last executing test programs: 7m17.928831483s ago: executing program 0 (id=8618): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x12, 0x0, 0x0, @binary}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @fd=r0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 7m17.506718799s ago: executing program 0 (id=8625): r0 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) write$dsp(r0, &(0x7f0000000000)="20d3ff89946ae3268c918942064fa3708f55f65134c8477ce10c634aaa10a9cc09d6bf14af39641ad961d2797abad1ee8a45a3c558d9ce7024fa1fd6873dafeb216f02541a0e59fa59f3c84ce061dcb4401147e2d1c056838311fcab4d907470a24f75f31278140528c924936e1ba9662cd1935dd4406d0e490ba63cb9b87657cd1ec94fb324a4844f9c206f1b27ca067f9342fdef02b8d0651ac471bf63845ab6d4e4c461c2fb5cee2ede0ae28ee248ef67cef639e9cd079cca05b1774125f2", 0xc0) 7m17.075918139s ago: executing program 0 (id=8629): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0xb, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000600)='\x00'}) 7m16.735873749s ago: executing program 0 (id=8631): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m16.225349992s ago: executing program 0 (id=8635): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) 7m14.696768398s ago: executing program 0 (id=8650): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x450, 0x450, 0x450, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x40}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2c, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e26, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0xff000000, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x4}, 0xff7ffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) 7m14.00436359s ago: executing program 32 (id=8650): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x450, 0x450, 0x450, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x40}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2c, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e26, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0xff000000, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x4}, 0xff7ffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) 6m54.163878117s ago: executing program 4 (id=8781): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 6m54.061645871s ago: executing program 4 (id=8783): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0xc004, &(0x7f0000003d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x5f7, &(0x7f0000000c80)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 6m53.531270807s ago: executing program 4 (id=8785): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000018c0)=@nat={'nat\x00', 0x19, 0x1, 0x166, [0x200000001740, 0x0, 0x0, 0x200000001770, 0x200000001846], 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/358]}, 0x1de) 6m53.066257834s ago: executing program 4 (id=8789): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m52.574032213s ago: executing program 4 (id=8794): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 6m51.940878664s ago: executing program 4 (id=8800): r0 = syz_open_dev$dri(&(0x7f0000000740), 0x0, 0x80001) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000780)=""/4096) 6m51.093905619s ago: executing program 33 (id=8800): r0 = syz_open_dev$dri(&(0x7f0000000740), 0x0, 0x80001) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000780)=""/4096) 3.210655737s ago: executing program 7 (id=15181): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 81.983265ms ago: executing program 2 (id=15222): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d00001c000000000000000000050005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200120002000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000040003"], 0xe0}}, 0x0) 0s ago: executing program 1 (id=15223): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='trylock '], 0xc) 0s ago: executing program 5 (id=15224): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 1337.830865][T13142] loop7: detected capacity change from 0 to 256 [ 1337.876785][T13147] loop2: detected capacity change from 0 to 64 [ 1337.883678][T13144] loop5: detected capacity change from 0 to 512 [ 1337.893087][T13144] EXT4-fs: Ignoring removed orlov option [ 1337.893141][T13144] EXT4-fs: Ignoring removed mblk_io_submit option [ 1337.902928][ T5628] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1337.922838][T13144] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1337.922863][T13144] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1337.923826][T13144] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.13770: attempt to clear invalid blocks 2 len 1 [ 1337.923864][T13144] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1337.930427][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1337.930452][ C1] EXT4-fs (loop5): initial error at time 2000000079: ext4_clear_blocks:876: inode 13 [ 1337.930488][ C1] EXT4-fs (loop5): last error at time 2000000079: ext4_clear_blocks:876: inode 13 [ 1337.943310][T13144] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1337.943489][T13144] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.13770: invalid indirect mapped block 1819239214 (level 0) [ 1337.943523][T13144] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1337.959516][T13144] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.13770: invalid indirect mapped block 1819239214 (level 1) [ 1337.959558][T13144] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1337.986277][T13144] EXT4-fs (loop5): 1 truncate cleaned up [ 1338.001006][T13144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1338.088697][T13154] loop1: detected capacity change from 0 to 64 [ 1338.098589][ T5628] usb 7-1: Using ep0 maxpacket: 32 [ 1338.101047][ T5628] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1338.101099][ T5628] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=c6.bd [ 1338.126666][ T5628] usb 7-1: config 10 has an invalid interface number: 196 but max is 0 [ 1338.126698][ T5628] usb 7-1: config 10 has no interface number 0 [ 1338.126732][ T5628] usb 7-1: config 10 interface 196 has no altsetting 0 [ 1338.129826][ T5628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.129854][ T5628] usb 7-1: Product: syz [ 1338.129872][ T5628] usb 7-1: Manufacturer: syz [ 1338.129889][ T5628] usb 7-1: SerialNumber: syz [ 1338.157158][T13154] Trying to free block not in datazone [ 1338.262495][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.394701][ T5628] net1080 7-1:10.196: probe with driver net1080 failed with error -22 [ 1338.441836][ T5628] usb 7-1: USB disconnect, device number 20 [ 1338.887135][T13205] loop5: detected capacity change from 0 to 64 [ 1338.979339][T13210] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1339.177586][T13251] loop7: detected capacity change from 0 to 16 [ 1339.207089][T13210] bond1 (unregistering): Released all slaves [ 1339.251450][T13251] erofs (device loop7): mounted with root inode @ nid 36. [ 1339.278105][T13251] erofs (device loop7): xattr_isize 12 of nid 86 is not supported yet [ 1339.328293][T13275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1339.490079][T13294] xt_cgroup: invalid path, errno=-2 [ 1339.966177][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13794'. [ 1340.022516][T13324] loop7: detected capacity change from 0 to 256 [ 1340.060604][T13324] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1340.061023][T13324] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1340.171363][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13802'. [ 1340.724788][T13369] netlink: 'syz.2.13812': attribute type 1 has an invalid length. [ 1340.724814][T13369] netlink: 244 bytes leftover after parsing attributes in process `syz.2.13812'. [ 1340.823464][T13381] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1341.139111][T13399] loop2: detected capacity change from 0 to 1024 [ 1341.193491][T13399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.193604][T13399] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.236717][ T5628] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1341.245005][T13399] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz.2.13818: directory missing '..' [ 1341.288653][ T791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1341.379552][ T5628] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1341.381084][ T5628] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1341.381116][ T5628] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1341.383674][ T5628] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1341.383703][ T5628] usb 6-1: Product: syz [ 1341.383720][ T5628] usb 6-1: Manufacturer: syz [ 1341.383738][ T5628] usb 6-1: SerialNumber: syz [ 1341.447254][ T5628] usb 6-1: config 0 descriptor?? [ 1341.483108][ T5628] usb 6-1: selecting invalid altsetting 0 [ 1341.504702][T13421] loop2: detected capacity change from 0 to 256 [ 1341.626579][T13432] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1341.657888][ T5628] usb 6-1: USB disconnect, device number 120 [ 1341.772847][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.876176][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1341.876199][ T31] audit: type=1326 audit(2000000083.270:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.3.13833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1341.876254][ T31] audit: type=1326 audit(2000000083.270:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.3.13833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1341.877806][ T31] audit: type=1326 audit(2000000083.280:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.3.13833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1341.877882][ T31] audit: type=1326 audit(2000000083.280:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.3.13833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1341.877933][ T31] audit: type=1326 audit(2000000083.280:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.3.13833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1342.024612][T13464] loop1: detected capacity change from 0 to 64 [ 1342.236837][T13476] netlink: 'syz.3.13836': attribute type 4 has an invalid length. [ 1342.283389][T13480] netlink: 'syz.2.13840': attribute type 32 has an invalid length. [ 1342.650520][T13492] Process accounting resumed [ 1343.013950][T13531] ieee802154 phy0 wpan0: encryption failed: -22 [ 1343.042540][T13532] loop6: detected capacity change from 0 to 1024 [ 1344.489676][T13612] lo speed is unknown, defaulting to 1000 [ 1344.489743][T13612] lo speed is unknown, defaulting to 1000 [ 1344.525640][T13612] lo speed is unknown, defaulting to 1000 [ 1344.542266][T13612] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1344.542309][T13612] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1344.542359][T13612] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1344.629701][T13612] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1344.833936][ T5763] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1344.918584][T13612] lo speed is unknown, defaulting to 1000 [ 1344.928363][T13612] lo speed is unknown, defaulting to 1000 [ 1344.984720][ T5763] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1344.989575][ T5763] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.989604][ T5763] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1344.989629][ T5763] usb 7-1: config 1 has no interface number 0 [ 1344.989670][ T5763] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.996878][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.996910][ T5763] usb 7-1: Product: syz [ 1344.996928][ T5763] usb 7-1: Manufacturer: syz [ 1344.996945][ T5763] usb 7-1: SerialNumber: syz [ 1345.010339][T13612] lo speed is unknown, defaulting to 1000 [ 1345.013351][ T5763] usb 7-1: selecting invalid altsetting 1 [ 1345.035961][T13612] lo speed is unknown, defaulting to 1000 [ 1345.040827][ T5743] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1345.127517][ T31] audit: type=1326 audit(2000000086.692:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.3.13889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1345.127610][ T31] audit: type=1326 audit(2000000086.692:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.3.13889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1345.130041][ T31] audit: type=1326 audit(2000000086.692:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.3.13889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1345.130124][ T31] audit: type=1326 audit(2000000086.692:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.3.13889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1345.130177][ T31] audit: type=1326 audit(2000000086.692:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.3.13889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1345.170571][T13650] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 1345.170603][T13650] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 1345.181681][T13612] lo speed is unknown, defaulting to 1000 [ 1345.191202][T13612] lo speed is unknown, defaulting to 1000 [ 1345.284400][ T5743] usb 6-1: Using ep0 maxpacket: 16 [ 1345.297551][ T5743] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1345.312102][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1345.312132][ T5743] usb 6-1: Product: syz [ 1345.312151][ T5743] usb 6-1: Manufacturer: syz [ 1345.312168][ T5743] usb 6-1: SerialNumber: syz [ 1345.340284][ T5743] usb 6-1: config 0 descriptor?? [ 1345.353431][ T5743] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1345.409855][ T5763] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS [ 1345.409908][ T5763] cdc_ncm 7-1:1.1: bind() failure [ 1345.438921][ T5763] usb 7-1: USB disconnect, device number 21 [ 1345.524285][T13676] loop1: detected capacity change from 0 to 512 [ 1345.578169][T13676] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 1345.578200][T13676] loop1: lost filesystem error report for type 5 error -12 [ 1345.579495][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1345.579520][ C0] EXT4-fs (loop1): initial error at time 2000000087: ext4_process_orphan:346 [ 1345.579549][ C0] EXT4-fs (loop1): last error at time 2000000087: ext4_process_orphan:346 [ 1345.584215][T13676] EXT4-fs (loop1): Remounting filesystem read-only [ 1345.584586][T13676] EXT4-fs (loop1): 2 truncates cleaned up [ 1345.594903][T13676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.596646][ T5844] usb 6-1: USB disconnect, device number 121 [ 1345.782252][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.292739][T13721] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1346.370840][T13725] loop7: