last executing test programs: 7m58.942469458s ago: executing program 3 (id=4567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x100000}}, 0x1c}}, 0x0) 7m58.819770651s ago: executing program 3 (id=4569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x759c0ea4768317e4, 0x3, 0xb}]}]}, 0x54}}, 0x0) 7m58.117134549s ago: executing program 3 (id=4575): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={0x0, 0x2b53}, 0x8) 7m57.894817884s ago: executing program 3 (id=4577): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 7m57.564781712s ago: executing program 3 (id=4582): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x288}}, 0x2000) 7m57.026741345s ago: executing program 3 (id=4592): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 7m56.665289184s ago: executing program 32 (id=4592): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 5.050337297s ago: executing program 4 (id=9566): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000340)=0x100, 0x4) 4.735975215s ago: executing program 4 (id=9569): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 4.414699572s ago: executing program 4 (id=9570): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000001540)={0x7, 0xfff, 0x0, 0x5, 0x0, 0x81}) 3.873808286s ago: executing program 4 (id=9575): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)={0x0, 0x10, 0x6, "51e001fa9992"}, 0x0, 0x0}) 3.169696073s ago: executing program 2 (id=9580): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0xfffffff8, 0x8ff, 0x0, 0x0, 0x2}}) 2.852370661s ago: executing program 2 (id=9582): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 2.554344848s ago: executing program 2 (id=9584): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 2.230425296s ago: executing program 2 (id=9586): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x1cf082, 0x20) 1.854793755s ago: executing program 0 (id=9589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}, 0x1, 0x0, 0x0, 0x400c081}, 0x50) 1.714390338s ago: executing program 4 (id=9590): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f6}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x1, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x4e22, 0x4, @private2, 0x2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x90}, 0x1, 0x7}, 0x0) 1.610977971s ago: executing program 1 (id=9591): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000140), 0x0}, 0x20) 1.377568767s ago: executing program 0 (id=9592): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000440)) 1.289336019s ago: executing program 2 (id=9593): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMUNLOCK(r0, 0x40084d06, &(0x7f0000000000)={0x3, 0x7}) 1.25569097s ago: executing program 1 (id=9594): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000400)) 1.036865585s ago: executing program 0 (id=9595): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x34524742, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}}) 988.175256ms ago: executing program 2 (id=9596): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e5f1b"], 0x22) 843.63471ms ago: executing program 1 (id=9597): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x841) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 732.197473ms ago: executing program 0 (id=9598): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 603.662266ms ago: executing program 1 (id=9599): r0 = syz_open_dev$MSR(&(0x7f0000001180), 0x2c7, 0x0) preadv(r0, &(0x7f0000002300)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, 0x4, 0x9) 487.053908ms ago: executing program 4 (id=9600): set_mempolicy(0x4005, 0x0, 0x6) syz_usb_connect$uac2(0x5, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x15, 0xc5}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x306, 0x60, 0x1, 0x9, 0xd, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x4, 0x2, {0x8, 0x25, 0x1, 0x83, 0x0, 0xf7, 0x2}}}}}}}}]}}, 0x0) 333.949182ms ago: executing program 0 (id=9601): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r0, 0x3a0fd261, 0xa8, 0x0, 0x0) 281.918364ms ago: executing program 1 (id=9602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 75.310059ms ago: executing program 0 (id=9603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0) 0s ago: executing program 1 (id=9604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): led with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 676.073569][T22655] loop4: detected capacity change from 0 to 2048 [ 676.099641][T22655] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 676.132043][T22655] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.415953][T22661] gtp0: entered promiscuous mode [ 676.440438][T22661] gtp0: entered allmulticast mode [ 676.637111][T22668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.098181][T22677] loop2: detected capacity change from 0 to 4096 [ 677.109210][T22677] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 677.170786][T22677] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 677.200537][T22677] ntfs3: loop2: Failed to load $Extend (-22). [ 677.206851][T22677] ntfs3: loop2: Failed to initialize $Extend. [ 677.315405][T22677] ntfs3: loop2: ino=0, attr_set_size [ 678.023202][T22703] bridge8: entered promiscuous mode [ 678.408152][T22717] loop1: detected capacity change from 0 to 64 [ 678.478049][T22720] loop4: detected capacity change from 0 to 512 [ 678.488666][T22720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.502363][T22717] syz.1.7797: attempt to access beyond end of device [ 678.502363][T22717] loop1: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 678.530029][T22717] Buffer I/O error on dev loop1, logical block 8388608, lost async page write [ 678.553022][T22720] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 678.574371][T22720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 678.582589][T22720] System zones: 0-1, 15-15, 18-18, 34-34 [ 678.589087][T22720] EXT4-fs (loop4): orphan cleanup on readonly fs [ 678.595732][T22720] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 678.605383][T22720] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 678.620933][T22720] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 678.640231][T22720] EXT4-fs (loop4): 1 truncate cleaned up [ 678.658876][T22720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 678.704878][T22720] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 678.781090][T15591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.218248][T22738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7806'. [ 679.240609][T22738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7806'. [ 679.586138][T22750] ALSA: mixer_oss: invalid OSS volume 'u' [ 679.774699][T22760] bridge5: entered promiscuous mode [ 680.317095][T22778] netlink: 'syz.2.7827': attribute type 1 has an invalid length. [ 680.347398][T22778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7827'. [ 680.532938][T22770] loop4: detected capacity change from 0 to 32768 [ 680.584348][T22770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.7823 (22770) [ 680.606268][T22770] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 680.619464][T22770] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 680.630003][T22783] loop1: detected capacity change from 0 to 2048 [ 680.640761][T22770] BTRFS info (device loop4): setting nodatasum [ 680.659505][T22770] BTRFS info (device loop4): force zlib compression, level 3 [ 680.668081][T22770] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 680.703883][T22783] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 680.714554][T22770] BTRFS info (device loop4): use lzo compression, level 0 [ 680.750614][T22770] BTRFS info (device loop4): turning on flush-on-commit [ 680.773287][T22770] BTRFS info (device loop4): enabling auto defrag [ 680.779853][T22770] BTRFS info (device loop4): max_inline at 4096 [ 680.818194][T22785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.829115][T22770] BTRFS info (device loop4): using free space tree [ 680.881648][T22789] netlink: 'syz.0.7829': attribute type 1 has an invalid length. [ 680.902543][T22789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7829'. [ 681.017481][T22805] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7831'. [ 681.107860][T22770] BTRFS info (device loop4): enabling ssd optimizations [ 681.447474][T15591] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 681.469288][T22813] loop0: detected capacity change from 0 to 4096 [ 681.496319][T22813] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 681.604361][T22813] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 681.640322][T22819] netlink: 'syz.2.7839': attribute type 5 has an invalid length. [ 681.662983][T22813] ntfs3: loop0: Failed to load $Extend (-22). [ 681.672991][T22813] ntfs3: loop0: Failed to initialize $Extend. [ 681.777547][T22813] ntfs3: loop0: ino=0, attr_set_size [ 681.898433][ T5772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (5772) [ 682.631779][T22842] loop2: detected capacity change from 0 to 4096 [ 682.873459][T22842] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 683.064342][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7856'. [ 683.088017][T22859] netlink: 'syz.0.7856': attribute type 6 has an invalid length. [ 683.365132][T22868] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 683.365132][T22868] program syz.1.7860 not setting count and/or reply_len properly [ 683.390761][T22867] loop4: detected capacity change from 0 to 256 [ 683.402672][T22867] exfat: Deprecated parameter 'utf8' [ 683.425949][T22867] exfat: Deprecated parameter 'utf8' [ 683.456359][T22867] exfat: Deprecated parameter 'namecase' [ 683.514844][T22867] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 683.631363][ T28] audit: type=1326 audit(2000000118.825:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.1.7864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509159e0d9 code=0x7ffc0000 [ 683.659023][ T28] audit: type=1326 audit(2000000118.825:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.1.7864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509159e0d9 code=0x7ffc0000 [ 683.686691][ T28] audit: type=1326 audit(2000000118.880:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.1.7864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f509159e0d9 code=0x7ffc0000 [ 683.759853][ T28] audit: type=1326 audit(2000000118.880:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.1.7864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509159e0d9 code=0x7ffc0000 [ 683.855241][ T28] audit: type=1326 audit(2000000118.880:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.1.7864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509159e0d9 code=0x7ffc0000 [ 683.976578][T15519] IPVS: starting estimator thread 0... [ 684.091706][T22883] IPVS: using max 22 ests per chain, 52800 per kthread [ 684.116721][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7871'. [ 684.263806][ T5817] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 684.490640][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 684.499237][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.509047][ T5817] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 684.536466][ T5817] usb 3-1: string descriptor 0 read error: -22 [ 684.542875][ T5817] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 684.578429][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.664229][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7878'. [ 684.844930][ T5817] usb 3-1: unit 255 not found! [ 684.959761][T22917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7882'. [ 685.163706][ T5817] usb 3-1: USB disconnect, device number 43 [ 685.241081][T22925] loop1: detected capacity change from 0 to 256 [ 685.669540][T22938] loop1: detected capacity change from 0 to 1024 [ 685.700598][T22938] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 685.753619][T22938] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.7899: lblock 1 mapped to illegal pblock 1 (length 1) [ 685.829696][T22946] loop4: detected capacity change from 0 to 16 [ 685.839052][T22946] erofs: (device loop4): mounted with root inode @ nid 36. [ 685.848190][T22938] Quota error (device loop1): write_blk: dquota write failed [ 685.856099][T22938] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 685.870851][T22938] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.7899: Failed to acquire dquot type 0 [ 685.892935][T22938] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.7899: Freeing blocks not in datazone - block = 0, count = 4096 [ 685.934048][T22938] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.7899: Invalid inode bitmap blk 0 in block_group 0 [ 685.976808][ T1094] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 685.991130][T22938] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 686.034011][T22938] EXT4-fs (loop1): 1 orphan inode deleted [ 686.051996][T22938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.070721][T22950] loop2: detected capacity change from 0 to 256 [ 686.079490][ T1094] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 686.111367][ T1094] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 686.234682][T22950] FAT-fs (loop2): Directory bread(block 64) failed [ 686.276340][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.311451][T22950] FAT-fs (loop2): Directory bread(block 65) failed [ 686.318195][T22950] FAT-fs (loop2): Directory bread(block 66) failed [ 686.356995][T22950] FAT-fs (loop2): Directory bread(block 67) failed [ 686.374564][T22950] FAT-fs (loop2): Directory bread(block 68) failed [ 686.394230][T22950] FAT-fs (loop2): Directory bread(block 69) failed [ 686.407209][T22950] FAT-fs (loop2): Directory bread(block 70) failed [ 686.415132][T22950] FAT-fs (loop2): Directory bread(block 71) failed [ 686.422151][T22958] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 7 out of range (1000000..45000000) [ 686.455126][T22950] FAT-fs (loop2): Directory bread(block 72) failed [ 686.482026][T22950] FAT-fs (loop2): Directory bread(block 73) failed [ 686.742260][T22967] loop4: detected capacity change from 0 to 256 [ 686.871118][T22967] FAT-fs (loop4): Directory bread(block 64) failed [ 686.901021][T22967] FAT-fs (loop4): Directory bread(block 65) failed [ 686.929405][T22967] FAT-fs (loop4): Directory bread(block 66) failed [ 686.936031][T22967] FAT-fs (loop4): Directory bread(block 67) failed [ 686.961860][T22967] FAT-fs (loop4): Directory bread(block 68) failed [ 686.969521][T22967] FAT-fs (loop4): Directory bread(block 69) failed [ 686.977777][T22967] FAT-fs (loop4): Directory bread(block 70) failed [ 686.988756][T22967] FAT-fs (loop4): Directory bread(block 71) failed [ 686.999878][T22967] FAT-fs (loop4): Directory bread(block 72) failed [ 687.026691][T22967] FAT-fs (loop4): Directory bread(block 73) failed [ 687.053806][T22952] ceph: No mds server is up or the cluster is laggy [ 687.698749][T15519] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 687.926165][T15519] usb 3-1: Using ep0 maxpacket: 32 [ 687.939568][T15519] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.964389][T15519] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 687.980231][T15519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.010443][T15519] usb 3-1: Product: syz [ 688.023672][T15519] usb 3-1: Manufacturer: syz [ 688.028361][T15519] usb 3-1: SerialNumber: syz [ 688.068552][T15519] usb 3-1: config 0 descriptor?? [ 688.083258][T15519] usb 3-1: bad CDC descriptors [ 688.137647][T15519] usb 3-1: unsupported MDLM descriptors [ 688.399662][T15519] usb 3-1: USB disconnect, device number 44 [ 688.719044][T23027] loop1: detected capacity change from 0 to 512 [ 688.758959][T23027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 688.784901][T23027] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 688.810597][T23027] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 688.820938][ T5819] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 688.829609][T23027] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 688.845754][T23027] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 688.854290][T23027] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000] [ 688.862951][T23027] EXT4-fs (loop1): failed to initialize system zone (-117) [ 688.871455][T23027] EXT4-fs (loop1): mount failed [ 688.948150][T23034] loop4: detected capacity change from 0 to 256 [ 689.039632][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 689.065165][ T5819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 689.099824][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 689.118306][ T5819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 689.143911][ T5819] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 689.204566][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.221220][ T5819] usb 1-1: Product: syz [ 689.225480][ T5819] usb 1-1: Manufacturer: syz [ 689.248943][ T5819] usb 1-1: SerialNumber: syz [ 689.286837][ T5819] usb 1-1: config 0 descriptor?? [ 689.315084][ T5819] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 689.620453][ T5819] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 689.836729][T15519] usb 1-1: USB disconnect, device number 42 [ 690.766001][T23081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7959'. [ 690.944684][T23085] netlink: 'syz.4.7961': attribute type 3 has an invalid length. [ 690.983464][T23085] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7961'. [ 691.199134][ T5817] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 691.349173][ T28] audit: type=1326 audit(2000000125.939:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23092 comm="syz.4.7964" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 691.415801][ T28] audit: type=1326 audit(2000000125.939:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23092 comm="syz.4.7964" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 691.440115][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.466330][ T28] audit: type=1326 audit(2000000125.985:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23092 comm="syz.4.7964" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 691.512121][T23095] loop0: detected capacity change from 0 to 1024 [ 691.535199][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 691.562548][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.588860][ T5817] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 691.598825][ T28] audit: type=1326 audit(2000000125.985:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23092 comm="syz.4.7964" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 691.632569][T23095] EXT4-fs: Ignoring removed bh option [ 691.642234][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.686987][ T5817] usb 3-1: Product: syz [ 691.719790][ T5817] usb 3-1: Manufacturer: syz [ 691.751996][ T5817] usb 3-1: SerialNumber: syz [ 691.769126][T23095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 691.792660][ T28] audit: type=1326 audit(2000000125.985:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23092 comm="syz.4.7964" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 691.820691][ T5817] usb 3-1: config 0 descriptor?? [ 691.960387][T23095] ext4 filesystem being mounted at /1989/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.005966][T23099] loop4: detected capacity change from 0 to 4096 [ 692.064279][ T5817] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 692.122960][ T3509] usb 3-1: Failed to submit usb control message: -71 [ 692.145506][T23095] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.7966: Freeing blocks not in datazone - block = 0, count = 16 [ 692.193459][ T3509] usb 3-1: unable to send the bmi data to the device: -71 [ 692.212744][ T5817] usb 3-1: USB disconnect, device number 45 [ 692.220425][T23099] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 692.249153][ T3509] usb 3-1: unable to get target info from device [ 692.315542][ T3509] usb 3-1: could not get target info (-71) [ 692.321968][T23095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.7966: bg 0: block 112: padding at end of block bitmap is not set [ 692.373358][T23099] ntfs3: loop4: Failed to load $Extend (-22). [ 692.379530][T23099] ntfs3: loop4: Failed to initialize $Extend. [ 692.386557][ T3509] usb 3-1: could not probe fw (-71) [ 692.496160][T23095] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 692.701745][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 693.227241][T23119] netlink: 'syz.1.7975': attribute type 2 has an invalid length. [ 693.356227][T15519] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 693.572871][T15519] usb 1-1: Using ep0 maxpacket: 32 [ 693.616020][T15519] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 693.646421][T15519] usb 1-1: config 0 has no interface number 0 [ 693.653323][T15519] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 693.688916][T15519] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 693.709445][T15519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.732657][T15519] usb 1-1: Product: syz [ 693.744645][T15519] usb 1-1: Manufacturer: syz [ 693.767727][T15519] usb 1-1: SerialNumber: syz [ 693.795661][T15519] usb 1-1: config 0 descriptor?? [ 693.846557][T23113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 694.150274][T23113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 694.441787][T15519] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.483479][T15519] asix: probe of 1-1:0.188 failed with error -71 [ 694.524141][T15519] usb 1-1: USB disconnect, device number 43 [ 694.666714][T23137] netlink: 'syz.2.7984': attribute type 13 has an invalid length. [ 694.772031][T23137] gretap0: refused to change device tx_queue_len [ 694.802868][T23137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 695.080834][T23127] loop4: detected capacity change from 0 to 32768 [ 695.219965][T23127] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 695.498991][T23127] XFS (loop4): Ending clean mount [ 695.884982][T15591] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 697.985258][T23203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8012'. [ 698.281073][T23212] netlink: 'syz.0.8016': attribute type 5 has an invalid length. [ 698.414630][T23214] loop2: detected capacity change from 0 to 256 [ 698.440839][T23214] exfat: Deprecated parameter 'utf8' [ 698.446258][T23214] exfat: Deprecated parameter 'namecase' [ 698.468845][T23214] exfat: Deprecated parameter 'namecase' [ 698.522704][T23214] exfat: Deprecated parameter 'utf8' [ 698.597368][T23219] loop0: detected capacity change from 0 to 8 [ 698.608322][T23214] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 698.706492][ T28] audit: type=1800 audit(2000000132.730:538): pid=23214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8018" name="file2" dev="loop2" ino=1048675 res=0 errno=0 [ 699.708870][T23236] kAFS: unable to lookup cell 'Þ({^ú@' [ 699.863943][ T28] audit: type=1326 audit(2000000133.800:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.012046][ T28] audit: type=1326 audit(2000000133.800:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.171010][ T28] audit: type=1326 audit(2000000133.800:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.324491][ T28] audit: type=1326 audit(2000000133.800:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.348643][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.447331][ T28] audit: type=1326 audit(2000000133.846:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.471506][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.579946][ T28] audit: type=1326 audit(2000000133.846:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.725485][ T28] audit: type=1326 audit(2000000133.846:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 700.855725][ T28] audit: type=1326 audit(2000000133.846:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23237 comm="syz.0.8030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 701.673005][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8045'. [ 701.904490][T23274] loop1: detected capacity change from 0 to 4096 [ 701.949112][T23274] EXT4-fs: Ignoring removed mblk_io_submit option [ 702.064137][T23274] EXT4-fs (loop1): Test dummy encryption mode enabled [ 702.178573][T23274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.776661][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.264427][T23315] netlink: 'syz.2.8065': attribute type 21 has an invalid length. [ 704.312825][T23315] netlink: 'syz.2.8065': attribute type 1 has an invalid length. [ 704.834194][T23296] loop0: detected capacity change from 0 to 32768 [ 704.937858][T23296] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 705.393940][T23296] XFS (loop0): Ending clean mount [ 705.469061][T23348] loop1: detected capacity change from 0 to 256 [ 705.614545][T23348] FAT-fs (loop1): Directory bread(block 64) failed [ 705.621213][T23348] FAT-fs (loop1): Directory bread(block 65) failed [ 705.628212][T15519] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 705.710951][T23348] FAT-fs (loop1): Directory bread(block 66) failed [ 705.754431][T23348] FAT-fs (loop1): Directory bread(block 67) failed [ 705.761184][T23348] FAT-fs (loop1): Directory bread(block 68) failed [ 705.773841][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 705.873431][T23348] FAT-fs (loop1): Directory bread(block 69) failed [ 705.877352][T15519] usb 3-1: Using ep0 maxpacket: 16 [ 705.880494][T23348] FAT-fs (loop1): Directory bread(block 70) failed [ 705.895062][T15519] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 705.925305][T23348] FAT-fs (loop1): Directory bread(block 71) failed [ 705.949247][T15519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.957320][T15519] usb 3-1: Product: syz [ 705.966077][T23348] FAT-fs (loop1): Directory bread(block 72) failed [ 705.976633][T23348] FAT-fs (loop1): Directory bread(block 73) failed [ 705.992835][T15519] usb 3-1: Manufacturer: syz [ 705.997535][T15519] usb 3-1: SerialNumber: syz [ 706.068204][T15519] usb 3-1: config 0 descriptor?? [ 706.126664][T15519] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 706.211357][T15519] usb 3-1: Detected FT4233HP [ 706.458862][T15519] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 706.511730][T15519] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 706.562924][T15519] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 706.611319][T15519] usb 3-1: USB disconnect, device number 46 [ 706.651028][T15519] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 706.708586][T15519] ftdi_sio 3-1:0.0: device disconnected [ 707.314178][T23367] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 707.854380][T23380] loop2: detected capacity change from 0 to 64 [ 707.881146][T23382] CIFS: VFS: bad security option: kr!qÌ [ 708.253184][ T972] libceph: connect (1)127.0.0.1:6789 error -101 [ 708.269099][ T972] libceph: mon0 (1)127.0.0.1:6789 connect error [ 708.584802][ T972] libceph: connect (1)127.0.0.1:6789 error -101 [ 708.595115][ T972] libceph: mon0 (1)127.0.0.1:6789 connect error [ 709.028154][T23384] ceph: No mds server is up or the cluster is laggy [ 710.066522][T23419] loop1: detected capacity change from 0 to 8 [ 710.089439][T23418] kAFS: unable to lookup cell '.,' [ 710.946754][T23435] bad cache= option: no%e [ 710.946754][T23435] [ 710.953716][T23435] CIFS: VFS: bad cache= option: no%e [ 711.254883][T23444] netlink: 'syz.4.8124': attribute type 1 has an invalid length. [ 711.609686][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.616354][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.725332][T23456] loop0: detected capacity change from 0 to 1024 [ 711.761627][T23456] EXT4-fs: Ignoring removed bh option [ 711.848431][T23456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 711.903910][T23456] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 711.903910][T23456] [ 712.903933][T23479] loop4: detected capacity change from 0 to 256 [ 714.122766][T23502] loop0: detected capacity change from 0 to 512 [ 