit(1574.276:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.081267][ T28] audit: type=1326 audit(1574.276:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.147463][ T28] audit: type=1326 audit(1574.276:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.225931][ T28] audit: type=1326 audit(1574.308:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.288506][ T1892] loop3: detected capacity change from 0 to 8 [ 1546.335214][ T5819] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1546.343759][ T28] audit: type=1326 audit(1574.308:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.368638][ T5819] r8152-cfgselector 3-1: USB disconnect, device number 103 [ 1546.386067][ T28] audit: type=1326 audit(1574.308:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1882 comm="syz.1.12587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1546.409633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.969602][ T1914] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1547.023733][ T1914] [U] J"—e:ÀÆ" [ 1547.140589][ T1920] bridge0: port 3(dummy0) entered disabled state [ 1547.173570][ T1920] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1547.603936][ T1940] syz.1.12615: attempt to access beyond end of device [ 1547.603936][ T1940] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1547.640965][ T1944] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12617'. [ 1547.690348][ T1946] loop3: detected capacity change from 0 to 1024 [ 1547.787798][ T1946] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1547.810355][ T1946] syz.3.12618: attempt to access beyond end of device [ 1547.810355][ T1946] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1547.845036][ T1946] Buffer I/O error on dev loop3, logical block 458752, async page read [ 1547.871699][ T1946] syz.3.12618: attempt to access beyond end of device [ 1547.871699][ T1946] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1547.877718][ T5819] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1547.912973][ T1946] Buffer I/O error on dev loop3, logical block 458752, async page read [ 1547.959527][ T1955] loop1: detected capacity change from 0 to 256 [ 1548.009393][ T1955] FAT-fs (loop1): Directory bread(block 64) failed [ 1548.023792][ T1955] FAT-fs (loop1): Directory bread(block 65) failed [ 1548.053921][ T1955] FAT-fs (loop1): Directory bread(block 66) failed [ 1548.060495][ T1955] FAT-fs (loop1): Directory bread(block 67) failed [ 1548.083256][ T1955] FAT-fs (loop1): Directory bread(block 68) failed [ 1548.089921][ T1955] FAT-fs (loop1): Directory bread(block 69) failed [ 1548.098812][ T1955] FAT-fs (loop1): Directory bread(block 70) failed [ 1548.112254][ T1955] FAT-fs (loop1): Directory bread(block 71) failed [ 1548.133666][ T5819] usb 3-1: config 0 has no interfaces? [ 1548.147304][ T1955] FAT-fs (loop1): Directory bread(block 72) failed [ 1548.156471][ T5819] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1548.178357][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.187440][ T1955] FAT-fs (loop1): Directory bread(block 73) failed [ 1548.202351][ T5819] usb 3-1: Product: syz [ 1548.206850][ T5819] usb 3-1: Manufacturer: syz [ 1548.211481][ T5819] usb 3-1: SerialNumber: syz [ 1548.249567][ T5819] r8152-cfgselector 3-1: config 0 descriptor?? [ 1548.352463][ T1955] syz.1.12622: attempt to access beyond end of device [ 1548.352463][ T1955] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1548.374404][ T1955] syz.1.12622: attempt to access beyond end of device [ 1548.374404][ T1955] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1548.459757][ T5819] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1548.471272][T20681] usb 3-1: config 0 descriptor?? [ 1548.624607][ T787] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1548.675105][T20681] usb 3-1: can't set config #0, error -71 [ 1548.678089][ T5819] usb 3-1: USB disconnect, device number 104 [ 1548.829535][ T787] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1548.847960][ T787] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1548.862405][ T787] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.875331][ T787] usb 4-1: config 220 has no interface number 2 [ 1548.881667][ T787] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1548.901937][ T787] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1548.908883][ T787] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1548.918870][ T787] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1548.934523][ T787] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1548.962142][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.981337][ T787] usb 4-1: Product: syz [ 1549.000770][ T787] usb 4-1: Manufacturer: syz [ 1549.013599][ T787] usb 4-1: SerialNumber: syz [ 1549.247278][ T787] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1549.253702][ T787] usb 4-1: No valid video chain found. [ 1549.287826][ T787] usb 4-1: selecting invalid altsetting 0 [ 1549.332447][ T787] usb 4-1: selecting invalid altsetting 0 [ 1549.354268][ T787] usbtest: probe of 4-1:220.1 failed with error -22 [ 1549.370159][ T787] usb 4-1: USB disconnect, device number 90 [ 1550.398218][ T2032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12661'. [ 1550.428041][ T2032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12661'. [ 1550.464438][ T2032] netlink: 6 bytes leftover after parsing attributes in process `syz.3.12661'. [ 1550.675967][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12664'. [ 1551.281295][ T2063] xt_l2tp: v2 doesn't support IP mode [ 1551.436675][ T2068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12676'. [ 1551.460824][ T2071] loop2: detected capacity change from 0 to 512 [ 1551.485504][ T2071] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1551.515393][ T2071] EXT4-fs (loop2): invalid journal inode [ 1551.545058][ T2071] EXT4-fs (loop2): can't get journal size [ 1551.605526][ T2071] EXT4-fs (loop2): 1 truncate cleaned up [ 1551.617497][ T2073] loop1: detected capacity change from 0 to 1764 [ 1551.637179][ T2077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12681'. [ 1551.680455][ T2071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1551.770753][ T2071] EXT4-fs error (device loop2) in ext4_setattr:5682: error 28 [ 1551.929652][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.956990][ T2087] loop1: detected capacity change from 0 to 256 [ 1551.987514][ T2087] exfat: Deprecated parameter 'utf8' [ 1551.992883][ T2087] exfat: Deprecated parameter 'utf8' [ 1551.999887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.124143][ T2087] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1552.233345][ T2087] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1554.182164][ T2174] loop3: detected capacity change from 0 to 2048 [ 1554.238567][ T2174] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1554.337448][ T2181] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1554.764023][ T2197] tmpfs: Bad value for 'mpol' [ 1554.913397][ T787] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1555.118743][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.135835][ T787] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1555.157490][ T787] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1555.174032][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.192488][ T5155] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1555.200264][ T787] usb 2-1: Product: syz [ 1555.211731][ T787] usb 2-1: Manufacturer: syz [ 1555.216368][ T787] usb 2-1: SerialNumber: syz [ 1555.400640][ T5155] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1555.434447][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.462242][ T787] usb 2-1: 0:2 : does not exist [ 1555.469383][ T787] usb 2-1: unit 3 not found! [ 1555.475548][ T5155] usb 4-1: config 0 descriptor?? [ 1555.481644][ T787] usb 2-1: unit 64 not found! [ 1555.488500][ T5155] cp210x 4-1:0.0: cp210x converter detected [ 1555.502161][ T787] usb 2-1: 1:2 : does not exist [ 1555.515422][ T787] snd-usb-audio: probe of 2-1:1.1 failed with error -16 [ 1555.541755][ T787] usb 2-1: USB disconnect, device number 80 [ 1555.679122][ T2222] loop2: detected capacity change from 0 to 8192 [ 1555.702069][ T5155] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1555.712631][ T2222] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1555.737259][ T2222] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1555.751665][ T2222] REISERFS (device loop2): using ordered data mode [ 1555.786574][ T2222] reiserfs: using flush barriers [ 1555.806045][ T2222] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1555.846730][ T2222] REISERFS (device loop2): checking transaction log (loop2) [ 1555.905789][ T787] usb 4-1: USB disconnect, device number 91 [ 1555.925647][ T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1555.959420][ T787] cp210x 4-1:0.0: device disconnected [ 1556.051428][ T2229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12754'. [ 1556.064095][ T2222] REISERFS (device loop2): Using tea hash to sort names [ 1556.098672][ T2222] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1556.140881][ T2222] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1557.010680][ T5819] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1557.124929][ T2263] loop3: detected capacity change from 0 to 8192 [ 1557.153413][ T2265] netlink: 'syz.0.12772': attribute type 3 has an invalid length. [ 1557.182758][ T2263] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1557.195609][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.215409][ T5819] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1557.237957][ T5819] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1557.247585][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.256625][ T5819] usb 2-1: Product: syz [ 1557.260937][ T5819] usb 2-1: Manufacturer: syz [ 1557.266400][ T5819] usb 2-1: SerialNumber: syz [ 1557.276866][ T5819] cdc_ncm 2-1:1.0: skipping garbage [ 1557.282315][ T5819] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1557.283356][ T2263] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1557.290116][ T5819] cdc_ncm 2-1:1.0: bind() failure [ 1557.315562][ T5819] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1557.337443][ T5819] cdc_ncm 2-1:1.1: bind() failure [ 1557.380941][ T2263] REISERFS (device loop3): using ordered data mode [ 1557.408231][ T2263] reiserfs: using flush barriers [ 1557.422849][ T2263] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1557.477897][ T2263] REISERFS (device loop3): checking transaction log (loop3) [ 1557.493998][ T2263] REISERFS (device loop3): Using rupasov hash to sort names [ 1557.502728][ T2263] REISERFS (device loop3): using 3.5.x disk format [ 1557.520813][ T2263] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1557.548316][ T2263] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1557.562474][ T2263] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1557.581464][ T2263] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1557.594350][ T5819] usb 2-1: USB disconnect, device number 81 [ 1557.621706][ T2274] netlink: 'syz.2.12776': attribute type 10 has an invalid length. [ 1557.632051][ T2274] veth1_macvtap: left promiscuous mode [ 1558.533166][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12790'. [ 1558.724978][ T5819] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1558.910687][ T5819] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1558.938999][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1558.959669][ T5819] usb 4-1: Product: syz [ 1558.963902][ T5819] usb 4-1: SerialNumber: syz [ 1558.975640][ T5819] usb 4-1: config 0 descriptor?? [ 1559.156828][ T2329] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1559.200736][ T5819] hso 4-1:0.0: Failed to find BULK IN ep [ 1559.329974][ T2330] loop1: detected capacity change from 0 to 4096 [ 1559.393178][ T5819] usb 4-1: USB disconnect, device number 92 [ 1559.777124][ T2347] loop1: detected capacity change from 0 to 2048 [ 1559.820673][ T2347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1559.851805][ T2347] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1559.926508][ T2353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1560.094851][ T2357] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1560.102317][ T2357] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1560.190844][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.343368][ T2364] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1560.351774][ T2364] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1560.697234][ T2375] loop1: detected capacity change from 0 to 4096 [ 1560.729659][ T2375] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1560.818385][ T2348] loop2: detected capacity change from 0 to 32768 [ 1560.939093][ T2348] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1561.105322][ T2348] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1561.161949][ T2348] XFS (loop2): Starting recovery (logdev: internal) [ 1561.232862][ T2348] XFS (loop2): Ending recovery (logdev: internal) [ 1561.314762][ T2348] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1561.432319][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1562.147444][ T2433] delete_channel: no stack [ 1563.093561][ T2487] loop1: detected capacity change from 0 to 512 [ 1563.135590][ T2487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1563.146977][ T2491] netlink: 'syz.0.12860': attribute type 2 has an invalid length. [ 1563.147051][ T2491] netlink: 'syz.0.12860': attribute type 1 has an invalid length. [ 1563.214058][ T2487] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 1563.243214][ T2487] EXT4-fs (loop1): Remounting filesystem read-only [ 1563.260814][ T2487] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.1.12858: cleanup dec ref error -28 [ 1563.283418][ T2487] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 1563.343399][ T2487] EXT4-fs (loop1): 1 orphan inode deleted [ 1563.406219][ T2487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.547225][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.766323][ T2515] netlink: 'syz.2.12870': attribute type 5 has an invalid length. [ 1563.809859][ T2515] : entered promiscuous mode [ 1564.090896][ T2528] binder: 2527:2528 ioctl c018620c 200000001180 returned -22 [ 1564.205377][ T5842] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1564.295504][ T2507] loop3: detected capacity change from 0 to 32768 [ 1564.394797][ T5842] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1564.413931][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1564.438295][ T5842] usb 1-1: Product: syz [ 1564.461896][ T2540] loop2: detected capacity change from 0 to 512 [ 1564.468555][ T5842] usb 1-1: SerialNumber: syz [ 1564.490249][ T5842] usb 1-1: config 0 descriptor?? [ 1564.536632][ T2540] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.12879: inode has both inline data and extents flags [ 1564.588053][ T2546] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1564.598157][ T2540] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.12879: couldn't read orphan inode 15 (err -117) [ 1564.663264][ T2540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.723475][ T5842] hso 1-1:0.0: Can't find BULK IN endpoint [ 1564.771509][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.950583][ T5842] usb 1-1: USB disconnect, device number 73 [ 1565.136088][ T2563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12887'. [ 1565.217423][ T2568] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1565.731106][ T2591] loop2: detected capacity change from 0 to 512 [ 1566.058722][ T2608] loop1: detected capacity change from 0 to 256 [ 1566.151804][ T2608] FAT-fs (loop1): Directory bread(block 64) failed [ 1566.180191][ T2608] FAT-fs (loop1): Directory bread(block 65) failed [ 1566.199410][ T2608] FAT-fs (loop1): Directory bread(block 66) failed [ 1566.206025][ T2615] netlink: 'syz.0.12907': attribute type 12 has an invalid length. [ 1566.206048][ T2615] netlink: 120 bytes leftover after parsing attributes in process `syz.0.12907'. [ 1566.253743][ T2608] FAT-fs (loop1): Directory bread(block 67) failed [ 1566.280081][ T2608] FAT-fs (loop1): Directory bread(block 68) failed [ 1566.300167][ T2608] FAT-fs (loop1): Directory bread(block 69) failed [ 1566.320792][ T2608] FAT-fs (loop1): Directory bread(block 70) failed [ 1566.350475][ T2608] FAT-fs (loop1): Directory bread(block 71) failed [ 1566.357185][ T2608] FAT-fs (loop1): Directory bread(block 72) failed [ 1566.385016][ T2608] FAT-fs (loop1): Directory bread(block 73) failed [ 1566.403733][ T2621] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12910'. [ 1566.711647][ T2634] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.12915'. [ 1567.700433][ T787] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1567.924392][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 1567.932405][ T787] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1567.947292][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.971295][ T787] usb 1-1: config 0 has no interface number 0 [ 1567.977455][ T787] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1568.011501][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.045081][ T787] usb 1-1: config 0 descriptor?? [ 1568.174113][ T2704] loop2: detected capacity change from 0 to 512 [ 1568.206173][ T2704] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1568.287184][ T2704] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 1568.324053][ T5842] usb 1-1: USB disconnect, device number 74 [ 1568.360393][ T2704] EXT4-fs (loop2): Remounting filesystem read-only [ 1568.372332][ T2704] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.2.12941: cleanup dec ref error -28 [ 1568.388664][ T2704] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 1568.399138][ T2704] EXT4-fs (loop2): 1 orphan inode deleted [ 1568.406444][ T2704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.477375][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.525107][ T2717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.538206][ T2717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.545460][ T2717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.934611][ T2735] loop1: detected capacity change from 0 to 16 [ 1568.987105][ T2735] erofs: (device loop1): mounted with root inode @ nid 36. [ 1569.005652][ T2735] erofs: (device loop1): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 1569.331842][ T787] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1569.339627][ T2753] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.12959' sets config #1 [ 1569.547508][ T787] usb 4-1: not running at top speed; connect to a high speed hub [ 1569.591193][ T787] usb 4-1: config 129 has an invalid interface number: 35 but max is 0 [ 1569.601888][ T787] usb 4-1: config 129 has no interface number 0 [ 1569.608222][ T787] usb 4-1: config 129 interface 35 has no altsetting 0 [ 1569.646677][ T787] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=26.99 [ 1569.661087][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.679014][ T787] usb 4-1: Product: syz [ 1569.688866][ T787] usb 4-1: Manufacturer: syz [ 1569.698314][ T787] usb 4-1: SerialNumber: syz [ 1569.966237][ T787] usb_ehset_test: probe of 4-1:129.35 failed with error -32 [ 1569.994958][ T787] usb 4-1: USB disconnect, device number 93 [ 1570.180021][ T2790] netlink: 'syz.1.12975': attribute type 30 has an invalid length. [ 1570.429909][ T2801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12981'. [ 1570.446267][ T2801] vlan0: entered promiscuous mode [ 1570.659085][ T2806] loop3: detected capacity change from 0 to 512 [ 1570.696335][ T2806] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1570.760977][ T2806] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 1570.815775][ T2806] EXT4-fs (loop3): Remounting filesystem read-only [ 1570.822516][ T2806] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.12983: cleanup dec ref error -28 [ 1570.879354][ T2826] loop1: detected capacity change from 0 to 256 [ 1570.887491][ T2806] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 1570.910368][ T2826] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1570.937706][ T2806] EXT4-fs (loop3): 1 orphan inode deleted [ 1570.955631][ T2806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.127263][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.165841][ T2834] netlink: 'syz.2.12991': attribute type 26 has an invalid length. [ 1571.312262][ T2838] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1571.936736][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1571.936754][ T28] audit: type=1326 audit(1602.161:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2861 comm="syz.3.13003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7979ce59 code=0x7ffc0000 [ 1572.025174][ T28] audit: type=1326 audit(1602.161:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2861 comm="syz.3.13003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7979ce59 code=0x7ffc0000 [ 1572.086113][ T28] audit: type=1326 audit(1602.171:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2861 comm="syz.3.13003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fce7979ce59 code=0x7ffc0000 [ 1572.119052][ T28] audit: type=1326 audit(1602.171:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2861 comm="syz.3.13003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7979ce59 code=0x7ffc0000 [ 1572.417299][T26537] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1572.596352][T26537] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1572.619850][T26537] usb 1-1: config 0 has no interface number 0 [ 1572.651926][T26537] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1572.670862][T26537] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1572.688370][T26537] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1572.704887][T26537] usb 1-1: Manufacturer: syz [ 1572.711136][T26537] usb 1-1: SerialNumber: syz [ 1572.753870][T26537] usb 1-1: config 0 descriptor?? [ 1572.818601][ T2893] random: crng reseeded on system resumption [ 1572.993394][ T2896] loop1: detected capacity change from 0 to 4096 [ 1573.002775][ T2896] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1573.057312][ T2896] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1573.156632][T26537] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 1573.200217][T26537] usb 1-1: USB disconnect, device number 75 [ 1573.522985][ T2908] loop3: detected capacity change from 0 to 64 [ 1573.964436][ T2922] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 1574.222967][ T2932] loop3: detected capacity change from 0 to 256 [ 1574.691801][ T2953] usb usb9: usbfs: process 2953 (syz.1.13047) did not claim interface 0 before use [ 1575.078202][ T2969] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13055'. [ 1575.252051][ T2977] set match dimension is over the limit! [ 1575.265064][ T2973] loop2: detected capacity change from 0 to 1764 [ 1575.293538][ T2973] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1575.319980][ T2979] netlink: 'syz.1.13059': attribute type 13 has an invalid length. [ 1576.129991][ T3009] loop2: detected capacity change from 0 to 512 [ 1576.173196][ T3009] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1576.254552][ T3009] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1576.330946][ T3009] EXT4-fs (loop2): 1 truncate cleaned up [ 1576.367635][ T3009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1576.543979][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.620258][ T2997] loop3: detected capacity change from 0 to 32768 [ 1576.720339][ T2997] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 1576.720339][ T2997] [ 1576.742174][ T2997] ERROR: (device loop3): remounting filesystem as read-only [ 1576.882205][ T3026] netlink: 'syz.0.13090': attribute type 2 has an invalid length. [ 1577.142262][ T5844] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1577.171910][ T3019] loop1: detected capacity change from 0 to 32768 [ 1577.240652][ T3019] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 1577.240652][ T3019] [ 1577.265308][ T3037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13087'. [ 1577.278239][ T3037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13087'. [ 1577.280046][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1577.294137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.311192][ T3019] ERROR: (device loop1): remounting filesystem as read-only [ 1577.318537][ T3019] ialloc: diAlloc returned -5! [ 1577.350775][ T5844] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1577.383945][ T5844] usb 3-1: config 0 has no interface number 0 [ 1577.419896][ T5844] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1577.466698][ T5844] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1577.485867][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1577.510036][ T5844] usb 3-1: Manufacturer: syz [ 1577.523451][ T5844] usb 3-1: SerialNumber: syz [ 1577.536141][ T5844] usb 3-1: config 0 descriptor?? [ 1577.563179][ T3038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1577.665657][ T3044] loop3: detected capacity change from 0 to 64 [ 1577.753657][ T3044] syz.3.13092: attempt to access beyond end of device [ 1577.753657][ T3044] loop3: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1577.777482][ T3044] Buffer I/O error on dev loop3, logical block 1295, async page read [ 1577.812262][ T3044] syz.3.13092: attempt to access beyond end of device [ 1577.812262][ T3044] loop3: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1577.828355][ T3044] Buffer I/O error on dev loop3, logical block 1295, async page read [ 1577.849458][ T28] audit: type=1800 audit(1608.502:241): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13092" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 1577.943077][ T5844] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 1577.963486][ T5844] usb 3-1: USB disconnect, device number 105 [ 1578.434426][ T3068] netlink: 232 bytes leftover after parsing attributes in process `syz.3.13103'. [ 1578.475096][ T3068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13103'. [ 1578.564178][ T3072] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13106'. [ 1578.643477][ T3075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1578.778301][ T3077] loop3: detected capacity change from 0 to 2048 [ 1578.805032][ T3077] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1578.807712][ T3083] loop2: detected capacity change from 0 to 16 [ 1578.842893][ T3084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1578.846055][ T3081] loop1: detected capacity change from 0 to 1024 [ 1578.854856][ T3077] syz.3.13108: attempt to access beyond end of device [ 1578.854856][ T3077] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1578.907310][ T3083] erofs: (device loop2): mounted with root inode @ nid 36. [ 1578.951841][ T3083] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1578.966720][ T3077] syz.3.13108: attempt to access beyond end of device [ 1578.966720][ T3077] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 1578.994232][ T3086] netlink: 'syz.0.13112': attribute type 4 has an invalid length. [ 1579.003337][ T3081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.019351][ T3083] syz.2.13111: attempt to access beyond end of device [ 1579.019351][ T3083] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1579.034241][ T3077] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 1579.094674][ T3081] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.13109: directory missing '..' [ 1579.125984][ T3083] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1579.138020][ T3083] syz.2.13111: attempt to access beyond end of device [ 1579.138020][ T3083] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1579.221714][ T3083] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 1579.239299][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1579.253579][ T28] audit: type=1800 audit(1610.014:242): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13111" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1579.495157][ T3094] loop1: detected capacity change from 0 to 256 [ 1579.645018][ T3094] FAT-fs (loop1): Directory bread(block 64) failed [ 1579.669490][ T3094] FAT-fs (loop1): Directory bread(block 65) failed [ 1579.676192][ T3094] FAT-fs (loop1): Directory bread(block 66) failed [ 1579.704877][ T3094] FAT-fs (loop1): Directory bread(block 67) failed [ 1579.742494][ T3094] FAT-fs (loop1): Directory bread(block 68) failed [ 1579.749171][ T3094] FAT-fs (loop1): Directory bread(block 69) failed [ 1579.775066][ T3094] FAT-fs (loop1): Directory bread(block 70) failed [ 1579.809524][ T3094] FAT-fs (loop1): Directory bread(block 71) failed [ 1579.816236][ T3094] FAT-fs (loop1): Directory bread(block 72) failed [ 1579.850055][ T3094] FAT-fs (loop1): Directory bread(block 73) failed [ 1579.876802][ T3108] random: crng reseeded on system resumption [ 1580.096297][ T3113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13123'. [ 1580.804711][ T3138] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1581.215560][ T787] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1581.380358][ T3166] pimreg: entered allmulticast mode [ 1581.401679][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 1581.409187][ T787] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1581.426151][ T787] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1581.456512][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.466886][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1581.475873][ T787] usb 4-1: config 1 has no interface number 0 [ 1581.482107][ T787] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1581.491239][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.506460][ T787] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1581.719372][ T787] snd_usb_pod 4-1:1.1: set_interface failed [ 1581.725549][ T787] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1581.747320][ T787] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1581.782298][ T787] usb 4-1: USB disconnect, device number 94 [ 1582.171568][ T3191] loop2: detected capacity change from 0 to 256 [ 1582.667296][ T3206] netlink: 'syz.2.13167': attribute type 3 has an invalid length. [ 1582.685362][ T3206] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1583.267387][ T3223] loop1: detected capacity change from 0 to 4096 [ 1583.305603][ T3223] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1583.365843][ T3229] netlink: 'syz.0.13174': attribute type 3 has an invalid length. [ 1583.395080][ T3227] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1583.473835][ T3223] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1583.507785][ T3223] ntfs3: loop1: Failed to load $Extend (-22). [ 1583.534319][ T3223] ntfs3: loop1: Failed to initialize $Extend. [ 1583.691343][ T28] audit: type=1800 audit(1614.767:243): pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13172" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1583.774790][ T3237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13177'. [ 1583.799413][ T3237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13177'. [ 1584.336211][ T5842] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1584.555144][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1584.579979][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1584.617606][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1584.640788][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1584.667233][ T5842] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1584.677279][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.714961][ T5842] usb 1-1: Product: syz [ 1584.719212][ T5842] usb 1-1: Manufacturer: syz [ 1584.733812][ T5842] usb 1-1: SerialNumber: syz [ 1584.750249][ T5842] usb 1-1: config 0 descriptor?? [ 1585.028221][ T5842] adutux 1-1:0.0: Could not retrieve serial number [ 1585.034962][ T5842] adutux: probe of 1-1:0.0 failed with error -5 [ 1585.259433][ T5842] usb 1-1: USB disconnect, device number 76 [ 1585.469201][ T3297] virtiofs: Unknown parameter 'always' [ 1585.700285][ T3304] xt_cgroup: xt_cgroup: no path or classid specified [ 1585.858807][ T3313] loop3: detected capacity change from 0 to 256 [ 1585.884715][ T3313] exfat: Deprecated parameter 'utf8' [ 1585.914224][ T3313] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1586.655666][ T3344] loop1: detected capacity change from 0 to 16 [ 1586.733538][ T5869] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1587.003488][ T5818] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1587.191128][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 1587.204236][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1587.213827][ T5818] usb 2-1: config 6 has an invalid interface number: 35 but max is 1 [ 1587.227191][ T5818] usb 2-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config [ 1587.246016][ T5818] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1587.254937][ T5818] usb 2-1: config 6 has no interface number 0 [ 1587.283543][ T5818] usb 2-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30 [ 1587.301870][ T5818] usb 2-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 1587.352200][ T5818] usb 2-1: config 6 interface 35 has no altsetting 0 [ 1587.373984][ T5818] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1587.400297][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.457013][ T5818] usb 2-1: Product: syz [ 1587.479310][ T5818] usb 2-1: Manufacturer: syz [ 1587.483967][ T5818] usb 2-1: SerialNumber: syz [ 1587.734019][ T5818] ums-jumpshot 2-1:6.35: USB Mass Storage device detected [ 1587.803284][ T5818] ums-jumpshot 2-1:6.35: Quirks match for vid 05dc pid 0001: 2 [ 1587.887856][ T5818] usb 2-1: USB disconnect, device number 82 [ 1587.983316][ T3401] tmpfs: Bad value for 'mpol' [ 1588.572769][ T28] audit: type=1326 audit(1620.003:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1588.700268][ T28] audit: type=1326 audit(1620.003:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1588.785993][ T28] audit: type=1326 audit(1620.057:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1588.839851][ T28] audit: type=1326 audit(1620.067:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1588.932713][ T28] audit: type=1326 audit(1620.067:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1588.975130][ T28] audit: type=1326 audit(1620.067:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1589.079344][ T28] audit: type=1326 audit(1620.067:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1589.181578][ T28] audit: type=1326 audit(1620.078:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1589.240532][ T28] audit: type=1326 audit(1620.078:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3414 comm="syz.2.13238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1589.635043][ T3456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13253'. [ 1589.669461][ T3456] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1589.677349][ T3456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13253'. [ 1590.031521][ T3469] loop3: detected capacity change from 0 to 512 [ 1590.089087][ T3469] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1590.160753][ T3469] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.13258: Allocating blocks 41-42 which overlap fs metadata [ 1590.201307][ T3469] Quota error (device loop3): write_blk: dquota write failed [ 1590.238180][ T3469] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.13258: Allocating blocks 41-42 which overlap fs metadata [ 1590.258611][ T3469] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.13258: Failed to acquire dquot type 1 [ 1590.270925][ T3469] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1590.304159][ T3469] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.13258: corrupted inode contents [ 1590.365179][ T3469] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #12: comm syz.3.13258: mark_inode_dirty error [ 1590.377375][ T3469] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.13258: corrupted inode contents [ 1590.424406][ T3469] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.13258: mark_inode_dirty error [ 1590.490306][ T3469] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.13258: corrupted inode contents [ 1590.522263][ T3469] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1590.554673][ T3469] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.13258: corrupted inode contents [ 1590.596104][ T3469] EXT4-fs error (device loop3): ext4_truncate:4301: inode #12: comm syz.3.13258: mark_inode_dirty error [ 1590.647556][ T3469] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1590.674566][ T3469] EXT4-fs (loop3): 1 truncate cleaned up [ 1590.705776][ T3469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1590.762340][ T3469] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.843529][ T3490] tmpfs: Bad value for 'mpol' [ 1591.097989][ T3499] loop1: detected capacity change from 0 to 64 [ 1591.171791][ T3503] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13266'. [ 1591.217128][ T3503] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1591.398191][ T3509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13269'. [ 1591.922520][ T3526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1592.532837][ T3547] loop2: detected capacity change from 0 to 1024 [ 1592.623568][ T3547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.774816][ T3547] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.13287: Attempting to read directory block (623) that is past i_size (638464) [ 1592.826915][ T3547] EXT4-fs (loop2): Remounting filesystem read-only [ 1592.943418][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.232315][ T3537] loop1: detected capacity change from 0 to 32768 [ 1593.275912][ T3566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1593.300890][ T3537] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1593.417931][ T3573] loop2: detected capacity change from 0 to 4096 [ 1593.456658][ T3578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1593.470211][ T3537] XFS (loop1): Ending clean mount [ 1593.681610][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1593.869152][ T3586] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1593.908015][ T3588] loop3: detected capacity change from 0 to 1024 [ 1593.962281][ T3588] hfsplus: extend alloc file! (16384,256,150995124) [ 1594.016811][ T3590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13304'. [ 1594.294137][ T3594] netlink: 'syz.2.13306': attribute type 2 has an invalid length. [ 1594.319133][ T3594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13306'. [ 1594.438710][ T3599] loop1: detected capacity change from 0 to 1024 [ 1594.455621][ T3600] loop3: detected capacity change from 0 to 1024 [ 1594.535235][ T3599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1594.711746][ T3599] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.13301: Attempting to read directory block (623) that is past i_size (638464) [ 1594.759156][ T3599] EXT4-fs (loop1): Remounting filesystem read-only [ 1594.883233][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.224100][ T3625] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1595.256033][ T3625] 0·: renamed from hsr_slave_1 (while UP) [ 1595.274011][ T3625] 0·: entered allmulticast mode [ 1595.299943][ T3625] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1596.224038][ T3663] loop1: detected capacity change from 0 to 8 [ 1596.252690][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13337'. [ 1596.314315][ T3663] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1596.327059][ T3663] SQUASHFS error: Failed to read block 0x0: -5 [ 1596.333435][ T3663] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1596.352151][ T3663] SQUASHFS error: Failed to read block 0x0: -5 [ 1596.361875][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1596.361890][ T28] audit: type=1800 audit(1628.361:253): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13338" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 1596.545158][ T3670] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1596.581638][ T3674] xt_limit: Overflow, try lower: 0/0 [ 1596.729306][ T3679] loop3: detected capacity change from 0 to 128 [ 1597.256433][ T5842] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1597.435629][ T5842] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1597.453204][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.481299][ T5842] usb 3-1: config 0 descriptor?? [ 1597.488680][ T3707] loop1: detected capacity change from 0 to 4096 [ 1597.497187][ T5842] cp210x 3-1:0.0: cp210x converter detected [ 1597.728905][ T5842] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1597.842466][ T3715] sg_write: data in/out 262268/45 bytes for SCSI command 0x7a-- guessing data in; [ 1597.842466][ T3715] program syz.0.13364 not setting count and/or reply_len properly [ 1597.932223][ T5842] usb 3-1: USB disconnect, device number 106 [ 1597.951561][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1597.957618][ T3719] netlink: 'syz.0.13366': attribute type 1 has an invalid length. [ 1597.974642][ T3719] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13366'. [ 1597.984020][ T5842] cp210x 3-1:0.0: device disconnected [ 1597.992725][ T5844] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1598.013415][ T3719] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13366'. [ 1598.189196][ T5844] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1598.201509][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.211138][ T5844] usb 4-1: Product: syz [ 1598.215364][ T5844] usb 4-1: Manufacturer: syz [ 1598.220631][ T5844] usb 4-1: SerialNumber: syz [ 1598.256312][ T5844] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1598.309351][ T5155] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1598.341136][ T3729] netlink: 'syz.1.13371': attribute type 10 has an invalid length. [ 1598.360617][ T3729] hsr0: entered promiscuous mode [ 1598.377709][ T3729] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1598.439561][ T3729] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1598.450726][T20268] Bluetooth: hci0: command tx timeout [ 1598.514859][ T3729] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1598.544148][ T3729] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1598.869727][ T5844] usb 4-1: USB disconnect, device number 95 [ 1599.297492][ T5155] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1599.304609][ T5155] ath9k_htc: Failed to initialize the device [ 1599.329984][ T5844] usb 4-1: ath9k_htc: USB layer deinitialized [ 1599.766331][ T3781] netlink: 'syz.3.13397': attribute type 2 has an invalid length. [ 1599.828808][ T2208] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1599.996982][ T3793] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1600.015931][ T2208] usb 2-1: Using ep0 maxpacket: 8 [ 1600.025528][ T2208] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1600.052766][ T2208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.060811][ T2208] usb 2-1: Product: syz [ 1600.080527][ T2208] usb 2-1: Manufacturer: syz [ 1600.085254][ T2208] usb 2-1: SerialNumber: syz [ 1600.109537][ T2208] usb 2-1: config 0 descriptor?? [ 1600.192146][ T5842] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1600.256862][ T3801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13407'. [ 1600.323597][ T2208] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1600.385286][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1600.404126][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.425439][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1600.447392][ T5842] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1600.464557][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.487000][ T5842] usb 4-1: Product: syz [ 1600.496800][ T5842] usb 4-1: Manufacturer: syz [ 1600.506578][ T5842] usb 4-1: SerialNumber: syz [ 1600.519635][ T2208] usb write operation failed. (-71) [ 1600.538573][ T2208] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1600.558786][ T5842] usb 4-1: selecting invalid altsetting 1 [ 1600.576106][ T5842] usb 4-1: unit 6 not found! [ 1600.580062][ T2208] dvbdev: DVB: registering new adapter (Terratec H7) [ 1600.597947][ T2208] usb 2-1: media controller created [ 1600.611908][ T2208] usb read operation failed. (-71) [ 1600.629569][ T5842] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1600.636581][ T2208] usb write operation failed. (-71) [ 1600.646291][ T2208] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 1600.691492][ T2208] usb 2-1: USB disconnect, device number 83 [ 1600.746511][ T7606] udevd[7606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.836808][ T5844] usb 4-1: USB disconnect, device number 96 [ 1601.546822][ T3830] netlink: 'syz.2.13421': attribute type 3 has an invalid length. [ 1601.679371][ T3834] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1601.835732][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.870549][ T3839] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1601.972222][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13427'. [ 1602.130529][ T3823] loop1: detected capacity change from 0 to 32768 [ 1602.206353][ T3823] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 1602.206353][ T3823] [ 1602.244173][ T3823] ialloc: diAlloc returned -5! [ 1602.401543][ T5818] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1602.598085][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 1602.642623][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1602.664604][ T5818] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1602.687104][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 1602.725544][ T5818] usb 4-1: Product: syz [ 1602.743705][ T5818] usb 4-1: Manufacturer: syz [ 1602.762259][ T5818] usb 4-1: SerialNumber: syz [ 1602.793133][ T5818] usb 4-1: config 0 descriptor?? [ 1602.814277][ T5818] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input87 [ 1602.863346][ T5818] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1602.897257][ T3869] libceph: resolve '400' (ret=-3): failed [ 1602.908728][ T5818] usbtouchscreen: probe of 4-1:0.0 failed with error -8 [ 1603.119232][ T5844] usb 4-1: USB disconnect, device number 97 [ 1603.135674][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13444'. [ 1603.678166][ T28] audit: type=1326 audit(1636.215:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1603.753884][ T28] audit: type=1326 audit(1636.215:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1603.845550][ T28] audit: type=1326 audit(1636.215:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1603.919934][ T28] audit: type=1326 audit(1636.215:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1603.995233][ T28] audit: type=1326 audit(1636.215:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1604.088681][ T28] audit: type=1326 audit(1636.215:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1604.169194][ T28] audit: type=1326 audit(1636.215:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1604.246389][ T28] audit: type=1326 audit(1636.215:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1604.311868][ T3923] binder: BC_ATTEMPT_ACQUIRE not supported [ 1604.320906][ T3923] binder: 3922:3923 ioctl c0306201 2000000003c0 returned -22 [ 1604.331801][ T28] audit: type=1326 audit(1636.215:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3902 comm="syz.2.13457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f229f99ce59 code=0x7ffc0000 [ 1604.474295][ T3930] netlink: 'syz.2.13469': attribute type 21 has an invalid length. [ 1604.496262][ T3930] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13469'. [ 1605.123240][ T3927] loop3: detected capacity change from 0 to 32768 [ 1605.167514][ T3927] JBD2: Ignoring recovery information on journal [ 1605.245141][ T3927] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1605.372804][ T3927] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1605.430306][ T3927] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1605.505242][ T3927] OCFS2: File system is now read-only. [ 1605.510794][ T3927] (syz.3.13468,3927,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1605.570569][ T3927] (syz.3.13468,3927,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1605.578558][ T3927] (syz.3.13468,3927,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1605.681826][ T3927] (syz.3.13468,3927,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1605.695700][ T3927] (syz.3.13468,3927,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1605.719666][ T3927] (syz.3.13468,3927,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1605.745836][ T3927] (syz.3.13468,3927,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1605.784338][ T3927] (syz.3.13468,3927,0):ocfs2_mknod:385 ERROR: status = -30 [ 1605.792418][ T3927] (syz.3.13468,3927,0):ocfs2_mknod:502 ERROR: status = -30 [ 1605.827820][ T3927] (syz.3.13468,3927,0):ocfs2_mkdir:659 ERROR: status = -30 [ 1605.975550][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 1606.647029][ T3985] netlink: 'syz.2.13496': attribute type 21 has an invalid length. [ 1606.668727][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13496'. [ 