detected capacity change from 0 to 512 [ 1346.382641][T13726] SET target dimension over the limit! [ 1346.422218][T13725] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1346.422246][T13725] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1346.435754][T13725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1346.435861][T13725] System zones: 0-2, 18-18, 34-35 [ 1346.441362][T13725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1346.558910][T13736] loop6: detected capacity change from 0 to 4096 [ 1346.640962][T13736] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1346.640996][T13736] NILFS (loop6): trying rollback from an earlier position [ 1346.716726][T26106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.746889][T13736] NILFS (loop6): recovery complete [ 1346.759648][T13742] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1347.323120][T13703] loop3: detected capacity change from 0 to 32768 [ 1347.329688][T13703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.13898 (13703) [ 1347.367749][T13772] loop1: detected capacity change from 0 to 512 [ 1347.368609][T13772] EXT4-fs: Ignoring removed nobh option [ 1347.376997][T13703] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1347.377034][T13703] BTRFS info (device loop3): using sha256 checksum algorithm [ 1347.466747][T13772] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.13916: corrupted inode contents [ 1347.466795][T13772] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1347.474019][T13772] EXT4-fs (loop1): Remounting filesystem read-only [ 1347.484489][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1347.484511][ C0] EXT4-fs (loop1): initial error at time 2000000089: ext4_do_update_inode:5801: inode 3 [ 1347.484548][ C0] EXT4-fs (loop1): last error at time 2000000089: ext4_do_update_inode:5801: inode 3 [ 1347.539813][T13772] __quota_error: 2 callbacks suppressed [ 1347.539833][T13772] Quota error (device loop1): write_blk: dquota write failed [ 1347.539972][T13772] Quota error (device loop1): qtree_write_dquot: Error -30 occurred while creating quota [ 1347.548697][T13772] EXT4-fs (loop1): 1 truncate cleaned up [ 1347.606633][T13772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1347.606740][T13772] ext4 filesystem being mounted at /2316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1347.629569][T13772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.700919][T13703] BTRFS info (device loop3): enabling ssd optimizations [ 1347.700943][T13703] BTRFS info (device loop3): turning on async discard [ 1347.700958][T13703] BTRFS info (device loop3): enabling free space tree [ 1347.938344][T13819] openvswitch: netlink: IP tunnel dst address not specified [ 1347.976482][ T5622] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1348.149986][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13927'. [ 1348.784327][T13857] loop7: detected capacity change from 0 to 1024 [ 1348.914370][T13857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1348.914490][T13857] ext4 filesystem being mounted at /827/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.242470][T26106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1349.246563][T13865] lo speed is unknown, defaulting to 1000 [ 1349.550722][T13913] loop7: detected capacity change from 0 to 1024 [ 1349.577702][T13913] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1349.613808][T13913] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #3: block 5: comm syz.7.13948: lblock 5 mapped to illegal pblock 5 (length 1) [ 1349.613857][T13913] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1349.615561][T13913] Quota error (device loop7): write_blk: dquota write failed [ 1349.615584][T13913] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1349.615715][T13913] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1349.615771][T13913] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.13948: Failed to acquire dquot type 0 [ 1349.615796][T13913] loop7: lost filesystem error report for type 5 error -117 [ 1349.616679][T13913] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 5: comm syz.7.13948: lblock 5 mapped to illegal pblock 5 (length 1) [ 1349.616719][T13913] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1349.616959][T13913] Quota error (device loop7): do_insert_tree: Can't read tree quota block 5 [ 1349.617020][T13913] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1349.617061][T13913] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.13948: Failed to acquire dquot type 0 [ 1349.617087][T13913] loop7: lost filesystem error report for type 5 error -117 [ 1349.617427][T13913] EXT4-fs error (device loop7): ext4_free_blocks:6719: comm syz.7.13948: Freeing blocks not in datazone - block = 0, count = 4096 [ 1349.617460][T13913] loop7: lost filesystem error report for type 5 error -117 [ 1349.618018][T13913] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 5: comm syz.7.13948: lblock 5 mapped to illegal pblock 5 (length 1) [ 1349.618057][T13913] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1349.618309][ C1] EXT4-fs (loop7): error count since last fsck: 6 [ 1349.618333][ C1] EXT4-fs (loop7): initial error at time 2000000091: ext4_map_blocks:832: inode 3: block 5 [ 1349.618376][ C1] EXT4-fs (loop7): last error at time 2000000091: ext4_map_blocks:790: inode 3: block 5 [ 1349.682487][T13913] Quota error (device loop7): do_insert_tree: Can't read tree quota block 5 [ 1349.682561][T13913] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1349.682603][T13913] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.13948: Failed to acquire dquot type 0 [ 1349.682627][T13913] loop7: lost filesystem error report for type 5 error -117 [ 1349.687699][T13913] EXT4-fs (loop7): 1 orphan inode deleted [ 1349.718575][T13923] loop6: detected capacity change from 0 to 1024 [ 1349.735196][T13923] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1349.753090][T13923] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.13951: Invalid inode bitmap blk 0 in block_group 0 [ 1349.753126][T13923] loop6: lost filesystem error report for type 5 error -117 [ 1349.756794][T13923] EXT4-fs (loop6): Remounting filesystem read-only [ 1349.756950][T13923] EXT4-fs (loop6): 1 orphan inode deleted [ 1349.783435][ T13] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1349.783467][ T13] Quota error (device loop6): write_blk: dquota write failed [ 1349.783486][ T13] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1349.783587][ T13] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 1349.813062][T13923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.814283][T13913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.884784][T13913] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 5: comm syz.7.13948: lblock 5 mapped to illegal pblock 5 (length 1) [ 1349.890837][T13923] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 1350.192999][T13913] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.13948: Failed to acquire dquot type 0 [ 1350.224568][T25670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.387819][T26106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.776519][T14007] netlink: 'syz.6.13971': attribute type 21 has an invalid length. [ 1350.776549][T14007] IPv6: NLM_F_CREATE should be specified when creating new route [ 1351.206572][T14024] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1351.206604][T14024] bridge1: entered promiscuous mode [ 1351.206623][T14024] bridge1: entered allmulticast mode [ 1351.352428][ T1574] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1351.495053][ T1574] usb 6-1: Using ep0 maxpacket: 16 [ 1351.495902][ T1574] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1351.511019][ T1574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.511047][ T1574] usb 6-1: Product: syz [ 1351.511066][ T1574] usb 6-1: Manufacturer: syz [ 1351.511103][ T1574] usb 6-1: SerialNumber: syz [ 1351.597376][ T1574] usb 6-1: config 0 descriptor?? [ 1351.610024][ T1574] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1351.660402][T14021] loop3: detected capacity change from 0 to 32768 [ 1351.725426][T14021] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 1351.725426][T14021] [ 1351.725727][T14021] ERROR: (device loop3): remounting filesystem as read-only [ 1352.031818][ T1574] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 1352.031977][ T1574] visor 6-1:0.0: probe with driver visor failed with error -71 [ 1352.058034][ T1574] usb 6-1: USB disconnect, device number 122 [ 1352.192149][T14080] loop1: detected capacity change from 0 to 256 [ 1352.362387][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1352.363063][ T5743] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1352.506224][ T5743] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1352.507707][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.507735][ T5743] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1352.507806][ T5743] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1352.507839][ T5743] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1352.510395][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.510423][ T5743] usb 4-1: Product: syz [ 1352.510441][ T5743] usb 4-1: Manufacturer: syz [ 1352.510459][ T5743] usb 4-1: SerialNumber: syz [ 1352.835234][ T5743] usb 4-1: 0:2 : does not exist [ 1352.979143][ T5743] usb 4-1: USB disconnect, device number 124 [ 1353.235190][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1353.436880][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14004'. [ 1353.436906][T14153] netlink: 688 bytes leftover after parsing attributes in process `syz.3.14004'. [ 1353.927587][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14012'. [ 1353.957128][T14065] loop7: detected capacity change from 0 to 32768 [ 1353.977473][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14014'. [ 1353.989576][T14065] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1353.989596][T14065] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1354.138438][T14191] loop6: detected capacity change from 0 to 1024 [ 1354.147980][T14195] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1354.163900][T14065] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 42ms [ 1354.200711][ T5743] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1354.200736][ T5743] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1354.220369][T14191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.346033][T14205] x_tables: duplicate underflow at hook 3 [ 1354.442904][T25670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.614987][ T5743] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 434ms [ 1354.633066][ T5743] gfs2: fsid=syz:syz.0: jid=0: Done [ 1354.637190][T14065] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1354.716172][T14219] netlink: 128 bytes leftover after parsing attributes in process `syz.5.14022'. [ 1354.716199][T14219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1354.766669][T14065] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 1354.766696][T14065] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 1354.766748][T14065] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1354.766792][T14065] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:14065 [syz.7.13986] __gfs2_lookup+0xac/0x2b0 [ 1354.766843][T14065] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 1354.766895][T14065] CPU: 1 UID: 0 PID: 14065 Comm: syz.7.13986 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.766929][T14065] Tainted: [L]=SOFTLOCKUP [ 1354.766940][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1354.766956][T14065] Call Trace: [ 1354.766966][T14065] [ 1354.766977][T14065] dump_stack_lvl+0xe8/0x150 [ 1354.767018][T14065] gfs2_withdraw+0xc3/0x1b0 [ 1354.767050][T14065] gfs2_dirent_scan+0x54d/0x690 [ 1354.767085][T14065] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 1354.767121][T14065] gfs2_dirent_search+0x358/0x8e0 [ 1354.767152][T14065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.767186][T14065] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 1354.767216][T14065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.767249][T14065] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 1354.767281][T14065] ? __pfx_gfs2_permission+0x10/0x10 [ 1354.767324][T14065] gfs2_dir_search+0x4c/0x220 [ 1354.767362][T14065] gfs2_lookupi+0x45b/0x640 [ 1354.767401][T14065] ? __pfx_gfs2_lookupi+0x10/0x10 [ 1354.767438][T14065] ? __gfs2_lookup+0xac/0x2b0 [ 1354.767485][T14065] __gfs2_lookup+0xac/0x2b0 [ 1354.767523][T14065] ? __pfx___gfs2_lookup+0x10/0x10 [ 1354.767563][T14065] ? d_alloc_parallel+0x39c/0x16b0 [ 1354.767594][T14065] ? __d_lookup+0x66/0x790 [ 1354.767626][T14065] gfs2_atomic_open+0x9d/0x200 [ 1354.767661][T14065] ? __pfx_gfs2_atomic_open+0x10/0x10 [ 1354.767699][T14065] atomic_open+0x199/0x550 [ 1354.767735][T14065] lookup_open+0x925/0x1a40 [ 1354.767800][T14065] path_openat+0x677/0x1d60 [ 1354.767851][T14065] do_file_open+0x23e/0x4a0 [ 1354.767884][T14065] ? __pfx_do_file_open+0x10/0x10 [ 1354.767937][T14065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.767968][T14065] ? _raw_spin_unlock+0x28/0x50 [ 1354.767996][T14065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.768026][T14065] ? alloc_fd+0x651/0x6c0 [ 1354.768074][T14065] do_sys_openat2+0x115/0x200 [ 1354.768107][T14065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.768137][T14065] ? __se_sys_futex+0x3a8/0x450 [ 1354.768174][T14065] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.768214][T14065] ? rcu_is_watching+0x16/0xb0 [ 1354.768247][T14065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.768297][T14065] __x64_sys_creat+0x8f/0xc0 [ 1354.768336][T14065] do_syscall_64+0x166/0x520 [ 1354.768370][T14065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.768404][T14065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.768430][T14065] RIP: 0033:0x7f02b819e159 [ 1354.768453][T14065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.768475][T14065] RSP: 002b:00007f02b9069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1354.768503][T14065] RAX: ffffffffffffffda RBX: 00007f02b8425fa0 RCX: 00007f02b819e159 [ 1354.768524][T14065] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000200000000080 [ 1354.768541][T14065] RBP: 00007f02b823506b R08: 0000000000000000 R09: 0000000000000000 [ 1354.768558][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1354.768575][T14065] R13: 00007f02b8426038 R14: 