last executing test programs: 3.427232185s ago: executing program 1 (id=22303): mlockall(0x7) io_setup(0xffff, &(0x7f0000002400)) 3.283456288s ago: executing program 2 (id=22306): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 3.026792474s ago: executing program 2 (id=22310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0xff, 0x1, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x2}}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x30}}, 0x40004) 2.985545675s ago: executing program 3 (id=22311): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0xe08802, &(0x7f0000000180)=ANY=[], 0x1, 0x693, &(0x7f0000000ec0)="$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") listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/18, 0x12) 2.838935029s ago: executing program 2 (id=22314): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 2.752077732s ago: executing program 1 (id=22315): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x28, 0x1, 0x3d, 0xe6b}}], 0x28}}], 0x1, 0x20008845) 2.634918244s ago: executing program 2 (id=22316): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x7) 2.609924495s ago: executing program 3 (id=22317): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x29, 0xe, 0x4d, 0x8, 0x60, @local, @mcast2, 0x40, 0x700, 0x4, 0x102}}) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "d15cdc", 0x44, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0xfffd}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x40, 0x1, 0x1, 0x0, 0x1, 0x3}, 0x1, {0x100005}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x5, 0x2, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x7, 0x3, 0x2, 0x2, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 2.463153759s ago: executing program 1 (id=22320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0xfffffff5, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.439930849s ago: executing program 3 (id=22321): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x43, 0x62f8, &(0x7f0000019f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) 2.41588752s ago: executing program 2 (id=22322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa10000000000000701000000feffff9402000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2d}, 0x94) 2.244800574s ago: executing program 1 (id=22325): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000002580)=ANY=[@ANYBLOB="01e0ff84"]) 2.175295786s ago: executing program 0 (id=22326): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001a00014026bd7000fbdbdf250a808000000000000000000006001c004e20000006001d004e24000005001b"], 0x34}}, 0x4000) 2.094591828s ago: executing program 0 (id=22328): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.99755867s ago: executing program 2 (id=22329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.99708465s ago: executing program 0 (id=22330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="0e08000000000000b89e08dc86dd2e64005cac67b0139016d2d47b7de615526b00d203a15612f3f9c9fd33a4e55b7cca3dbf0ee64f88", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.641571409s ago: executing program 32 (id=22329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.624755009s ago: executing program 0 (id=22332): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.62420424s ago: executing program 3 (id=22333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8040) 1.62396938s ago: executing program 4 (id=22334): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0}]) 1.442629553s ago: executing program 3 (id=22335): r0 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x9, 0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000080), &(0x7f0000000100), 0x2) 1.400252825s ago: executing program 0 (id=22336): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x800000000000000) 991.757955ms ago: executing program 3 (id=22337): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100e1080, 0x0, 0x0, 0x0, 0x0, 0x0) 991.677885ms ago: executing program 4 (id=22338): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7}) 707.666292ms ago: executing program 4 (id=22339): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffffffffffffff, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="1a629cf076d8", 0x0, 0x3, 0x13, 0x1, 0x0}) 561.093615ms ago: executing program 4 (id=22340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x34, r1, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004000) 272.879722ms ago: executing program 4 (id=22341): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 272.035222ms ago: executing program 0 (id=22342): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 244.919604ms ago: executing program 1 (id=22343): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"]) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040)) 40.189969ms ago: executing program 4 (id=22344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5, 0xffffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 0s ago: executing program 1 (id=22345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040) kernel console output (not intermixed with test programs): 41': attribute type 3 has an invalid length. [ 1278.778079][T15575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1278.936456][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 1279.122189][T15590] netlink: 'syz.1.20249': attribute type 5 has an invalid length. [ 1279.133031][T15589] loop0: detected capacity change from 0 to 512 [ 1279.215630][T15589] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1279.223706][T15569] loop3: detected capacity change from 0 to 32768 [ 1279.246095][T15589] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1279.263221][T15589] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1279.287616][ T4359] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1279.311171][T15589] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1279.380353][T15589] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.20246: Failed to acquire dquot type 1 [ 1279.432036][T15589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.20246: bg 0: block 40: padding at end of block bitmap is not set [ 1279.468805][T15589] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1279.497925][T15589] EXT4-fs (loop0): 1 truncate cleaned up [ 1279.533482][T15589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1279.613792][T15589] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.20246: bad symlink. [ 1279.726259][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 1279.905180][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20258'. [ 1280.058368][T15614] SET target dimension over the limit! [ 1280.130522][T15593] loop4: detected capacity change from 0 to 32768 [ 1280.218394][T15593] read_mapping_page failed! [ 1280.237760][T15593] ERROR: (device loop4): txCommit: [ 1280.237760][T15593] [ 1280.461287][ T4351] read_mapping_page failed! [ 1280.474223][ T4351] ERROR: (device loop4): txCommit: [ 1280.474223][ T4351] [ 1280.503780][ T4351] jfs_write_inode: jfs_commit_inode failed! [ 1280.601187][T15634] device ip6gre3 entered promiscuous mode [ 1280.942063][T15652] loop1: detected capacity change from 0 to 256 [ 1281.071533][T15655] overlayfs: './file0' not a directory [ 1281.294833][T15665] loop4: detected capacity change from 0 to 1764 [ 1281.445298][ T26] audit: type=1326 audit(1204.618:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.529345][ T26] audit: type=1326 audit(1204.665:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.566752][ T26] audit: type=1326 audit(1204.684:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.655718][ T26] audit: type=1326 audit(1204.684:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.705242][ T26] audit: type=1326 audit(1204.684:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.784188][ T26] audit: type=1326 audit(1204.684:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.809454][ T6092] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1281.890074][ T26] audit: type=1326 audit(1204.684:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1281.965805][ T26] audit: type=1326 audit(1204.684:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.20289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1282.023155][ T6092] usb 5-1: Using ep0 maxpacket: 32 [ 1282.030934][ T6092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.063962][ T6092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.091593][ T6092] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1282.122415][ T6092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.146697][ T6092] usb 5-1: config 0 descriptor?? [ 1282.175061][ T6092] hub 5-1:0.0: USB hub found [ 1282.253735][T15707] netlink: 'syz.2.20306': attribute type 2 has an invalid length. [ 1282.262149][T15707] netlink: 'syz.2.20306': attribute type 2 has an invalid length. [ 1282.270803][T15707] netlink: 'syz.2.20306': attribute type 1 has an invalid length. [ 1282.279270][T15707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20306'. [ 1282.391894][ T6092] hub 5-1:0.0: 3 ports detected [ 1282.482660][ T6094] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1282.606869][ T6092] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1282.620337][ T6092] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1282.674179][ T6092] usbhid 5-1:0.0: can't add hid device: -71 [ 1282.680850][ T6092] usbhid: probe of 5-1:0.0 failed with error -71 [ 1282.698072][ T6094] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1282.709278][ T6094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.730123][ T6094] usb 4-1: config 0 descriptor?? [ 1282.739810][ T6092] usb 5-1: USB disconnect, device number 18 [ 1282.763094][ T6094] cp210x 4-1:0.0: cp210x converter detected [ 1282.825751][T15724] program syz.2.20314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1282.961898][T15730] loop1: detected capacity change from 0 to 512 [ 1282.974995][T15730] EXT4-fs: Ignoring removed oldalloc option [ 1282.986444][T15730] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1283.012497][T15730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1283.022936][T15730] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1283.037203][T15730] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.20317: bad orphan inode 267 [ 1283.061806][T15730] EXT4-fs (loop1): Remounting filesystem read-only [ 1283.068386][T15730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1283.099570][T15730] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.20317: dx entry: limit 0 != root limit 125 [ 1283.141541][T15730] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.20317: Corrupt directory, running e2fsck is recommended [ 1283.169771][ T6094] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1283.177711][ T6094] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1283.185297][ T6094] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1283.193356][ T6094] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1283.215303][ T6094] usb 4-1: USB disconnect, device number 33 [ 1283.227549][ T6094] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1283.238600][ T6094] cp210x 4-1:0.0: device disconnected [ 1283.286487][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1283.309472][T15737] loop4: detected capacity change from 0 to 164 [ 1283.431411][T15741] netlink: 'syz.1.20320': attribute type 3 has an invalid length. [ 1283.442625][T15743] x_tables: duplicate underflow at hook 1 [ 1283.589318][T15747] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.20325'. [ 1284.044843][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20335'. [ 1284.141093][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20337'. [ 1284.166946][T15771] netlink: 944 bytes leftover after parsing attributes in process `syz.2.20337'. [ 1284.202855][T15771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20337'. [ 1284.276930][T15776] loop4: detected capacity change from 0 to 16 [ 1284.308320][T15776] erofs: (device loop4): mounted with root inode @ nid 36. [ 1284.473190][T15757] loop0: detected capacity change from 0 to 32768 [ 1284.506851][T15757] XFS (loop0): Mounting V5 Filesystem [ 1284.602270][ T6094] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1284.639115][T15795] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1284.668634][T15757] XFS (loop0): Ending clean mount [ 1284.742389][T15757] XFS (loop0): Quotacheck needed: Please wait. [ 1284.811838][ T6094] usb 2-1: Using ep0 maxpacket: 16 [ 1284.819623][ T6094] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1284.839431][ T6094] usb 2-1: config 0 has no interface number 0 [ 1284.857571][ T6094] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1284.872575][ T6094] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1284.922545][ T6094] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1284.970463][T15805] netlink: 'syz.3.20348': attribute type 10 has an invalid length. [ 1284.972629][ T6094] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1285.014180][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.033263][ T6094] usb 2-1: Product: syz [ 1285.047077][ T6094] usb 2-1: Manufacturer: syz [ 1285.051720][ T6094] usb 2-1: SerialNumber: syz [ 1285.083477][ T6094] usb 2-1: config 0 descriptor?? [ 1285.089407][T15779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1285.097123][T15757] XFS (loop0): Quotacheck: Done. [ 1285.132697][T15779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1285.201588][T15813] IPv6: NLM_F_CREATE should be specified when creating new route [ 1285.277394][ T4273] XFS (loop0): Unmounting Filesystem [ 1285.358488][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1285.358502][ T26] audit: type=1326 audit(1208.287:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1285.376436][T15779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1285.410997][ T26] audit: type=1326 audit(1208.315:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1285.435366][T15779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1285.453246][ T26] audit: type=1326 audit(1208.315:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1285.453283][ T26] audit: type=1326 audit(1208.315:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1285.460451][ T26] audit: type=1326 audit(1208.380:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28f895e84e code=0x7ffc0000 [ 1285.460909][ T26] audit: type=1326 audit(1208.380:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28f895e84e code=0x7ffc0000 [ 1285.462225][ T26] audit: type=1326 audit(1208.380:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28f895e84e code=0x7ffc0000 [ 1285.463521][ T26] audit: type=1326 audit(1208.380:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28f895e84e code=0x7ffc0000 [ 1285.464938][ T26] audit: type=1326 audit(1208.390:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28f895e84e code=0x7ffc0000 [ 1285.466227][ T26] audit: type=1326 audit(1208.390:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.3.20354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28f895e84e code=0x7ffc0000 [ 1285.709419][T13188] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1285.733657][ T6094] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1285.822901][ T6094] usb 2-1: USB disconnect, device number 25 [ 1285.901869][T13188] usb 5-1: Using ep0 maxpacket: 32 [ 