1607.634926][ T4025] loop3: detected capacity change from 0 to 16 [ 1607.650475][ T4025] erofs: (device loop3): mounted with root inode @ nid 36. [ 1607.668885][ T5844] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1607.702536][ T4025] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1607.751418][ T4025] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1607.765555][ T4025] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1607.863556][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 1607.885248][ T5844] usb 2-1: config 0 has an invalid interface number: 88 but max is 3 [ 1607.905573][ T5844] usb 2-1: config 0 has an invalid interface number: 250 but max is 3 [ 1607.930776][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.953225][ T5844] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1607.982613][ T5844] usb 2-1: config 0 has no interface number 0 [ 1608.001952][ T5844] usb 2-1: config 0 has no interface number 1 [ 1608.021266][ T5844] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1608.038175][ T5844] usb 2-1: config 0 interface 250 has no altsetting 0 [ 1608.060364][ T5844] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1608.084600][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.118395][ T5844] usb 2-1: config 0 descriptor?? [ 1608.257886][ T4043] netlink: 460 bytes leftover after parsing attributes in process `syz.0.13524'. [ 1608.277318][ T4041] loop3: detected capacity change from 0 to 512 [ 1608.298169][ T4045] loop2: detected capacity change from 0 to 8 [ 1608.379442][ T5844] usb 2-1: string descriptor 0 read error: -71 [ 1608.437757][ T4041] FAT-fs (loop3): FAT read failed (blocknr 128) [ 1608.444212][ T5844] usb 2-1: USB disconnect, device number 84 [ 1608.714393][ T4055] loop2: detected capacity change from 0 to 128 [ 1608.795841][ T4057] bridge0: port 1(bridge_slave_0) entered listening state [ 1608.910076][ T4059] xt_connbytes: Forcing CT accounting to be enabled [ 1608.935882][ T4059] xt_bpf: check failed: parse error [ 1609.248851][ T4074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13541'. [ 1609.369927][ T4080] loop2: detected capacity change from 0 to 764 [ 1609.441648][ T4082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13544'. [ 1609.461718][ T4080] Symlink component flag not implemented [ 1609.485926][ T4080] Symlink component flag not implemented [ 1609.532601][ T4080] Symlink component flag not implemented (129) [ 1609.538811][ T4080] Symlink component flag not implemented (6) [ 1609.976576][ T4106] loop3: detected capacity change from 0 to 16 [ 1609.998531][ T4106] erofs: (device loop3): mounted with root inode @ nid 36. [ 1610.040293][ T4106] syz.3.13556: attempt to access beyond end of device [ 1610.040293][ T4106] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1610.079734][ T4106] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -20 in[62, 4034] out[4096] [ 1610.117796][ T28] audit: type=1800 audit(1643.124:263): pid=4106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13556" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1610.204244][ T4112] ipvlan1: entered promiscuous mode [ 1610.209544][ T4112] ipvlan1: entered allmulticast mode [ 1610.257958][ T4112] veth0_vlan: entered allmulticast mode [ 1610.541987][ T4124] netlink: 'syz.1.13565': attribute type 1 has an invalid length. [ 1610.636804][ T4127] loop2: detected capacity change from 0 to 8192 [ 1610.652306][ T4127] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1610.794425][ T4130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13567'. [ 1610.814599][ T4133] loop3: detected capacity change from 0 to 256 [ 1610.845623][ T4130] netlink: 'syz.0.13567': attribute type 1 has an invalid length. [ 1610.988796][ T4135] loop1: detected capacity change from 0 to 1024 [ 1611.017220][ T4133] FAT-fs (loop3): Directory bread(block 64) failed [ 1611.025482][ T4133] FAT-fs (loop3): Directory bread(block 65) failed [ 1611.036692][ T4135] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1611.069776][ T4133] FAT-fs (loop3): Directory bread(block 66) failed [ 1611.076379][ T4133] FAT-fs (loop3): Directory bread(block 67) failed [ 1611.097407][ T4135] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1611.134238][ T4133] FAT-fs (loop3): Directory bread(block 68) failed [ 1611.136118][ T4135] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1611.140804][ T4133] FAT-fs (loop3): Directory bread(block 69) failed [ 1611.141101][ T4133] FAT-fs (loop3): Directory bread(block 70) failed [ 1611.186303][ T4135] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.13570: unexpected bad inode w/o EXT4_IGET_BAD [ 1611.219612][ T4135] EXT4-fs (loop1): no journal found [ 1611.225176][ T4135] EXT4-fs (loop1): can't get journal size [ 1611.239897][ T4133] FAT-fs (loop3): Directory bread(block 71) failed [ 1611.255673][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1611.265432][ T4133] FAT-fs (loop3): Directory bread(block 72) failed [ 1611.303223][ T4133] FAT-fs (loop3): Directory bread(block 73) failed [ 1611.398874][ T4142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13573'. [ 1611.488192][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1611.788248][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13579'. [ 1612.140521][ T4171] loop2: detected capacity change from 0 to 16 [ 1612.169901][ T4171] erofs: (device loop2): mounted with root inode @ nid 36. [ 1612.383586][ T5155] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1612.395056][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13592'. [ 1612.476622][ T5844] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1612.597357][ T5155] usb 2-1: Using ep0 maxpacket: 8 [ 1612.605737][ T5155] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1612.618791][ T5155] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.646895][ T5155] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1612.663977][ T5844] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1612.682403][ T5844] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.704938][ T5155] usb 2-1: New USB device found, idVendor=0402, idProduct=c010, bcdDevice= 0.40 [ 1612.716428][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.729335][ T5155] usb 2-1: Product: syz [ 1612.754342][ T5844] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1612.765776][ T5155] usb 2-1: Manufacturer: syz [ 1612.770407][ T5155] usb 2-1: SerialNumber: syz [ 1612.777488][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.791954][ T5844] usb 3-1: Product: syz [ 1612.800568][ T5844] usb 3-1: Manufacturer: syz [ 1612.812021][ T5844] usb 3-1: SerialNumber: syz [ 1612.842061][ T5844] rtl8150 3-1:1.0: couldn't find required endpoints [ 1612.853466][ T5844] rtl8150: probe of 3-1:1.0 failed with error -5 [ 1613.032350][ T5155] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1613.085546][ T4202] netlink: 'syz.3.13602': attribute type 9 has an invalid length. [ 1613.096035][ T5155] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1613.105672][ T4202] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13602'. [ 1613.110077][ T787] usb 3-1: USB disconnect, device number 107 [ 1613.130233][ T5155] usb 2-1: USB disconnect, device number 85 [ 1613.154498][ T7606] udevd[7606]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1613.584036][ T4220] xt_TCPMSS: Only works on TCP SYN packets [ 1613.722418][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13612'. [ 1613.754514][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13612'. [ 1613.978774][ T28] audit: type=1326 audit(1647.276:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4233 comm="syz.0.13618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1614.061349][ T28] audit: type=1326 audit(1647.276:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4233 comm="syz.0.13618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1614.084949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.138419][ T28] audit: type=1326 audit(1647.298:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4233 comm="syz.0.13618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1614.162020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.256634][ T28] audit: type=1326 audit(1647.298:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4233 comm="syz.0.13618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba47f9ce59 code=0x7ffc0000 [ 1614.311223][ T4245] netlink: 'syz.1.13624': attribute type 1 has an invalid length. [ 1614.319315][ T4245] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.13624'. [ 1614.329578][ T4245] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13624'. [ 1614.528026][ T4242] loop3: detected capacity change from 0 to 8192 [ 1614.570421][ T4242] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1614.645637][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.686016][ T4254] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1615.535000][ T4284] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13643'. [ 1615.931422][ T4300] loop3: detected capacity change from 0 to 64 [ 1616.265046][ T4274] loop2: detected capacity change from 0 to 40427 [ 1616.336605][ T4274] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 1616.358811][ T4274] F2FS-fs (loop2): invalid crc value [ 1616.395318][ T4274] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1616.580140][ T4274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1616.637867][ T4323] netlink: 'syz.1.13660': attribute type 21 has an invalid length. [ 1616.679886][ T4323] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13660'. [ 1616.716395][ T4325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13662'. [ 1616.862664][ T5775] syz-executor: attempt to access beyond end of device [ 1616.862664][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1616.891233][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1617.022563][ T4334] netlink: 'syz.0.13667': attribute type 13 has an invalid length. [ 1617.033516][ T4334] infiniband syz0: set active [ 1617.085380][ T4336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1617.401566][ T4343] loop1: detected capacity change from 0 to 164 [ 1617.466949][ T4343] Unsupported NM flag settings (240) [ 1617.483970][ T5844] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1617.505228][ T5155] lo speed is unknown, defaulting to 1000 [ 1617.645575][ T4346] netlink: 'syz.3.13673': attribute type 153 has an invalid length. [ 1617.686973][ T4346] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.13673'. [ 1618.039750][ T5155] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1618.587571][ T4382] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13690'. [ 1618.785824][ T4388] trusted_key: encrypted_key: insufficient parameters specified [ 1619.263936][ T4404] lo speed is unknown, defaulting to 1000 [ 1619.338712][ T4411] loop1: detected capacity change from 0 to 4096 [ 1619.418026][ T4416] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1619.438325][ T4417] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13705'. [ 1619.474985][ T4411] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1619.522183][ T4411] Remounting filesystem read-only [ 1620.043495][ T4433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13714'. [ 1620.232385][ T4436] loop1: detected capacity change from 0 to 4096 [ 1620.791616][ T4459] libceph: resolve 'c' (ret=-3): failed [ 1621.557845][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13739'. [ 1622.087652][ T4506] loop1: detected capacity change from 0 to 1024 [ 1622.124956][ T4506] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1622.152299][ T4506] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1622.201696][ T4506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1622.216958][ T4512] loop3: detected capacity change from 0 to 2048 [ 1622.261697][ T4517] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (20) [ 1622.291175][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.426102][ T5777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1622.547294][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.550207][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.753213][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13758'. [ 1622.910574][ T4536] No source specified [ 1623.163216][ T4550] loop3: detected capacity change from 0 to 256 [ 1623.186446][ T4549] loop1: detected capacity change from 0 to 2048 [ 1623.266144][ T4551] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1623.385524][ T4549] NILFS (loop1): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 1623.456310][ T4549] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=13) [ 1623.515058][ T4549] Remounting filesystem read-only [ 1623.520159][ T4549] NILFS (loop1): error -5 truncating bmap (ino=13) [ 1623.531951][ T4549] syz.1.13768: attempt to access beyond end of device [ 1623.531951][ T4549] loop1: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 1623.548259][ T4549] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 1623.627239][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1623.645665][ T5773] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 1623.658901][ T5773] NILFS (loop1): discard dirty block: blocknr=1099461296164, size=1024 [ 1623.680653][ T5773] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1623.688008][ T5773] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1623.720824][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1623.755597][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 1623.762434][ T5773] NILFS (loop1): discard dirty block: blocknr=17, size=1024 [ 1623.789191][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1623.838503][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1623.847429][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1623.996479][ T4572] netlink: 'syz.0.13779': attribute type 3 has an invalid length. [ 1624.181318][ T4578] vlan1: entered allmulticast mode [ 1624.210744][ T5818] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1624.403720][ T5818] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.433748][ T5818] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1624.466398][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.486982][ T5818] usb 3-1: Product: syz [ 1624.504836][ T5818] usb 3-1: Manufacturer: syz [ 1624.518514][ T5818] usb 3-1: SerialNumber: syz [ 1624.552188][ T4592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13788'. [ 1624.555363][ T5818] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1624.899928][ T4604] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13792'. [ 1624.935869][ T5818] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1624.976054][ T5818] usb 3-1: USB disconnect, device number 108 [ 1625.032282][ T4609] netlink: 'syz.0.13795': attribute type 1 has an invalid length. [ 1625.508443][ T4627] loop1: detected capacity change from 0 to 128 [ 1625.550924][ T4627] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1625.600119][ T4627] hpfs: filesystem error: improperly stopped [ 1625.622282][ T4627] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1625.665330][ T4627] hpfs: You really don't want any checks? You are crazy... [ 1625.672604][ T4627] hpfs: Code page index out of array [ 1625.736973][ T4627] hpfs: code page support is disabled [ 1625.761077][ T4627] hpfs: hpfs_map_4sectors(): unaligned read [ 1625.783718][ T4627] hpfs: hpfs_map_4sectors(): unaligned read [ 1625.800002][ T4627] hpfs: filesystem error: unable to find root dir [ 1626.027024][ T4642] [U]  [ 1626.220746][ T4654] netlink: 'syz.2.13818': attribute type 32 has an invalid length. [ 1626.319371][ T4659] SET target dimension over the limit! [ 1626.732439][ T4678] loop1: detected capacity change from 0 to 256 [ 1627.118442][ T4688] loop3: detected capacity change from 0 to 512 [ 1627.153733][ T4688] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.13833: inode has both inline data and extents flags [ 1627.212584][ T4688] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.13833: couldn't read orphan inode 15 (err -117) [ 1627.277168][ T4688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.458165][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.498490][ T4683] loop1: detected capacity change from 0 to 32768 [ 1627.511843][ T4698] loop2: detected capacity change from 0 to 512 [ 1627.639880][ T4683] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1627.838524][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 1627.965056][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13841'. [ 1627.995522][ T4710] netlink: 'syz.1.13841': attribute type 1 has an invalid length. [ 1628.003410][ T4710] netlink: 'syz.1.13841': attribute type 2 has an invalid length. [ 1628.036452][ T4710] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13841'. [ 1628.376058][ T4726] loop3: detected capacity change from 0 to 64 [ 1628.542337][ T4726] syz.3.13849: attempt to access beyond end of device [ 1628.542337][ T4726] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1628.601065][ T4726] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 1629.001784][ T4747] loop3: detected capacity change from 0 to 512 [ 1629.064301][ T4747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.136349][ T4747] EXT4-fs error (device loop3): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.3.13860: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1629.158430][ T4747] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #12: comm syz.3.13860: directory missing '.' [ 1629.180402][ T4754] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13863'. [ 1629.318659][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.337354][T26537] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1629.352889][ T28] audit: type=1326 audit(1663.756:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.1.13865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1629.380866][ T28] audit: type=1326 audit(1663.756:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.1.13865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1629.419368][ T28] audit: type=1326 audit(1663.756:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.1.13865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1629.443080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.450650][ T28] audit: type=1326 audit(1663.756:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.1.13865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1629.474207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.546913][T26537] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1629.563775][T26537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.581822][ T28] audit: type=1326 audit(1663.756:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.1.13865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63f59ce59 code=0x7ffc0000 [ 1629.614784][T26537] usb 3-1: config 0 descriptor?? [ 1629.630494][T26537] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1629.924479][ T5818] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1629.987002][ T28] audit: type=1326 audit(1664.443:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4771 comm=162E44A480DB682108B49543019E91 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63f59ce59 code=0x0 [ 1630.024908][T26537] gspca_sunplus: reg_w_riv err -71 [ 1630.030805][T26537] sunplus: probe of 3-1:0.0 failed with error -71 [ 1630.043806][T26537] usb 3-1: USB disconnect, device number 109 [ 1630.095653][ T4762] loop3: detected capacity change from 0 to 32768 [ 1630.114748][ T4762] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.13867 (4762) [ 1630.145228][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1630.156210][ T4762] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1630.161272][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.179989][ T4762] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1630.180358][ T5818] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1630.198514][ T4762] BTRFS info (device loop3): force zlib compression, level 3 [ 1630.206901][ T4762] BTRFS info (device loop3): force clearing of disk cache [ 1630.214870][ T4762] BTRFS info (device loop3): setting nodatasum [ 1630.221274][ T4762] BTRFS info (device loop3): use zlib compression, level 3 [ 1630.228996][ T4762] BTRFS info (device loop3): allowing degraded mounts [ 1630.235806][ T5818] usb 1-1: config 1 has no interface number 1 [ 1630.235851][ T5818] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1630.242398][ T5818] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1630.264010][ T4762] BTRFS info (device loop3): enabling disk space caching [ 1630.277390][ T5818] usb 1-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 1630.286530][ T5818] usb 1-1: Product: syz [ 1630.288085][ T4762] BTRFS info (device loop3): disk space caching is enabled [ 1630.296018][ T5818] usb 1-1: Manufacturer: syz [ 1630.311328][ T5818] usb 1-1: SerialNumber: syz [ 1630.358439][ T4762] BTRFS info (device loop3): enabling ssd optimizations [ 1630.377330][ T4762] BTRFS info (device loop3): auto enabling async discard [ 1630.387157][ T4762] BTRFS info (device loop3): rebuilding free space tree [ 1630.415742][ T4762] BTRFS info (device loop3): disabling free space tree [ 1630.427572][ T4762] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1630.446327][ T4762] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1630.575223][ T5818] usb 1-1: USB disconnect, device number 77 [ 1630.671833][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1630.729283][ T5777] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1630.971698][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13875'. [ 1631.208015][ T4801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13877'. [ 1631.241013][ T4799] ip6gretap2: entered promiscuous mode [ 1631.466050][ T4809] syz.1.13882 (4809): /proc/4808/oom_adj is deprecated, please use /proc/4808/oom_score_adj instead. [ 1631.786685][ T4815] lo speed is unknown, defaulting to 1000 [ 1631.850525][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13888'. [ 1632.153276][ T4833] loop3: detected capacity change from 0 to 1024 [ 1632.205023][ T4833] ------------[ cut here ]------------ [ 1632.210613][ T4833] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1632.210777][ T4833] WARNING: CPU: 0 PID: 4833 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 1632.226138][ T4833] Modules linked in: [ 1632.230195][ T4833] CPU: 0 PID: 4833 Comm: syz.3.13893 Not tainted syzkaller #0 [ 1632.237713][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1632.247847][ T4833] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 1632.253177][ T4833] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 04 cf fb 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b6 ca 8a 48 c7 c6 20 b7 ca 8a e8 6b 47 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 1632.272918][ T4833] RSP: 0018:ffffc9000bc87980 EFLAGS: 00010246 [ 1632.279037][ T4833] RAX: e4d90447b9af8900 RBX: ffff88805b08f828 RCX: 0000000000080000 [ 1632.287076][ T4833] RDX: ffffc9000ddfc000 RSI: 0000000000004878 RDI: 0000000000004879 [ 1632.295162][ T4833] RBP: ffffc9000bc87ae0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1632.303445][ T4833] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 1632.311567][ T4833] R13: 1ffff92001790f40 R14: dffffc0000000000 R15: 0000000000000000 [ 1632.319582][ T4833] FS: 00007fce7a72f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1632.328644][ T4833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1632.335281][ T4833] CR2: 0000001b2de19ff8 CR3: 000000004c83b000 CR4: 00000000003506f0 [ 1632.343318][ T4833] Call Trace: [ 1632.346631][ T4833] [ 1632.349620][ T4833] ? kasan_set_track+0x4e/0x70 [ 1632.354429][ T4833] ? __d_alloc+0xb7/0x730 [ 1632.358827][ T4833] ? reiserfs_write_lock+0x79/0xd0 [ 1632.363983][ T4833] ? filename_create+0x23e/0x480 [ 1632.368995][ T4833] ? do_mknodat+0x18b/0x500 [ 1632.373556][ T4833] ? mutex_lock_nested+0x20/0x20 [ 1632.378600][ T4833] ? verify_lock_unused+0x140/0x140 [ 1632.383882][ T4833] reiserfs_write_lock+0x79/0xd0 [ 1632.388890][ T4833] reiserfs_lookup+0x183/0x580 [ 1632.393702][ T4833] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1632.399493][ T4833] ? d_alloc+0x1eb/0x250 [ 1632.403828][ T4833] ? do_raw_spin_unlock+0x121/0x230 [ 1632.409079][ T4833] ? _raw_spin_unlock+0x28/0x40 [ 1632.414006][ T4833] ? d_alloc+0x1eb/0x250 [ 1632.418301][ T4833] lookup_one_qstr_excl+0x112/0x250 [ 1632.423580][ T4833] filename_create+0x23e/0x480 [ 1632.428393][ T4833] ? kern_path_create+0x50/0x50 [ 1632.433306][ T4833] ? __virt_addr_valid+0x18c/0x540 [ 1632.438485][ T4833] ? __virt_addr_valid+0x18c/0x540 [ 1632.443674][ T4833] do_mknodat+0x18b/0x500 [ 1632.448061][ T4833] ? do_o_path+0x200/0x200 [ 1632.452630][ T4833] __x64_sys_mknod+0x8e/0xa0 [ 1632.457262][ T4833] do_syscall_64+0x55/0xb0 [ 1632.461744][ T4833] ? clear_bhb_loop+0x40/0x90 [ 1632.466454][ T4833] ? clear_bhb_loop+0x40/0x90 [ 1632.471219][ T4833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.477162][ T4833] RIP: 0033:0x7fce7979ce59 [ 1632.481643][ T4833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.501316][ T4833] RSP: 002b:00007fce7a72f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1632.509826][ T4833] RAX: ffffffffffffffda RBX: 00007fce79a15fa0 RCX: 00007fce7979ce59 [ 1632.517910][ T4833] RDX: 0000000000000706 RSI: 0000000000002000 RDI: 0000200000000440 [ 1632.525954][ T4833] RBP: 00007fce79832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1632.533966][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1632.542012][ T4833] R13: 00007fce79a16038 R14: 00007fce79a15fa0 R15: 00007ffe69bb8fe8 [ 1632.550067][ T4833] [ 1632.553146][ T4833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1632.560450][ T4833] CPU: 0 PID: 4833 Comm: syz.3.13893 Not tainted syzkaller #0 [ 1632.567942][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1632.578030][ T4833] Call Trace: [ 1632.581343][ T4833] [ 1632.584314][ T4833] dump_stack_lvl+0x18c/0x250 [ 1632.589043][ T4833] ? show_regs_print_info+0x20/0x20 [ 1632.594291][ T4833] ? load_image+0x420/0x420 [ 1632.598855][ T4833] panic+0x2dc/0x730 [ 1632.602810][ T4833] ? bpf_jit_dump+0xd0/0xd0 [ 1632.607380][ T4833] __warn+0x2e0/0x470 [ 1632.611407][ T4833] ? __mutex_lock+0xb85/0xcc0 [ 1632.616122][ T4833] ? __mutex_lock+0xb85/0xcc0 [ 1632.620837][ T4833] report_bug+0x2be/0x4f0 [ 1632.625201][ T4833] ? __mutex_lock+0xb85/0xcc0 [ 1632.629908][ T4833] ? __mutex_lock+0xb85/0xcc0 [ 1632.634625][ T4833] ? __mutex_lock+0xb87/0xcc0 [ 1632.639352][ T4833] handle_bug+0xcf/0x120 [ 1632.643639][ T4833] exc_invalid_op+0x1a/0x50 [ 1632.648192][ T4833] asm_exc_invalid_op+0x1a/0x20 [ 1632.653111][ T4833] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 1632.658434][ T4833] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 04 cf fb 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b6 ca 8a 48 c7 c6 20 b7 ca 8a e8 6b 47 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 1632.678099][ T4833] RSP: 0018:ffffc9000bc87980 EFLAGS: 00010246 [ 1632.684204][ T4833] RAX: e4d90447b9af8900 RBX: ffff88805b08f828 RCX: 0000000000080000 [ 1632.692205][ T4833] RDX: ffffc9000ddfc000 RSI: 0000000000004878 RDI: 0000000000004879 [ 1632.700193][ T4833] RBP: ffffc9000bc87ae0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1632.708186][ T4833] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 1632.716196][ T4833] R13: 1ffff92001790f40 R14: dffffc0000000000 R15: 0000000000000000 [ 1632.724190][ T4833] ? kasan_set_track+0x4e/0x70 [ 1632.728968][ T4833] ? __d_alloc+0xb7/0x730 [ 1632.733331][ T4833] ? reiserfs_write_lock+0x79/0xd0 [ 1632.738469][ T4833] ? filename_create+0x23e/0x480 [ 1632.743423][ T4833] ? do_mknodat+0x18b/0x500 [ 1632.747938][ T4833] ? mutex_lock_nested+0x20/0x20 [ 1632.752899][ T4833] ? verify_lock_unused+0x140/0x140 [ 1632.758124][ T4833] reiserfs_write_lock+0x79/0xd0 [ 1632.763081][ T4833] reiserfs_lookup+0x183/0x580 [ 1632.767879][ T4833] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1632.773638][ T4833] ? d_alloc+0x1eb/0x250 [ 1632.777915][ T4833] ? do_raw_spin_unlock+0x121/0x230 [ 1632.783149][ T4833] ? _raw_spin_unlock+0x28/0x40 [ 1632.788020][ T4833] ? d_alloc+0x1eb/0x250 [ 1632.792288][ T4833] lookup_one_qstr_excl+0x112/0x250 [ 1632.797517][ T4833] filename_create+0x23e/0x480 [ 1632.802301][ T4833] ? kern_path_create+0x50/0x50 [ 1632.807177][ T4833] ? __virt_addr_valid+0x18c/0x540 [ 1632.812326][ T4833] ? __virt_addr_valid+0x18c/0x540 [ 1632.817465][ T4833] do_mknodat+0x18b/0x500 [ 1632.821812][ T4833] ? do_o_path+0x200/0x200 [ 1632.826265][ T4833] __x64_sys_mknod+0x8e/0xa0 [ 1632.830884][ T4833] do_syscall_64+0x55/0xb0 [ 1632.835333][ T4833] ? clear_bhb_loop+0x40/0x90 [ 1632.840023][ T4833] ? clear_bhb_loop+0x40/0x90 [ 1632.844715][ T4833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.850628][ T4833] RIP: 0033:0x7fce7979ce59 [ 1632.855059][ T4833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.874690][ T4833] RSP: 002b:00007fce7a72f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1632.883129][ T4833] RAX: ffffffffffffffda RBX: 00007fce79a15fa0 RCX: 00007fce7979ce59 [ 1632.891116][ T4833] RDX: 0000000000000706 RSI: 0000000000002000 RDI: 0000200000000440 [ 1632.899109][ T4833] RBP: 00007fce79832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1632.907115][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1632.915120][ T4833] R13: 00007fce79a16038 R14: 00007fce79a15fa0 R15: 00007ffe69bb8fe8 [ 1632.923134][ T4833] [ 1632.926789][ T4833] Kernel Offset: disabled [ 1632.931127][ T4833] Rebooting in 86400 seconds..