714.187334][T23502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.225182][T23512] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 714.287299][T23502] ext4 filesystem being mounted at /2027/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.509173][T23502] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #12: comm syz.0.8149: directory missing '..' [ 714.763266][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.920578][T23548] netlink: 'syz.1.8169': attribute type 22 has an invalid length. [ 716.005680][T23549] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 716.164365][T23553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8172'. [ 716.216848][T23553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8172'. [ 717.521763][T23583] loop0: detected capacity change from 0 to 4096 [ 717.589236][T23583] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 717.627205][T23589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8190'. [ 718.123488][T23597] netlink: 'syz.1.8194': attribute type 39 has an invalid length. [ 718.384145][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 719.416604][T23619] netlink: 'syz.4.8205': attribute type 10 has an invalid length. [ 719.796801][T23630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8209'. [ 719.806044][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8211'. [ 719.827875][T23629] netlink: 'syz.4.8210': attribute type 10 has an invalid length. [ 719.886111][T23629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8210'. [ 719.909489][T23629] batman_adv: batadv0: Adding interface: virt_wifi0 [ 719.933517][T23629] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.959153][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.080176][T23629] batman_adv: batadv0: Interface activated: virt_wifi0 [ 720.481589][T23644] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 720.666638][T23650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8219'. [ 721.673679][T23678] netlink: 'syz.1.8234': attribute type 12 has an invalid length. [ 721.833472][T23678] bond3: option primary_reselect: invalid value (255) [ 721.893375][T23678] bond3 (unregistering): Released all slaves [ 721.921782][T23683] binder: 23682:23683 ioctl c00c620f 0 returned -14 [ 721.986510][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8235'. [ 721.999459][T23681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8235'. [ 722.027791][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8235'. [ 722.060644][T23681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8235'. [ 722.103509][T23681] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8235'. [ 722.980655][T23701] bond2: entered promiscuous mode [ 722.999240][T23701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.389955][T23714] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 723.825420][T23722] libceph: resolve '‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 724.395165][ T5817] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 724.625996][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 724.667296][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.709788][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.759991][ T5817] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 724.797325][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.843957][ T5817] usb 2-1: config 0 descriptor?? [ 724.892122][ T5817] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input37 [ 725.523250][T15519] usb 2-1: USB disconnect, device number 46 [ 725.546979][ T5130] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 725.593294][T23723] loop0: detected capacity change from 0 to 40427 [ 725.612769][T23723] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 725.634043][T23723] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 725.656518][T23723] F2FS-fs (loop0): invalid crc value [ 725.681751][T23723] F2FS-fs (loop0): Found nat_bits in checkpoint [ 725.782895][ T972] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 725.930181][T23723] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 725.949092][T23723] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 726.035355][ T972] usb 5-1: config 9 has an invalid interface number: 151 but max is 0 [ 726.084190][ T972] usb 5-1: config 9 has no interface number 0 [ 726.104410][ T972] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=14.f4 [ 726.127791][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.147512][ T972] usb 5-1: Product: syz [ 726.161861][ T972] usb 5-1: Manufacturer: syz [ 726.191597][T23723] syz.0.8254: attempt to access beyond end of device [ 726.191597][T23723] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 726.208090][ T972] usb 5-1: SerialNumber: syz [ 726.559625][T23754] loop4: detected capacity change from 0 to 512 [ 726.591863][T23754] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 726.691861][T23754] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 726.740217][ T6337] udevd[6337]: incorrect ext4 checksum on /dev/loop4 [ 726.828069][ T972] usb 5-1: unknown interface protocol 0x25, assuming v1 [ 726.861783][ T972] usb 5-1: 151:1 : does not exist [ 726.889146][ T972] usb 5-1: 151:2 : does not exist [ 726.949237][ T972] usb 5-1: USB disconnect, device number 14 [ 727.231443][ T6337] udevd[6337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.303043][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 728.237506][T23785] C: renamed from team_slave_0 (while UP) [ 728.337174][T23785] netlink: 'syz.4.8281': attribute type 3 has an invalid length. [ 728.372647][T23785] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8281'. [ 728.412543][T23785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 728.586249][T23791] loop2: detected capacity change from 0 to 512 [ 728.697793][T23791] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.8284: inode has both inline data and extents flags [ 728.824868][T23791] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.8284: couldn't read orphan inode 15 (err -117) [ 728.845160][T23791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.283535][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.286351][T23818] loop2: detected capacity change from 0 to 32768 [ 731.386816][T23818] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 731.634458][T23818] XFS (loop2): Ending clean mount [ 732.204330][ T5786] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 732.630606][T23871] loop4: detected capacity change from 0 to 256 [ 733.698537][T23867] loop1: detected capacity change from 0 to 32768 [ 733.861412][T23867] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 734.004081][T23867] XFS (loop1): Ending clean mount [ 734.031197][T23898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8326'. [ 734.375991][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 734.865587][T23914] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 [ 734.926088][T23915] loop1: detected capacity change from 0 to 512 [ 735.911396][T23937] loop0: detected capacity change from 0 to 512 [ 736.003797][T23937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.100369][T23937] ext4 filesystem being mounted at /2072/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.624337][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.299819][ T28] audit: type=1326 audit(2000000168.337:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23963 comm="syz.4.8358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 737.414486][ T28] audit: type=1326 audit(2000000168.337:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23963 comm="syz.4.8358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 737.571868][ T28] audit: type=1326 audit(2000000168.392:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23963 comm="syz.4.8358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 737.711258][ T28] audit: type=1326 audit(2000000168.392:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23963 comm="syz.4.8358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 737.982362][T23981] xt_TCPMSS: Only works on TCP SYN packets [ 738.310964][T23987] netlink: 'syz.1.8369': attribute type 21 has an invalid length. [ 738.340885][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8369'. [ 738.506259][T15522] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 738.702798][T23992] loop1: detected capacity change from 0 to 2048 [ 738.761511][T15522] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.804154][T23995] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.836110][T15522] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 738.889508][T15522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.939412][T15522] usb 1-1: Product: syz [ 738.943711][T15522] usb 1-1: Manufacturer: syz [ 738.964409][T23992] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 739.002883][T15522] usb 1-1: SerialNumber: syz [ 739.066359][T23992] Remounting filesystem read-only [ 739.350483][T15522] usb 1-1: Limiting number of CPorts to U8_MAX [ 739.426275][T15522] usb 1-1: Not enough endpoints found in device, aborting! [ 739.507836][T23978] loop2: detected capacity change from 0 to 32768 [ 739.582816][T24001] netlink: 'syz.1.8374': attribute type 3 has an invalid length. [ 739.611303][T24001] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8374'. [ 739.685369][T15522] usb 1-1: USB disconnect, device number 44 [ 739.750645][T23978] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 739.968978][T23978] XFS (loop2): Ending clean mount [ 740.472001][ T5786] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 741.995743][T24047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.386448][T24053] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 742.958721][T24062] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 743.377367][T24039] loop0: detected capacity change from 0 to 32768 [ 743.529896][T24039] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 743.589308][T15519] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 743.802088][T15519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 743.845093][T15519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.897234][T15519] usb 2-1: Product: syz [ 743.910224][T24039] XFS (loop0): Ending clean mount [ 743.915925][T15519] usb 2-1: Manufacturer: syz [ 743.920572][T15519] usb 2-1: SerialNumber: syz [ 743.996795][T24055] loop4: detected capacity change from 0 to 32768 [ 744.053029][ T972] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 744.184978][T24039] XFS (loop0): syz.0.8390 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 744.366559][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 744.408352][T24055] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 744.586961][T15522] usb 2-1: USB disconnect, device number 47 [ 745.058238][T15591] ocfs2: Unmounting device (7,4) on (node local) [ 745.338190][ T972] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 745.384681][T24092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.400749][ T972] ath9k_htc: Failed to initialize the device [ 745.421653][T15522] usb 2-1: ath9k_htc: USB layer deinitialized [ 745.471888][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.507584][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.529043][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.538034][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.593967][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.623141][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.649475][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.692929][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.701952][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 745.803045][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8407'. [ 746.129961][ T28] audit: type=1326 audit(2000000176.494:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.233134][ T28] audit: type=1326 audit(2000000176.494:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.319845][ T28] audit: type=1326 audit(2000000176.494:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.415127][ T28] audit: type=1326 audit(2000000176.540:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.603372][ T28] audit: type=1326 audit(2000000176.540:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.756124][ T28] audit: type=1326 audit(2000000176.540:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.859728][ T28] audit: type=1326 audit(2000000176.540:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 746.887895][ T972] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 746.986702][ T28] audit: type=1326 audit(2000000176.540:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 747.111759][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 747.123910][ T972] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 747.165382][ T28] audit: type=1326 audit(2000000176.540:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24101 comm="syz.2.8414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 747.189860][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.241486][ T972] usb 3-1: Product: syz [ 747.259920][ T972] usb 3-1: Manufacturer: syz [ 747.287598][ T972] usb 3-1: SerialNumber: syz [ 747.554927][ T972] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 747.622175][ T972] kalmia: probe of 3-1:1.0 failed with error -71 [ 747.684069][ T972] usb 3-1: USB disconnect, device number 47 [ 747.745805][T24128] netlink: 'syz.4.8427': attribute type 11 has an invalid length. [ 748.354154][T24114] loop1: detected capacity change from 0 to 32768 [ 748.474227][T24114] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 748.736745][T24114] XFS (loop1): Ending clean mount [ 748.791644][T24148] netlink: 'syz.4.8433': attribute type 1 has an invalid length. [ 748.986289][ T5778] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 750.151308][T24174] xt_hashlimit: size too large, truncated to 1048576 [ 750.187746][T24174] xt_hashlimit: max too large, truncated to 