1285.908660][T13188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1285.965874][T13188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1285.996111][T13188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1286.024155][T13188] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1286.036759][T15830] netlink: 'syz.0.20360': attribute type 5 has an invalid length. [ 1286.045780][T13188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.083418][T13188] usb 5-1: Product: syz [ 1286.087644][T13188] usb 5-1: Manufacturer: syz [ 1286.092251][T13188] usb 5-1: SerialNumber: syz [ 1286.139759][T13188] usb 5-1: config 0 descriptor?? [ 1286.163014][T13188] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input84 [ 1286.187078][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.219355][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.240782][T15836] netlink: 260 bytes leftover after parsing attributes in process `syz.2.20364'. [ 1286.253257][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.287634][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.325894][ T5736] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.361208][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.392002][T15818] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.424567][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.450498][ T3624] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1286.465814][T13188] usb 5-1: USB disconnect, device number 19 [ 1286.471899][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1286.873413][T15840] loop2: detected capacity change from 0 to 32768 [ 1286.907534][T15858] netlink: 'syz.3.20374': attribute type 29 has an invalid length. [ 1286.915559][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20374'. [ 1286.966705][T15840] XFS (loop2): Mounting V5 Filesystem [ 1287.183386][T15840] XFS (loop2): Ending clean mount [ 1287.198001][T15840] XFS (loop2): Quotacheck needed: Please wait. [ 1287.291916][T15840] XFS (loop2): Quotacheck: Done. [ 1287.405090][T15863] loop1: detected capacity change from 0 to 32768 [ 1287.434358][ T4274] XFS (loop2): Unmounting Filesystem [ 1287.526444][T15863] XFS (loop1): Mounting V5 Filesystem [ 1287.621064][T15863] XFS (loop1): Starting recovery (logdev: internal) [ 1287.704016][T15863] XFS (loop1): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x8 [ 1287.764590][T15863] XFS (loop1): Unmount and run xfs_repair [ 1287.770408][T15863] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1287.829271][T15863] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff R3FC............ [ 1287.841977][T15888] loop3: detected capacity change from 0 to 2048 [ 1287.842185][T15863] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 1287.875247][T15863] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1287.932100][T15863] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 1287.943374][T15863] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1287.952330][T15863] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1288.018795][T15892] netlink: 'syz.4.20385': attribute type 10 has an invalid length. [ 1288.026807][T15863] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1288.066767][T15863] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1288.113890][T15863] XFS (loop1): log mount/recovery failed: error -74 [ 1288.212999][T15863] XFS (loop1): log mount failed [ 1288.558651][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20395'. [ 1288.580234][T15914] netlink: 'syz.4.20395': attribute type 1 has an invalid length. [ 1289.241670][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20410'. [ 1289.278373][T15944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20410'. [ 1289.287694][T15944] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1289.620594][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20418'. [ 1289.766533][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20422'. [ 1290.790150][ T26] kauditd_printk_skb: 133 callbacks suppressed [ 1290.790165][ T26] audit: type=1400 audit(1213.368:1036): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=16013 comm="syz.0.20445" [ 1290.977430][T13188] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1291.123491][ T26] audit: type=1326 audit(1213.677:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.0.20451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1291.163885][T15991] loop1: detected capacity change from 0 to 40427 [ 1291.180917][T15991] F2FS-fs (loop1): invalid crc value [ 1291.194720][T13188] usb 4-1: Using ep0 maxpacket: 16 [ 1291.202507][T13188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1291.203485][ T26] audit: type=1326 audit(1213.677:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.0.20451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1291.216067][T16029] loop4: detected capacity change from 0 to 512 [ 1291.246661][T15991] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1291.256215][T13188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.308577][T13188] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1291.322204][T16029] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1291.333725][ T26] audit: type=1326 audit(1213.677:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.0.20451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1291.347130][T13188] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1291.452999][ T26] audit: type=1326 audit(1213.677:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.0.20451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1291.469182][T13188] usb 4-1: string descriptor 0 read error: -22 [ 1291.483702][T16029] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1291.509192][T15991] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1291.527606][T13188] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1291.554408][T13188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.561346][T15991] F2FS-fs (loop1): Start checkpoint disabled! [ 1291.597688][T16039] loop0: detected capacity change from 0 to 64 [ 1291.691343][T15991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1291.850004][T13188] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 1291.898579][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.041808][T16048] device bridge_slave_1 entered promiscuous mode [ 1292.078247][ T6094] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1292.084348][T16048] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1292.207524][T13188] usb 4-1: USB disconnect, device number 34 [ 1292.259149][T16056] kAFS: unable to lookup cell '@mTsyz0' [ 1292.272941][ T6094] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.304950][ T6094] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.328863][ T6094] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1292.356225][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.364275][ T6094] usb 5-1: Product: syz [ 1292.382562][ T6094] usb 5-1: Manufacturer: syz [ 1292.387231][ T6094] usb 5-1: SerialNumber: syz [ 1292.431847][T16059] delete_channel: no stack [ 1292.482724][T16062] nftables ruleset with unbound chain [ 1292.632021][ T6094] usb 5-1: unit 4 not found! [ 1292.683225][ T6094] usb 5-1: USB disconnect, device number 20 [ 1292.966863][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1293.290346][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20480'. [ 1294.040770][T16119] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 1294.737327][T16151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.769455][T16151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.927183][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20516'. [ 1295.658028][T16197] loop2: detected capacity change from 0 to 256 [ 1295.790991][T16200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20535'. [ 1296.051674][T16215] loop3: detected capacity change from 0 to 256 [ 1296.085236][ T6094] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1296.298960][ T6094] usb 2-1: Using ep0 maxpacket: 32 [ 1296.309016][ T6094] usb 2-1: config 0 has an invalid interface number: 188 but max is 1 [ 1296.328350][ T6094] usb 2-1: config 0 has an invalid interface number: 122 but max is 1 [ 1296.347903][ T6094] usb 2-1: config 0 has no interface number 0 [ 1296.358697][ T6094] usb 2-1: config 0 has no interface number 1 [ 1296.390158][ T6094] usb 2-1: config 0 interface 188 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1296.416367][ T6094] usb 2-1: config 0 interface 188 has no altsetting 0 [ 1296.423451][ T6094] usb 2-1: config 0 interface 122 has no altsetting 0 [ 1296.456224][ T6094] usb 2-1: string descriptor 0 read error: -22 [ 1296.476736][ T6094] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=bb.1a [ 1296.499771][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.533482][ T6094] usb 2-1: config 0 descriptor?? [ 1296.731067][T16239] vivid-007: ================= START STATUS ================= [ 1296.741255][T16239] vivid-007: Generate PTS: true [ 1296.747567][ T8848] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1296.761710][ T6094] usb 2-1: USB disconnect, device number 26 [ 1296.769746][T16239] vivid-007: Generate SCR: true [ 1296.774738][T16239] tpg source WxH: 640x360 (Y'CbCr) [ 1296.811794][T16239] tpg field: 1 [ 1296.815225][T16239] tpg crop: 640x360@0x0 [ 1296.819561][T16239] tpg compose: 640x360@0x0 [ 1296.826538][T16239] tpg colorspace: 8 [ 1296.830776][T16239] tpg transfer function: 0/0 [ 1296.846555][T16239] tpg Y'CbCr encoding: 0/0 [ 1296.851025][T16239] tpg quantization: 0/0 [ 1296.858268][T16239] tpg RGB range: 0/2 [ 1296.862426][T16239] vivid-007: ================== END STATUS ================== [ 1296.954123][ T8848] usb 3-1: Using ep0 maxpacket: 8 [ 1296.964415][T16245] loop3: detected capacity change from 0 to 1024 [ 1296.973988][ T8848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1296.990316][T16245] EXT4-fs: Ignoring removed orlov option [ 1297.009903][ T8848] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1297.021025][ T8848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.021529][T16245] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1297.054818][T16243] xt_CT: No such helper "pptp" [ 1297.056788][ T8848] usb 3-1: Product: syz [ 1297.060865][T16245] EXT4-fs (loop3): invalid journal inode [ 1297.077836][ T8848] usb 3-1: Manufacturer: syz [ 1297.089715][T16245] EXT4-fs (loop3): can't get journal size [ 1297.098378][ T8848] usb 3-1: SerialNumber: syz [ 1297.104626][T16245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1297.123985][ T8848] usb 3-1: config 0 descriptor?? [ 1297.161610][ T8848] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1297.276481][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 1297.349003][ T8848] usb 3-1: USB disconnect, device number 117 [ 1297.434935][T16257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20562'. [ 1297.460750][T16257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20562'. [ 1297.478135][T16257] netlink: 11 bytes leftover after parsing attributes in process `syz.3.20562'. [ 1297.714495][T16273] netlink: 'syz.1.20571': attribute type 21 has an invalid length. [ 1297.912185][ T8848] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1298.104555][ T8848] usb 4-1: Using ep0 maxpacket: 32 [ 1298.125185][ T8848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1298.158402][ T8848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1298.177867][ T8848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1298.192119][ T8848] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1298.202051][ T8848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.210072][ T8848] usb 4-1: Product: syz [ 1298.214777][ T8848] usb 4-1: Manufacturer: syz [ 1298.219398][ T8848] usb 4-1: SerialNumber: syz [ 1298.244763][ T8848] usb 4-1: config 0 descriptor?? [ 1298.268845][ T8848] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input86 [ 1298.283848][ T3624] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.298490][ T3624] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.355211][ T5736] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.377705][ T6094] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1298.425628][ T3624] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.445202][ T3624] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.490247][ T3624] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.513622][T16267] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.532440][ T3624] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.552180][ T6092] usb 4-1: USB disconnect, device number 35 [ 1298.558287][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1298.609192][ T6094] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.628198][ T6094] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1298.665602][ T6094] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1298.681514][ T6094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.708521][ T6094] usb 2-1: config 0 descriptor?? [ 1298.970401][ T6094] usb 2-1: USB disconnect, device number 27 [ 1298.974448][T16313] loop0: detected capacity change from 0 to 64 [ 1299.043456][T16313] syz.0.20590: attempt to access beyond end of device [ 1299.043456][T16313] loop0: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1299.077290][T16313] Buffer I/O error on dev loop0, logical block 22533, async page read [ 1299.085980][T16313] syz.0.20590: attempt to access beyond end of device [ 1299.085980][T16313] loop0: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1299.119944][T16313] Buffer I/O error on dev loop0, logical block 22533, async page read [ 1299.225020][T16323] netlink: 'syz.2.20594': attribute type 16 has an invalid length. [ 1299.239765][T16323] netlink: 'syz.2.20594': attribute type 17 has an invalid length. [ 1299.250310][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.677764][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20605'. [ 1300.101532][T16364] netlink: 56 bytes leftover after parsing attributes in process `syz.4.20613'. [ 1300.216664][T16369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20614'. [ 1300.606667][T16391] openvswitch: netlink: EtherType 0 is less than min 600 [ 1300.936272][T16395] loop1: detected capacity change from 0 to 8192 [ 1300.960244][T16395] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1301.029777][T16395] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1301.052972][T16395] ntfs3: loop1: Failed to load $Extend. [ 1301.593523][T13188] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1301.795678][T13188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.826073][T13188] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.869939][T13188] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.890296][T13188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.910168][T13188] usb 2-1: Product: syz [ 1301.914938][T13188] usb 2-1: Manufacturer: syz [ 1301.935095][T16429] block device autoloading is deprecated and will be removed. [ 1301.945184][T13188] usb 2-1: SerialNumber: syz [ 1301.951409][T16429] syz.3.20643: attempt to access beyond end of device [ 1301.951409][T16429] ram201: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=8192 [ 1302.188631][T13188] usb 2-1: 0:2 : does not exist [ 1302.193610][T13188] usb 2-1: unit 9 not found! [ 1302.216236][T13188] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1302.245414][T16445] netlink: 23 bytes leftover after parsing attributes in process `syz.2.20651'. [ 1302.260578][T13188] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1302.321476][T13188] usb 2-1: USB disconnect, device number 28 [ 1302.793428][T16470] netlink: 