00007f02b8425fa0 R15: 00007ffd5cde98c8 [ 1354.768616][T14065] [ 1354.768627][T14065] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1354.774985][ T5743] gfs2: fsid=syz:syz.0: file system withdrawn [ 1355.395548][T14243] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1355.395582][T14243] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1355.592981][T14256] netlink: 'syz.5.14033': attribute type 21 has an invalid length. [ 1355.838408][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1355.838431][ T31] audit: type=1326 audit(2000000097.925:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.841910][ T31] audit: type=1326 audit(2000000097.935:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.845757][ T31] audit: type=1326 audit(2000000097.935:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.847552][ T31] audit: type=1326 audit(2000000097.935:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.847781][ T31] audit: type=1326 audit(2000000097.935:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.848934][ T31] audit: type=1326 audit(2000000097.935:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.849955][ T31] audit: type=1326 audit(2000000097.935:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.850537][ T31] audit: type=1326 audit(2000000097.935:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1355.850838][ T31] audit: type=1326 audit(2000000097.935:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.5.14036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa14fd9e159 code=0x7ffc0000 [ 1356.571805][T14312] CIFS mount error: No usable UNC path provided in device string! [ 1356.571805][T14312] [ 1356.571831][T14312] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1356.884764][T14319] geneve2: entered promiscuous mode [ 1357.319898][T14352] loop1: detected capacity change from 0 to 2048 [ 1357.335911][T14352] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1357.365426][T14352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1357.414408][T14363] netlink: 'syz.2.14076': attribute type 11 has an invalid length. [ 1357.414434][T14363] netlink: 'syz.2.14076': attribute type 11 has an invalid length. [ 1357.414451][T14363] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14076'. [ 1357.571557][T14371] loop6: detected capacity change from 0 to 764 [ 1357.865409][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14070'. [ 1358.084422][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14074'. [ 1358.190903][T14407] netlink: 'syz.2.14079': attribute type 1 has an invalid length. [ 1358.221640][T14412] loop6: detected capacity change from 0 to 1024 [ 1358.301323][T14412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.339575][T14412] ext4 filesystem being mounted at /894/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.414575][T14412] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.14080: corrupted xattr block 128: invalid ea_ino [ 1358.687557][T25670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1359.156793][T14463] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14093'. [ 1359.156820][T14463] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1359.296082][T14470] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1359.296113][T14470] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1359.353090][T14475] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14097'. [ 1359.778551][T14503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14107'. [ 1360.119553][T14525] loop3: detected capacity change from 0 to 256 [ 1360.262549][T14525] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1360.679980][T14559] JFS: discard option not supported on device [ 1360.680275][T14559] Mount JFS Failure: -22 [ 1360.680289][T14559] jfs_mount failed w/return code = -22 [ 1360.737846][T14525] Process accounting resumed [ 1360.763489][T14525] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 1360.763520][T14525] FAT-fs (loop3): Filesystem has been set read-only [ 1360.807577][ T5844] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 1361.111020][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14133'. [ 1361.140689][T14590] loop6: detected capacity change from 0 to 16 [ 1361.153868][ T25] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1361.192650][T14590] erofs (device loop6): mounted with root inode @ nid 36. [ 1361.213044][T14595] loop3: detected capacity change from 0 to 1024 [ 1361.214030][T14595] EXT4-fs: Ignoring removed nobh option [ 1361.218103][T23677] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1361.243101][T14590] erofs (device loop6): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1361.243229][T14590] erofs (device loop6): read error -117 @ 1 of nid 89 [ 1361.243772][ T31] audit: type=1800 audit(2000000103.604:837): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.14136" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1361.296387][T14595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.311273][ T25] usb 6-1: New USB device found, idVendor=8086, idProduct=0b59, bcdDevice=6c.b9 [ 1361.313718][ T25] usb 6-1: config 220 has an invalid interface number: 0 but max is -1 [ 1361.313747][ T25] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.313770][ T25] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 0 [ 1361.313808][ T25] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1361.358542][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.358578][ T25] usb 6-1: Product: syz [ 1361.358596][ T25] usb 6-1: Manufacturer: syz [ 1361.358615][ T25] usb 6-1: SerialNumber: syz [ 1361.374974][T14595] EXT4-fs error (device loop3): ext4_generic_delete_entry:2675: inode #12: block 7: comm syz.3.14137: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 1361.442888][T14595] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1723: Corrupt filesystem [ 1361.552235][T14617] kAFS: unable to lookup cell '.,' [ 1361.654284][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.669810][ T25] uvcvideo 6-1:220.0: Found Unit with invalid ID 0 [ 1361.673496][ T25] uvcvideo 6-1:220.0: Found multiple Units with ID 2 [ 1361.673561][ T25] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b59) [ 1361.673590][ T25] uvcvideo 6-1:220.0: No valid video chain found. [ 1361.709735][ T25] usb 6-1: USB disconnect, device number 123 [ 1361.768673][ T1574] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1361.906466][ T1574] usb 2-1: Using ep0 maxpacket: 32 [ 1361.907294][ T1574] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1361.908357][ T1574] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.908382][ T1574] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1361.908442][ T1574] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1361.908482][ T1574] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1361.908524][ T1574] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1361.908550][ T1574] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1361.910987][ T1574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.911015][ T1574] usb 2-1: Product: syz [ 1361.911033][ T1574] usb 2-1: Manufacturer: syz [ 1361.911051][ T1574] usb 2-1: SerialNumber: syz [ 1362.130075][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.246096][ T1574] usb 2-1: selecting invalid altsetting 0 [ 1362.247921][ T1574] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 1362.248381][ T1574] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1362.407845][ T1574] usb 2-1: USB disconnect, device number 22 [ 1362.542240][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1362.798393][T14686] netlink: 'syz.5.14150': attribute type 21 has an invalid length. [ 1362.799616][T14686] netlink: 'syz.5.14150': attribute type 7 has an invalid length. [ 1363.014755][T14664] loop2: detected capacity change from 0 to 32768 [ 1363.101274][T14697] loop5: detected capacity change from 0 to 512 [ 1363.143540][T14697] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1363.143567][T14697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1363.143654][T14697] System zones: 0-1, 15-15, 18-18, 34-34 [ 1363.143972][T14697] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1363.144053][T14697] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1363.144128][T14697] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1363.144158][T14697] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1363.156426][T14697] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.14153: bad orphan inode 16 [ 1363.156456][T14697] loop5: lost filesystem error report for type 5 error -117 [ 1363.156731][T14697] ext4_test_bit(bit=15, block=18) = 1 [ 1363.156750][T14697] is_bad_inode(inode)=0 [ 1363.156761][T14697] NEXT_ORPHAN(inode)=0 [ 1363.156771][T14697] max_ino=32 [ 1363.156781][T14697] i_nlink=2 [ 1363.162104][T14697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1363.203552][T14697] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1363.285596][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.385480][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.389895][ C1] sd 0:0:1:0: [sda] tag#9568 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1363.389968][ C1] sd 0:0:1:0: [sda] tag#9568 CDB: Write(6) 0a 01 00 00 00 c6 [ 1363.620601][T14717] mac80211_hwsim hwsim49 wlan0: left allmulticast mode [ 1363.620736][T14717] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1363.668748][T14725] netlink: 'syz.3.14158': attribute type 21 has an invalid length. [ 1363.668771][T14725] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14158'. [ 1363.668853][T14725] netlink: 'syz.3.14158': attribute type 5 has an invalid length. [ 1363.668870][T14725] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14158'. [ 1364.214380][T14750] loop2: detected capacity change from 0 to 128 [ 1364.214716][T14753] loop6: detected capacity change from 0 to 1024 [ 1365.292725][T26743] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1365.317895][ T31] audit: type=1326 audit(2000000107.877:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.1.14190" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1365.318102][ T31] audit: type=1326 audit(2000000107.887:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.1.14190" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1365.352427][ T31] audit: type=1326 audit(2000000107.898:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.1.14190" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1365.352494][ T31] audit: type=1326 audit(2000000107.908:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.1.14190" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1365.352545][ T31] audit: type=1326 audit(2000000107.908:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.1.14190" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1365.407691][T14833] loop3: detected capacity change from 0 to 256 [ 1365.415674][T14833] exfat: Deprecated parameter 'namecase' [ 1365.415740][T14833] exfat: Deprecated parameter 'namecase' [ 1365.469170][T26743] usb 6-1: Using ep0 maxpacket: 32 [ 1365.474948][T14833] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1365.481259][T26743] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1365.494457][T26743] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1365.494493][T26743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1365.494523][T26743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1365.494550][T26743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1365.494580][T26743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1365.526973][ T31] audit: type=1800 audit(2000000108.097:843): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14192" name="file1" dev="loop3" ino=1048750 res=0 errno=0 [ 1365.582990][T26743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.583024][T26743] usb 6-1: Product: syz [ 1365.583042][T26743] usb 6-1: Manufacturer: syz [ 1365.583061][T26743] usb 6-1: SerialNumber: syz [ 1365.608255][T26743] usb 6-1: config 0 descriptor?? [ 1365.840345][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.841386][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.841809][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.842312][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.845902][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.847929][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.849427][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.849925][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.856359][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.862725][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.882413][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.888993][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.914068][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.921257][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.927780][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.934172][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.946590][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.959466][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.960882][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.961304][T26743] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1365.961353][T26743] input input81: Timeout waiting for response from device. [ 1365.972598][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14199'. [ 1366.024413][T26743] usb 6-1: USB disconnect, device number 124 [ 1366.155832][T14874] ip6t_srh: unknown srh invflags 4000 [ 1366.180682][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14201'. [ 1366.303018][T14884] loop1: detected capacity change from 0 to 764 [ 1366.343032][T14884] rock: directory entry would overflow storage [ 1366.343046][T14884] rock: sig=0x4654, size=5, remaining=4 [ 1366.365286][T14881] loop2: detected capacity change from 0 to 4096 [ 1366.369423][T14881] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1366.534685][T14881] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1366.639176][ T13] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1366.639337][ T791] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1366.639365][ T791] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1366.639385][ T791] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1366.640228][ T13] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1366.899354][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14213'. [ 1366.899449][T14912] openvswitch: netlink: EtherType 300 is less than min 600 [ 1366.946577][T14913] loop2: detected capacity change from 0 to 1024 [ 1367.015540][T14919] loop5: detected capacity change from 0 to 24 [ 1367.099581][T14919] romfs: read error for inode 0x8000 [ 1367.298863][T14930] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1367.319142][T14930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1367.439992][T14942] netlink: 'syz.2.14220': attribute type 15 has an invalid length. [ 1367.550052][T14951] netlink: 'syz.3.14224': attribute type 10 has an invalid length. [ 1367.550377][T14951] bridge0: port 3(syz_tun) entered disabled state [ 1367.550666][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.550845][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.728680][T14957] loop3: detected capacity change from 0 to 256 [ 1367.839025][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14228'. [ 1367.839058][T14968] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1368.428126][T15006] kAFS: No cell specified [ 1368.562256][T15014] loop6: detected capacity change from 0 to 256 [ 1368.575263][T15014] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1368.636615][T15014] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1368.888199][T15033] x_tables: duplicate entry at hook 3 [ 1369.056849][T15041] loop5: detected capacity change from 0 to 4096 [ 1369.072165][T15047] netlink: 'syz.7.14255': attribute type 9 has an invalid length. [ 1369.174049][T15041] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1369.224210][T15041] ntfs3(loop5): Failed to load $Extend (-22). [ 1369.224240][T15041] ntfs3(loop5): Failed to initialize $Extend. [ 1369.253011][T15057] loop1: detected capacity change from 0 to 4096 [ 1369.259865][T15057] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1369.418571][T15057] ntfs3(loop1): Failed to load $Extend (-22). [ 1369.418601][T15057] ntfs3(loop1): Failed to initialize $Extend. [ 1369.826595][T15085] loop7: detected capacity change from 0 to 512 [ 1369.874444][T15085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1369.874472][T15085] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1369.926348][T15082] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1369.927335][T15085] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.14267: bad orphan inode 13 [ 1369.927364][T15085] loop7: lost filesystem error report for type 5 error -117 [ 1369.936405][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1369.936430][ C1] EXT4-fs (loop7): last error at time 2000000112: ext4_orphan_get:1429 [ 1369.960234][T15085] ext4_test_bit(bit=12, block=18) = 1 [ 1369.960255][T15085] is_bad_inode(inode)=0 [ 1369.960266][T15085] NEXT_ORPHAN(inode)=10485760 [ 1369.960278][T15085] max_ino=32 [ 1369.960289][T15085] i_nlink=1 [ 1369.978583][T15085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1370.006108][T15082] ntfs3(loop6): It is recommended to use chkdsk. [ 1370.054247][T15085] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1370.200776][T15085] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.14267: bg 0: block 248: padding at end of block bitmap is not set [ 1370.273304][T15085] Quota error (device loop7): write_blk: dquota write failed [ 1370.273405][T15085] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1370.273465][T15085] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.14267: Failed to acquire dquot type 1 [ 1370.346294][T15082] ntfs3(loop6): ino=5, "/" indx_read_ra [ 1370.385965][T26106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1370.594115][ T5628] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1370.741660][ T5628] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1370.742705][ T5628] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.742733][ T5628] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1370.745608][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1370.745637][ T5628] usb 4-1: SerialNumber: syz [ 1370.809822][ T5628] usb 4-1: 0:2 : does not exist [ 1370.854508][T15141] netlink: 'syz.2.14281': attribute type 1 has an invalid length. [ 1370.958805][T15144] xt_hashlimit: max too large, truncated to 1048576 [ 1371.156180][T15160] xt_socket: unknown flags 0xc [ 1371.242152][ T5628] usb 4-1: USB disconnect, device number 125 [ 1371.367648][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.444243][T15244] set_capacity_and_notify: 1 callbacks suppressed [ 1372.444266][T15244] loop2: detected capacity change from 0 to 1024 [ 1372.475482][T15244] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1372.534298][T15244] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.14310: lblock 2 mapped to illegal pblock 2 (length 1) [ 1372.534346][T15244] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1372.536781][T15244] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1372.536896][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1372.536915][ C1] EXT4-fs (loop2): initial error at time 2000000115: ext4_map_blocks:790: inode 3: block 2 [ 1372.536958][ C1] EXT4-fs (loop2): last error at time 2000000115: ext4_map_blocks:790: inode 3: block 2 [ 1372.537065][T15244] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.14310: lblock 0 mapped to illegal pblock 48 (length 1) [ 1372.537103][T15244] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1372.552338][T15244] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1372.552363][T15244] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.14310: Failed to acquire dquot type 0 [ 1372.552389][T15244] loop2: lost filesystem error report for type 5 error -117 [ 1372.562259][T15244] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 1372.562287][T15244] loop2: lost filesystem error report for type 5 error -117 [ 1372.603764][T15244] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.14310: mark_inode_dirty error [ 1372.603802][T15244] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1372.623691][T15244] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 1372.623807][T15244] EXT4-fs (loop2): 1 orphan inode deleted [ 1372.642318][T15244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.702047][ T5763] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1372.710402][T21034] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1372.711232][T21034] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1372.711327][T21034] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:14: Failed to release dquot type 0 [ 1372.864623][ T5763] usb 2-1: Using ep0 maxpacket: 8 [ 1372.872184][ T5763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1372.872236][ T5763] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1372.878140][ T5763] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1372.878168][ T5763] usb 2-1: config 0 has no interface number 0 [ 1372.878211][ T5763] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 50, changing to 9 [ 1372.878241][ T5763] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 41107, setting to 1024 [ 1372.878273][ T5763] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1372.897352][ T5763] usb 2-1: string descriptor 0 read error: -22 [ 1372.897524][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1372.961345][ T5763] usb 2-1: config 0 descriptor?? [ 1372.993721][T15270] netlink: 'syz.5.14315': attribute type 64 has an invalid length. [ 1372.993748][T15270] netlink: 5 bytes leftover after parsing attributes in process `syz.5.14315'. [ 1373.024093][ T791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.035716][ T5763] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input82 [ 1373.050661][ T59] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1373.050704][ T59] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1373.053244][ T59] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1373.053288][ T59] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 0 [ 1373.053314][ T59] loop2: lost filesystem error report for type 5 error -117 [ 1373.088128][ T791] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1373.088167][ T791] loop2: lost filesystem error report for type 5 error -117 [ 1373.088992][ T791] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 1373.089017][ T791] loop2: lost filesystem error report for type 5 error -117 [ 1373.090334][ T791] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 1373.090367][ T791] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1373.092021][ T791] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1373.092053][ T791] loop2: lost filesystem error report for type 5 error -117 [ 1373.261135][ T25] usb 2-1: USB disconnect, device number 23 [ 1373.261255][ C1] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 1373.293525][ T31] audit: type=1326 audit(2000000116.265:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.3.14319" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1373.293701][ T31] audit: type=1326 audit(2000000116.265:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.3.14319" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1373.327837][ T31] audit: type=1326 audit(2000000116.265:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.3.14319" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1373.327902][ T31] audit: type=1326 audit(2000000116.265:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.3.14319" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1373.353768][T15283] loop6: detected capacity change from 0 to 64 [ 1373.434002][T15283] syz.6.14317: attempt to access beyond end of device [ 1373.434002][T15283] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1373.447878][T15296] loop2: detected capacity change from 0 to 8 [ 1373.488344][T15294] geneve0: entered allmulticast mode [ 1373.516763][T15296] SQUASHFS error: Failed to read block 0x636: -5 [ 1373.516788][T15296] SQUASHFS error: Unable to read metadata cache entry [634] [ 1373.623288][T15312] CIFS: Attempting to mount //127.0.0.1/share [ 1373.765347][T15324] loop2: detected capacity change from 0 to 1024 [ 1374.202881][T15349] netlink: 'syz.2.14332': attribute type 21 has an invalid length. [ 1374.202973][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14332'. [ 1374.444140][T15312] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1374.444198][T15312] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1374.575876][T15360] usb usb7: check_ctrlrecip: process 15360 (syz.1.14338) requesting ep 01 but needs 81 [ 1374.575914][T15360] usb usb7: usbfs: process 15360 (syz.1.14338) did not claim interface 0 before use [ 1374.664396][T15363] loop6: detected capacity change from 0 to 512 [ 1374.665605][T15363] EXT4-fs: Ignoring removed mblk_io_submit option [ 1374.722457][T15363] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.14339: corrupted in-inode xattr: e_value size too large [ 1374.722497][T15363] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1374.724856][T15363] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.14339: couldn't read orphan inode 15 (err -117) [ 1374.724891][T15363] loop6: lost filesystem error report for type 5 error -117 [ 1374.742669][T15363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.827980][T15376] loop3: detected capacity change from 0 to 2048 [ 1374.884907][T15376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1375.050517][T25670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.071319][ T5628] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1375.183349][T15395] loop2: detected capacity change from 0 to 512 [ 1375.208200][T15395] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1375.208318][T15395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1375.208565][T15395] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1375.212541][T15395] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.14347: iget: bad i_size value: 12154761577498 [ 1375.212576][T15395] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1375.213623][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1375.213646][ C0] EXT4-fs (loop2): initial error at time 2000000118: ext4_orphan_get:1403: inode 13 [ 1375.213682][ C0] EXT4-fs (loop2): last error at time 2000000118: ext4_orphan_get:1403: inode 13 [ 1375.213755][ T5628] usb 6-1: Using ep0 maxpacket: 8 [ 1375.226163][T15395] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.14347: couldn't read orphan inode 13 (err -117) [ 1375.226199][T15395] loop2: lost filesystem error report for type 5 error -117 [ 1375.248077][T15395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1375.287759][ T5628] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1375.311071][T15395] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.14347: dx entry: limit 65535 != root limit 120 [ 1375.311123][T15395] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.14347: Corrupt directory, running e2fsck is recommended [ 1375.325604][ T5628] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1375.325633][ T5628] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.325656][ T5628] usb 6-1: config 0 has no interfaces? [ 1375.325688][ T5628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.388070][ T5628] usb 6-1: config 0 descriptor?? [ 1375.426521][ T791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.601887][ T5628] usb 6-1: USB disconnect, device number 125 [ 1375.634463][T15433] netlink: 'syz.2.14357': attribute type 5 has an invalid length. [ 1375.807616][T15417] loop7: detected capacity change from 0 to 4096 [ 1375.818012][T15417] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1375.936318][T15417] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1375.937803][T15417] ntfs3(loop7): Failed to load $Extend (-22). [ 1375.937826][T15417] ntfs3(loop7): Failed to initialize $Extend. [ 1376.404755][T15466] loop2: detected capacity change from 0 to 1024 [ 1376.408153][T15466] EXT4-fs: Ignoring removed orlov option [ 1376.412819][T15466] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1376.476811][T15466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1376.509246][T15463] loop7: detected capacity change from 0 to 2048 [ 1376.560089][T15479] 9p: Unknown Cache mode or invalid value m [ 1376.594088][T15482] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1376.890710][ T791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.971581][T15463] NILFS (loop7): bad btree node (ino=16, blocknr=15): unsorted keys at index 5 (1065168666629) and 6 (6) [ 1376.971693][T15463] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1377.010722][T15463] Remounting filesystem read-only [ 1377.010748][T15463] NILFS (loop7): error -5 truncating bmap (ino=16) [ 