1048576 [ 750.665998][T15522] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 750.893701][T15522] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 750.901959][T15522] usb 1-1: config 8 has no interface number 0 [ 750.953937][T15522] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 751.018022][T15522] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 751.098917][T15522] usb 1-1: config 8 interface 177 has no altsetting 0 [ 751.116971][T15522] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 751.169652][T15522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.240086][T24177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 751.279893][T24177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 751.332695][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 751.944985][T15522] ir_toy 1-1:8.177: could not write reset command: -110 [ 751.977538][T15522] ir_toy: probe of 1-1:8.177 failed with error -110 [ 752.054068][T15522] usb 1-1: USB disconnect, device number 45 [ 752.547482][T24226] loop1: detected capacity change from 0 to 512 [ 752.656175][T24226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.746758][T24226] ext4 filesystem being mounted at /2122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.855149][T15522] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 752.916957][T24226] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 752.985652][T24226] Quota error (device loop1): write_blk: dquota write failed [ 752.993966][T24226] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 753.037283][T24226] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.8470: Failed to acquire dquot type 1 [ 753.074317][T15522] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.106524][T15522] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 753.156078][T15522] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 753.183565][T15522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.230534][T15522] usb 5-1: Product: syz [ 753.256169][T15522] usb 5-1: Manufacturer: syz [ 753.260855][T15522] usb 5-1: SerialNumber: syz [ 753.411853][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.558018][T15522] usb 5-1: unit 0 not found! [ 753.605132][T15522] usb 5-1: unit 119 not found! [ 753.726213][T15522] usb 5-1: USB disconnect, device number 15 [ 753.846407][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.871747][T24245] loop2: detected capacity change from 0 to 764 [ 753.953015][T24245] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 755.212670][T24272] trusted_key: encrypted_key: keylen parameter is missing [ 755.811682][T24283] __nla_validate_parse: 39 callbacks suppressed [ 755.811704][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8498'. [ 755.872029][T24283] openvswitch: netlink: Missing key (keys=40, expected=100) [ 756.023796][T24291] loop1: detected capacity change from 0 to 512 [ 756.188217][T24291] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 756.225753][T24291] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 756.288130][T24291] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 756.439733][T24291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 756.470848][T24291] System zones: 0-2, 18-18, 34-34 [ 756.775489][T24291] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.8500: bad orphan inode 15 [ 756.875413][T24291] ext4_test_bit(bit=14, block=18) = 1 [ 756.882205][T24291] is_bad_inode(inode)=0 [ 756.886853][T24291] NEXT_ORPHAN(inode)=2264924160 [ 756.891756][T24291] max_ino=32 [ 756.895119][T24291] i_nlink=0 [ 756.907986][T24291] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.8500: corrupted inode contents [ 756.925715][T24291] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #15: comm syz.1.8500: mark_inode_dirty error [ 756.990826][T24291] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.8500: corrupted inode contents [ 757.042676][T24291] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.8500: mark_inode_dirty error [ 757.071762][T24291] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.8500: mark inode dirty (error -117) [ 757.143703][ T28] audit: type=1326 audit(2000000186.652:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24307 comm="syz.4.8508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 757.185853][T24291] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 757.247339][T24291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.283155][ T28] audit: type=1326 audit(2000000186.652:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24307 comm="syz.4.8508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 757.433600][ T28] audit: type=1326 audit(2000000186.708:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24307 comm="syz.4.8508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 757.609623][ T28] audit: type=1326 audit(2000000186.708:563): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=24307 comm="syz.4.8508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 757.674901][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.729909][ T28] audit: type=1326 audit(2000000186.708:564): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=24307 comm="syz.4.8508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 758.057659][T24321] dlm: Unknown command passed to DLM device : 11 [ 758.057659][T24321] [ 758.374457][T24330] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.464944][T24379] usb usb7: usbfs: process 24379 (syz.0.8543) did not claim interface 0 before use [ 760.847274][T24389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8547'. [ 761.336964][T24375] loop4: detected capacity change from 0 to 32768 [ 761.405610][T24401] loop2: detected capacity change from 0 to 64 [ 761.518703][T24375] JBD2: Ignoring recovery information on journal [ 761.532667][T24401] Trying to free block not in datazone [ 761.560382][T24401] Trying to free block not in datazone [ 761.720300][T24375] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 762.126518][T24375] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 762.208982][T24375] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 762.243154][T24375] OCFS2: Returning error to the calling process. [ 762.249592][T24375] (syz.4.8540,24375,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 762.400653][T24375] (syz.4.8540,24375,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 762.458916][T24375] (syz.4.8540,24375,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 762.467453][T24375] (syz.4.8540,24375,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 762.537251][T24417] loop0: detected capacity change from 0 to 4096 [ 762.554823][T24375] (syz.4.8540,24375,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 762.577672][T24375] (syz.4.8540,24375,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 762.586131][T24375] (syz.4.8540,24375,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 762.592752][T24417] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 762.641687][T24375] (syz.4.8540,24375,1):ocfs2_mknod:385 ERROR: status = -5 [ 762.656418][T24375] (syz.4.8540,24375,1):ocfs2_mknod:502 ERROR: status = -5 [ 762.701826][T24375] (syz.4.8540,24375,1):ocfs2_mkdir:659 ERROR: status = -5 [ 762.740541][T24417] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 762.912889][ T3509] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 762.923810][ T5782] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 762.930401][ T5782] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 763.003828][ T5782] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 763.010445][T19080] Bluetooth: hci2: command 0x0406 tx timeout [ 763.062037][ T3557] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 763.303358][T15591] ocfs2: Unmounting device (7,4) on (node local) [ 763.372799][T24431] loop2: detected capacity change from 0 to 128 [ 763.433063][T24431] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 763.639188][ T3460] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 764.213390][ T972] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 764.504160][ T972] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 764.537017][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.590788][ T972] usb 3-1: Product: syz [ 764.606690][ T972] usb 3-1: Manufacturer: syz [ 764.611379][ T972] usb 3-1: SerialNumber: syz [ 764.705447][T15522] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 765.069495][ T972] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 765.138559][T24454] bond0: Error: CAN devices cannot be enslaved [ 765.289254][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 765.298807][T24436] loop1: detected capacity change from 0 to 32768 [ 765.315417][ T972] usb 1-1: config 0 has no interfaces? [ 765.903128][ T972] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 765.930054][T15522] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 766.077146][ T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 766.198451][T15522] ath9k_htc: Failed to initialize the device [ 766.204762][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.457632][T15519] usb 3-1: USB disconnect, device number 48 [ 766.477292][T15519] usb 3-1: ath9k_htc: USB layer deinitialized [ 766.483606][ T972] usb 1-1: Product: syz [ 766.487811][ T972] usb 1-1: Manufacturer: syz [ 766.506131][ T972] usb 1-1: SerialNumber: syz [ 766.533977][ T972] r8152-cfgselector 1-1: config 0 descriptor?? [ 766.592125][T24436] find_entry called with index = 0 [ 766.631626][T24436] read_mapping_page failed! [ 766.657067][T24436] ERROR: (device loop1): txCommit: [ 766.657067][T24436] [ 766.781752][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 766.788956][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.814022][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.856610][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 766.871064][ T972] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 766.925667][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 766.965773][ T27] usb 5-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 766.996726][ T27] usb 5-1: Product: syz [ 767.018598][ T27] usb 5-1: Manufacturer: syz [ 767.023616][ T27] usb 5-1: SerialNumber: syz [ 767.130486][ T972] usb 1-1: USB disconnect, device number 46 [ 767.205227][ T27] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input39 [ 767.592560][ T972] usb 5-1: USB disconnect, device number 16 [ 767.696061][ T972] appletouch 5-1:1.0: input: appletouch disconnected [ 768.021217][T24473] SET target dimension over the limit! [ 768.667814][T24483] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8592'. [ 769.434069][T24497] netlink: 'syz.0.8598': attribute type 2 has an invalid length. [ 769.448995][T24498] netlink: 'syz.4.8599': attribute type 58 has an invalid length. [ 769.456980][T24498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8599'. [ 769.491005][T24497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8598'. [ 769.595396][T24467] loop2: detected capacity change from 0 to 32768 [ 769.739886][T24467] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.174406][T24467] XFS (loop2): Ending clean mount [ 770.190309][T24467] XFS (loop2): Quotacheck needed: Please wait. [ 770.398906][T24467] XFS (loop2): Quotacheck: Done. [ 771.407847][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.662945][ T28] audit: type=1326 audit(2000000200.050:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 771.716589][ T28] audit: type=1326 audit(2000000200.078:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 771.791846][ T28] audit: type=1326 audit(2000000200.078:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 771.864275][ T28] audit: type=1326 audit(2000000200.078:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 772.009889][ T28] audit: type=1326 audit(2000000200.087:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 772.124596][ T28] audit: type=1326 audit(2000000200.087:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 772.341540][ T28] audit: type=1326 audit(2000000200.087:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 772.419226][ T28] audit: type=1326 audit(2000000200.087:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 772.525828][ T28] audit: type=1326 audit(2000000200.087:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24530 comm="syz.4.8613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 772.759342][T24548] loop1: detected capacity change from 0 to 512 [ 772.945802][T24548] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.8620: bad orphan inode 13 [ 773.019553][T24548] ext4_test_bit(bit=12, block=4) = 1 [ 773.046366][T24548] is_bad_inode(inode)=0 [ 773.050618][T24548] NEXT_ORPHAN(inode)=0 [ 773.054735][T24548] max_ino=32 [ 773.075230][T24548] i_nlink=1 [ 773.085062][T24548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.112750][T24557] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.8624'. [ 773.311098][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.789354][T24576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 773.877792][T24576] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 773.910537][T24576] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 774.048472][T24579] loop1: detected capacity change from 0 to 4096 [ 774.124952][T24579] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 774.267551][T24579] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 774.638876][T24589] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8639'. [ 774.700904][T24589] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8639'. [ 774.728787][T24591] netlink: 'syz.4.8641': attribute type 1 has an invalid length. [ 775.036673][T24597] trusted_key: encrypted_key: master key parameter is missing [ 776.354168][T24622] netlink: 'syz.4.8656': attribute type 1 has an invalid length. [ 776.611946][T15519] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 776.773573][T24630] loop2: detected capacity change from 0 to 764 [ 776.848219][T15519] usb 1-1: unable