'syz.3.20664': attribute type 1 has an invalid length. [ 1302.808506][T16470] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.20664'. [ 1303.046891][T13188] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1303.244291][T13188] usb 3-1: Using ep0 maxpacket: 32 [ 1303.251243][T13188] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.286968][T13188] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.315028][T13188] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1303.342684][T13188] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1303.372437][T13188] usb 3-1: Product: syz [ 1303.376658][T13188] usb 3-1: Manufacturer: syz [ 1303.407521][T13188] hub 3-1:4.0: USB hub found [ 1303.568181][T16476] loop3: detected capacity change from 0 to 32768 [ 1303.587025][T16476] /dev/loop3: Can't open blockdev [ 1303.624725][T13188] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 1303.662401][T16505] x_tables: duplicate entry at hook 1 [ 1303.819809][T16513] openvswitch: netlink: Message has 1 unknown bytes. [ 1303.958533][T16517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.979742][ T6092] usb 3-1: USB disconnect, device number 118 [ 1303.997181][T16517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.027639][T16517] batman_adv: batadv0: Removing interface: macvlan1 [ 1304.088638][T11690] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1304.321672][T11690] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1304.341029][T11690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.349482][T11690] usb 2-1: Product: syz [ 1304.353681][T11690] usb 2-1: Manufacturer: syz [ 1304.358672][T11690] usb 2-1: SerialNumber: syz [ 1304.365009][T11690] usb 2-1: config 0 descriptor?? [ 1304.403805][T11690] hub 2-1:0.0: bad descriptor, ignoring hub [ 1304.429412][ T26] audit: type=1326 audit(1226.124:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16537 comm="syz.3.20696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1304.443854][T16535] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1304.453181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.461199][T11690] hub: probe of 2-1:0.0 failed with error -5 [ 1304.494978][T11690] f81232 2-1:0.0: f81534a converter detected [ 1304.511012][ T26] audit: type=1326 audit(1226.124:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16537 comm="syz.3.20696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1304.619481][T11690] usb 2-1: f81534a converter now attached to ttyUSB0 [ 1304.638757][ T26] audit: type=1326 audit(1226.180:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16537 comm="syz.3.20696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1304.716100][T16547] usb usb1: usbfs: process 16547 (syz.2.20702) did not claim interface 0 before use [ 1304.745450][ T26] audit: type=1326 audit(1226.180:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16537 comm="syz.3.20696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1304.782687][ T26] audit: type=1326 audit(1226.180:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16537 comm="syz.3.20696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f899e019 code=0x7ffc0000 [ 1304.989809][T11690] usb 2-1: USB disconnect, device number 29 [ 1305.003933][T11690] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1305.030059][T11690] f81232 2-1:0.0: device disconnected [ 1305.285183][T16575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20714'. [ 1305.399247][T16580] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 1305.624997][T16592] loop4: detected capacity change from 0 to 128 [ 1305.668258][T16592] FAT-fs (loop4): FAT read failed (blocknr 2080) [ 1305.925491][ T26] audit: type=1326 audit(1227.528:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.20732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1305.973009][ T26] audit: type=1326 audit(1227.537:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.20732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1306.027049][ T26] audit: type=1326 audit(1227.537:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.20732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1306.094644][ T26] audit: type=1326 audit(1227.537:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.20732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1306.129335][T11690] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1306.164610][ T26] audit: type=1326 audit(1227.537:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.20732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1306.351199][T16628] netlink: 'syz.2.20741': attribute type 32 has an invalid length. [ 1306.364646][T11690] usb 4-1: Using ep0 maxpacket: 32 [ 1306.371912][T11690] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1306.417757][T11690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.434137][T11690] usb 4-1: config 0 has no interface number 0 [ 1306.464744][T11690] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1306.466999][T16630] device bridge_slave_1 left promiscuous mode [ 1306.495138][T11690] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1306.519936][T11690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.545121][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.560983][T11690] usb 4-1: Product: syz [ 1306.567505][T11690] usb 4-1: Manufacturer: syz [ 1306.573569][T16630] netlink: 'syz.0.20742': attribute type 3 has an invalid length. [ 1306.583006][T11690] usb 4-1: SerialNumber: syz [ 1306.591921][T11690] usb 4-1: config 0 descriptor?? [ 1306.596248][T16630] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1306.623848][T11690] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1306.663897][T11690] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 1306.838466][T11690] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1306.856257][T11690] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 1306.961074][T16648] device sit0 entered promiscuous mode [ 1306.977706][T16648] netlink: 'syz.0.20760': attribute type 1 has an invalid length. [ 1306.999661][T16648] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20760'. [ 1307.015469][T16651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.036042][T16651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.055891][T13188] usb 4-1: USB disconnect, device number 36 [ 1307.623991][T16678] netlink: 'syz.1.20764': attribute type 16 has an invalid length. [ 1307.692026][T16678] netlink: 'syz.1.20764': attribute type 17 has an invalid length. [ 1307.701516][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1307.715084][T16678] infiniband syz1: set active [ 1307.720131][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1307.734160][T16678] infiniband syz1: set active [ 1307.739595][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1307.794628][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1307.845682][T16678] bridge0: port 3(dummy0) entered blocking state [ 1307.852220][T16678] bridge0: port 3(dummy0) entered forwarding state [ 1307.893185][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): gretap2: link becomes ready [ 1307.914009][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): gretap2: link becomes ready [ 1307.946382][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1307.980879][T16678] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1308.001754][ T8848] lo speed is unknown, defaulting to 1000 [ 1308.002322][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1308.050904][ T8852] lo speed is unknown, defaulting to 1000 [ 1308.275178][T16709] netlink: 248 bytes leftover after parsing attributes in process `syz.4.20779'. [ 1308.467767][T16720] loop3: detected capacity change from 0 to 256 [ 1308.809650][T16728] loop3: detected capacity change from 0 to 4096 [ 1308.829580][T16728] /dev/loop3: Can't open blockdev [ 1309.010696][T16741] netlink: 'syz.3.20791': attribute type 16 has an invalid length. [ 1309.035898][T16741] netlink: 'syz.3.20791': attribute type 17 has an invalid length. [ 1309.066458][T16741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1309.105882][T16741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1309.137099][T16741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1309.406664][T16757] loop1: detected capacity change from 0 to 128 [ 1309.887071][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 1309.887086][ T26] audit: type=1326 audit(1231.234:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1309.946245][ T26] audit: type=1326 audit(1231.271:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1309.991706][ T26] audit: type=1326 audit(1231.271:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1310.069822][ T26] audit: type=1326 audit(1231.271:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1310.080620][T16791] netlink: 'syz.4.20816': attribute type 16 has an invalid length. [ 1310.123495][T16791] netlink: 'syz.4.20816': attribute type 17 has an invalid length. [ 1310.146955][ T26] audit: type=1326 audit(1231.271:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1310.233073][ T26] audit: type=1326 audit(1231.271:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1310.252456][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20820'. [ 1310.266450][ T26] audit: type=1326 audit(1231.271:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1310.294306][ T26] audit: type=1326 audit(1231.271:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.20813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1310.438320][T16801] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1310.463133][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20825'. [ 1310.597532][T16811] loop4: detected capacity change from 0 to 256 [ 1310.640465][T16811] FAT-fs (loop4): Directory bread(block 64) failed [ 1310.658054][T16811] FAT-fs (loop4): Directory bread(block 65) failed [ 1310.675730][T16811] FAT-fs (loop4): Directory bread(block 66) failed [ 1310.706659][T16811] FAT-fs (loop4): Directory bread(block 67) failed [ 1310.732735][T16811] FAT-fs (loop4): Directory bread(block 68) failed [ 1310.739651][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20831'. [ 1310.743834][T16811] FAT-fs (loop4): Directory bread(block 69) failed [ 1310.761369][T16811] FAT-fs (loop4): Directory bread(block 70) failed [ 1310.771810][T16811] FAT-fs (loop4): Directory bread(block 71) failed [ 1310.789705][T16811] FAT-fs (loop4): Directory bread(block 72) failed [ 1310.796290][T16811] FAT-fs (loop4): Directory bread(block 73) failed [ 1310.965704][T16825] netlink: 'syz.4.20836': attribute type 1 has an invalid length. [ 1311.055378][ T8852] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1311.103011][T16831] xt_bpf: check failed: parse error [ 1311.158336][T16833] netlink: 392 bytes leftover after parsing attributes in process `syz.4.20840'. [ 1311.268945][ T8852] usb 3-1: Using ep0 maxpacket: 32 [ 1311.276241][ T8852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1311.324502][ T8852] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1311.361223][ T8852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.393463][ T8852] usb 3-1: Product: syz [ 1311.399315][ T8852] usb 3-1: Manufacturer: syz [ 1311.403942][ T8852] usb 3-1: SerialNumber: syz [ 1311.418171][ T8852] usb 3-1: config 0 descriptor?? [ 1311.435354][T16817] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1311.457626][ T8852] hub 3-1:0.0: bad descriptor, ignoring hub [ 1311.464792][ T8852] hub: probe of 3-1:0.0 failed with error -5 [ 1311.475710][ T8852] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input87 [ 1311.537812][T16849] xt_HMARK: spi-set and port-set can't be combined [ 1311.777989][ T6094] usb 3-1: USB disconnect, device number 119 [ 1311.777989][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1311.804493][T16859] x_tables: unsorted underflow at hook 4 [ 1312.184708][T16878] kAFS: unable to lookup cell ' [ 1312.184708][T16878] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 1312.184708][T16878] ' [ 1312.547692][T16898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.582126][T16898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.590144][T16901] loop4: detected capacity change from 0 to 128 [ 1312.597889][T16899] xt_TCPMSS: Only works on TCP SYN packets [ 1312.897087][T16898] device batadv0 left promiscuous mode [ 1312.902909][T16898] bridge0: port 3(batadv0) entered disabled state [ 1312.956922][T16914] CIFS: Attempting to mount \\127.0.0.1\share [ 1312.980091][T16914] CIFS: VFS: No username specified [ 1313.675055][T16957] loop3: detected capacity change from 0 to 128 [ 1314.757863][T17012] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1314.917347][T17017] loop4: detected capacity change from 0 to 2048 [ 1314.948269][T17017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1315.251108][T16998] loop0: detected capacity change from 0 to 32768 [ 1315.305265][T16998] JBD2: Ignoring recovery information on journal [ 1315.345548][T16998] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1315.495372][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 1315.545982][T17046] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1315.749288][ T6092] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1315.879633][T17060] loop0: detected capacity change from 0 to 512 [ 1315.926911][T17065] loop1: detected capacity change from 0 to 512 [ 1315.965811][T17060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1315.975070][ T6092] usb 4-1: Using ep0 maxpacket: 32 [ 1315.988361][T17065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1315.989776][ T6092] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1316.004041][T17065] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.20952: unexpected EA_INODE flag [ 1316.127396][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1316.135554][ T6092] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1316.173639][ T6092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.187532][ T6092] usb 4-1: Product: syz [ 1316.191780][ T6092] usb 4-1: Manufacturer: syz [ 1316.208231][ T6092] usb 4-1: SerialNumber: syz [ 1316.240094][ T6092] usb 4-1: config 0 descriptor?? [ 1316.262730][T17042] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1316.287541][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 1316.294590][ T6092] hub 4-1:0.0: bad descriptor, ignoring hub [ 1316.300535][ T6092] hub: probe of 4-1:0.0 failed with error -5 [ 1316.335891][ T6092] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input88 [ 1316.382045][T17078] netlink: 'syz.1.20955': attribute type 29 has an invalid length. [ 1316.419718][T17078] netlink: 'syz.1.20955': attribute type 29 has an invalid length. [ 1316.653941][ T8852] usb 4-1: USB disconnect, device number 37 [ 1316.653974][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1316.715302][T17088] netlink: 'syz.2.20959': attribute type 4 has an invalid length. [ 1316.867127][T17095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1316.982252][T17099] SET target dimension over the limit! [ 1317.025277][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20967'. [ 1317.232759][T17111] UBIFS error (pid: 17111): cannot open "usb0", error -22 [ 1317.245250][T17107] loop2: detected capacity change from 0 to 1024 [ 1317.349489][T17114] x_tables: unsorted entry at hook 3 [ 1317.404068][T17107] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1317.520677][T17107] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1317.617925][ T7439] hfsplus: b-tree write err: -5, ino 