1377.073332][T26106] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 1377.206635][T15506] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1378.180581][T15570] netlink: 'syz.3.14400': attribute type 46 has an invalid length. [ 1378.180608][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14400'. [ 1378.271564][T15567] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1378.717407][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1378.717432][ T31] audit: type=1326 audit(2000000121.944:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.717719][ T31] audit: type=1326 audit(2000000121.944:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.729660][ T31] audit: type=1326 audit(2000000121.955:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.729909][ T31] audit: type=1326 audit(2000000121.955:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.733830][ T31] audit: type=1326 audit(2000000121.955:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.733886][ T31] audit: type=1326 audit(2000000121.955:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.733936][ T31] audit: type=1326 audit(2000000121.955:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.734991][ T31] audit: type=1326 audit(2000000121.955:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1378.735047][ T31] audit: type=1326 audit(2000000121.955:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.6.14413" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1379.290651][ T25] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1379.434279][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1379.435353][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.435401][ T25] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1379.437617][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.437644][ T25] usb 7-1: Product: syz [ 1379.437662][ T25] usb 7-1: Manufacturer: syz [ 1379.437680][ T25] usb 7-1: SerialNumber: syz [ 1379.478185][ T1574] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1379.515339][ T25] cdc_ncm 7-1:1.0: skipping garbage [ 1379.515364][ T25] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 1379.515407][ T25] cdc_ncm 7-1:1.0: bind() failure [ 1379.550271][ T25] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1379.550323][ T25] cdc_ncm 7-1:1.1: bind() failure [ 1379.614616][ T1574] usb 4-1: Using ep0 maxpacket: 16 [ 1379.615363][ T1574] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1379.616621][ T1574] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1379.616649][ T1574] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.616672][ T1574] usb 4-1: config 1 has no interface number 0 [ 1379.616714][ T1574] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1379.616746][ T1574] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1379.619114][ T1574] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1379.619142][ T1574] usb 4-1: Product: syz [ 1379.619161][ T1574] usb 4-1: Manufacturer: syz [ 1379.619178][ T1574] usb 4-1: SerialNumber: syz [ 1379.780779][T26743] usb 7-1: USB disconnect, device number 22 [ 1379.918841][ T1574] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 1380.063402][ T5763] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1380.135834][ T25] usb 4-1: USB disconnect, device number 126 [ 1380.234443][ T5763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1380.235693][ T5763] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 1380.235725][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 25449, setting to 1024 [ 1380.235756][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1380.235785][ T5763] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1380.240502][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1380.240529][ T5763] usb 2-1: SerialNumber: syz [ 1380.261953][T15668] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1380.485480][ T5763] usbtest 2-1:1.0: Linux user mode ISO test driver [ 1380.485507][ T5763] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1380.505100][ T5763] usb 2-1: USB disconnect, device number 24 [ 1380.593526][T15740] trusted_key: encrypted_key: keylen parameter is missing [ 1380.744413][T15752] erspan0: entered promiscuous mode [ 1380.744440][T15752] erspan0: entered allmulticast mode [ 1380.881555][ T25] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1381.026531][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1381.028198][ T25] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1381.031726][ T25] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 1381.031787][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1381.031818][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1381.031849][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1381.031881][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1381.031926][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.130056][ T25] usb 6-1: config 0 descriptor?? [ 1381.132396][T15743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1381.203310][ T25] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input83 [ 1381.332194][T15786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14461'. [ 1381.378524][ T25] usb 6-1: USB disconnect, device number 126 [ 1381.470048][T15801] loop6: detected capacity change from 0 to 8 [ 1381.540449][T15801] loop6: detected capacity change from 0 to 4096 [ 1381.541274][T15801] EXT4-fs: Ignoring removed oldalloc option [ 1381.541397][T15801] EXT4-fs: Conflicting test_dummy_encryption options [ 1382.598401][T15874] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14484'. [ 1382.634126][ T25] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1382.778774][ T25] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1382.779959][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.780008][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1382.780054][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.851676][ T25] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1383.040245][ T25] usb 3-1: USB disconnect, device number 112 [ 1383.247344][T15849] loop6: detected capacity change from 0 to 32768 [ 1383.262083][T15849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14475 (15849) [ 1383.294949][T15849] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1383.294986][T15849] BTRFS info (device loop6): using crc32c checksum algorithm [ 1383.298186][T15918] loop3: detected capacity change from 0 to 736 [ 1383.485403][T15849] BTRFS info (device loop6): enabling ssd optimizations [ 1383.485433][T15849] BTRFS info (device loop6): turning on flush-on-commit [ 1383.485486][T15849] BTRFS info (device loop6): enabling free space tree [ 1383.485506][T15849] BTRFS info (device loop6): enabling auto defrag [ 1383.485526][T15849] BTRFS info (device loop6): use lzo compression, level 1 [ 1383.485550][T15849] BTRFS info (device loop6): max_inline set to 4096 [ 1383.604872][T15849] BTRFS info (device loop6 state M): max_inline set to 4096 [ 1383.675627][T25670] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1383.764433][T15954] ceph: No source [ 1384.442872][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14508'. [ 1384.882550][T15944] loop7: detected capacity change from 0 to 32768 [ 1384.915623][T15944] JBD2: Ignoring recovery information on journal [ 1384.921324][T15944] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 1384.921347][T15944] JBD2: bad block at offset 32 [ 1384.977919][T15944] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1385.139709][T15944] OCFS2: ERROR (device loop7): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 1385.139790][T15944] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1385.139804][T15944] OCFS2: File system is now read-only. [ 1385.139816][T15944] (syz.7.14498,15944,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 1385.139844][T15944] (syz.7.14498,15944,0):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 1385.139871][T15944] (syz.7.14498,15944,0):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 1385.139897][T15944] (syz.7.14498,15944,0):ocfs2_block_group_alloc_contig:553 ERROR: status = -30 [ 1385.139924][T15944] (syz.7.14498,15944,0):ocfs2_block_group_alloc:827 ERROR: status = -30 [ 1385.140018][T15944] (syz.7.14498,15944,0):ocfs2_block_group_alloc:880 ERROR: status = -30 [ 1385.140052][T15944] (syz.7.14498,15944,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30 [ 1385.140078][T15944] (syz.7.14498,15944,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 1385.140105][T15944] (syz.7.14498,15944,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30 [ 1385.140149][T15944] (syz.7.14498,15944,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30 [ 1385.140177][T15944] (syz.7.14498,15944,0):ocfs2_expand_inline_dir:2930 ERROR: status = -30 [ 1385.140204][T15944] (syz.7.14498,15944,0):ocfs2_extend_dir:3294 ERROR: status = -30 [ 1385.140230][T15944] (syz.7.14498,15944,0):ocfs2_prepare_dir_for_insert:4412 ERROR: status = -30 [ 1385.140256][T15944] (syz.7.14498,15944,0):ocfs2_mknod:303 ERROR: status = -30 [ 1385.140283][T15944] (syz.7.14498,15944,0):ocfs2_mknod:513 ERROR: status = -30 [ 1385.140308][T15944] (syz.7.14498,15944,0):ocfs2_create:685 ERROR: status = -30 [ 1385.302821][ T5763] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1385.473330][ T5763] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1385.505265][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.505303][ T5763] usb 2-1: Product: syz [ 1385.505321][ T5763] usb 2-1: Manufacturer: syz [ 1385.505339][ T5763] usb 2-1: SerialNumber: syz [ 1385.538785][T26106] ocfs2: Unmounting device (7,7) on (node local) [ 1385.725919][T26743] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1385.918160][T16047] netlink: 'syz.6.14527': attribute type 11 has an invalid length. [ 1386.168495][ T25] usb 2-1: USB disconnect, device number 25 [ 1386.311429][T16069] loop2: detected capacity change from 0 to 164 [ 1386.418786][T16069] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1386.567119][T16084] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1386.737174][T26743] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1386.737387][T26743] ath9k_htc: Failed to initialize the device [ 1386.752975][ T25] usb 2-1: ath9k_htc: USB layer deinitialized [ 1387.141984][T16125] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1387.227900][T16131] loop3: detected capacity change from 0 to 64 [ 1387.251197][T16131] hfs: unable to locate alternate MDB [ 1387.251216][T16131] hfs: continuing without an alternate MDB [ 1387.376615][T16139] lo speed is unknown, defaulting to 1000 [ 1388.013481][T16205] loop5: detected capacity change from 0 to 256 [ 1388.238667][T16196] netlink: 'syz.2.14566': attribute type 3 has an invalid length. [ 1388.643554][T16236] loop5: detected capacity change from 0 to 128 [ 1388.745466][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14581'. [ 1388.745495][T16239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14581'. [ 1389.515707][T16291] netlink: 'syz.3.14598': attribute type 5 has an invalid length. [ 1389.637496][T16295] loop2: detected capacity change from 0 to 256 [ 1389.771642][T16295] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1389.771676][T16295] FAT-fs (loop2): Filesystem has been set read-only [ 1389.927898][T16314] loop6: detected capacity change from 0 to 2048 [ 1389.939726][T16314] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1389.986954][T16322] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1389.992289][ T31] audit: type=1326 audit(2000000133.786:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.3.14608" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1389.992346][ T31] audit: type=1326 audit(2000000133.786:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.3.14608" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1390.016469][ T31] audit: type=1326 audit(2000000133.797:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.3.14608" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1390.022936][ T31] audit: type=1326 audit(2000000133.797:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.3.14608" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1390.022992][ T31] audit: type=1326 audit(2000000133.797:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.3.14608" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebdb9e159 code=0x7ffc0000 [ 1390.373777][T16336] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14615'. [ 1390.840936][T16372] random: crng reseeded on system resumption [ 1390.992398][T16382] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1390.992522][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1390.992541][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1391.696821][T16422] loop7: detected capacity change from 0 to 128 [ 1391.737426][T16422] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1391.739259][T16422] ext4 filesystem being mounted at /907/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.877776][T16436] netlink: 'syz.5.14643': attribute type 10 has an invalid length. [ 1391.899696][T16436] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1391.899924][T16436] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1391.899948][T16436] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1392.005070][T26106] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1392.089413][ T31] audit: type=1326 audit(2000000135.991:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.2.14647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2553d9e159 code=0x7ffc0000 [ 1392.089481][ T31] audit: type=1326 audit(2000000135.991:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.2.14647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2553d9e159 code=0x7ffc0000 [ 1392.137940][ T31] audit: type=1326 audit(2000000136.022:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.2.14647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2553d9e159 code=0x7ffc0000 [ 1392.138003][ T31] audit: type=1326 audit(2000000136.022:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.2.14647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2553d9e159 code=0x7ffc0000 [ 1392.161150][ T31] audit: type=1326 audit(2000000136.054:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.2.14647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2553d9e159 code=0x7ffc0000 [ 1392.549390][T16470] pim6reg: entered allmulticast mode [ 1392.777149][T16486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1393.126553][T16514] xt_hashlimit: size too large, truncated to 