to get BOS descriptor or descriptor too short [ 776.870126][T15519] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.906881][T15519] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.953660][T15519] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 776.973949][T15519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.001343][T15519] usb 1-1: Product: syz [ 777.045791][T15519] usb 1-1: Manufacturer: syz [ 777.050492][T15519] usb 1-1: SerialNumber: syz [ 777.108835][T15519] usb 1-1: selecting invalid altsetting 1 [ 777.146538][T15519] usb 1-1: unit 6 not found! [ 777.268769][T15519] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 777.315878][T24638] netlink: 'syz.4.8664': attribute type 1 has an invalid length. [ 777.323704][T24638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8664'. [ 777.417732][ T6337] udevd[6337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.486930][ T972] usb 1-1: USB disconnect, device number 47 [ 778.216327][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.222715][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 778.482390][T24634] loop2: detected capacity change from 0 to 32768 [ 778.612827][T24634] JBD2: Ignoring recovery information on journal [ 778.827464][T24634] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 779.275803][T24634] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 779.373134][T24634] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 779.417846][T24634] OCFS2: File system is now read-only. [ 779.453600][T24634] (syz.2.8662,24634,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 779.489561][T24634] (syz.2.8662,24634,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 779.543160][T24634] (syz.2.8662,24634,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 779.566519][T24634] (syz.2.8662,24634,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 779.609411][T24634] (syz.2.8662,24634,0):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 779.639379][T24634] (syz.2.8662,24634,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 779.686823][T24634] (syz.2.8662,24634,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 779.731008][T24634] (syz.2.8662,24634,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 779.774985][T24634] (syz.2.8662,24634,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 779.812148][T24634] (syz.2.8662,24634,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 779.830680][T15519] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 779.871554][T24634] (syz.2.8662,24634,0):ocfs2_init_xattr_set_ctxt:3280 ERROR: status = -30 [ 779.895205][T24634] (syz.2.8662,24634,0):ocfs2_xattr_set:3637 ERROR: status = -30 [ 779.992939][ T972] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 780.061660][T15519] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 780.111434][T15519] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 780.133390][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 780.200191][T15519] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 780.255034][T15519] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 780.264688][ T972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.307212][T15519] usb 5-1: Manufacturer: syz [ 780.323584][ T972] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 780.338436][T15519] usb 5-1: SerialNumber: syz [ 780.415497][ T972] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 780.457735][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.615776][T15519] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 780.641499][T15519] usb 5-1: USB disconnect, device number 17 [ 780.790560][ T972] cxacru 1-1:1.0: receive of cm 0x90 failed (-71) [ 780.807145][ T972] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 780.833232][ T972] cxacru: probe of 1-1:1.0 failed with error -22 [ 780.868730][ T972] usb 1-1: USB disconnect, device number 48 [ 781.421596][T24706] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8689'. [ 781.726989][T15519] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 781.943727][T15519] usb 5-1: Using ep0 maxpacket: 32 [ 781.982366][T15519] usb 5-1: unable to get BOS descriptor or descriptor too short [ 782.021226][T15519] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 782.046010][T15519] usb 5-1: config 0 has no interface number 0 [ 782.097800][T15519] usb 5-1: config 0 interface 18 has no altsetting 0 [ 782.182801][T15519] usb 5-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=58.21 [ 782.204321][T15519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.212463][T15519] usb 5-1: Product: syz [ 782.253332][T15519] usb 5-1: Manufacturer: syz [ 782.492529][T15519] usb 5-1: SerialNumber: syz [ 782.521632][T15519] usb 5-1: config 0 descriptor?? [ 782.811943][T15519] asix: probe of 5-1:0.18 failed with error -22 [ 782.848763][T15519] usb 5-1: USB disconnect, device number 18 [ 783.746676][T24753] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 783.772799][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.978381][T24753] CIFS mount error: No usable UNC path provided in device string! [ 783.978381][T24753] [ 784.024839][T24753] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 784.364826][T24767] devtmpfs: Cannot enable quota on remount [ 784.556097][T15519] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 784.788129][T15519] usb 5-1: Using ep0 maxpacket: 16 [ 784.809176][T15519] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 784.827704][T24773] loop0: detected capacity change from 0 to 2048 [ 784.834271][T15519] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 784.870338][T15519] usb 5-1: config 0 has no interface number 0 [ 784.885484][T24773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 784.917578][T15519] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 784.962832][T15519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.975697][T24773] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 785.009598][T15519] usb 5-1: Product: syz [ 785.037187][T15519] usb 5-1: Manufacturer: syz [ 785.041870][T15519] usb 5-1: SerialNumber: syz [ 785.098571][T15519] usb 5-1: config 0 descriptor?? [ 785.141131][T15519] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 785.179450][T15519] usb 5-1: No valid video chain found. [ 785.337050][T24782] SET target dimension over the limit! [ 785.417360][T15519] usb 5-1: USB disconnect, device number 19 [ 786.526393][T24780] loop2: detected capacity change from 0 to 32768 [ 786.704839][T24780] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 786.888731][T24780] XFS (loop2): Ending clean mount [ 787.192170][ T5786] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 788.142113][T24788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.217910][T24788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.763789][T24788] veth1_vlan: left allmulticast mode [ 788.948335][T24788] veth0_macvtap: left allmulticast mode [ 789.096629][T24788] netdevsim netdevsim0 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.105260][T24788] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.120986][T24788] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.133307][T24788] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.690680][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8732'. [ 789.720865][T24794] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 789.988325][T19080] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 790.429310][T24830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8744'. [ 790.454607][T24830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8744'. [ 790.811124][T24840] loop0: detected capacity change from 0 to 16 [ 790.819385][T24836] nft_compat: unsupported protocol 1 [ 790.955038][T24840] erofs: (device loop0): mounted with root inode @ nid 36. [ 791.072312][T24840] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 791.643444][T24854] netlink: 'syz.1.8756': attribute type 21 has an invalid length. [ 791.651347][T24854] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8756'. [ 792.324316][T24868] veth0_to_batadv: entered allmulticast mode [ 792.367966][T24868] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 792.801960][T24884] loop2: detected capacity change from 0 to 64 [ 793.429133][T24892] netlink: 'syz.0.8770': attribute type 46 has an invalid length. [ 793.458733][T24892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8770'. [ 795.035852][T24809] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 795.306736][T24809] usb 5-1: Using ep0 maxpacket: 32 [ 795.340497][T24809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.403123][T24809] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.445542][T24809] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 795.470922][T24809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.504279][T24809] usb 5-1: Product: syz [ 795.508699][T24809] usb 5-1: Manufacturer: syz [ 795.544916][T24809] usb 5-1: SerialNumber: syz [ 795.563487][T24809] usb 5-1: config 0 descriptor?? [ 795.903199][T24809] usb 5-1: USB disconnect, device number 20 [ 797.158766][T24962] loop2: detected capacity change from 0 to 4096 [ 797.268767][T24974] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 799.423690][T24810] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 799.655291][T24810] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 799.684917][T24810] usb 2-1: config 0 has no interface number 0 [ 799.713235][T24810] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.759432][T24810] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 799.779742][T24810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.793352][ T972] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 799.841814][T24810] usb 2-1: Product: syz [ 799.858136][T24810] usb 2-1: Manufacturer: syz [ 799.889822][T24810] usb 2-1: SerialNumber: syz [ 799.906753][T24810] usb 2-1: config 0 descriptor?? [ 799.954307][T24810] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 799.998165][T25022] libceph: resolve 'c' (ret=-3): failed [ 800.042568][ T972] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 800.050971][ T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.087936][ T972] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 800.105039][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.114895][ T972] usb 3-1: Product: syz [ 800.136301][ T972] usb 3-1: Manufacturer: syz [ 800.146179][ T972] usb 3-1: SerialNumber: syz [ 800.182873][ T972] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40 [ 800.427163][ T5130] bcm5974 3-1:1.0: could not read from device [ 800.489699][ T5130] bcm5974 3-1:1.0: could not read from device [ 800.500585][T24810] usb 2-1: USB disconnect, device number 48 [ 800.540755][T24810] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 800.575116][ T972] bcm5974 3-1:1.0: could not read from device [ 800.688474][ T972] input: failed to attach handler mousedev to device input40, error: -5 [ 800.713241][ T5130] bcm5974 3-1:1.0: could not read from device [ 800.735119][ T972] usb 3-1: USB disconnect, device number 49 [ 800.976092][T25016] loop4: detected capacity change from 0 to 32768 [ 800.993111][T25016] XFS (loop4): Invalid device [./file0], error=-6 [ 802.474017][T25060] netlink: 'syz.0.8850': attribute type 21 has an invalid length. [ 802.556242][T25060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8850'. [ 803.331663][T25082] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8860'. [ 804.087702][T25098] loop2: detected capacity change from 0 to 8 [ 804.184737][T25102] netlink: 'syz.4.8870': attribute type 51 has an invalid length. [ 804.966332][T25120] loop2: detected capacity change from 0 to 16 [ 805.093454][T25120] erofs: (device loop2): mounted with root inode @ nid 36. [ 805.288332][ T972] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 805.538389][ T972] usb 5-1: Using ep0 maxpacket: 32 [ 805.553912][ T972] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 805.576520][ T972] usb 5-1: config 4 has no interface number 0 [ 805.612951][ T972] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.646446][ T972] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.675807][ T972] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 805.734580][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.821583][ T972] hub 5-1:4.128: USB hub found [ 806.000519][T25136] loop1: detected capacity change from 0 to 2048 [ 806.064722][ T972] hub 5-1:4.128: 21 ports detected [ 806.090086][ T972] hub 5-1:4.128: Using single TT (err -22) [ 806.129293][ T972] hub 5-1:4.128: insufficient power available to use all downstream ports [ 806.217762][T25136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.301498][ T972] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 806.342677][ T972] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 806.367180][T25136] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 806.449066][ T972] usb 5-1: USB disconnect, device number 21 [ 806.456305][T25146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8891'. [ 806.688957][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.933505][T25151] ipvlan1: left promiscuous mode [ 806.941221][T25151] ipvlan1: left allmulticast mode [ 806.950448][T25151] veth0_vlan: left allmulticast mode [ 807.221144][T25160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8897'. [ 807.706947][T25167] netlink: 'syz.4.8901': attribute type 21 has an invalid length. [ 807.746358][T25167] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8901'. [ 807.772532][T25167] netlink: 'syz.4.8901': attribute type 4 has an invalid length. [ 807.789981][T25167] netlink: 'syz.4.8901': attribute type 3 has an invalid length. [ 807.812519][T25167] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8901'. [ 807.987622][T25174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8905'. [ 808.272121][T25180] loop1: detected capacity change from 0 to 128 [ 809.434392][T25210] loop0: detected capacity change from 0 to 1024 [ 