25 [ 1317.623952][ T7439] hfsplus: b-tree write err: -5, ino 4 [ 1317.662426][ T7439] hfsplus: b-tree write err: -5, ino 2 [ 1317.821534][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1318.100518][T17148] device ipip1 entered promiscuous mode [ 1318.245446][T17155] CIFS: Attempting to mount \\127.0.0.1\share [ 1318.284304][T17155] CIFS: VFS: No username specified [ 1318.375383][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20997'. [ 1318.732718][T17180] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 1319.012281][T17188] loop0: detected capacity change from 0 to 2048 [ 1319.068355][T17188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1319.193109][T17194] loop3: detected capacity change from 0 to 1764 [ 1319.490961][T17207] netlink: 'syz.0.21020': attribute type 2 has an invalid length. [ 1319.527271][T17207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.21020'. [ 1320.551896][T17253] loop0: detected capacity change from 0 to 64 [ 1321.500059][T17283] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.21055'. [ 1321.530025][T17263] loop1: detected capacity change from 0 to 32768 [ 1321.549714][T17263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.21045 (17263) [ 1321.587623][T17263] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1321.626149][T17263] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1321.651214][T17263] BTRFS info (device loop1): using free space tree [ 1321.804754][T17263] BTRFS info (device loop1): enabling ssd optimizations [ 1321.985740][ T4277] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1322.993896][T17351] xt_HMARK: spi-set and port-set can't be combined [ 1323.323363][T17363] sd 0:0:1:0: device reset [ 1323.778283][T17386] loop0: detected capacity change from 0 to 1024 [ 1324.418232][T17414] loop2: detected capacity change from 0 to 1024 [ 1324.521461][T17414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1324.537509][T17422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21114'. [ 1324.581108][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1324.626853][T17425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21117'. [ 1324.679389][T17425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21117'. [ 1324.922064][T17437] loop1: detected capacity change from 0 to 1024 [ 1325.066844][T17437] hfsplus: xattr searching failed [ 1325.177722][T17453] netlink: 'syz.3.21130': attribute type 9 has an invalid length. [ 1325.210130][T17453] netlink: 'syz.3.21130': attribute type 7 has an invalid length. [ 1325.232325][T17453] netlink: 'syz.3.21130': attribute type 8 has an invalid length. [ 1325.391779][T17463] netlink: 'syz.2.21137': attribute type 30 has an invalid length. [ 1325.500469][T17471] loop3: detected capacity change from 0 to 128 [ 1325.509987][T17470] IPv6: sit2: Disabled Multicast RS [ 1325.513676][T17471] /dev/loop3: Can't open blockdev [ 1325.908213][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21147'. [ 1325.917364][ T26] audit: type=1326 audit(1246.226:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1325.958004][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21147'. [ 1325.971005][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21147'. [ 1325.980237][ T26] audit: type=1326 audit(1246.226:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.009038][ T26] audit: type=1326 audit(1246.273:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.090557][ T26] audit: type=1326 audit(1246.273:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.161027][T17499] CIFS mount error: No usable UNC path provided in device string! [ 1326.161027][T17499] [ 1326.178268][ T26] audit: type=1326 audit(1246.273:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.228501][T17499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1326.269800][ T26] audit: type=1326 audit(1246.273:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.366089][ T26] audit: type=1326 audit(1246.273:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.430320][ T26] audit: type=1326 audit(1246.273:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.467577][ T26] audit: type=1326 audit(1246.273:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.4.21148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1326.503213][T17515] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1326.693321][T17518] xt_CT: No such helper "snmp_trap" [ 1326.982677][T17542] netlink: 'syz.2.21172': attribute type 1 has an invalid length. [ 1327.005104][T17542] netlink: 216 bytes leftover after parsing attributes in process `syz.2.21172'. [ 1327.025735][T17542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21172'. [ 1327.439416][T17564] device veth1_macvtap entered promiscuous mode [ 1327.445863][T17564] device macsec0 left promiscuous mode [ 1327.455561][T17564] device veth1_macvtap left promiscuous mode [ 1327.567036][T17570] JFS: discard option not supported on device [ 1327.606481][T17570] Mount JFS Failure: -22 [ 1327.616485][T17570] jfs_mount failed w/return code = -22 [ 1327.770263][T17577] overlayfs: conflicting options: userxattr,metacopy=on [ 1328.336775][T17558] syz.4.21181 (17558): drop_caches: 3 [ 1329.518798][T17653] usb usb7: usbfs: process 17653 (syz.2.21228) did not claim interface 0 before use [ 1329.812577][T17667] loop3: detected capacity change from 0 to 16 [ 1329.830903][T17667] /dev/loop3: Can't open blockdev [ 1330.004714][T17675] loop4: detected capacity change from 0 to 64 [ 1330.038354][T17675] Bad inode number on dev loop4: 150994946 is out of range [ 1330.811645][T17720] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1330.881835][T17726] overlayfs: conflicting options: userxattr,redirect_dir=off [ 1331.565738][T17760] netlink: 108 bytes leftover after parsing attributes in process `syz.1.21281'. [ 1331.597414][ T26] audit: type=1326 audit(1251.551:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.4.21283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1331.640344][ T26] audit: type=1326 audit(1251.551:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.4.21283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1331.678122][ T1046] block nbd2: Attempted send on invalid socket [ 1331.684389][ T1046] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.713388][ T26] audit: type=1326 audit(1251.551:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.4.21283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1331.842499][ T26] audit: type=1326 audit(1251.551:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.4.21283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1331.903616][ T26] audit: type=1326 audit(1251.570:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.4.21283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1331.941851][ T26] audit: type=1326 audit(1251.570:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.4.21283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1331.968473][T17778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21290'. [ 1332.348932][T17800] loop0: detected capacity change from 0 to 164 [ 1332.426413][ T8848] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1332.598443][T17810] loop0: detected capacity change from 0 to 512 [ 1332.635685][T17810] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1332.647462][ T8848] usb 2-1: Using ep0 maxpacket: 16 [ 1332.658720][ T8848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1332.683314][T17814] loop4: detected capacity change from 0 to 256 [ 1332.693666][T17810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1332.719145][ T8848] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 1332.759382][ T8848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.784174][ T8848] usb 2-1: Product: syz [ 1332.788408][ T8848] usb 2-1: Manufacturer: syz [ 1332.789464][T17810] EXT4-fs (loop0): 1 truncate cleaned up [ 1332.798695][T17810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1332.864136][ T8848] usb 2-1: SerialNumber: syz [ 1332.965441][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 1332.971326][T17822] loop4: detected capacity change from 0 to 256 [ 1332.990507][T17822] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1333.157434][ T8848] usb 2-1: USB disconnect, device number 30 [ 1333.315908][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21316'. [ 1333.505987][T17838] loop2: detected capacity change from 0 to 2048 [ 1333.550703][T17838] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1333.624965][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1333.748647][T17854] loop2: detected capacity change from 0 to 256 [ 1334.018487][T17868] loop4: detected capacity change from 0 to 2048 [ 1334.045240][T17868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1334.049451][T17870] usb usb8: usbfs: process 17870 (syz.1.21334) did not claim interface 0 before use [ 1334.096453][T17868] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1334.103882][ T8848] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1334.135760][T17868] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 1334.328273][ T8848] usb 4-1: Using ep0 maxpacket: 16 [ 1334.335543][ T8848] usb 4-1: config 0 has no interfaces? [ 1334.357878][ T8848] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1334.388453][ T8848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.403047][ T8848] usb 4-1: Product: syz [ 1334.403068][ T8848] usb 4-1: Manufacturer: syz [ 1334.403084][ T8848] usb 4-1: SerialNumber: syz [ 1334.411115][ T8848] r8152-cfgselector 4-1: config 0 descriptor?? [ 1334.514936][ T26] audit: type=1326 audit(1254.284:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.0.21343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1334.610297][ T26] audit: type=1326 audit(1254.284:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.0.21343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1334.629992][ T8848] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1334.644906][T17893] loop0: detected capacity change from 0 to 512 [ 1334.669730][T17893] EXT4-fs: Ignoring removed oldalloc option [ 1334.703115][T17893] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1334.737124][ T26] audit: type=1326 audit(1254.284:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.0.21343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1334.776569][T17893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1334.813457][T17893] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1334.823161][T17893] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.21345: bad orphan inode 267 [ 1334.862079][ T8848] r8152-cfgselector 4-1: USB disconnect, device number 38 [ 1334.862988][T17893] EXT4-fs (loop0): Remounting filesystem read-only [ 1334.891558][T17878] [ 1334.891558][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1334.891558][T17878] [ 1334.934195][T17893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1334.970808][T17878] [ 1334.970808][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1334.970808][T17878] [ 1335.021993][T17904] netlink: 'syz.4.21350': attribute type 33 has an invalid length. [ 1335.033480][T17878] [ 1335.033480][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.033480][T17878] [ 1335.056101][T17904] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21350'. [ 1335.075498][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 1335.086835][T17878] [ 1335.086835][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.086835][T17878] [ 1335.142993][T17878] [ 1335.142993][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.142993][T17878] [ 1335.183312][T17878] [ 1335.183312][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.183312][T17878] [ 1335.217840][T17878] [ 1335.217840][T17878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.217840][T17878] [ 1335.260081][ T107] [ 1335.260081][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.260081][ T107] [ 1335.369446][ T4277] [ 1335.369446][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.369446][ T4277] [ 1335.399881][ T4277] [ 1335.399881][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1335.399881][ T4277] [ 1335.931171][ T6092] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1336.048394][ T8852] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1336.093956][T17954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21375'. [ 1336.167081][ T6092] usb 3-1: not running at top speed; connect to a high speed hub [ 1336.179097][T17958] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.200188][ T6092] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1336.232050][ T6092] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.258421][ T8852] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1336.261578][ T6092] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1336.277288][ T6092] usb 3-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40 [ 1336.278526][ T8852] usb 5-1: not running at top speed; connect to a high speed hub [ 1336.287833][ T6092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.321877][ T6092] usb 3-1: Product: syz [ 1336.326394][ T6092] usb 3-1: Manufacturer: syz [ 1336.331461][ T6092] usb 3-1: SerialNumber: syz [ 1336.337206][ T8852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1336.362303][T17964] IPv6: sit1: Disabled Multicast RS [ 1336.368677][T17929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1336.377974][ T8852] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1336.398188][ T8852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.412680][ T8852] usb 5-1: Product: syz [ 1336.419363][ T8852] usb 5-1: Manufacturer: syz [ 1336.438933][ T8852] usb 5-1: SerialNumber: syz [ 1336.462272][T17936] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1336.606905][ T6092] usbhid 3-1:1.0: can't add hid device: -71 [ 1336.623834][ T6092] usbhid: probe of 3-1:1.0 failed with error -71 [ 1336.665839][ T6092] usb 3-1: USB disconnect, device number 120 [ 1336.708895][ T8852] usb 5-1: MIDIStreaming interface descriptor not found [ 1336.779621][ T8852] usb 5-1: USB disconnect, device number 21 [ 1336.966390][T17987] netlink: 'syz.3.21390': attribute type 12 has an invalid length. [ 1336.982458][T17987] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 1337.058086][ T4402] udevd[4402]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.103918][T17994] netlink: 'syz.3.21394': attribute type 10 has an invalid length. [ 1337.131740][T17994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21394'. [ 1337.162105][T17994] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1337.189082][T17994] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.251679][T17994] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1337.410059][T18003] set_capacity_and_notify: 1 callbacks suppressed [ 1337.410074][T18003] loop1: detected capacity change from 0 to 4096 [ 1337.434305][T18009] loop2: detected capacity change from 0 to 256 [ 1337.482018][T18003] EXT4-fs: inline encryption not supported [ 1337.494237][T18009] FAT-fs (loop2): Directory bread(block 64) failed [ 1337.506873][T18003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1337.534766][T18009] FAT-fs (loop2): Directory bread(block 65) failed [ 1337.551755][T18009] FAT-fs (loop2): Directory bread(block 66) failed [ 1337.565003][T18009] FAT-fs (loop2): Directory bread(block 67) failed [ 1337.565376][T18003] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ce018, mo2=0002] [ 1337.572908][T18009] FAT-fs (loop2): Directory bread(block 68) failed [ 