last executing test programs: 2.623143165s ago: executing program 3 (id=13852): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8", 0x7}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 2.390621362s ago: executing program 0 (id=13855): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uid}, {@gid}, {@dmode={'dmode', 0x3d, 0x10003}}, {@nostrict}, {@gid_ignore}, {@gid}, {}, {@longad}, {@umask={'umask', 0x3d, 0x57}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@nostrict}]}, 0x5, 0xc87, &(0x7f0000001440)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 2.240296725s ago: executing program 3 (id=13858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) 1.910332853s ago: executing program 0 (id=13861): mount(0x0, 0x0, 0x0, 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@noauto_da_alloc}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$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") 1.64456493s ago: executing program 3 (id=13863): futex(&(0x7f0000000140)=0x1, 0x6, 0x1, 0x0, 0x0, 0x5) futex(&(0x7f0000000140), 0x4, 0x4, 0x0, &(0x7f0000000080)=0x1, 0x0) 1.452531085s ago: executing program 2 (id=13865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) 1.336555617s ago: executing program 1 (id=13866): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1.23347033s ago: executing program 0 (id=13867): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcc19, 0x10000, 0x0, 0x301}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r0, 0x1, 0x911, 0xd, 0x0, 0x0) 1.20607262s ago: executing program 1 (id=13868): unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20) 1.049444894s ago: executing program 2 (id=13869): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 854.16834ms ago: executing program 1 (id=13870): r0 = mq_open(&(0x7f0000000640)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\x97\xf5\x89~\x03\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xe4\x926\xb5a0\xa0B\xae||\x1e\xe7^\x8f@\x19I;\xd9ZOE\xcd\xb7T\xd8 %\x9c\xdb3\b\xba,z\x03\xe00\xd8\xcb\xd0\t\xb3[Q+\xb9\xbc\x85\x10\xd6\xa8<\xdecGG\xb0\vXc\xfb\xc8:=O\xf8/;2\xe0\xa2+\xaa\"\xfd\xfe\xb1\xcd\v$\xed\xef\x8eS\x89\x1d\xba\x12\xe7+\xc1\x82\x9b|\x9f\x04_V\xfc=rZA-`1\xc3D\xf7\xad\"\xc6\xeb\rzb\x8f\xe1\f\x8f\x1c\xb4\x15\xfd\x01B{\x1c?i1\x9f\xc3tu@\xeb:ml\x8fP\x8f\xd2\xb5\xfd^\xe1\xb6\x9d\xd4\xb7y\x17\x06(', 0x41, 0x2, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 838.24458ms ago: executing program 0 (id=13871): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 784.460431ms ago: executing program 2 (id=13872): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000700)={0x98f904, 0x4, @name="b04c0114f59df94ed1394258c88440a5dc78fc8692f88d42a187049c611b1e0f"}) 628.508105ms ago: executing program 2 (id=13873): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 602.122206ms ago: executing program 1 (id=13874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1300}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8) 538.188387ms ago: executing program 3 (id=13875): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x1, 0x10, [0x0, 0x0, 0x0, 0x0]}) 472.301609ms ago: executing program 0 (id=13876): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x1, "d1369cf58e4c2521380d10ba3c6906da6fab93d12c03a89341659a2aea99cef5", 0x2, 0x1ff, 0x5, 0x10003, 0x2}) 372.408381ms ago: executing program 1 (id=13877): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/2, 0x2) 284.430043ms ago: executing program 2 (id=13878): setitimer(0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000380)) 284.257093ms ago: executing program 3 (id=13879): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x20040000) 193.007736ms ago: executing program 0 (id=13880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x3d188, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x8}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x0) 132.530917ms ago: executing program 1 (id=13881): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) 67.162609ms ago: executing program 3 (id=13882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfff5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) 0s ago: executing program 2 (id=13883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000800000000000500000008000b400000000018000480140001800b00010074756e6e656c0000040002800900010073797a30000000000b0007"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): audit: type=1326 audit(2000000218.967:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1342.911328][ T28] audit: type=1326 audit(2000000219.013:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1343.040093][ T28] audit: type=1326 audit(2000000219.013:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1343.181828][ T28] audit: type=1326 audit(2000000219.013:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1343.290274][ T28] audit: type=1326 audit(2000000219.013:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1343.409565][ T28] audit: type=1326 audit(2000000219.013:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1343.529915][ T7233] netlink: 'syz.1.11547': attribute type 1 has an invalid length. [ 1343.537819][ T7233] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11547'. [ 1343.541922][ T28] audit: type=1326 audit(2000000219.013:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.11539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1343.706477][ T7238] Process accounting resumed [ 1344.223032][ T5898] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1344.374639][ T28] audit: type=1326 audit(2000000220.673:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.11558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x0 [ 1344.419207][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 1344.426371][ T5898] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1344.444536][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.489230][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1344.529229][ T5898] usb 4-1: config 1 has no interface number 0 [ 1344.573976][ T5898] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.642066][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1344.666440][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.718136][ T5898] usb 4-1: Product: syz [ 1344.732712][ T5898] usb 4-1: Manufacturer: syz [ 1344.766290][ T5898] usb 4-1: SerialNumber: syz [ 1344.853294][ T5898] cdc_wdm 4-1:1.128: skipping garbage [ 1344.858823][ T5898] cdc_wdm 4-1:1.128: invalid descriptor buffer length [ 1344.888669][ T5898] cdc_wdm: probe of 4-1:1.128 failed with error -22 [ 1345.122075][T16584] usb 4-1: USB disconnect, device number 56 [ 1345.275046][ T5898] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1345.290319][ T7308] netlink: 'syz.2.11567': attribute type 2 has an invalid length. [ 1345.491881][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 1345.512370][ T5898] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1345.533528][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.554209][ T5898] usb 1-1: Product: syz [ 1345.564903][ T5898] usb 1-1: Manufacturer: syz [ 1345.571896][ T5898] usb 1-1: SerialNumber: syz [ 1345.607528][ T5898] usb 1-1: config 0 descriptor?? [ 1345.642260][ T5898] gspca_main: se401-2.14.0 probing 047d:5003 [ 1346.136029][ T5898] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1346.154256][ T5898] se401: probe of 1-1:0.0 failed with error -71 [ 1346.204974][ T5898] usb 1-1: USB disconnect, device number 40 [ 1346.646331][ T7352] loop3: detected capacity change from 0 to 4096 [ 1346.765166][ T7366] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1346.926416][ T7352] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1346.956383][T16584] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1347.186835][T16584] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1347.227167][T16584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.268157][T16584] usb 2-1: Product: syz [ 1347.292987][T16584] usb 2-1: Manufacturer: syz [ 1347.297658][T16584] usb 2-1: SerialNumber: syz [ 1347.631172][T16584] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1347.725826][T16584] usb 2-1: USB disconnect, device number 46 [ 1347.759001][T16584] usblp0: removed [ 1348.224260][ T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1348.316154][ T7409] wg1 speed is unknown, defaulting to 1000 [ 1348.419586][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1348.436769][ T23] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1348.479810][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.506459][ T23] usb 4-1: Product: syz [ 1348.510701][ T23] usb 4-1: Manufacturer: syz [ 1348.515590][ T7375] loop0: detected capacity change from 0 to 32768 [ 1348.549690][ T23] usb 4-1: SerialNumber: syz [ 1348.557098][ T23] usb 4-1: config 0 descriptor?? [ 1348.588305][ T23] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1349.088615][ T23] gspca_topro: reg_w err -71 [ 1349.146947][ T23] gspca_topro: Sensor soi763a [ 1349.187708][ T23] usb 4-1: USB disconnect, device number 57 [ 1349.232910][ T5898] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1349.460976][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 1349.485075][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.586821][ T5898] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1349.608582][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.634594][ T5898] usb 1-1: Product: syz [ 1349.638853][ T5898] usb 1-1: Manufacturer: syz [ 1349.662050][ T5898] usb 1-1: SerialNumber: syz [ 1349.688743][ T5898] usb 1-1: config 0 descriptor?? [ 1349.726431][ T5898] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1350.010479][ T5898] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1350.042137][ T5898] quatech2: probe of 1-1:0.0 failed with error -8 [ 1350.336366][ T23] usb 1-1: USB disconnect, device number 41 [ 1350.416896][ T7438] loop1: detected capacity change from 0 to 32768 [ 1350.509486][ T7491] loop3: detected capacity change from 0 to 4096 [ 1350.555150][ T7438] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1350.589241][ T7491] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1351.774728][ T7529] netlink: 'syz.1.11596': attribute type 1 has an invalid length. [ 1351.803000][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11596'. [ 1351.878631][ T5785] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1352.166341][ T5785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1352.186792][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.214555][ T5785] usb 1-1: Product: syz [ 1352.229890][ T5785] usb 1-1: Manufacturer: syz [ 1352.245677][ T5785] usb 1-1: SerialNumber: syz [ 1352.318910][T21042] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1352.360431][ T7551] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1352.793167][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11612'. [ 1352.903487][ T23] usb 1-1: USB