809.479863][T25210] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 810.028083][T25222] loop2: detected capacity change from 0 to 512 [ 810.087404][T25222] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 810.203699][T25222] EXT4-fs (loop2): orphan cleanup on readonly fs [ 810.211046][T25222] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8927: EA inode hash validation failed [ 810.272420][T25222] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 810.350154][T25222] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.8927: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 810.414412][T25222] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.8927: ea_inode dec ref err=-117 [ 810.484906][T25222] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.8927: bit already cleared for inode 11 [ 810.550826][T25222] EXT4-fs (loop2): 1 orphan inode deleted [ 810.587055][T25222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 810.628725][T25222] EXT4-fs error (device loop2): __ext4_iget:5079: inode #14: block 1886221359: comm syz.2.8927: invalid block [ 810.868738][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.089168][T25242] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 811.502168][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8943'. [ 811.529527][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8943'. [ 811.545963][T25252] vlan0: entered promiscuous mode [ 812.382397][T25272] loop4: detected capacity change from 0 to 2048 [ 812.490246][T25272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.899079][T25250] loop0: detected capacity change from 0 to 32768 [ 812.972070][T25250] (syz.0.8941,25250,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 813.091964][T25250] (syz.0.8941,25250,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 813.210521][T25250] (syz.0.8941,25250,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 813.313776][T25250] JBD2: Ignoring recovery information on journal [ 813.596148][T25250] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 814.328866][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 815.322917][T25316] Cannot find del_set index 4 as target [ 816.798312][T25354] x_tables: duplicate entry at hook 4 [ 817.073322][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8993'. [ 817.508926][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8998'. [ 817.946838][T24809] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 818.131862][T25388] loop4: detected capacity change from 0 to 16 [ 818.165028][T24809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.201040][T24809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.235939][T25388] erofs: (device loop4): mounted with root inode @ nid 36. [ 818.254899][T24809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 818.275874][T24809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 818.293337][T24809] usb 2-1: SerialNumber: syz [ 818.308517][T24809] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 818.330009][T25388] syz.4.9006: attempt to access beyond end of device [ 818.330009][T25388] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 818.355543][T24809] usb-storage 2-1:1.0: USB Mass Storage device detected [ 818.395382][T25388] syz.4.9006: attempt to access beyond end of device [ 818.395382][T25388] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 818.425044][T24809] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 818.448592][T25388] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 818.488582][T24809] scsi host1: usb-storage 2-1:1.0 [ 818.512403][ T28] audit: type=1800 audit(2000000243.279:574): pid=25388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9006" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 819.173955][T25407] netlink: 'syz.0.9014': attribute type 2 has an invalid length. [ 819.327801][T25402] loop4: detected capacity change from 0 to 4096 [ 819.385735][T25402] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 819.746750][T25402] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 819.799318][T25402] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 819.862587][T25402] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 820.138142][T24809] usb 2-1: USB disconnect, device number 49 [ 820.254284][ T2946] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 820.324717][T25417] xt_TCPMSS: Only works on TCP SYN packets [ 821.352186][T25440] bridge0: port 3(netdevsim0) entered disabled state [ 821.425800][T25440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 821.970344][T25449] loop4: detected capacity change from 0 to 256 [ 822.001550][T25449] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 822.166656][T25452] netdevsim netdevsim0 ªªªªªª: set [1, 0] type 2 family 0 port 20001 - 0 [ 822.198803][T25452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 822.208536][T25452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 822.217995][T25452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 823.084662][T25466] xt_SECMARK: invalid mode: 2 [ 825.529154][ T27] IPVS: starting estimator thread 0... [ 825.706784][T25518] IPVS: using max 18 ests per chain, 43200 per kthread [ 826.122017][T25532] loop4: detected capacity change from 0 to 2048 [ 826.200509][T25532] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 826.252491][T25538] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 826.373981][T25532] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=0, inode=12, rec_len=16, name_len=10 [ 826.444922][T25532] Remounting filesystem read-only [ 826.826356][T25547] netlink: zone id is out of range [ 826.937874][T25547] netlink: set zone limit has 4 unknown bytes [ 827.745956][T25569] loop0: detected capacity change from 0 to 2048 [ 827.909128][T25569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.220270][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.514304][T25587] xt_connbytes: Forcing CT accounting to be enabled [ 828.726667][T25591] netlink: 'syz.0.9102': attribute type 4 has an invalid length. [ 828.759577][T25591] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9102'. [ 829.070604][T25573] loop4: detected capacity change from 0 to 32768 [ 829.173066][T25573] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 829.436102][T25573] XFS (loop4): Ending clean mount [ 829.620847][T24810] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 829.738922][T15591] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 829.893703][T24810] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 829.909107][T24810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.982478][T24810] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 830.607971][T25597] loop0: detected capacity change from 0 to 32768 [ 830.712812][T25597] ea_get: invalid extended attribute [ 830.735302][T25597] ffff88805efa8c70: 04 00 00 00 .... [ 831.128745][T25631] loop4: detected capacity change from 0 to 4096 [ 831.234207][T25634] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 831.326961][T24809] usb 3-1: USB disconnect, device number 50 [ 831.369390][T24809] idmouse 3-1:1.0: disconnected [ 831.687169][T25640] nvme_rdma: malformed address passed: 172.20.20.24:+ [ 831.754578][ T23] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 831.883038][ T28] audit: type=1326 audit(2000000255.615:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 831.941570][ T28] audit: type=1326 audit(2000000255.643:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.022146][ T28] audit: type=1326 audit(2000000255.643:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.171108][ T28] audit: type=1326 audit(2000000255.643:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.327503][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 832.349462][ T28] audit: type=1326 audit(2000000255.643:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.358053][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.425113][ T28] audit: type=1326 audit(2000000255.643:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.553193][ T28] audit: type=1326 audit(2000000255.643:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.579960][ T23] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 832.589429][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.597485][ T23] usb 2-1: Product: syz [ 832.631712][ T23] usb 2-1: Manufacturer: syz [ 832.636405][ T23] usb 2-1: SerialNumber: syz [ 832.649282][ T28] audit: type=1326 audit(2000000255.643:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.764772][T25659] netlink: 'syz.2.9131': attribute type 30 has an invalid length. [ 832.785089][ T23] usb 2-1: config 0 descriptor?? [ 832.792143][ T28] audit: type=1326 audit(2000000255.643:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25644 comm="syz.0.9124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbc30f9e0d9 code=0x7ffc0000 [ 832.851219][ T23] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 832.857470][ T23] usb 2-1: selecting invalid altsetting 1 [ 833.306646][T24809] usb 2-1: USB disconnect, device number 50 [ 833.839680][T25678] syz.2.9140 (25678): /proc/25678/oom_adj is deprecated, please use /proc/25678/oom_score_adj instead. [ 835.307455][T25713] binder: 25712:25713 ioctl 400c620e ffffffffffffffff returned -14 [ 836.045734][T24810] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 836.279782][T24810] usb 2-1: unable to get BOS descriptor or descriptor too short [ 836.317641][T24810] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 836.360885][T24810] usb 2-1: config 4 has no interface number 0 [ 836.367505][T24810] usb 2-1: config 4 interface 138 has no altsetting 0 [ 836.465921][T24810] usb 2-1: string descriptor 0 read error: -22 [ 836.501097][T24810] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 836.510297][T24810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.885302][T25746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9172'. [ 836.900267][T24810] catc 2-1:4.138: Missing or invalid endpoints [ 836.912308][T25746] IPv6: Can't replace route, no match found [ 837.183801][T24810] usb 2-1: USB disconnect, device number 51 [ 838.085795][T25772] xt_socket: unknown flags 0x58 [ 838.799791][T25787] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.087151][T25795] netlink: 'syz.1.9196': attribute type 1 has an invalid length. [ 839.204481][T25791] bond2: peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 839.239977][T25791] bond2: option use_carrier: invalid value (6) [ 839.253052][T25791] bond2 (unregistering): Released all slaves [ 839.535887][T24810] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 839.556603][T25802] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9199'. [ 839.752457][T24810] usb 2-1: Using ep0 maxpacket: 32 [ 839.761569][T24810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.795818][T24810] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.831652][T24810] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 839.849695][T24810] usb 2-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 839.875465][T24810] usb 2-1: Product: syz [ 839.879754][T24810] usb 2-1: Manufacturer: syz [ 839.921830][T24810] usb 2-1: SerialNumber: syz [ 839.990630][T24810] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input41 [ 840.443602][T24810] usb 2-1: USB disconnect, device number 52 [ 840.568264][T24810] appletouch 2-1:1.0: input: appletouch disconnected [ 840.824261][T25822] loop0: detected capacity change from 0 to 1024 [ 840.848341][T25822] EXT4-fs: Ignoring removed bh option [ 841.116579][T25822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.316486][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9212'. [ 841.489944][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.538720][T25833] IPv6: sit2: Disabled Multicast RS [ 841.594230][ T28] audit: type=1326 audit(2000000264.575:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 841.735226][ T28] audit: type=1326 audit(2000000264.611:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 841.856186][ T28] audit: type=1326 audit(2000000264.611:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 841.923733][ T28] audit: type=1326 audit(2000000264.611:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 842.038907][ T28] audit: type=1326 audit(2000000264.611:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 842.113518][ T28] audit: type=1326 audit(2000000264.621:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 842.215585][ T28] audit: type=1326 audit(2000000264.630:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 842.258425][T25818] loop2: detected capacity change from 0 to 32768 [ 842.340772][ T28] audit: type=1326 audit(2000000264.630:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.4.9214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 842.409570][T25818] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 842.462232][T25845] xt_CT: No such helper "netbios-ns" [ 842.467773][T25818] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 842.720780][T25818] syz.2.9208: attempt to access beyond end of device [ 842.720780][T25818] loop2: rw=12288, sector=8646911284551368912, nr_sectors = 8 limit=32768 [ 842.872618][T25818] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 844.325974][T25882] loop2: detected capacity change from 0 to 1764 [ 844.441896][T25882] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 844.777599][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.785490][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 845.167611][T25898] loop4: detected capacity change from 0 to 1024 [ 845.390899][T25900] loop0: detected capacity change from 0 to 4096 [ 845.566949][T25903] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 847.335370][ T28] audit: type=1326 audit(2000000269.871:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 847.512312][ T28] audit: type=1326 audit(2000000269.917:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 847.606742][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9265'. [ 847.642025][ T28] audit: type=1326 audit(2000000269.917:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febb895e90e code=0x7ffc0000 [ 847.695600][ T28] audit: type=1326 audit(2000000269.917:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7febb899f3d7 code=0x7ffc0000 [ 847.805626][ T28] audit: type=1326 audit(2000000269.917:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 847.906730][ T28] audit: type=1326 audit(2000000269.917:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7febb899f3d7 code=0x7ffc0000 [ 848.021335][ T28] audit: type=1326 audit(2000000269.917:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7febb895e90e code=0x7ffc0000 [ 848.129713][ T28] audit: type=1326 audit(2000000269.917:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 848.234492][ T28] audit: type=1326 audit(2000000269.917:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.2.9262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x7ffc0000 [ 849.244496][T25979] netlink: 'syz.2.9282': attribute type 8 has an invalid length. [ 849.411357][T25981] loop4: detected capacity change from 0 to 2048 [ 849.463172][T25981] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881 [ 849.562001][T25981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.684339][T25989] loop2: detected capacity change from 0 to 256 [ 850.648699][T26005] netlink: 'syz.2.9296': attribute type 2 has an invalid length. [ 850.687681][T26005] netlink: 'syz.2.9296': attribute type 1 has an invalid length. [ 850.838157][T26007] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 850.942448][T26011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9299'. [ 851.379194][T26021] netlink: 'syz.4.9303': attribute type 29 has an invalid length. [ 851.421732][T26021] netlink: 'syz.4.9303': attribute type 29 has an invalid length. [ 851.697694][T26028] loop2: detected capacity change from 0 to 512 [ 851.722817][T26028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 851.749571][T26030] netlink: 'syz.1.9309': attribute type 10 has an invalid length. [ 851.757551][T26030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9309'. [ 851.814671][T26028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 851.830016][T26030] team0: entered allmulticast mode [ 851.835267][T26030] team_slave_0: entered allmulticast mode [ 851.899362][T26030] team_slave_1: entered allmulticast mode [ 851.915574][T26023] loop0: detected capacity change from 0 to 8192 [ 851.930753][T26030] bond0: entered allmulticast mode [ 851.937119][T26030] bond_slave_0: entered allmulticast mode [ 851.944305][T26030] bond_slave_1: entered allmulticast mode [ 851.956413][T26030] bridge0: port 4(team0) entered blocking state [ 851.963124][T26030] bridge0: port 4(team0) entered disabled state [ 851.976292][T26030] bridge0: port 4(team0) entered blocking state [ 851.982810][T26030] bridge0: port 4(team0) entered forwarding state [ 851.991834][T26028] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.9307: Invalid block bitmap block 0 in block_group 0 [ 852.030257][T26028] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 852.055514][T26028] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.9307: attempt to clear invalid blocks 983261 len 1 [ 852.152939][T26028] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.9307: Invalid inode table block 0 in block_group 0 [ 852.214291][T26028] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 852.356732][T26028] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 852.399246][T26028] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.9307: Invalid inode table block 0 in block_group 0 [ 852.445851][T26028] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 852.622703][T26028] EXT4-fs error (device loop2): ext4_truncate:4302: inode #11: comm syz.2.9307: mark_inode_dirty error [ 852.691967][T26028] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 852.779122][T26028] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.9307: Invalid inode table block 0 in block_group 0 [ 852.920995][T26028] EXT4-fs (loop2): 1 truncate cleaned up [ 852.928275][T26028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.121681][T26028] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.9307: Invalid inode table block 0 in block_group 0 [ 853.175826][T26028] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 853.220937][ T28] audit: type=1326 audit(2000000275.296:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.0.9319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9e0d9 code=0x0 [ 853.387950][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.483674][T26057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9321'. [ 853.869898][T26064] bond2: option packets_per_slave: invalid value (18446744073709551489) [ 853.910584][T26064] bond2: option packets_per_slave: allowed values 0 - 65535 [ 853.947544][T26064] bond2 (unregistering): Released all slaves [ 854.568411][T26078] sctp: [Deprecated]: syz.2.9331 (pid 26078) Use of int in maxseg socket option. [ 854.568411][T26078] Use struct sctp_assoc_value instead [ 855.037661][T26084] nvme nvme0: failed to connect socket: -101 [ 855.044659][T26089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9335'. [ 855.378346][T26067] bridge0: port 4(team0) entered disabled state [ 855.384979][T26067] bridge0: port 3(netdevsim0) entered disabled state [ 855.391954][T26067] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.609575][T26095] loop0: detected capacity change from 0 to 1024 [ 856.869702][T26067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.011237][T26067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.089747][T26067] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.144924][T26067] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.173849][T26067] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.184692][T26067] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.689299][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9334'. [ 859.014470][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9354'. [ 859.351701][T26131] loop0: detected capacity change from 0 to 4096 [ 859.527656][T26131] ntfs3: loop0: ino=b, Correct links count -> 1. [ 859.565091][T26131] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 860.610353][T26150] loop4: detected capacity change from 0 to 512 [ 860.810141][T26148] loop0: detected capacity change from 0 to 4096 [ 860.834243][T26150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.889924][T26150] ext4 filesystem being mounted at /1198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.162903][T15591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.236123][T26141] loop2: detected capacity change from 0 to 32768 [ 861.268789][T26141] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 861.417041][T24810] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 861.592798][T26164] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 861.684458][T24810] usb 2-1: too many configurations: 37, using maximum allowed: 8 [ 861.764913][ T5772] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 861.800617][T26169] netlink: 'syz.0.9371': attribute type 1 has an invalid length. [ 861.833948][T24810] usb 2-1: string descriptor 0 read error: -71 [ 861.883110][T24810] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 861.892963][T26169] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.9371'. [ 861.947694][T24810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.036587][T24810] usb 2-1: can't set config #1, error -71 [ 862.090058][T24810] usb 2-1: USB disconnect, device number 53 [ 862.097725][ T28] audit: type=1326 audit(2000000283.481:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26171 comm="syz.4.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 862.277705][ T28] audit: type=1326 audit(2000000283.481:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26171 comm="syz.4.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 862.435571][ T28] audit: type=1326 audit(2000000283.536:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26171 comm="syz.4.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 862.462088][T26176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9374'. [ 862.563523][ T28] audit: type=1326 audit(2000000283.536:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26171 comm="syz.4.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 862.684814][ T28] audit: type=1326 audit(2000000283.536:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26171 comm="syz.4.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689a19e0d9 code=0x7ffc0000 [ 862.941681][T26182] loop1: detected capacity change from 0 to 4096 [ 863.083719][T26189] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 864.926591][T26227] bond3: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 864.957880][T26227] bond3: peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 864.993586][T26227] bond3: entered allmulticast mode [ 865.460276][T26241] loop0: detected capacity change from 0 to 256 [ 866.569350][T26264] loop0: detected capacity change from 0 to 256 [ 866.806097][T26264] FAT-fs (loop0): Directory bread(block 64) failed [ 866.812739][T26264] FAT-fs (loop0): Directory bread(block 65) failed [ 866.861998][T26264] FAT-fs (loop0): Directory bread(block 66) failed [ 866.895616][T26264] FAT-fs (loop0): Directory bread(block 67) failed [ 866.933328][T26264] FAT-fs (loop0): Directory bread(block 68) failed [ 866.978654][T26264] FAT-fs (loop0): Directory bread(block 69) failed [ 866.985407][T26264] FAT-fs (loop0): Directory bread(block 70) failed [ 867.063346][T26264] FAT-fs (loop0): Directory bread(block 71) failed [ 867.070068][T26264] FAT-fs (loop0): Directory bread(block 72) failed [ 867.128493][T26264] FAT-fs (loop0): Directory bread(block 73) failed [ 867.203230][T26275] netlink: 'syz.1.9420': attribute type 24 has an invalid length. [ 867.310459][T26273] loop4: detected capacity change from 0 to 2048 [ 867.459368][T26273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.518540][T26273] ext4 filesystem being mounted at /1212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.629423][T26279] --map-set only usable from mangle table [ 867.848862][T26256] loop2: detected capacity change from 0 to 32768 [ 867.947397][T15591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.054281][T26256] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 868.364507][T26256] XFS (loop2): Ending clean mount [ 868.550614][T26256] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 868.745906][T26299] loop1: detected capacity change from 0 to 64 [ 868.942301][ T5786] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 869.090237][ T972] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 869.343576][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 869.371428][ T972] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 869.396448][ T972] usb 1-1: config 252 has no interface number 0 [ 869.412715][ T972] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 869.453641][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.501870][ T972] usb 1-1: Product: syz [ 869.506126][ T972] usb 1-1: Manufacturer: syz [ 869.555047][ T972] usb 1-1: SerialNumber: syz [ 869.658453][ T972] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 869.753593][T26314] netlink: 'syz.4.9434': attribute type 5 has an invalid length. [ 869.834489][T26314] ip6erspan1: entered promiscuous mode [ 869.978416][T24809] usb 1-1: USB disconnect, device number 49 [ 869.984938][ T3537] usb 1-1: Failed to submit usb control message: -71 [ 870.005570][ T3537] usb 1-1: unable to send the bmi data to the device: -71 [ 870.030674][ T3537] usb 1-1: unable to get target info from device [ 870.052143][ T3537] usb 1-1: could not get target info (-71) [ 870.078716][ T3537] usb 1-1: could not probe fw (-71) [ 870.147796][T26321] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9436'. [ 870.498936][T26327] 9pnet_fd: p9_fd_create_unix (26327): problem connecting socket: ./file0: -111 [ 870.930272][T26333] loop4: detected capacity change from 0 to 1024 [ 871.070095][T26333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.461174][T15591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.966680][T19080] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 872.075281][T26360] loop1: detected capacity change from 0 to 8 [ 872.108797][T26360] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 872.201126][T26363] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 872.300383][T26366] netlink: 'syz.0.9457': attribute type 3 has an invalid length. [ 872.349476][T26368] loop1: detected capacity change from 0 to 8 [ 873.471599][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9469'. [ 873.580126][ T972] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 873.902181][ T972] usb 5-1: Using ep0 maxpacket: 8 [ 873.921596][ T972] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 873.936540][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.961735][ T972] usb 5-1: Product: syz [ 873.970727][ T972] usb 5-1: Manufacturer: syz [ 873.975450][ T972] usb 5-1: SerialNumber: syz [ 874.411048][T26408] loop2: detected capacity change from 0 to 2048 [ 874.485455][ T972] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 874.528837][T26413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 874.543855][ T972] mxuport: probe of 5-1:254.0 failed with error -5 [ 874.590742][ T972] usb 5-1: USB disconnect, device number 22 [ 874.698701][T26408] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 874.727758][T24809] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 874.736542][T26408] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 874.847638][T26408] Remounting filesystem read-only [ 874.866069][T26408] NILFS (loop2): error -5 truncating bmap (ino=16) [ 874.951788][T24809] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 874.972319][T24809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.983577][ T5786] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 