1337.572941][T18009] FAT-fs (loop2): Directory bread(block 69) failed [ 1337.573007][T18009] FAT-fs (loop2): Directory bread(block 70) failed [ 1337.573031][T18009] FAT-fs (loop2): Directory bread(block 71) failed [ 1337.573113][T18009] FAT-fs (loop2): Directory bread(block 72) failed [ 1337.573138][T18009] FAT-fs (loop2): Directory bread(block 73) failed [ 1337.799265][T18003] System zones: 0-5 [ 1337.816950][T18003] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1337.833223][ T6093] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1337.867229][T18023] loop0: detected capacity change from 0 to 64 [ 1337.903738][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1338.049740][ T6092] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1338.060220][ T6093] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1338.076136][ T6093] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1338.087555][ T6093] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.108931][ T6093] usb 5-1: config 220 has no interface number 2 [ 1338.128685][ T6093] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1338.142445][ T6093] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1338.150898][ T6093] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1338.175502][ T6093] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1338.200443][ T6093] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1338.210155][ T6093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.221406][ T6093] usb 5-1: Product: syz [ 1338.225609][ T6093] usb 5-1: Manufacturer: syz [ 1338.230349][ T6093] usb 5-1: SerialNumber: syz [ 1338.288516][ T6092] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1338.299815][ T6092] usb 3-1: not running at top speed; connect to a high speed hub [ 1338.313174][ T6092] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.324086][ T6092] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1338.366653][ T6092] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1338.385064][ T6092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.420731][ T6092] usb 3-1: Product: syz [ 1338.425015][ T6092] usb 3-1: Manufacturer: syz [ 1338.429932][ T6092] usb 3-1: SerialNumber: syz [ 1338.482334][ T6093] usb 5-1: selecting invalid altsetting 0 [ 1338.495712][ T6093] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1338.502204][ T6093] usb 5-1: No valid video chain found. [ 1338.537333][ T6093] usb 5-1: selecting invalid altsetting 0 [ 1338.543460][ T6093] usbtest: probe of 5-1:220.1 failed with error -22 [ 1338.552911][ T6093] usb 5-1: USB disconnect, device number 22 [ 1338.613237][ T8852] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1338.667844][ T6092] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1338.679501][ T6092] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 1338.705767][ T6092] usb 3-1: USB disconnect, device number 121 [ 1338.816056][ T8852] usb 2-1: Using ep0 maxpacket: 32 [ 1338.828375][ T8852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1338.846019][ T8852] usb 2-1: config index 0 descriptor too short (expected 63924, got 2228) [ 1338.850904][T18056] loop0: detected capacity change from 0 to 164 [ 1338.855680][ T8852] usb 2-1: config 156 has too many interfaces: 218, using maximum allowed: 32 [ 1338.875998][ T8852] usb 2-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.898429][ T8852] usb 2-1: config 156 has 1 interface, different from the descriptor's value: 218 [ 1338.929634][ T8852] usb 2-1: config 156 has no interface number 0 [ 1338.936541][T18056] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1338.965660][ T8852] usb 2-1: config 156 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1338.978271][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.001206][ T8852] usb 2-1: config 156 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1339.020635][ T8852] usb 2-1: config 156 interface 127 has no altsetting 0 [ 1339.035522][ T8852] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1339.051372][ T8852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.070774][ T8852] usb 2-1: Product: syz [ 1339.083072][ T8852] usb 2-1: Manufacturer: syz [ 1339.087758][ T8852] usb 2-1: SerialNumber: syz [ 1339.095928][T18062] loop0: detected capacity change from 0 to 64 [ 1339.128317][T18062] syz.0.21427: attempt to access beyond end of device [ 1339.128317][T18062] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1339.171974][T18062] Buffer I/O error on dev loop0, logical block 512, async page read [ 1339.184963][T18062] syz.0.21427: attempt to access beyond end of device [ 1339.184963][T18062] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1339.211237][T18062] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1339.366983][ T8852] usb 2-1: USB disconnect, device number 31 [ 1339.619365][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:156.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.820466][ T6092] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1339.883343][T18099] loop4: detected capacity change from 0 to 512 [ 1339.919901][T18099] EXT4-fs (loop4): 1 truncate cleaned up [ 1339.925647][T18099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1340.044759][ T6092] usb 3-1: Using ep0 maxpacket: 16 [ 1340.051691][ T6092] usb 3-1: config 3 has an invalid interface number: 231 but max is 0 [ 1340.060954][ T6092] usb 3-1: config 3 has no interface number 0 [ 1340.081918][ T6092] usb 3-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1340.093699][ T6092] usb 3-1: config 3 interface 231 has no altsetting 0 [ 1340.095819][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 1340.103028][ T6092] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 1340.115826][ T6092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.124372][ T6092] usb 3-1: Product: syz [ 1340.136060][ T6092] usb 3-1: Manufacturer: syz [ 1340.140767][ T6092] usb 3-1: SerialNumber: syz [ 1340.303619][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21451'. [ 1340.415025][ T6092] kvaser_usb 3-1:3.231: Cannot get usb endpoint(s) [ 1340.432973][ T6092] usb 3-1: USB disconnect, device number 122 [ 1340.552075][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21458'. [ 1340.579183][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21458'. [ 1340.643313][T13188] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1340.846216][T13188] usb 2-1: Using ep0 maxpacket: 16 [ 1340.853310][T13188] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 1340.888968][T13188] usb 2-1: config 0 has no interface number 0 [ 1340.895122][T13188] usb 2-1: config 0 interface 66 has no altsetting 0 [ 1340.917983][T13188] usb 2-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 1340.955999][T13188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.977826][T13188] usb 2-1: Product: syz [ 1340.982109][T13188] usb 2-1: Manufacturer: syz [ 1340.987205][T13188] usb 2-1: SerialNumber: syz [ 1341.021034][T13188] usb 2-1: config 0 descriptor?? [ 1341.132193][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21472'. [ 1341.255648][T13188] usb 2-1: selecting invalid altsetting 3 [ 1341.271349][T13188] comedi comedi5: could not set alternate setting 3 in high speed [ 1341.301332][T13188] usbduxsigma 2-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 1341.340594][T13188] usbduxsigma: probe of 2-1:0.66 failed with error -22 [ 1341.372825][T13188] usb 2-1: USB disconnect, device number 32 [ 1341.455396][T18169] device wg1 entered promiscuous mode [ 1342.022613][T18188] loop0: detected capacity change from 0 to 4096 [ 1342.227851][T18176] loop2: detected capacity change from 0 to 32768 [ 1342.261533][T18176] [ 1342.261533][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.261533][T18176] [ 1342.318923][T18176] [ 1342.318923][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.318923][T18176] [ 1342.326151][T18201] loop1: detected capacity change from 0 to 8192 [ 1342.352534][T18176] [ 1342.352534][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.352534][T18176] [ 1342.374311][T13188] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1342.404065][T18201] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1342.407149][T18176] [ 1342.407149][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.407149][T18176] [ 1342.461860][T18201] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1342.495589][T18176] [ 1342.495589][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.495589][T18176] [ 1342.514609][T18201] FAT-fs (loop1): Filesystem has been set read-only [ 1342.524420][T18176] [ 1342.524420][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.524420][T18176] [ 1342.557452][T18176] [ 1342.557452][T18176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.557452][T18176] [ 1342.579546][T13188] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1342.605805][ T107] [ 1342.605805][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.605805][ T107] [ 1342.623900][T13188] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1342.679432][T13188] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 1342.699489][T13188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.708107][ T4274] [ 1342.708107][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.708107][ T4274] [ 1342.721125][T13188] usb 4-1: Product: syz [ 1342.725322][T13188] usb 4-1: Manufacturer: syz [ 1342.746589][T13188] usb 4-1: SerialNumber: syz [ 1342.766987][ T4274] [ 1342.766987][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.766987][ T4274] [ 1342.786497][T18199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1343.234130][T13188] usbhid 4-1:1.0: can't add hid device: -71 [ 1343.252423][T13188] usbhid: probe of 4-1:1.0 failed with error -71 [ 1343.276525][T13188] usb 4-1: USB disconnect, device number 39 [ 1343.458891][T18219] loop0: detected capacity change from 0 to 32768 [ 1343.494191][T18219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.21502 (18219) [ 1343.560403][T18219] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1343.588070][T18219] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1343.613995][T18219] BTRFS info (device loop0): using free space tree [ 1343.934395][T18219] BTRFS info (device loop0): enabling ssd optimizations [ 1344.040144][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1344.076555][T18239] loop4: detected capacity change from 0 to 32768 [ 1344.171986][T18239] [ 1344.171986][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.171986][T18239] [ 1344.202469][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21522'. [ 1344.253221][T18239] [ 1344.253221][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.253221][T18239] [ 1344.301111][T18239] [ 1344.301111][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.301111][T18239] [ 1344.361691][T18239] [ 1344.361691][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.361691][T18239] [ 1344.415066][T18239] [ 1344.415066][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.415066][T18239] [ 1344.477031][T18239] [ 1344.477031][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.477031][T18239] [ 1344.532209][T18239] [ 1344.532209][T18239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.532209][T18239] [ 1344.606141][ T107] [ 1344.606141][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.606141][ T107] [ 1344.734805][ T4272] [ 1344.734805][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.734805][ T4272] [ 1344.771203][ T4272] [ 1344.771203][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.771203][ T4272] [ 1344.892949][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21533'. [ 1344.986576][T18303] loop3: detected capacity change from 0 to 4096 [ 1345.005023][T18303] /dev/loop3: Can't open blockdev [ 1345.059268][ T4359] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1345.173985][ T4326] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1345.379020][ T4326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1345.398781][ T4326] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1345.401501][T18322] loop3: detected capacity change from 0 to 256 [ 1345.407022][ T4326] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.407046][ T4326] usb 2-1: config 63 has no interface number 0 [ 1345.407077][ T4326] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1345.455268][ T4359] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1345.475161][ T4326] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1345.494281][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.502336][ T4326] usb 2-1: Product: syz [ 1345.520702][ T4326] usb 2-1: Manufacturer: syz [ 1345.525688][ T4326] usb 2-1: SerialNumber: syz [ 1345.548033][ T6092] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1345.623655][T18314] loop2: detected capacity change from 0 to 32768 [ 1345.671362][T18314] (syz.2.21538,18314,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1345.697931][T18314] (syz.2.21538,18314,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1345.747381][T18314] JBD2: Ignoring recovery information on journal [ 1345.766580][ T6092] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1345.786080][ T4326] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 1345.790328][ T6092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.792878][ T4326] usb 2-1: No valid video chain found. [ 1345.814439][ T4326] usb 2-1: USB disconnect, device number 33 [ 1345.836484][ T6092] usb 5-1: config 0 descriptor?? [ 1345.843604][ T6092] cp210x 5-1:0.0: cp210x converter detected [ 1345.855444][T18314] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1346.074475][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 1346.174804][T18330] loop3: detected capacity change from 0 to 32768 [ 1346.273624][ T6092] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1346.287291][ T6092] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1346.310414][ T6092] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1346.323529][ T6092] usb 5-1: USB disconnect, device number 23 [ 1346.345422][ T6092] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1346.379241][ T6092] cp210x 5-1:0.0: device disconnected [ 1346.668841][T18348] loop2: detected capacity change from 0 to 1024 [ 1346.723507][T18348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1346.726243][T18351] loop1: detected capacity change from 0 to 256 [ 1346.752526][T18348] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.2.21554: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1346.780508][T18348] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 1346.790417][T18348] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.21554: Deleting old file: nlink 1, error=-117 [ 1346.845530][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1346.900739][T18351] FAT-fs (loop1): Directory bread(block 64) failed [ 1346.919295][T18351] FAT-fs (loop1): Directory bread(block 65) failed [ 1346.925977][T18351] FAT-fs (loop1): Directory bread(block 66) failed [ 1346.944231][T18351] FAT-fs (loop1): Directory bread(block 67) failed [ 1347.001074][T18351] FAT-fs (loop1): Directory bread(block 68) failed [ 1347.007660][T18351] FAT-fs (loop1): Directory bread(block 69) failed [ 1347.055039][T18351] FAT-fs (loop1): Directory bread(block 70) failed [ 1347.061625][T18351] FAT-fs (loop1): Directory bread(block 71) failed [ 1347.072370][T18351] FAT-fs (loop1): Directory bread(block 72) failed [ 1347.080321][T18351] FAT-fs (loop1): Directory bread(block 73) failed [ 1347.099718][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21560'. [ 