1048576 [ 1393.389754][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14675'. [ 1393.434791][T16530] x_tables: duplicate entry at hook 3 [ 1393.715210][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14680'. [ 1393.715238][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14680'. [ 1393.853998][T16548] loop2: detected capacity change from 0 to 64 [ 1394.457789][ T5763] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1394.628674][ T5763] usb 3-1: Using ep0 maxpacket: 32 [ 1394.630837][ T5763] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1394.632006][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.632040][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.632082][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.648196][ T5763] usb 3-1: config 0 descriptor?? [ 1394.661546][ T5763] hub 3-1:0.0: USB hub found [ 1394.807159][T16596] loop5: detected capacity change from 0 to 256 [ 1394.860793][ T5763] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 1394.868547][T16603] netlink: 488 bytes leftover after parsing attributes in process `syz.3.14697'. [ 1395.056258][ T5844] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1395.059568][ T5763] usbhid 3-1:0.0: can't add hid device: -71 [ 1395.059676][ T5763] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1395.097829][ T5763] usb 3-1: USB disconnect, device number 113 [ 1395.198648][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 1395.199552][ T5844] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 1395.203710][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.203738][ T5844] usb 2-1: Product: syz [ 1395.203755][ T5844] usb 2-1: Manufacturer: syz [ 1395.203776][ T5844] usb 2-1: SerialNumber: syz [ 1395.464537][ T5844] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1395.464939][ T5844] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1395.639437][ T5844] usb 2-1: USB disconnect, device number 26 [ 1395.676472][T16665] loop5: detected capacity change from 0 to 1024 [ 1395.893214][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.263844][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14720'. [ 1396.529689][T16726] loop5: detected capacity change from 0 to 256 [ 1396.535291][T16726] exfat: Deprecated parameter 'namecase' [ 1396.574497][T16726] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1396.816162][T16728] loop7: detected capacity change from 0 to 4096 [ 1396.824592][T16728] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1396.856408][T16728] ntfs3(loop7): failed to replay log file. Can't mount rw! [ 1396.943948][ T5844] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1396.971129][ T1574] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1397.086752][ T5844] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1397.093459][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 1397.093489][ T5844] usb 2-1: Product: syz [ 1397.106902][ T5844] usb 2-1: config 0 descriptor?? [ 1397.119337][ T5844] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1397.127721][ T5844] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1397.154492][ T1574] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1397.157264][ T1574] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1397.157296][ T1574] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1397.157322][ T1574] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1397.157364][ T1574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.210537][T16744] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1397.279011][T16781] loop5: detected capacity change from 0 to 512 [ 1397.303973][T16781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.304073][T16781] ext4 filesystem being mounted at /2500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.318626][ T5763] usb 2-1: USB disconnect, device number 27 [ 1397.324260][ T5763] ftdi_sio 2-1:0.0: device disconnected [ 1397.429594][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.440641][T16803] netlink: 'syz.6.14739': attribute type 8 has an invalid length. [ 1397.616199][T23677] Bluetooth: hci6: Reading Intel version command failed (-71) [ 1397.616256][ T5628] usb 4-1: USB disconnect, device number 127 [ 1397.757163][T16821] netlink: 388 bytes leftover after parsing attributes in process `syz.7.14741'. [ 1397.941063][T16833] xt_hashlimit: size too large, truncated to 1048576 [ 1398.556117][T16870] loop5: detected capacity change from 0 to 8 [ 1398.682681][T16880] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1398.682715][T16880] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1398.682750][T16880] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1398.703484][T16870] cramfs: bad data blocksize 3959421443 [ 1398.703506][T16870] cramfs: bad data blocksize 4294965915 [ 1398.703521][T16870] cramfs: bad data blocksize 802397048 [ 1398.709610][T16870] cramfs: bad data blocksize 4294742353 [ 1398.709875][T16870] cramfs: bad data blocksize 3367320904 [ 1398.709896][T16870] cramfs: bad data blocksize 859179931 [ 1398.709912][T16870] cramfs: bad data blocksize 3436389781 [ 1398.709927][T16870] cramfs: bad data blocksize 4294365136 [ 1398.709942][T16870] cramfs: bad data blocksize 4294967040 [ 1398.709962][T16870] cramfs: bad data blocksize 3959421443 [ 1398.739050][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1398.739069][ T31] audit: type=1800 audit(2000000142.940:876): pid=16870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14756" name="file2" dev="loop5" ino=268 res=0 errno=0 [ 1399.023592][T16900] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1399.371680][T16923] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1399.396378][T16928] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14776'. [ 1399.443722][T16929] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14777'. [ 1399.443837][T16929] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14777'. [ 1399.530567][ T31] audit: type=1326 audit(2000000143.801:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16930 comm="syz.6.14778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1399.531464][ T31] audit: type=1326 audit(2000000143.801:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16930 comm="syz.6.14778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1399.576909][ T31] audit: type=1326 audit(2000000143.801:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16930 comm="syz.6.14778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1399.576971][ T31] audit: type=1326 audit(2000000143.854:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16930 comm="syz.6.14778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1399.577021][ T31] audit: type=1326 audit(2000000143.854:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16930 comm="syz.6.14778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1400.585802][T16994] ./file0: Can't open blockdev [ 1401.486716][T17048] netlink: 'syz.2.14820': attribute type 2 has an invalid length. [ 1401.566977][T17055] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14822'. [ 1401.763029][T16997] loop3: detected capacity change from 0 to 32768 [ 1402.486673][T17044] loop5: detected capacity change from 0 to 32768 [ 1402.510033][T17044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.14818 (17044) [ 1402.539615][T17044] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1402.539652][T17044] BTRFS info (device loop5): using sha256 checksum algorithm [ 1402.979056][T17044] BTRFS info (device loop5): enabling ssd optimizations [ 1402.979089][T17044] BTRFS info (device loop5): turning on async discard [ 1402.979109][T17044] BTRFS info (device loop5): enabling free space tree [ 1403.101624][ T31] audit: type=1326 audit(2000000147.549:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17130 comm="syz.6.14844" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.102418][ T31] audit: type=1326 audit(2000000147.549:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17130 comm="syz.6.14844" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.187402][ T31] audit: type=1326 audit(2000000147.643:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17130 comm="syz.6.14844" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.187471][ T31] audit: type=1326 audit(2000000147.643:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17130 comm="syz.6.14844" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.196283][T17136] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14840'. [ 1403.288682][ T5621] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1403.336935][T17138] tmpfs: Bad value for 'mpol' [ 1403.550431][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1403.550454][ T31] audit: type=1326 audit(2000000147.990:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.6.14847" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.550511][ T31] audit: type=1326 audit(2000000147.990:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.6.14847" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.550563][ T31] audit: type=1326 audit(2000000148.011:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.6.14847" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.550616][ T31] audit: type=1326 audit(2000000148.011:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.6.14847" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1403.550665][ T31] audit: type=1326 audit(2000000148.011:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.6.14847" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd7d9e159 code=0x7ffc0000 [ 1404.184630][T17187] netlink: 'syz.1.14856': attribute type 1 has an invalid length. [ 1404.184657][T17187] netlink: 'syz.1.14856': attribute type 12 has an invalid length. [ 1404.184674][T17187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14856'. [ 1404.751345][T17211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1404.810022][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1404.953073][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1404.955059][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1404.957641][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.966136][ T25] usb 2-1: config 0 descriptor?? [ 1405.004919][ T25] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1405.386193][ T25] gspca_sq930x: ucbus_write failed -71 [ 1405.386279][ T25] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1405.394853][ T25] usb 2-1: USB disconnect, device number 28 [ 1405.640363][T17281] loop2: detected capacity change from 0 to 512 [ 1405.646244][T17281] EXT4-fs: Ignoring removed oldalloc option [ 1405.647543][T17281] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1405.714743][ T5763] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1405.734107][T17281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.779671][T17290] loop7: detected capacity change from 0 to 512 [ 1405.862710][T17290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.862817][T17290] ext4 filesystem being mounted at /941/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.881964][T17281] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1405.905614][ T5763] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1405.909410][ T5763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1405.909458][ T5763] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1405.909489][ T5763] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1405.909516][ T5763] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1405.909559][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.978610][T17271] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1406.050344][T17290] EXT4-fs error (device loop7): ext4_get_inode_usage:899: inode #12: comm syz.7.14889: corrupted xattr block 6: invalid header [ 1406.173697][T17290] EXT4-fs (loop7): Remounting filesystem read-only [ 1406.256972][ T791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.335991][T19852] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1406.336025][T19852] Quota error (device loop7): write_blk: dquota write failed [ 1406.336042][T19852] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 1406.337266][T17306] Cannot find del_set index 4 as target [ 1406.340470][T26106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.456283][ T5763] ims_pcu 6-1:1.0: Failed to set line state, error: -71 [ 1406.465077][ T5763] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -71 [ 1406.485403][ T5763] usb 6-1: USB disconnect, device number 127 [ 1406.944512][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14902'. [ 1407.315927][T17377] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1407.511569][T17389] loop6: detected capacity change from 0 to 128 [ 1407.564080][T17389] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1407.566056][T17389] ext4 filesystem being mounted at /1040/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1407.680621][T25670] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1407.767427][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14920'. [ 1408.095271][T17424] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14925'. [ 1408.285610][T17428] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1408.285640][T17428] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 1408.285729][T17428] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1408.285750][T17428] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 1408.918395][T17454] nvme_fabrics: missing parameter 'host_traddr=%s' [ 1409.010401][T17458] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1409.010431][T17458] block device autoloading is deprecated and will be removed. [ 1410.013519][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14951'. [ 1410.013546][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14951'. [ 1410.338752][T17544] netlink: zone id is out of range [ 1410.338772][T17544] netlink: zone id is out of range [ 1410.338783][T17544] netlink: zone id is out of range [ 1410.603339][T17562] loop7: detected capacity change from 0 to 16 [ 1410.635631][T17562] erofs (device loop7): mounted with root inode @ nid 36. [ 1410.651818][T17564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14962'. [ 1410.654404][T17562] syz.7.14964: attempt to access beyond end of device [ 1410.654404][T17562] loop7: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 1410.687617][T17562] syz.7.14964: attempt to access beyond end of device [ 1410.687617][T17562] loop7: rw=0, sector=301990400, nr_sectors = 514 limit=16 [ 1410.688065][T17562] erofs (device loop7): read