874.996683][T24809] usb 1-1: Product: syz [ 875.008874][ T5786] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 875.016468][T24809] usb 1-1: Manufacturer: syz [ 875.027430][T24809] usb 1-1: SerialNumber: syz [ 875.032464][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.049397][T24809] usb 1-1: config 0 descriptor?? [ 875.071606][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.088453][T24809] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 875.104845][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.125921][ T5786] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 875.148375][ T5786] NILFS (loop2): discard dirty page: offset=0, ino=16 [ 875.180963][ T5786] NILFS (loop2): discard dirty block: blocknr=23, size=1024 [ 875.215353][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.260806][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.300051][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.369388][ T5786] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 875.398119][ T5786] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 875.427731][ T5786] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 875.460637][ T5786] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 875.484479][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 875.601315][T24809] gspca_sunplus: reg_w_riv err -71 [ 875.614338][T24809] sunplus: probe of 1-1:0.0 failed with error -71 [ 875.680441][T24809] usb 1-1: USB disconnect, device number 50 [ 875.706294][T26410] loop1: detected capacity change from 0 to 32768 [ 875.787104][T26410] XFS: ikeep mount option is deprecated. [ 875.829093][T26417] loop4: detected capacity change from 0 to 512 [ 875.891366][T26417] EXT4-fs (loop4): Test dummy encryption mode enabled [ 875.910043][T26410] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 875.965928][T26417] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.9483: inode has both inline data and extents flags [ 876.026434][T26417] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.9483: couldn't read orphan inode 15 (err -117) [ 876.119132][T26417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.216662][T26410] XFS (loop1): Ending clean mount [ 876.266567][T26410] XFS (loop1): Quotacheck needed: Please wait. [ 876.492905][T26410] XFS (loop1): Quotacheck: Done. [ 876.559697][T15591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.611545][T24809] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 876.900423][T24809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.938158][T24809] usb 3-1: config 0 has no interfaces? [ 876.955872][T24809] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 876.971789][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 876.982223][T24809] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 876.990412][T24809] usb 3-1: Product: syz [ 877.006227][T24809] usb 3-1: Manufacturer: syz [ 877.017957][T24809] usb 3-1: config 0 descriptor?? [ 877.888035][T24809] usb 3-1: USB disconnect, device number 51 [ 878.727961][T26470] loop4: detected capacity change from 0 to 2048 [ 878.812797][T26470] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 878.934393][T26475] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 879.124442][T26470] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 879.167101][T26473] loop2: detected capacity change from 0 to 4096 [ 879.214760][T26470] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 879.310257][T26473] NILFS (loop2): invalid segment: Checksum error in segment payload [ 879.368687][T26470] Remounting filesystem read-only [ 879.383989][T26473] NILFS (loop2): trying rollback from an earlier position [ 879.452172][T26470] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 879.496557][T26473] NILFS (loop2): recovery complete [ 879.549807][T26470] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 879.559027][T26470] NILFS (loop4): error -5 truncating bmap (ino=16) [ 879.588276][T26483] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 879.862318][T15591] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 879.884377][T15591] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 879.891775][T15591] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 880.000300][T15591] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 880.060051][T15591] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 880.110087][T15591] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 882.116524][T26500] loop0: detected capacity change from 0 to 32768 [ 882.270549][T26500] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 882.270549][T26500] [ 882.310356][T26500] ERROR: (device loop0): remounting filesystem as read-only [ 882.574657][T26509] loop4: detected capacity change from 0 to 32768 [ 882.835000][T26536] ip6tnl6: entered allmulticast mode [ 882.871924][T26539] xt_nfacct: accounting object `' does not exist [ 882.883098][ T2946] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 882.933208][T24809] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 882.943066][ T2946] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 883.182839][T24809] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 883.272139][T26543] loop4: detected capacity change from 0 to 512 [ 883.309119][T26543] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 883.439693][T26543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.9536: bg 0: block 4: invalid block bitmap [ 883.540652][T26543] EXT4-fs (loop4): Remounting filesystem read-only [ 883.602107][T26543] EXT4-fs (loop4): 1 truncate cleaned up [ 883.694133][T26543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.046715][T24809] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 884.365273][T15591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.443896][T26565] loop0: detected capacity change from 0 to 512 [ 884.480219][ T28] audit: type=1326 audit(2000000304.140:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26562 comm="syz.2.9545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febb899e0d9 code=0x0 [ 884.582564][T26565] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 884.655821][T26565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 884.730218][T26565] EXT4-fs (loop0): orphan cleanup on readonly fs [ 884.736801][T26565] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.9546: bad orphan inode 3 [ 884.873541][T26565] EXT4-fs (loop0): Remounting filesystem read-only [ 884.893031][T26565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 885.047916][T26565] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.9546: dx entry: limit 0 != root limit 125 [ 885.157286][T26565] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.9546: Corrupt directory, running e2fsck is recommended [ 885.445200][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 886.398064][T26602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9564'. [ 886.806163][T26613] loop1: detected capacity change from 0 to 1024 [ 886.848362][T26608] loop2: detected capacity change from 0 to 4096 [ 886.911014][T26608] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 886.921690][T26613] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 887.004967][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 887.958984][T24810] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 888.203342][T26633] tmpfs: Bad value for 'mpol' [ 888.221772][T24810] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 888.244971][T24810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.262436][T24810] usb 5-1: Product: syz [ 888.275894][T24810] usb 5-1: Manufacturer: syz [ 888.284725][T24810] usb 5-1: SerialNumber: syz [ 888.307903][T24810] usb 5-1: config 0 descriptor?? [ 888.566107][T24810] mos7840 5-1:0.0: required endpoints missing [ 888.801602][T24810] usb 5-1: USB disconnect, device number 23 [ 889.001594][T26627] loop1: detected capacity change from 0 to 32768 [ 889.075769][T26627] jfs_strtoUCS: char2uni returned -22. [ 889.082289][T26627] charset = cp869, char = 0x81 [ 889.328690][T26648] loop2: detected capacity change from 0 to 256 [ 889.430438][T26648] exFAT-fs (loop2): error, The cluster chain has a loop [ 889.468695][T26651] 9pnet: Found fid 0 not clunked [ 889.475023][T26648] exFAT-fs (loop2): failed to count the number of clusters in root [ 889.592939][T26648] exFAT-fs (loop2): failed to recognize exfat type [ 891.298863][T24809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 891.425829][T24810] ------------[ cut here ]------------ [ 891.432775][T24810] WARNING: CPU: 0 PID: 24810 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 891.443832][T24810] Modules linked in: [ 891.447795][T24810] CPU: 0 PID: 24810 Comm: kworker/0:7 Not tainted syzkaller #0 [ 891.455443][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.465663][T24810] Workqueue: events nf_tables_trans_destroy_work [ 891.472348][T24810] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 891.478244][T24810] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 891.498086][T24810] RSP: 0018:ffffc9000b4ef9d8 EFLAGS: 00010293 [ 891.505013][T24810] RAX: ffffffff88dbbdab RBX: ffff888024d074f0 RCX: ffff88801b3c5a00 [ 891.513199][T24810] RDX: 0000000000000000 RSI: ffff888024d07400 RDI: ffff888021614828 [ 891.521233][T24810] RBP: ffffc9000b4efbb0 R08: ffff88801b3c5a00 R09: 000000000000000f [ 891.529509][T24810] R10: 0000000000000020 R11: 0000000000000000 R12: ffff888024d074c0 [ 891.537694][T24810] R13: dffffc0000000000 R14: ffff888024d07510 R15: dffffc0000000000 [ 891.545744][T24810] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 891.554754][T24810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.561664][T24810] CR2: 00007f5091827dac CR3: 0000000079eb5000 CR4: 00000000003506f0 [ 891.569863][T24810] Call Trace: [ 891.573188][T24810] [ 891.576158][T24810] ? lockdep_hardirqs_on+0x98/0x150 [ 891.581564][T24810] nft_set_destroy+0x489/0xa20 [ 891.586501][T24810] ? __kmem_cache_free+0xba/0x1f0 [ 891.591985][T24810] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 891.598038][T24810] ? nft_object_dump+0x1e0/0x1e0 [ 891.603128][T24810] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.608470][T24810] ? process_scheduled_works+0x975/0x1600 [ 891.614614][T24810] ? process_scheduled_works+0x975/0x1600 [ 891.620463][T24810] process_scheduled_works+0xa60/0x1600 [ 891.626139][T24810] ? worker_attach_to_pool+0x370/0x370 [ 891.631665][T24810] ? assign_work+0x3cc/0x5d0 [ 891.636367][T24810] worker_thread+0xa5e/0xfe0 [ 891.641065][T24810] ? _raw_spin_unlock+0x40/0x40 [ 891.646011][T24810] ? __kthread_parkme+0x71/0x1c0 [ 891.651020][T24810] kthread+0x2fa/0x390 [ 891.655181][T24810] ? pr_cont_work+0x550/0x550 [ 891.659941][T24810] ? kthread_blkcg+0xd0/0xd0 [ 891.664583][T24810] ret_from_fork+0x48/0x80 [ 891.669105][T24810] ? kthread_blkcg+0xd0/0xd0 [ 891.673748][T24810] ret_from_fork_asm+0x11/0x20 [ 891.678684][T24810] [ 891.681749][T24810] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 891.689072][T24810] CPU: 0 PID: 24810 Comm: kworker/0:7 Not tainted syzkaller #0 [ 891.696677][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.706771][T24810] Workqueue: events nf_tables_trans_destroy_work [ 891.713155][T24810] Call Trace: [ 891.716470][T24810] [ 891.719431][T24810] dump_stack_lvl+0x18c/0x250 [ 891.724161][T24810] ? show_regs_print_info+0x20/0x20 [ 891.729404][T24810] ? load_image+0x420/0x420 [ 891.734015][T24810] panic+0x2ca/0x720 [ 891.737974][T24810] ? bpf_jit_dump+0xd0/0xd0 [ 891.742538][T24810] ? ret_from_fork_asm+0x11/0x20 [ 891.747533][T24810] __warn+0x2e0/0x470 [ 891.751565][T24810] ? nft_pipapo_destroy+0x84b/0x8b0 [ 891.756808][T24810] ? nft_pipapo_destroy+0x84b/0x8b0 [ 891.762062][T24810] report_bug+0x2be/0x4f0 [ 891.766468][T24810] ? nft_pipapo_destroy+0x84b/0x8b0 [ 891.771710][T24810] ? nft_pipapo_destroy+0x84b/0x8b0 [ 891.776952][T24810] ? nft_pipapo_destroy+0x84d/0x8b0 [ 891.782191][T24810] handle_bug+0xcf/0x120 [ 891.786476][T24810] exc_invalid_op+0x1a/0x50 [ 891.791024][T24810] asm_exc_invalid_op+0x1a/0x20 [ 891.796011][T24810] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 891.801870][T24810] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 891.821517][T24810] RSP: 0018:ffffc9000b4ef9d8 EFLAGS: 00010293 [ 891.827631][T24810] RAX: ffffffff88dbbdab RBX: ffff888024d074f0 RCX: ffff88801b3c5a00 [ 891.835640][T24810] RDX: 0000000000000000 RSI: ffff888024d07400 RDI: ffff888021614828 [ 891.843648][T24810] RBP: ffffc9000b4efbb0 R08: ffff88801b3c5a00 R09: 000000000000000f [ 891.851660][T24810] R10: 0000000000000020 R11: 0000000000000000 R12: ffff888024d074c0 [ 891.859672][T24810] R13: dffffc0000000000 R14: ffff888024d07510 R15: dffffc0000000000 [ 891.867701][T24810] ? nft_pipapo_destroy+0x84b/0x8b0 [ 891.872956][T24810] ? nft_pipapo_destroy+0x84b/0x8b0 [ 891.878201][T24810] ? lockdep_hardirqs_on+0x98/0x150 [ 891.883459][T24810] nft_set_destroy+0x489/0xa20 [ 891.888268][T24810] ? __kmem_cache_free+0xba/0x1f0 [ 891.893354][T24810] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 891.899389][T24810] ? nft_object_dump+0x1e0/0x1e0 [ 891.904375][T24810] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.909626][T24810] ? process_scheduled_works+0x975/0x1600 [ 891.915400][T24810] ? process_scheduled_works+0x975/0x1600 [ 891.921164][T24810] process_scheduled_works+0xa60/0x1600 [ 891.926791][T24810] ? worker_attach_to_pool+0x370/0x370 [ 891.932301][T24810] ? assign_work+0x3cc/0x5d0 [ 891.936949][T24810] worker_thread+0xa5e/0xfe0 [ 891.941596][T24810] ? _raw_spin_unlock+0x40/0x40 [ 891.946501][T24810] ? __kthread_parkme+0x71/0x1c0 [ 891.951486][T24810] kthread+0x2fa/0x390 [ 891.955589][T24810] ? pr_cont_work+0x550/0x550 [ 891.960310][T24810] ? kthread_blkcg+0xd0/0xd0 [ 891.964948][T24810] ret_from_fork+0x48/0x80 [ 891.969410][T24810] ? kthread_blkcg+0xd0/0xd0 [ 891.974044][T24810] ret_from_fork_asm+0x11/0x20 [ 891.978875][T24810] [ 891.982499][T24810] Kernel Offset: disabled [ 891.986979][T24810] Rebooting in 86400 seconds..