1347.111211][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21560'. [ 1347.116393][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21561'. [ 1347.208416][T18351] syz.1.21555: attempt to access beyond end of device [ 1347.208416][T18351] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1347.454065][T18381] loop4: detected capacity change from 0 to 256 [ 1347.493979][T18381] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1347.509452][T18383] netlink: 'syz.3.21569': attribute type 1 has an invalid length. [ 1347.538586][T18383] netlink: 224 bytes leftover after parsing attributes in process `syz.3.21569'. [ 1347.552371][T18381] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 1347.663469][ T6092] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1347.708242][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21573'. [ 1347.717871][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21573'. [ 1347.890287][ T6092] usb 3-1: Using ep0 maxpacket: 32 [ 1347.898057][ T6092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.930637][ T6092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.945676][ T6092] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1347.968760][ T6092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.993630][ T6092] usb 3-1: config 0 descriptor?? [ 1348.021526][ T6092] hub 3-1:0.0: USB hub found [ 1348.238871][ T6092] hub 3-1:0.0: 13 ports detected [ 1348.249520][ T6092] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1348.445382][T18427] loop3: detected capacity change from 0 to 64 [ 1348.462459][ T6092] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1348.475194][ T6092] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1348.511728][ T6092] usbhid 3-1:0.0: can't add hid device: -71 [ 1348.517769][ T6092] usbhid: probe of 3-1:0.0 failed with error -71 [ 1348.583058][ T6092] usb 3-1: USB disconnect, device number 123 [ 1348.790988][T18439] erofs: (device loop4): mounted with root inode @ nid 36. [ 1348.834578][T18439] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 8 [ 1349.089014][T18453] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 1349.927539][T18501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21627'. [ 1350.050253][T18506] set_capacity_and_notify: 1 callbacks suppressed [ 1350.050269][T18506] loop4: detected capacity change from 0 to 1024 [ 1350.170151][T18511] loop1: detected capacity change from 0 to 256 [ 1350.238360][T18511] exfat: Deprecated parameter 'namecase' [ 1350.257600][T18511] exfat: Deprecated parameter 'namecase' [ 1350.343045][T18511] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300) [ 1351.002765][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21652'. [ 1351.748711][ T6092] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1351.906517][T18607] loop1: detected capacity change from 0 to 256 [ 1351.941722][T18607] FAT-fs (loop1): Directory bread(block 64) failed [ 1351.949262][T18607] FAT-fs (loop1): Directory bread(block 65) failed [ 1351.955884][T18607] FAT-fs (loop1): Directory bread(block 66) failed [ 1351.963935][T18607] FAT-fs (loop1): Directory bread(block 67) failed [ 1351.970909][ T6092] usb 4-1: Using ep0 maxpacket: 8 [ 1351.976931][T18607] FAT-fs (loop1): Directory bread(block 68) failed [ 1351.987564][T18607] FAT-fs (loop1): Directory bread(block 69) failed [ 1351.995070][ T6092] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1352.011950][T18607] FAT-fs (loop1): Directory bread(block 70) failed [ 1352.020752][ T6092] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1352.042263][T18607] FAT-fs (loop1): Directory bread(block 71) failed [ 1352.051946][ T6092] usb 4-1: config 0 has no interface number 0 [ 1352.059558][T18607] FAT-fs (loop1): Directory bread(block 72) failed [ 1352.068562][ T6092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1352.082304][T18607] FAT-fs (loop1): Directory bread(block 73) failed [ 1352.098854][ T6092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1352.120179][ T6093] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1352.132129][ T6092] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1352.166981][ T6092] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1352.185933][ T6092] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1352.205708][ T6092] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1352.214161][ T6092] usb 4-1: Manufacturer: syz [ 1352.215498][T18613] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1352.223229][ T6092] usb 4-1: config 0 descriptor?? [ 1352.254391][ T6092] hub 4-1:0.52: bad descriptor, ignoring hub [ 1352.273976][ T6092] hub: probe of 4-1:0.52 failed with error -5 [ 1352.343868][ T6093] usb 5-1: Using ep0 maxpacket: 32 [ 1352.351199][ T6093] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1352.376198][ T6093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.400133][ T6093] usb 5-1: config 0 descriptor?? [ 1352.409840][ T6093] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1352.462959][ T6092] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input91 [ 1352.745083][T18619] loop2: detected capacity change from 0 to 32768 [ 1352.773840][T18619] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1352.805236][T18619] JBD2: Ignoring recovery information on journal [ 1352.824693][T13188] usb 4-1: USB disconnect, device number 40 [ 1352.840505][ T6093] gspca_sq930x: ucbus_write failed -71 [ 1352.846508][ T6093] sq930x: probe of 5-1:0.0 failed with error -71 [ 1352.854342][ T6093] usb 5-1: USB disconnect, device number 24 [ 1352.875279][T18619] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1353.068738][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 1353.712090][T18639] loop2: detected capacity change from 0 to 32768 [ 1353.741760][T18639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.21695 (18639) [ 1353.777817][T18639] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1353.796895][T13188] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1353.817710][T18639] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1353.847048][T18639] BTRFS info (device loop2): using free space tree [ 1353.944092][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21710'. [ 1354.005757][T13188] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1354.054743][T13188] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1354.105388][T13188] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1354.113086][T18639] BTRFS info (device loop2): enabling ssd optimizations [ 1354.136485][T13188] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1354.146107][T13188] usb 2-1: Product: syz [ 1354.150929][T13188] usb 2-1: Manufacturer: syz [ 1354.155557][T13188] usb 2-1: SerialNumber: syz [ 1354.181921][T13188] usb 2-1: config 0 descriptor?? [ 1354.217441][T13188] usb 2-1: selecting invalid altsetting 0 [ 1354.249162][T18695] CIFS: VFS: Malformed UNC in devname [ 1354.328784][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1354.481777][ T6093] usb 2-1: USB disconnect, device number 34 [ 1354.654076][T18707] loop4: detected capacity change from 0 to 512 [ 1354.764666][T18707] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.21721: inode has both inline data and extents flags [ 1354.778459][T18707] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.21721: couldn't read orphan inode 15 (err -117) [ 1354.792904][T18707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1354.919877][T18718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21725'. [ 1355.050750][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 1355.627657][T18753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21741'. [ 1355.650360][T18753] netlink: 7 bytes leftover after parsing attributes in process `syz.1.21741'. [ 1355.822534][T18764] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1356.051690][T18724] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1356.094524][T18777] x_tables: duplicate underflow at hook 4 [ 1356.868024][T18820] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1357.040857][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21777'. [ 1357.509378][T18815] loop4: detected capacity change from 0 to 32768 [ 1357.544208][T18848] loop3: detected capacity change from 0 to 8 [ 1357.576653][T18848] /dev/loop3: Can't open blockdev [ 1357.615797][T18815] XFS (loop4): Mounting V5 Filesystem [ 1357.705573][T18857] loop0: detected capacity change from 0 to 1024 [ 1357.806154][T18815] XFS (loop4): Ending clean mount [ 1357.827540][T18815] XFS (loop4): Quotacheck needed: Please wait. [ 1357.856837][ T57] hfsplus: b-tree write err: -5, ino 25 [ 1357.873215][ T57] hfsplus: b-tree write err: -5, ino 4 [ 1357.901101][ T57] hfsplus: b-tree write err: -5, ino 2 [ 1357.991853][T18815] XFS (loop4): Quotacheck: Done. [ 1358.025870][T18866] netlink: 'syz.3.21794': attribute type 4 has an invalid length. [ 1358.054271][T18866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.21794'. [ 1358.195813][ T4272] XFS (loop4): Unmounting Filesystem [ 1358.643302][T18899] loop2: detected capacity change from 0 to 8 [ 1358.722594][T18899] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1358.735358][T18899] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1358.742379][ T26] audit: type=1800 audit(1276.960:1097): pid=18899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21810" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1358.794637][T18903] netlink: 766 bytes leftover after parsing attributes in process `syz.1.21814'. [ 1359.105212][T18920] loop2: detected capacity change from 0 to 512 [ 1359.161654][T18920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1359.182850][ T26] audit: type=1400 audit(1277.372:1098): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE1 pid=18921 comm="syz.3.21822" [ 1359.232763][T18920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1359.246641][T18927] netlink: 'syz.1.21823': attribute type 21 has an invalid length. [ 1359.276353][T18927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1359.283687][T18927] IPv6: NLM_F_CREATE should be set when creating new route [ 1359.291022][T18927] IPv6: NLM_F_CREATE should be set when creating new route [ 1359.298307][T18927] IPv6: NLM_F_CREATE should be set when creating new route [ 1359.401602][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 1359.430428][T18905] loop0: detected capacity change from 0 to 32768 [ 1360.182505][T18960] netlink: 'syz.0.21838': attribute type 4 has an invalid length. [ 1360.216517][T18963] loop4: detected capacity change from 0 to 512 [ 1360.229647][T18960] netlink: 'syz.0.21838': attribute type 17 has an invalid length. [ 1360.280994][T18963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1360.351236][T18971] binder: 18970:18971 ioctl 400c620e 0 returned -14 [ 1360.461696][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 1361.013329][T18961] loop3: detected capacity change from 0 to 32768 [ 1361.107209][ T4359] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1361.376006][T19012] netlink: 'syz.4.21863': attribute type 8 has an invalid length. [ 1361.795304][T19033] loop0: detected capacity change from 0 to 128 [ 1361.876332][T19033] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1361.974298][T19039] loop1: detected capacity change from 0 to 1024 [ 1362.172435][T19045] netlink: 'syz.2.21881': attribute type 21 has an invalid length. [ 1362.192794][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21881'. [ 1362.741512][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21896'. [ 1363.051065][ T26] audit: type=1326 audit(1280.993:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.113110][ T26] audit: type=1326 audit(1280.993:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.145340][ T26] audit: type=1326 audit(1280.993:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.145396][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21902'. [ 1363.178074][ T26] audit: type=1326 audit(1281.021:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.248163][ T26] audit: type=1326 audit(1281.021:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.290589][ T26] audit: type=1326 audit(1281.021:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.325875][ T26] audit: type=1326 audit(1281.021:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.363744][ T26] audit: type=1326 audit(1281.021:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.1.21901" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f412e39e019 code=0x7ffc0000 [ 1363.598191][T19110] autofs4:pid:19110:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1363.645021][T19110] autofs4:pid:19110:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1363.735157][T19118] netlink: 'syz.3.21915': attribute type 1 has an invalid length. [ 1363.962052][T19127] lo speed is unknown, defaulting to 1000 [ 1364.175236][T19137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.242694][T19137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.298133][T19137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.347794][T19137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.401487][T19137] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.441507][T19137] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.458483][T19137] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.473461][T19137] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.520352][T19127] wg1 speed is unknown, defaulting to 1000 [ 1364.712959][T19159] overlayfs: unrecognized mount option "smackfstransmute=@\]\" or missing value [ 1364.760207][T13188] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1364.871613][T19165] loop3: detected capacity change from 0 to 764 [ 1364.950213][ T26] audit: type=1326 audit(1282.762:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.0.21939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1364.974704][T13188] usb 5-1: Using ep0 maxpacket: 8 [ 1364.983990][T13188] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1364.993258][T19165] rock: directory entry would overflow storage [ 1365.004309][T13188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1365.021502][T19165] rock: sig=0x4654, size=5, remaining=4 [ 1365.025844][T13188] usb 5-1: Product: syz [ 1365.031345][T13188] usb 5-1: Manufacturer: syz [ 1365.035965][T13188] usb 5-1: SerialNumber: syz [ 1365.047896][ T26] audit: type=1326 audit(1282.818:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.0.21939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f51cfd9e019 code=0x7ffc0000 [ 1365.078627][T19165] isofs: Unable to find the ".." directory for NFS. [ 1365.086941][T13188] usb 5-1: config 0 descriptor?? [ 1365.126666][T13188] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1365.127743][T19171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21941'. [ 1365.174642][T19171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21941'. [ 1365.334326][T19177] loop2: detected capacity change from 0 to 256 [ 1365.406393][T19177] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 1365.567989][T13188] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1365.581424][T13188] sq905: probe of 5-1:0.0 failed with error -71 [ 1365.611022][T13188] usb 5-1: USB disconnect, device number 25 [ 1365.860462][T19192] loop2: detected capacity change from 0 to 128 [ 1365.891102][T19192] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1366.092900][T19200] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.102439][T19197] xt_hashlimit: max too