error -5 @ 0 of nid 36 [ 1410.773327][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14965'. [ 1411.162987][T17596] loop7: detected capacity change from 0 to 512 [ 1411.230880][T17596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1411.230990][T17596] ext4 filesystem being mounted at /957/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.456497][T26106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.669991][T17630] netlink: 'syz.1.14977': attribute type 27 has an invalid length. [ 1411.670019][T17630] netlink: 'syz.1.14977': attribute type 3 has an invalid length. [ 1411.670035][T17630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14977'. [ 1412.162552][T17652] ovs-s: entered promiscuous mode [ 1412.231329][T17664] loop6: detected capacity change from 0 to 64 [ 1412.868682][T17698] CIFS: Invalid mount helper version specified [ 1413.063777][T17703] loop3: detected capacity change from 0 to 2048 [ 1413.114388][T17703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1413.395052][T17730] loop2: detected capacity change from 0 to 256 [ 1413.396960][T17730] exfat: Deprecated parameter 'utf8' [ 1413.396983][T17730] exfat: Deprecated parameter 'utf8' [ 1413.429316][T17730] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1414.604325][T17787] bond1: Removing last ns target with arp_interval on [ 1414.653424][T17835] vivid-000: ================= START STATUS ================= [ 1414.653448][T17835] vivid-000: Generate PTS: true [ 1414.653477][T17835] vivid-000: Generate SCR: true [ 1414.653502][T17835] tpg source WxH: 1600x1200 (Y'CbCr) [ 1414.653518][T17835] tpg field: 1 [ 1414.653528][T17835] tpg crop: (0,0)/1600x1200 [ 1414.653545][T17835] tpg compose: (0,0)/1600x1200 [ 1414.653562][T17835] tpg colorspace: 12 [ 1414.653572][T17835] tpg transfer function: 1/0 [ 1414.653585][T17835] tpg Y'CbCr encoding: 3/0 [ 1414.653617][T17835] tpg quantization: 2/0 [ 1414.653630][T17835] tpg RGB range: 0/2 [ 1414.653642][T17835] vivid-000: ================== END STATUS ================== [ 1415.115018][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15033'. [ 1415.522766][ T31] audit: type=1400 audit(2000000160.587:892): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop3: detected capacity change from 0 to 32768 [ 1416.363272][T17875] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15036 (17875) [ 1416.417771][T17875] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1416.417807][T17875] BTRFS info (device loop3): using sha256 checksum algorithm [ 1416.467387][ T31] audit: type=1326 audit(2000000161.574:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.15055" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1416.468046][ T31] audit: type=1326 audit(2000000161.574:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.15055" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1416.544714][ T31] audit: type=1326 audit(2000000161.658:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.15055" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1416.544874][ T31] audit: type=1326 audit(2000000161.658:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.15055" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1416.545051][ T31] audit: type=1326 audit(2000000161.658:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.15055" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72199e159 code=0x7ffc0000 [ 1416.634753][T17945] loop6: detected capacity change from 0 to 1024 [ 1416.660620][T17875] BTRFS info (device loop3): turning off barriers [ 1416.660650][T17875] BTRFS info (device loop3): enabling free space tree [ 1416.943577][ T5622] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1417.446593][T26743] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1417.621860][T26743] usb 6-1: Using ep0 maxpacket: 8 [ 1417.627189][T26743] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1417.631241][T26743] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1417.631269][T26743] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.631292][T26743] usb 6-1: config 6 has no interface number 0 [ 1417.631337][T26743] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1417.631362][T26743] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.639067][T26743] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1417.639099][T26743] usb 6-1: Product: syz [ 1417.639117][T26743] usb 6-1: Manufacturer: syz [ 1417.639135][T26743] usb 6-1: SerialNumber: syz [ 1417.702926][T26743] hso 6-1:6.2: Failed to find INT IN ep [ 1417.955452][ T25] usb 6-1: USB disconnect, device number 2 [ 1418.713774][T18048] netlink: 'syz.5.15076': attribute type 21 has an invalid length. [ 1418.713803][T18048] netlink: 128 bytes leftover after parsing attributes in process `syz.5.15076'. [ 1418.713874][T18048] netlink: 'syz.5.15076': attribute type 5 has an invalid length. [ 1418.713891][T18048] netlink: 'syz.5.15076': attribute type 6 has an invalid length. [ 1418.713907][T18048] netlink: 3 bytes leftover after parsing attributes in process `syz.5.15076'. [ 1419.037225][T18065] x_tables: duplicate underflow at hook 3 [ 1419.284487][T18082] loop5: detected capacity change from 0 to 512 [ 1419.320406][T18084] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15089'. [ 1419.350914][T18082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.351020][T18082] ext4 filesystem being mounted at /2552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1419.362585][T18094] netlink: 6 bytes leftover after parsing attributes in process `syz.6.15092'. [ 1419.421121][T18084] ip6tnl2: entered allmulticast mode [ 1419.525719][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.766834][T18118] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15098'. [ 1419.766876][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15098'. [ 1419.805376][T18118] IPv6: sit1: Disabled Multicast RS [ 1420.008665][T18136] tc_dump_action: action bad kind [ 1420.210473][T18148] loop3: detected capacity change from 0 to 256 [ 1420.475032][T18165] loop7: detected capacity change from 0 to 128 [ 1420.518483][T18165] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1420.525109][T18165] ext4 filesystem being mounted at /976/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.641541][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1420.657105][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1420.733488][T26106] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1420.796791][T18184] loop6: detected capacity change from 0 to 512 [ 1420.837887][T18184] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1420.837912][T18184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1420.838155][T18184] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1420.839637][T18184] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #13: comm syz.6.15114: iget: bad i_size value: 12154761577498 [ 1420.839670][T18184] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1420.843796][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1420.843821][ C1] EXT4-fs (loop6): initial error at time 2000000166: ext4_orphan_get:1403: inode 13 [ 1420.843856][ C1] EXT4-fs (loop6): last error at time 2000000166: ext4_orphan_get:1403: inode 13 [ 1420.919061][T18184] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.15114: couldn't read orphan inode 13 (err -117) [ 1420.919100][T18184] loop6: lost filesystem error report for type 5 error -117 [ 1420.942957][T18184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1420.968778][T18184] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.15114: dx entry: limit 65535 != root limit 120 [ 1420.968817][T18184] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.15114: Corrupt directory, running e2fsck is recommended [ 1421.180751][T25670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.183605][T18189] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1421.240784][T18206] loop2: detected capacity change from 0 to 256 [ 1421.557430][T18227] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 1422.284589][T18275] loop7: detected capacity change from 0 to 128 [ 1422.522082][T18287] trusted_key: encrypted_key: hex blob is missing [ 1422.809074][T18302] loop6: detected capacity change from 0 to 2048 [ 1422.842332][T18302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1422.938636][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15155'. [ 1423.101010][T18318] loop5: detected capacity change from 0 to 64 [ 1423.362909][T18334] loop6: detected capacity change from 0 to 16 [ 1423.384362][T18334] erofs (device loop6): DAX unsupported by block device. Turning off DAX. [ 1423.386931][T18333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.403672][T18334] erofs (device loop6): mounted with root inode @ nid 36. [ 1423.458909][ T8184] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1423.482062][T18334] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1423.482192][T18334] erofs (device loop6): read error -117 @ 2 of nid 89 [ 1423.483507][ T31] audit: type=1800 audit(2000000168.944:898): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15161" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1423.601649][T18341] [U]  [ 1423.601667][T18341] [U] K{ [ 1423.601684][T18341] [U] t 1ŠFfˊ`GJgo/mC [ 1423.601737][T18341] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1423.601775][T18341] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1423.601877][T18341] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1423.602000][T18341] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1423.602047][T18341] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1423.602071][T18341] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1423.602128][T18341] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1423.602378][T18341] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1423.602421][T18341] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1423.602441][T18341] [U] 22Ʃx?0;3u [ 1423.602504][T18341] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1423.602546][T18341] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1423.602576][T18341] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1423.602593][T18341] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1423.602625][T18341] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1423.602669][T18341] [U] ec [ 1423.602685][T18341] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1423.629796][T18339] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1423.788929][T18278] loop3: detected capacity change from 0 to 32768 [ 1423.808388][T18278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15145 (18278) [ 1423.922147][T18278] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1423.922185][T18278] BTRFS info (device loop3): using sha256 checksum algorithm [ 1424.146442][T18373] loop2: detected capacity change from 0 to 512 [ 1424.181402][T18278] BTRFS info (device loop3): enabling ssd optimizations [ 1424.181435][T18278] BTRFS info (device loop3): turning on async discard [ 1424.181455][T18278] BTRFS info (device loop3): enabling free space tree [ 1424.236979][T18373] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.15169: bg 0: block 5: invalid block bitmap [ 1424.237039][T18373] loop2: lost filesystem error report for type 5 error -117 [ 1424.239253][T18373] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1424.239280][T18373] loop2: lost filesystem error report for type 5 error -117 [ 1424.239676][T18373] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.15169: invalid indirect mapped block 3 (level 2) [ 1424.239712][T18373] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1424.240195][T18373] EXT4-fs (loop2): 1 orphan inode deleted [ 1424.240217][T18373] EXT4-fs (loop2): 1 truncate cleaned up [ 1424.284657][T18373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.686132][T26743] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1424.835140][T26743] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 1424.839633][T26743] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1424.839661][T26743] usb 3-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 1424.839685][T26743] usb 3-1: config 0 has no interface number 0 [ 1424.839729][T26743] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid maxpacket 53196, setting to 1024 [ 1424.839760][T26743] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1424.839803][T26743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.851047][T26743] usb 3-1: config 0 descriptor?? [ 1424.852994][T18373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1424.987543][ T5844] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1425.007281][ T5622] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1425.157001][ T5844] usb 7-1: Using ep0 maxpacket: 32 [ 1425.163066][ T5844] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1425.163119][ T5844] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1425.196545][ T5844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.196577][ T5844] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1425.197083][ T5763] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1425.200193][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.200220][ T5844] usb 7-1: Product: syz [ 1425.200238][ T5844] usb 7-1: Manufacturer: syz [ 1425.200256][ T5844] usb 7-1: SerialNumber: syz [ 1425.280776][T26743] usb 3-1: USB disconnect, device number 114 [ 1425.284980][ T31] audit: type=1326 audit(2000000170.833:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.285134][ T31] audit: type=1326 audit(2000000170.833:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.344989][ T5844] usb 7-1: selecting invalid altsetting 1 [ 1425.347225][ T31] audit: type=1326 audit(2000000170.886:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.347285][ T31] audit: type=1326 audit(2000000170.886:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.347335][ T31] audit: type=1326 audit(2000000170.886:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.347384][ T31] audit: type=1326 audit(2000000170.886:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.347432][ T31] audit: type=1326 audit(2000000170.886:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.347481][ T31] audit: type=1326 audit(2000000170.886:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.347530][ T31] audit: type=1326 audit(2000000170.886:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.7.15183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f02b819e159 code=0x7ffc0000 [ 1425.415865][ T5763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1425.418779][ T5763] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1425.418805][ T5763] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1425.418828][ T5763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1425.418852][ T5763] usb 2-1: config 1 has no interface number 0 [ 1425.418885][ T5763] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1425.418923][ T5763] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1425.445900][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.445932][ T5763] usb 2-1: Product: syz [ 1425.445950][ T5763] usb 2-1: Manufacturer: syz [ 1425.445968][ T5763] usb 2-1: SerialNumber: syz [ 1425.535267][ T5763] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1425.535318][ T5763] cdc_ncm 2-1:1.1: bind() failure [ 1425.801364][ T5763] usb 2-1: USB disconnect, device number 29 [ 1425.859924][ T791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.883985][ T5844] usb 7-1: USB disconnect, device number 23 [ 1426.028553][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.092046][T18479] loop2: detected capacity change from 0 to 64 [ 1426.451343][T18491] loop2: detected capacity change from 0 to 1764 [ 1426.494368][T18491] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1427.107337][T18534] loop2: detected capacity change from 0 to 256 [ 1427.234027][T18534] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1427.247047][T18475] loop7: detected capacity change from 0 to 32768 [ 1427.279397][T18475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15187 (18475) [ 1427.323408][T18475] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1427.323446][T18475] BTRFS info (device loop7): using sha256 checksum algorithm [ 1427.470054][T18475] BTRFS info (device loop7): enabling ssd optimizations [ 1427.470086][T18475] BTRFS info (device loop7): turning on async discard [ 1427.470106][T18475] BTRFS info (device loop7): enabling free space tree [ 1427.626661][T18571] loop6: detected capacity change from 0 to 4096 [ 1427.628456][T18571] EXT4-fs: Ignoring removed mblk_io_submit option [ 1427.648239][T18571] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1427.695146][T18571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.944617][T26106] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1428.020427][T18591] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1428.161701][T25670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.244513][T18602] ================================================================== [ 1428.244534][T18602] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 1428.244562][T18602] Read of size 1 at addr ffff88802a119758 by task syz.5.15224/18602 [ 1428.244583][T18602] [ 1428.244598][T18602] CPU: 1 UID: 0 PID: 18602 Comm: syz.5.15224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.244635][T18602] Tainted: [L]=SOFTLOCKUP [ 1428.244645][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1428.244661][T18602] Call Trace: [ 1428.244671][T18602] [ 1428.244682][T18602] dump_stack_lvl+0xe8/0x150 [ 1428.244720][T18602] print_address_description+0x55/0x1e0 [ 1428.244755][T18602] ? string+0x216/0x2d0 [ 1428.244777][T18602] print_report+0x58/0x70 [ 1428.244808][T18602] kasan_report+0x117/0x150 [ 1428.244842][T18602] ? string+0x216/0x2d0 [ 1428.244869][T18602] string+0x216/0x2d0 [ 1428.244896][T18602] vsnprintf+0x74a/0xef0 [ 1428.244927][T18602] seq_printf+0x188/0x290 [ 1428.244958][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.244989][T18602] ? __kmalloc_noprof+0x38c/0x720 [ 1428.245015][T18602] ? __pfx_seq_printf+0x10/0x10 [ 1428.245045][T18602] ? __asan_memcpy+0x40/0x70 [ 1428.245069][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.245103][T18602] input_devices_seq_show+0x10f/0x640 [ 1428.245138][T18602] seq_read_iter+0x8d5/0xca0 [ 1428.245176][T18602] seq_read+0x367/0x480 [ 1428.245210][T18602] ? __pfx_seq_read+0x10/0x10 [ 1428.245236][T18602] ? __mutex_trylock_common+0x15f/0x270 [ 1428.245272][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.245298][T18602] ? common_file_perm+0x20e/0x2b0 [ 1428.245338][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.245371][T18602] ? __pfx_seq_read+0x10/0x10 [ 1428.245398][T18602] proc_reg_read+0x1e9/0x2e0 [ 1428.245428][T18602] ? __pfx_proc_reg_read+0x10/0x10 [ 1428.245456][T18602] vfs_read+0x213/0xa80 [ 1428.245497][T18602] ? __pfx___mutex_lock+0x10/0x10 [ 1428.245531][T18602] ? __pfx_vfs_read+0x10/0x10 [ 1428.245569][T18602] ? __fget_files+0x2a/0x420 [ 1428.245607][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.245637][T18602] ? __fget_files+0x3a2/0x420 [ 1428.245671][T18602] ? __fget_files+0x2a/0x420 [ 1428.245708][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.245741][T18602] ksys_read+0x150/0x270 [ 1428.245778][T18602] ? __pfx_ksys_read+0x10/0x10 [ 1428.245818][T18602] do_syscall_64+0x166/0x520 [ 1428.245849][T18602] ? trace_irq_disable+0x3b/0x140 [ 1428.245875][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.245904][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.245930][T18602] RIP: 0033:0x7fa14fd9e159 [ 1428.245952][T18602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.245974][T18602] RSP: 002b:00007fa150b94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1428.246002][T18602] RAX: ffffffffffffffda RBX: 00007fa150025fa0 RCX: 00007fa14fd9e159 [ 1428.246022][T18602] RDX: 0000000000002020 RSI: 00002000000028c0 RDI: 0000000000000003 [ 1428.246039][T18602] RBP: 00007fa14fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 1428.246056][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.246073][T18602] R13: 00007fa150026038 R14: 00007fa150025fa0 R15: 00007ffe0fb73118 [ 1428.246104][T18602] [ 1428.246114][T18602] [ 1428.246121][T18602] Allocated by task 17878: [ 1428.246134][T18602] kasan_save_track+0x3e/0x80 [ 1428.246159][T18602] __kasan_kmalloc+0x93/0xb0 [ 1428.246185][T18602] __kmalloc_noprof+0x36b/0x720 [ 1428.246207][T18602] sk_prot_alloc+0xe7/0x210 [ 1428.246239][T18602] sk_alloc+0x3a/0x390 [ 1428.246268][T18602] __netlink_create+0x62/0x260 [ 1428.246301][T18602] netlink_create+0x3ca/0x590 [ 1428.246331][T18602] __sock_create+0x4b3/0x9d0 [ 1428.246355][T18602] __sys_socket+0xd6/0x1b0 [ 1428.246378][T18602] __x64_sys_socket+0x7a/0x90 [ 1428.246403][T18602] do_syscall_64+0x166/0x520 [ 1428.246432][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.246455][T18602] [ 1428.246463][T18602] Freed by task 17757: [ 1428.246475][T18602] kasan_save_track+0x3e/0x80 [ 1428.246499][T18602] kasan_save_free_info+0x40/0x50 [ 1428.246533][T18602] __kasan_slab_free+0x5c/0x80 [ 1428.246558][T18602] kfree+0x1c5/0x650 [ 1428.246591][T18602] __sk_destruct+0x751/0x9d0 [ 1428.246623][T18602] rcu_core+0x926/0x1260 [ 1428.246647][T18602] handle_softirqs+0x226/0x860 [ 1428.246678][T18602] do_softirq+0x77/0xd0 [ 1428.246707][T18602] __local_bh_enable_ip+0x100/0x140 [ 1428.246738][T18602] fpu_clone+0x4ef/0xaf0 [ 1428.246765][T18602] copy_thread+0x3e5/0x970 [ 1428.246786][T18602] copy_process+0x2046/0x43e0 [ 1428.246814][T18602] kernel_clone+0x2d7/0x940 [ 1428.246846][T18602] __x64_sys_clone+0x1b6/0x230 [ 1428.246878][T18602] do_syscall_64+0x166/0x520 [ 1428.246907][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.246930][T18602] [ 1428.246937][T18602] Last potentially related work creation: [ 1428.246945][T18602] kasan_save_stack+0x3e/0x60 [ 1428.246968][T18602] kasan_record_aux_stack+0xbd/0xd0 [ 1428.247001][T18602] call_rcu+0xee/0x8b0 [ 1428.247028][T18602] netlink_release+0x16be/0x1a80 [ 1428.247065][T18602] __sock_release+0xa0/0x1f0 [ 1428.247087][T18602] sock_close+0x1c/0x30 [ 1428.247106][T18602] __fput+0x418/0xa50 [ 1428.247135][T18602] task_work_run+0x1d9/0x270 [ 1428.247164][T18602] exit_to_user_mode_loop+0x204/0x770 [ 1428.247188][T18602] do_syscall_64+0x328/0x520 [ 1428.247216][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.247240][T18602] [ 1428.247246][T18602] The buggy address belongs to the object at ffff88802a119000 [ 1428.247246][T18602] which belongs to the cache kmalloc-2k of size 2048 [ 1428.247267][T18602] The buggy address is located 1880 bytes inside of [ 1428.247267][T18602] freed 2048-byte region [ffff88802a119000, ffff88802a119800) [ 1428.247293][T18602] [ 1428.247300][T18602] The buggy address belongs to the physical page: [ 1428.247312][T18602] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a119000 pfn:0x2a118 [ 1428.247341][T18602] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1428.247361][T18602] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1428.247384][T18602] page_type: f5(slab) [ 1428.247405][T18602] raw: 00fff00000000240 ffff88801b042000 ffffea0000a15e10 ffffea00014e9610 [ 1428.247428][T18602] raw: ffff88802a119000 0000000000080006 00000000f5000000 0000000000000000 [ 1428.247452][T18602] head: 00fff00000000240 ffff88801b042000 ffffea0000a15e10 ffffea00014e9610 [ 1428.247475][T18602] head: ffff88802a119000 0000000000080006 00000000f5000000 0000000000000000 [ 1428.247497][T18602] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1428.247520][T18602] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1428.247534][T18602] page dumped because: kasan: bad access detected [ 1428.247546][T18602] page_owner tracks the page as allocated [ 1428.247555][T18602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 115, tgid 115 (kworker/u8:5), ts 8101879587 [ 1428.247594][T18602] post_alloc_hook+0x1f9/0x250 [ 1428.247629][T18602] get_page_from_freelist+0x2209/0x2280 [ 1428.247655][T18602] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1428.247680][T18602] allocate_slab+0x7d/0x620 [ 1428.247711][T18602] refill_objects+0x2d5/0x350 [ 1428.247742][T18602] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1428.247771][T18602] __kmalloc_noprof+0x47b/0x720 [ 1428.247793][T18602] scsi_alloc_target+0x138/0xbd0 [ 1428.247815][T18602] __scsi_scan_target+0xff/0xd10 [ 1428.247838][T18602] scsi_scan_host_selected+0x391/0x6c0 [ 1428.247862][T18602] do_scan_async+0x10e/0x660 [ 1428.247885][T18602] async_run_entry_fn+0x9d/0x430 [ 1428.247918][T18602] process_scheduled_works+0xc3d/0x1630 [ 1428.247949][T18602] worker_thread+0xa47/0xfb0 [ 1428.247981][T18602] kthread+0x38b/0x480 [ 1428.248002][T18602] ret_from_fork+0x514/0xb70 [ 1428.248023][T18602] page_owner free stack trace missing [ 1428.248032][T18602] [ 1428.248039][T18602] Memory state around the buggy address: [ 1428.248052][T18602] ffff88802a119600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.248070][T18602] ffff88802a119680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.248087][T18602] >ffff88802a119700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.248101][T18602] ^ [ 1428.248115][T18602] ffff88802a119780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1428.248133][T18602] ffff88802a119800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1428.248146][T18602] ================================================================== [ 1428.248245][T18602] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1429.078499][T18602] CPU: 1 UID: 0 PID: 18602 Comm: syz.5.15224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.089525][T18602] Tainted: [L]=SOFTLOCKUP [ 1429.093842][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1429.103884][T18602] Call Trace: [ 1429.107176][T18602] [ 1429.110100][T18602] vpanic+0x56d/0xa60 [ 1429.114091][T18602] ? rcu_is_watching+0x16/0xb0 [ 1429.118856][T18602] ? __pfx_vpanic+0x10/0x10 [ 1429.123359][T18602] ? __pfx___schedule+0x10/0x10 [ 1429.128208][T18602] panic+0xc5/0xd0 [ 1429.131932][T18602] ? __pfx_panic+0x10/0x10 [ 1429.136350][T18602] ? preempt_schedule_thunk+0x16/0x40 [ 1429.141754][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.147387][T18602] ? string+0x216/0x2d0 [ 1429.151531][T18602] check_panic_on_warn+0x89/0xb0 [ 1429.156469][T18602] ? string+0x216/0x2d0 [ 1429.160615][T18602] end_report+0x73/0x170 [ 1429.164854][T18602] ? string+0x216/0x2d0 [ 1429.168995][T18602] kasan_report+0x128/0x150 [ 1429.173501][T18602] ? string+0x216/0x2d0 [ 1429.177657][T18602] string+0x216/0x2d0 [ 1429.181632][T18602] vsnprintf+0x74a/0xef0 [ 1429.185868][T18602] seq_printf+0x188/0x290 [ 1429.190193][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.195824][T18602] ? __kmalloc_noprof+0x38c/0x720 [ 1429.200853][T18602] ? __pfx_seq_printf+0x10/0x10 [ 1429.205699][T18602] ? __asan_memcpy+0x40/0x70 [ 1429.210278][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.215918][T18602] input_devices_seq_show+0x10f/0x640 [ 1429.221291][T18602] seq_read_iter+0x8d5/0xca0 [ 1429.225883][T18602] seq_read+0x367/0x480 [ 1429.230037][T18602] ? __pfx_seq_read+0x10/0x10 [ 1429.234742][T18602] ? __mutex_trylock_common+0x15f/0x270 [ 1429.240293][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.245921][T18602] ? common_file_perm+0x20e/0x2b0 [ 1429.250943][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.256571][T18602] ? __pfx_seq_read+0x10/0x10 [ 1429.261241][T18602] proc_reg_read+0x1e9/0x2e0 [ 1429.265826][T18602] ? __pfx_proc_reg_read+0x10/0x10 [ 1429.270936][T18602] vfs_read+0x213/0xa80 [ 1429.275097][T18602] ? __pfx___mutex_lock+0x10/0x10 [ 1429.280121][T18602] ? __pfx_vfs_read+0x10/0x10 [ 1429.284801][T18602] ? __fget_files+0x2a/0x420 [ 1429.289401][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.295028][T18602] ? __fget_files+0x3a2/0x420 [ 1429.299709][T18602] ? __fget_files+0x2a/0x420 [ 1429.304304][T18602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1429.309938][T18602] ksys_read+0x150/0x270 [ 1429.314189][T18602] ? __pfx_ksys_read+0x10/0x10 [ 1429.318960][T18602] do_syscall_64+0x166/0x520 [ 1429.323547][T18602] ? trace_irq_disable+0x3b/0x140 [ 1429.328567][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.334629][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.340522][T18602] RIP: 0033:0x7fa14fd9e159 [ 1429.344930][T18602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.364535][T18602] RSP: 002b:00007fa150b94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1429.372979][T18602] RAX: ffffffffffffffda RBX: 00007fa150025fa0 RCX: 00007fa14fd9e159 [ 1429.380977][T18602] RDX: 0000000000002020 RSI: 00002000000028c0 RDI: 0000000000000003 [ 1429.388942][T18602] RBP: 00007fa14fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 1429.396906][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.404874][T18602] R13: 00007fa150026038 R14: 00007fa150025fa0 R15: 00007ffe0fb73118 [ 1429.412856][T18602] [ 1429.416093][T18602] Kernel Offset: disabled [ 1429.420420][T18602] Rebooting in 86400 seconds..