disconnect, device number 42 [ 1353.049668][ T5785] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1353.242632][ T7583] xt_CONNSECMARK: invalid mode: 129 [ 1353.299254][ T5785] usb 3-1: not running at top speed; connect to a high speed hub [ 1353.414928][ T5785] usb 3-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 1353.437253][ T5785] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1353.461546][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.494689][ T5785] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1353.516048][ T5785] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1353.523079][ T5785] uvcvideo 3-1:1.1: No supported video formats found. [ 1353.548715][T21042] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1353.555857][T21042] ath9k_htc: Failed to initialize the device [ 1353.683389][ T7595] netlink: 'syz.0.11619': attribute type 1 has an invalid length. [ 1353.702729][ T7595] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.11619'. [ 1353.896739][ T7604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1353.911765][ T5785] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 1353.929262][ T23] usb 1-1: ath9k_htc: USB layer deinitialized [ 1353.943233][ T5785] usb 3-1: USB disconnect, device number 34 [ 1353.986381][ T7604] bridge5: entered promiscuous mode [ 1354.015184][ T7604] bridge5: entered allmulticast mode [ 1355.432710][ T7652] loop0: detected capacity change from 0 to 64 [ 1355.504387][ T7652] syz.0.11633: attempt to access beyond end of device [ 1355.504387][ T7652] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1355.568958][ T7652] Buffer I/O error on dev loop0, logical block 512, async page read [ 1355.611380][ T7652] syz.0.11633: attempt to access beyond end of device [ 1355.611380][ T7652] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1355.690851][ T7652] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1355.701396][ T7662] loop1: detected capacity change from 0 to 64 [ 1355.746535][ T7662] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1356.095383][ T7677] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1356.530686][ T7693] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11644'. [ 1356.581219][ T7693] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11644'. [ 1356.845021][ T5898] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1357.051059][ T23] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1357.084377][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 1357.103250][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1357.127194][ T5898] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1357.146815][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.155661][ T5898] usb 4-1: Product: syz [ 1357.160528][ T5898] usb 4-1: Manufacturer: syz [ 1357.165188][ T5898] usb 4-1: SerialNumber: syz [ 1357.209068][ T5898] usb 4-1: config 0 descriptor?? [ 1357.229913][ T5898] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1357.292856][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.324956][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1357.358716][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1357.390133][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1357.409118][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.431190][ T23] usb 2-1: Product: syz [ 1357.435463][ T23] usb 2-1: Manufacturer: syz [ 1357.485012][ T23] usb 2-1: SerialNumber: syz [ 1357.513369][ T23] usb 2-1: config 0 descriptor?? [ 1357.625568][T21042] usb 4-1: USB disconnect, device number 58 [ 1357.794887][T16584] usb 2-1: USB disconnect, device number 47 [ 1359.972740][ T7831] netlink: 'syz.3.11682': attribute type 1 has an invalid length. [ 1360.022295][ T7831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11682'. [ 1360.031520][ T7831] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11682'. [ 1360.351527][ T7835] nvme_rdma: malformed address passed: 172.20.20.2<5trsv:4420 [ 1360.408527][ T7844] loop3: detected capacity change from 0 to 256 [ 1360.466189][ T7844] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1360.920379][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11688'. [ 1362.620683][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11707'. [ 1362.673339][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11707'. [ 1362.980598][ T7927] loop1: detected capacity change from 0 to 64 [ 1363.526677][ T7947] netlink: 'syz.2.11715': attribute type 2 has an invalid length. [ 1363.662078][ T7951] binfmt_misc: register: failed to install interpreter file ./file2 [ 1364.358610][ T7973] netlink: 'syz.0.11725': attribute type 21 has an invalid length. [ 1364.385120][ T7973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11725'. [ 1364.754403][ T7985] loop1: detected capacity change from 0 to 64 [ 1366.182075][T21042] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1366.365958][T16584] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1366.492076][ T8061] loop3: detected capacity change from 0 to 1024 [ 1366.594026][T16584] usb 2-1: Using ep0 maxpacket: 16 [ 1366.618917][T16584] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1366.625532][T21042] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.648676][T21042] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1366.659838][T21042] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1366.660646][T16584] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.679068][T21042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1366.679097][T21042] usb 