large, truncated to 1048576 [ 1366.139059][T19197] xt_hashlimit: overflow, try lower: 2/0 [ 1366.309490][T19207] [U] [ 1366.313184][T19207] [U] [ 1366.315885][T19207] [U] [ 1366.318590][T19207] [U] [ 1366.363607][T19207] [U] [ 1366.366342][T19207] [U] [ 1366.369024][T19207] [U] [ 1366.371701][T19207] [U] [ 1366.412007][T19207] [U] [ 1366.414757][T19207] [U] [ 1366.417462][T19207] [U] [ 1366.468616][T19206] [U] [ 1366.614688][T19218] tmpfs: Bad value for 'mpol' [ 1366.622811][T19219] loop0: detected capacity change from 0 to 256 [ 1366.629179][T13188] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1366.685311][T19223] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1366.742965][T19219] FAT-fs (loop0): Directory bread(block 64) failed [ 1366.768934][T19219] FAT-fs (loop0): Directory bread(block 65) failed [ 1366.806248][ T26] audit: type=1326 audit(1284.503:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.21968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1366.843926][T19219] FAT-fs (loop0): Directory bread(block 66) failed [ 1366.850533][T19219] FAT-fs (loop0): Directory bread(block 67) failed [ 1366.857526][T13188] usb 2-1: Using ep0 maxpacket: 8 [ 1366.874988][T13188] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1366.886494][T13188] usb 2-1: config 0 has no interface number 0 [ 1366.898772][T13188] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1366.907797][ T26] audit: type=1326 audit(1284.540:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.21968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1366.907834][ T26] audit: type=1326 audit(1284.540:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.21968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1366.907861][ T26] audit: type=1326 audit(1284.540:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.21968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e9f9e019 code=0x7ffc0000 [ 1366.993449][T19219] FAT-fs (loop0): Directory bread(block 68) failed [ 1367.014660][T19219] FAT-fs (loop0): Directory bread(block 69) failed [ 1367.046777][T19219] FAT-fs (loop0): Directory bread(block 70) failed [ 1367.058596][T19219] FAT-fs (loop0): Directory bread(block 71) failed [ 1367.065272][T19219] FAT-fs (loop0): Directory bread(block 72) failed [ 1367.089575][T19219] FAT-fs (loop0): Directory bread(block 73) failed [ 1367.180870][T19219] syz.0.21964: attempt to access beyond end of device [ 1367.180870][T19219] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 1367.218861][T13188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.247170][T13188] usb 2-1: Product: syz [ 1367.250215][T19219] syz.0.21964: attempt to access beyond end of device [ 1367.250215][T19219] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1367.264958][T13188] usb 2-1: Manufacturer: syz [ 1367.264980][T13188] usb 2-1: SerialNumber: syz [ 1367.266690][T13188] usb 2-1: config 0 descriptor?? [ 1367.293003][ T26] audit: type=1800 audit(1284.961:1113): pid=19219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.21964" name="file0" dev="loop0" ino=1048711 res=0 errno=0 [ 1367.573448][T13188] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1367.579888][T13188] usb 2-1: Failed to initialize entity for entity 6 [ 1367.584349][T19245] loop4: detected capacity change from 0 to 256 [ 1367.602367][T13188] usb 2-1: Failed to register entities (-22). [ 1367.648632][T19245] FAT-fs (loop4): Directory bread(block 1285) failed [ 1367.655422][T19245] FAT-fs (loop4): Directory bread(block 1286) failed [ 1367.698736][T19245] FAT-fs (loop4): Directory bread(block 1287) failed [ 1367.709807][T19245] FAT-fs (loop4): Directory bread(block 1288) failed [ 1367.812567][ T6093] usb 2-1: USB disconnect, device number 35 [ 1368.959856][T19307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22010'. [ 1368.969010][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22010'. [ 1369.294440][T19326] i2c i2c-0: Invalid block write size 253 [ 1369.671454][T19340] netlink: 'syz.3.22025': attribute type 2 has an invalid length. [ 1369.735853][T19340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22025'. [ 1369.939768][T19350] infiniband syz1: set down [ 1369.956346][T19350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1369.990644][ T6093] lo speed is unknown, defaulting to 1000 [ 1370.006895][ T6093] lo speed is unknown, defaulting to 1000 [ 1370.423153][T19372] loop4: detected capacity change from 0 to 256 [ 1370.456863][T19372] exfat: Deprecated parameter 'namecase' [ 1370.475781][T19372] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1370.687202][T19387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22047'. [ 1370.733949][T19387] netlink: 108 bytes leftover after parsing attributes in process `syz.3.22047'. [ 1370.764968][T19387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22047'. [ 1370.785548][T19387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22047'. [ 1371.036798][T19402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.22056'. [ 1371.405446][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22067'. [ 1371.694308][T19436] binder: 19435:19436 ioctl 40046210 0 returned -14 [ 1372.850122][T19499] xt_limit: Overflow, try lower: 0/0 [ 1372.860344][T19498] loop3: detected capacity change from 0 to 256 [ 1373.340802][ T6093] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1373.404640][T13188] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1373.545619][ T6093] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1373.570611][ T6093] usb 3-1: config 0 has no interface number 0 [ 1373.583867][ T6093] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1373.604125][ T6093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.607778][T13188] usb 4-1: Using ep0 maxpacket: 32 [ 1373.612636][ T6093] usb 3-1: Product: syz [ 1373.625866][ T6093] usb 3-1: Manufacturer: syz [ 1373.635163][T13188] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.648409][ T6093] usb 3-1: SerialNumber: syz [ 1373.660456][ T6093] usb 3-1: config 0 descriptor?? [ 1373.667032][T13188] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.693626][T13188] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1373.714455][T13188] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1373.722852][T13188] usb 4-1: Product: syz [ 1373.736854][T13188] usb 4-1: Manufacturer: syz [ 1373.741597][T13188] usb 4-1: SerialNumber: syz [ 1373.780273][T13188] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input94 [ 1373.961589][T19549] vivid-008: disconnect [ 1373.966358][T19548] vivid-008: reconnect [ 1374.065548][ T6092] usb 4-1: USB disconnect, device number 41 [ 1374.094694][ T6092] appletouch 4-1:1.0: input: appletouch disconnected [ 1374.098616][T19552] netlink: 'syz.1.22129': attribute type 1 has an invalid length. [ 1374.114187][ T6093] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1374.132340][ T6093] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1374.143557][ T6093] asix: probe of 3-1:0.251 failed with error -5 [ 1374.162372][ T6093] usb 3-1: USB disconnect, device number 124 [ 1374.440379][T19568] netlink: 5 bytes leftover after parsing attributes in process `syz.1.22137'. [ 1374.601393][T13188] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1374.803518][T13188] usb 5-1: Using ep0 maxpacket: 32 [ 1374.820470][T13188] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1374.845080][T13188] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1374.878033][T13188] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1374.910869][T13188] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1374.933403][T13188] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1374.962098][T13188] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1374.980004][T13188] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1375.007185][T13188] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1375.025621][T13188] usb 5-1: Product: syz [ 1375.034717][T13188] usb 5-1: Manufacturer: syz [ 1375.045905][T13188] usb 5-1: SerialNumber: syz [ 1375.058643][T13188] usb 5-1: config 0 descriptor?? [ 1375.081348][T13188] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1375.119850][T13188] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1375.308674][T19562] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1375.354319][ T6093] usb 5-1: USB disconnect, device number 26 [ 1375.368547][ T6093] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1375.719973][T19627] loop3: detected capacity change from 0 to 4096 [ 1376.099125][T19642] netlink: 'syz.0.22174': attribute type 5 has an invalid length. [ 1376.238962][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22177'. [ 1376.258005][T19649] netlink: 'syz.4.22177': attribute type 3 has an invalid length. [ 1376.554544][T19666] netlink: 'syz.1.22185': attribute type 1 has an invalid length. [ 1376.645112][T19669] loop4: detected capacity change from 0 to 2048 [ 1376.666954][T19669] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1376.719647][T19674] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1376.743312][T19669] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1376.806070][T19669] Remounting filesystem read-only [ 1377.711991][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22212'. [ 1377.869069][T19727] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1378.170352][T13188] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1378.286358][T19748] lo speed is unknown, defaulting to 1000 [ 1378.373347][T13188] usb 2-1: Using ep0 maxpacket: 8 [ 1378.383268][T13188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1378.426861][T13188] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1378.466730][T13188] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1378.505786][T13188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.522310][T13188] usb 2-1: Product: syz [ 1378.537541][T13188] usb 2-1: Manufacturer: syz [ 1378.548148][T13188] usb 2-1: SerialNumber: syz [ 1378.566218][T13188] usb 2-1: config 0 descriptor?? [ 1378.604789][T19748] wg1 speed is unknown, defaulting to 1000 [ 1378.724656][T19750] loop0: detected capacity change from 0 to 32768 [ 1378.764317][T19750] JBD2: Ignoring recovery information on journal [ 1378.821261][T19750] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1378.846850][T19750] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1378.929401][T19750] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1378.976539][T19750] OCFS2: Returning error to the calling process. [ 1378.993038][T19750] (syz.0.22226,19750,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 1379.013936][T19750] (syz.0.22226,19750,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 1379.036035][T13188] usb 2-1: USB disconnect, device number 36 [ 1379.055368][T19750] (syz.0.22226,19750,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 1379.067436][T19750] (syz.0.22226,19750,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 1379.086954][T19750] (syz.0.22226,19750,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 1379.109840][T19750] (syz.0.22226,19750,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 1379.125327][T19750] (syz.0.22226,19750,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 1379.171262][T19750] (syz.0.22226,19750,1):ocfs2_mknod:385 ERROR: status = -5 [ 1379.183994][T19776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22237'. [ 1379.194340][T19750] (syz.0.22226,19750,1):ocfs2_mknod:502 ERROR: status = -5 [ 1379.220180][T19750] (syz.0.22226,19750,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1379.292035][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 1379.546655][T19785] loop4: detected capacity change from 0 to 4096 [ 1379.583996][T19785] ntfs3: loop4: try to read out of volume at offset 0x200800 [ 1379.593442][T19785] ntfs3: loop4: Failed to load $Volume. [ 1379.599271][T19791] PM: Enabling pm_trace changes system date and time during resume. [ 1379.599271][T19791] PM: Correct system time has to be restored manually after resume. [ 1379.887431][T19801] Invalid option length (1040122) for dns_resolver key [ 1380.199604][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22258'. [ 1380.525270][T19830] netlink: 348 bytes leftover after parsing attributes in process `syz.4.22263'. [ 1380.926107][T19850] loop2: detected capacity change from 0 to 764 [ 1381.114410][T19854] loop2: detected capacity change from 0 to 256 [ 1381.166677][T19854] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 1381.199424][T19854] FAT-fs (loop2): Filesystem has been set read-only [ 1381.230444][T19854] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1381.435657][T19860] misc userio: The device must be registered before sending interrupts [ 1381.579778][T19842] loop3: detected capacity change from 0 to 32768 [ 1381.612465][T19844] loop1: detected capacity change from 0 to 32768 [ 1381.640942][T19844] add_index: next_index = 0. Resetting! [ 1381.661459][T19848] loop0: detected capacity change from 0 to 32768 [ 1381.662336][T19844] find_entry called with index >= next_index [ 1381.689718][T19844] find_entry called with index >= next_index [ 1381.700011][T19844] find_entry called with index >= next_index [ 1381.717332][T19842] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1381.733271][T19848] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.22272 (19848) [ 1381.774422][T19844] find_entry called with index >= next_index [ 1381.856891][T19848] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1381.896357][T19877] tipc: Invalid UDP bearer configuration [ 1381.896392][T19877] tipc: Enabling of bearer rejected, failed to enable media [ 1381.901880][T19848] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1381.990505][T19848] BTRFS info (device loop0): enabling ssd optimizations [ 1382.013797][ T4285] XFS (loop3): Unmounting Filesystem [ 1382.022307][T19848] BTRFS info (device loop0): not using ssd optimizations [ 1382.102422][T19848] BTRFS info (device loop0): turning off barriers [ 1382.108912][T19848] BTRFS info (device loop0): use no compression [ 1382.167519][T19848] BTRFS info (device loop0): using free space tree [ 1382.672371][ T4273] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1382.891395][ T4663] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (4663) [ 1383.473153][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1383.683454][T19950] loop0: detected capacity change from 0 to 512 [ 1383.704349][T19950] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1383.817302][T19950] EXT4-fs (loop0): 1 truncate cleaned up [ 1383.828498][T19950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1383.842282][T19950] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 1383.894776][T19958] loop3: detected capacity change from 0 to 1024 [ 1383.936353][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 1383.947264][ T5736] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1383.947613][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22312'. [ 1384.040714][T19962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22314'. [ 1384.365785][T19976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22320'. [ 1384.378732][T19976] tipc: Invalid UDP bearer configuration [ 1384.378773][T19976] tipc: Enabling of bearer rejected, failed to enable media [ 1384.855999][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1384.870116][T13188] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1384.912677][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1385.028369][T19978] loop3: detected capacity change from 0 to 32768 [ 1385.074917][T13188] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1385.083097][T13188] usb 2-1: config 0 has no interface number 0 [ 1385.102784][T13188] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1385.121667][T13188] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1385.199013][T13188] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1385.250396][T13188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.308180][T13188] usb 2-1: Product: syz [ 1385.312452][T13188] usb 2-1: Manufacturer: syz [ 1385.317057][T13188] usb 2-1: SerialNumber: syz [ 1385.385554][T13188] usb 2-1: config 0 descriptor?? [ 1385.391737][T19985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1385.431671][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1385.444809][T13188] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1385.479763][T13188] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1385.512256][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1385.532081][ T26] audit: type=1326 audit(1302.022:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20003 comm="syz.0.22336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51cfd9e019 code=0x0 [ 1385.718695][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1385.743378][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1385.904964][T13188] usb 2-1: USB disconnect, device number 37 [ 1385.921685][T13188] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1385.964696][T13188] cyberjack 2-1:0.69: device disconnected [ 1386.137175][T20025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1386.154492][T20025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1386.165488][T20025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1386.173290][T20025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1386.181543][T20025] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1386.188952][T20025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1386.265121][T20017] lo speed is unknown, defaulting to 1000 [ 1386.659178][T20038] loop0: detected capacity change from 0 to 1024 [ 1386.708541][T20038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1386.829593][T20038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1386.924049][T20038] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1387.003938][T20038] [ 1387.006317][T20038] ====================================================== [ 1387.013338][T20038] WARNING: possible circular locking dependency detected [ 1387.020376][T20038] syzkaller #0 Not tainted [ 1387.024798][T20038] ------------------------------------------------------ [ 1387.031829][T20038] syz.0.22342/20038 is trying to acquire lock: [ 1387.037994][T20038] ffff888072285108 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 1387.047880][T20038] [ 1387.047880][T20038] but task is already holding lock: [ 1387.055252][T20038] ffff8880314f6c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 1387.065368][T20038] [ 1387.065368][T20038] which lock already depends on the new lock. [ 1387.065368][T20038] [ 1387.075783][T20038] [ 1387.075783][T20038] the existing dependency chain (in reverse order) is: [ 1387.084804][T20038] [ 1387.084804][T20038] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 1387.093227][T20038] percpu_down_read+0x44/0x1a0 [ 1387.098506][T20038] ext4_writepages+0x213/0x2e70 [ 1387.103868][T20038] do_writepages+0x3c6/0x640 [ 1387.109031][T20038] __writeback_single_inode+0x153/0x1170 [ 1387.115218][T20038] writeback_single_inode+0x3d2/0x8e0 [ 1387.121101][T20038] write_inode_now+0x17f/0x210 [ 1387.126381][T20038] iput+0x643/0x9c0 [ 1387.130701][T20038] ext4_xattr_block_set+0x2487/0x2fe0 [ 1387.136660][T20038] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 1387.142975][T20038] __ext4_expand_extra_isize+0x301/0x3e0 [ 1387.149122][T20038] __ext4_mark_inode_dirty+0x478/0x760 [ 1387.155093][T20038] ext4_evict_inode+0xa67/0x10e0 [ 1387.160545][T20038] evict+0x4b6/0x8b0 [ 1387.164951][T20038] ext4_orphan_cleanup+0xc32/0x1470 [ 1387.170663][T20038] ext4_fill_super+0x6f0c/0x78f0 [ 1387.176110][T20038] get_tree_bdev+0x3e6/0x610 [ 1387.181215][T20038] vfs_get_tree+0x88/0x270 [ 1387.186140][T20038] do_new_mount+0x247/0xa40 [ 1387.191154][T20038] __se_sys_mount+0x2e3/0x3d0 [ 1387.196337][T20038] do_syscall_64+0x4c/0xa0 [ 1387.201265][T20038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.207671][T20038] [ 1387.207671][T20038] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 1387.215219][T20038] __lock_acquire+0x2d18/0x7c40 [ 1387.220582][T20038] lock_acquire+0x1bb/0x4a0 [ 1387.225597][T20038] down_write+0x36/0x60 [ 1387.230260][T20038] ext4_destroy_inline_data+0x24/0xe0 [ 1387.236143][T20038] ext4_writepages+0x599/0x2e70 [ 1387.241501][T20038] do_writepages+0x3c6/0x640 [ 1387.246600][T20038] filemap_fdatawrite_wbc+0x11e/0x180 [ 1387.252485][T20038] file_write_and_wait_range+0x159/0x230 [ 1387.258628][T20038] ext4_sync_file+0x22a/0xc30 [ 1387.263828][T20038] ext4_buffered_write_iter+0x2de/0x380 [ 1387.269885][T20038] ext4_file_write_iter+0x1e3/0x17d0 [ 1387.275680][T20038] do_iter_write+0x638/0xb10 [ 1387.280784][T20038] do_pwritev+0x23e/0x3a0 [ 1387.285620][T20038] do_syscall_64+0x4c/0xa0 [ 1387.290547][T20038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.296949][T20038] [ 1387.296949][T20038] other info that might help us debug this: [ 1387.296949][T20038] [ 1387.307164][T20038] Possible unsafe locking scenario: [ 1387.307164][T20038] [ 1387.314597][T20038] CPU0 CPU1 [ 1387.319946][T20038] ---- ---- [ 1387.325294][T20038] lock(&sbi->s_writepages_rwsem); [ 1387.330484][T20038] lock(&ei->xattr_sem); [ 1387.337317][T20038] lock(&sbi->s_writepages_rwsem); [ 1387.345022][T20038] lock(&ei->xattr_sem); [ 1387.349341][T20038] [ 1387.349341][T20038] *** DEADLOCK *** [ 1387.349341][T20038] [ 1387.357469][T20038] 2 locks held by syz.0.22342/20038: [ 1387.362737][T20038] #0: ffff8880314f2460 (sb_writers#4){.+.+}-{0:0}, at: do_pwritev+0x227/0x3a0 [ 1387.371704][T20038] #1: ffff8880314f6c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 1387.382344][T20038] [ 1387.382344][T20038] stack backtrace: [ 1387.388240][T20038] CPU: 0 PID: 20038 Comm: syz.0.22342 Not tainted syzkaller #0 [ 1387.395777][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1387.405821][T20038] Call Trace: [ 1387.409087][T20038] [ 1387.412011][T20038] dump_stack_lvl+0x188/0x24e [ 1387.416686][T20038] ? load_image+0x410/0x410 [ 1387.421176][T20038] ? show_regs_print_info+0x12/0x12 [ 1387.426392][T20038] ? print_circular_bug+0x12b/0x1a0 [ 1387.431582][T20038] check_noncircular+0x296/0x330 [ 1387.436517][T20038] ? add_chain_block+0x9b0/0x9b0 [ 1387.441444][T20038] ? lockdep_lock+0xf1/0x1f0 [ 1387.446043][T20038] ? _find_first_zero_bit+0xd2/0x100 [ 1387.451439][T20038] __lock_acquire+0x2d18/0x7c40 [ 1387.456295][T20038] ? __sched_text_start+0x8/0x8 [ 1387.461143][T20038] ? mark_lock+0x94/0x320 [ 1387.465465][T20038] ? verify_lock_unused+0x140/0x140 [ 1387.470655][T20038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1387.476628][T20038] ? lock_chain_count+0x20/0x20 [ 1387.481477][T20038] lock_acquire+0x1bb/0x4a0 [ 1387.485971][T20038] ? ext4_destroy_inline_data+0x24/0xe0 [ 1387.491516][T20038] ? read_lock_is_recursive+0x10/0x10 [ 1387.496885][T20038] ? ext4_journal_check_start+0x17d/0x240 [ 1387.502597][T20038] down_write+0x36/0x60 [ 1387.506741][T20038] ? ext4_destroy_inline_data+0x24/0xe0 [ 1387.512279][T20038] ext4_destroy_inline_data+0x24/0xe0 [ 1387.517641][T20038] ext4_writepages+0x599/0x2e70 [ 1387.522481][T20038] ? ext4_get_group_desc+0x10a/0x4d0 [ 1387.527755][T20038] ? verify_lock_unused+0x140/0x140 [ 1387.532947][T20038] ? mark_lock+0x94/0x320 [ 1387.537269][T20038] ? __lock_acquire+0x1465/0x7c40 [ 1387.542295][T20038] ? ext4_read_folio+0x370/0x370 [ 1387.547243][T20038] ? ext4_mark_iloc_dirty+0x4eb/0x1cb0 [ 1387.552695][T20038] ? __lock_acquire+0x7c40/0x7c40 [ 1387.557713][T20038] ? do_raw_spin_lock+0x128/0x2f0 [ 1387.562726][T20038] ? do_raw_spin_unlock+0x11d/0x230 [ 1387.567914][T20038] ? ext4_read_folio+0x370/0x370 [ 1387.572843][T20038] do_writepages+0x3c6/0x640 [ 1387.577428][T20038] ? filemap_fdatawrite_wbc+0x113/0x180 [ 1387.582971][T20038] ? __writepage+0x130/0x130 [ 1387.587549][T20038] ? __lock_acquire+0x7c40/0x7c40 [ 1387.592571][T20038] ? __rwlock_init+0x140/0x140 [ 1387.597354][T20038] ? do_raw_spin_unlock+0x11d/0x230 [ 1387.602543][T20038] filemap_fdatawrite_wbc+0x11e/0x180 [ 1387.607914][T20038] file_write_and_wait_range+0x159/0x230 [ 1387.613540][T20038] ? __filemap_set_wb_err+0x230/0x230 [ 1387.619437][T20038] ? __lock_acquire+0x7c40/0x7c40 [ 1387.624455][T20038] ext4_sync_file+0x22a/0xc30 [ 1387.629127][T20038] ext4_buffered_write_iter+0x2de/0x380 [ 1387.634669][T20038] ext4_file_write_iter+0x1e3/0x17d0 [ 1387.639950][T20038] ? verify_lock_unused+0x140/0x140 [ 1387.645148][T20038] ? aa_path_link+0x8a0/0x8a0 [ 1387.649891][T20038] ? __might_fault+0xa6/0x120 [ 1387.654598][T20038] ? ext4_file_read_iter+0x650/0x650 [ 1387.659874][T20038] ? end_current_label_crit_section+0x14b/0x170 [ 1387.666105][T20038] ? common_file_perm+0x171/0x1c0 [ 1387.671125][T20038] do_iter_write+0x638/0xb10 [ 1387.675711][T20038] ? vfs_iter_write+0xa0/0xa0 [ 1387.680380][T20038] ? rcu_read_lock_any_held+0xb0/0x130 [ 1387.685834][T20038] do_pwritev+0x23e/0x3a0 [ 1387.690152][T20038] ? do_preadv+0x390/0x390 [ 1387.694563][T20038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1387.700571][T20038] ? lock_chain_count+0x20/0x20 [ 1387.705418][T20038] ? lockdep_hardirqs_on+0x94/0x140 [ 1387.710624][T20038] ? __x64_sys_pwritev2+0xba/0x100 [ 1387.715811][T20038] do_syscall_64+0x4c/0xa0 [ 1387.720219][T20038] ? clear_bhb_loop+0x60/0xb0 [ 1387.724889][T20038] ? clear_bhb_loop+0x60/0xb0 [ 1387.729560][T20038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.735444][T20038] RIP: 0033:0x7f51cfd9e019 [ 1387.739848][T20038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.759457][T20038] RSP: 002b:00007f51d0cd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1387.767873][T20038] RAX: ffffffffffffffda RBX: 00007f51d0025fa0 RCX: 00007f51cfd9e019 [ 1387.775835][T20038] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1387.783796][T20038] RBP: 00007f51cfe3500c R08: 0000000000000000 R09: 0000000000000000 [ 1387.791758][T20038] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 1387.799714][T20038] R13: 00007f51d0026038 R14: 00007f51d0025fa0 R15: 00007ffecaa622e8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1387.807679][T20038] [ 1388.080787][T20022] lo speed is unknown, defaulting to 1000 [ 1388.098393][T20017] wg1 speed is unknown, defaulting to 1000 [ 1388.251468][T20038] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1388.263943][T20038] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1388.263943][T20038] [ 1388.274086][T20038] EXT4-fs (loop0): Total free blocks count 0 [ 1388.281571][T20038] EXT4-fs (loop0): Free/Dirty block details [ 1388.287530][T20038] EXT4-fs (loop0): free_blocks=20480 [ 1388.297788][T20038] EXT4-fs (loop0): dirty_blocks=80 [ 1388.304306][T20038] EXT4-fs (loop0): Block reservation details [ 1388.310341][T20038] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 1388.364817][T16028] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1388.391461][T20022] wg1 speed is unknown, defaulting to 1000 [ 1388.428247][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1389.615932][ T11] device wlan1 left promiscuous mode [ 1389.625424][ T11] team0: Port device wlan1 removed [ 1390.020782][ T11] device hsr_slave_0 left promiscuous mode [ 1390.027069][ T11] device hsr_slave_1 left promiscuous mode [ 1390.033594][ T11] device bridge_slave_0 left promiscuous mode [ 1390.039788][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.062691][ T11] bond10 (unregistering): Released all slaves [ 1390.073274][ T11] bond9 (unregistering): Released all slaves [ 1390.360304][ T11] bond8 (unregistering): Released all slaves [ 1390.417352][ T11] bond0 (unregistering): Released all slaves [ 1390.582207][ T11] bond7 (unregistering): Released all slaves [ 1390.676111][ T11] bond6 (unregistering): Released all slaves [ 1390.866161][ T11] bond5 (unregistering): Released all slaves [ 1390.874624][ T11] bond4 (unregistering): Released all slaves [ 1390.883213][ T11] bond3 (unregistering): Released all slaves [ 1390.891637][ T11] bond2 (unregistering): Released all slaves [ 1390.900351][ T11] bond1 (unregistering): Released all slaves [ 1390.983066][ T11] device geneve1 left promiscuous mode [ 1390.989023][ T11] team0 (unregistering): Port device geneve1 removed [ 1391.457875][ T11] device team_slave_1 left promiscuous mode [ 1391.464716][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1391.519704][ T11] device team_slave_0 left promiscuous mode [ 1391.525987][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1392.404519][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.416893][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1392.473912][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.484806][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1392.549859][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.561440][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1392.645610][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.656016][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1392.963339][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.019613][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.084237][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.127199][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.261160][ T11] device .d left promiscuous mode [ 1393.312864][ T11] device .*! left promiscuous mode [ 1396.174711][ T11] device hsr_slave_0 left promiscuous mode [ 1396.181197][ T11] device hsr_slave_1 left promiscuous mode [ 1396.187971][ T11] device team0 left promiscuous mode [ 1396.193277][ T11] device C left promiscuous mode [ 1396.198973][ T11] device team_slave_1 left promiscuous mode [ 1396.205147][ T11] device geneve0 left promiscuous mode [ 1396.211120][ T11] bridge0: port 3(team0) entered disabled state [ 1396.218557][ T11] device bridge_slave_0 left promiscuous mode [ 1396.224726][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.238169][ T11] device hsr_slave_0 left promiscuous mode [ 1396.245709][ T11] device hsr_slave_1 left promiscuous mode [ 1396.253314][ T11] device dummy0 left promiscuous mode [ 1396.258804][ T11] bridge0: port 3(dummy0) entered disabled state [ 1396.266589][ T11] device bridge_slave_1 left promiscuous mode [ 1396.273187][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.283552][ T11] device bridge_slave_0 left promiscuous mode [ 1396.289750][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.306673][ T11] device hsr_slave_0 left promiscuous mode [ 1396.312970][ T11] device hsr_slave_1 left promiscuous mode [ 1396.320631][ T11] device bridge_slave_1 left promiscuous mode [ 1396.329170][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.443982][ T11] bond7 (unregistering): Released all slaves [ 1396.644374][ T11] bond6 (unregistering): Released all slaves [ 1396.652923][ T11] bond5 (unregistering): Released all slaves [ 1396.742661][ T11] bond4 (unregistering): Released all slaves [ 1396.751851][ T11] bond0 (unregistering): Released all slaves [ 1396.806717][ T11] bond3 (unregistering): Released all slaves [ 1396.816018][ T11] bond2 (unregistering): Released all slaves