3-1: SerialNumber: syz [ 1366.768161][T16584] usb 2-1: config 0 has no interface number 0 [ 1366.803286][T16584] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1366.857116][T16584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.890853][T16584] usb 2-1: config 0 descriptor?? [ 1366.977971][T21042] usb 3-1: 0:2 : does not exist [ 1367.037294][T21042] usb 3-1: USB disconnect, device number 35 [ 1367.149786][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.222014][ T23] usb 2-1: USB disconnect, device number 48 [ 1368.348757][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11763'. [ 1368.362701][ T8132] tmpfs: Bad value for 'mpol' [ 1368.632320][ T8141] netlink: 'syz.3.11767': attribute type 1 has an invalid length. [ 1369.237590][ T8162] loop2: detected capacity change from 0 to 1024 [ 1369.358196][ T8169] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.11775'. [ 1369.401723][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11775'. [ 1370.089306][ T8193] Unsupported ieee802154 address type: 0 [ 1370.432391][ T8202] Cannot find del_set index 286 as target [ 1370.833471][ T23] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1371.028373][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1371.048741][ T23] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1371.077680][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1371.129675][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.159618][ T23] usb 4-1: Product: syz [ 1371.175801][ T23] usb 4-1: Manufacturer: syz [ 1371.192075][ T23] usb 4-1: SerialNumber: syz [ 1371.202151][ T8227] comedi comedi2: pcl818: I/O port conflict (0x140,16) [ 1371.227677][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 1371.520570][ T8236] loop0: detected capacity change from 0 to 1024 [ 1371.573304][ T8236] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1371.689472][ T8236] fuse: Bad value for 'fd' [ 1371.726219][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1371.759237][ T23] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 1372.537613][ T8270] loop2: detected capacity change from 0 to 1024 [ 1373.025812][ T8289] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1373.788879][ T8276] loop1: detected capacity change from 0 to 32768 [ 1373.876602][ T8276] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1374.091616][ T8276] XFS (loop1): Ending clean mount [ 1374.121262][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11817'. [ 1374.306341][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1375.536776][ T28] audit: type=1326 audit(2000000249.427:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.11828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dd39e0d9 code=0x7ffc0000 [ 1375.621988][ T8376] loop0: detected capacity change from 0 to 2048 [ 1375.651678][ T8378] program syz.1.11831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1375.657231][ T28] audit: type=1326 audit(2000000249.455:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.11828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dd39e0d9 code=0x7ffc0000 [ 1375.681774][ T8376] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 1375.733579][ T8380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1375.780547][ T28] audit: type=1326 audit(2000000249.473:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.11828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f21dd39e0d9 code=0x7ffc0000 [ 1375.783957][ T8376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1375.953641][ T28] audit: type=1326 audit(2000000249.473:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.11828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dd39e0d9 code=0x7ffc0000 [ 1376.056932][ T28] audit: type=1326 audit(2000000249.473:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.11828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dd39e0d9 code=0x7ffc0000 [ 1376.457302][ T8400] Process accounting paused [ 1377.354988][ T8443] loop2: detected capacity change from 0 to 256 [ 1378.272737][ T8469] netlink: 'syz.2.11856': attribute type 1 has an invalid length. [ 1378.523634][ T8487] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11864'. [ 1378.542585][ T8487] openvswitch: netlink: Flow key attribute not present in set flow. [ 1378.759865][ T28] audit: type=1400 audit(2000000252.396:9000): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8492 comm="syz.2.11866" [ 1379.330056][ T8517] loop1: detected capacity change from 0 to 512 [ 1379.552277][ T8517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.573307][ T8517] ext4 filesystem being mounted at /3081/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.634339][ T8517] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #12: comm syz.1.11873: directory missing '..' [ 1379.924200][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.090435][ T8543] tmpfs: User quota block hardlimit too large. [ 1380.180415][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11881'. [ 1380.211643][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11881'. [ 1380.441062][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1381.181282][ T8548] loop1: detected capacity change from 0 to 32768 [ 1381.312249][ T8578] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1381.372627][ T8548] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1381.579895][ T8588] loop2: detected capacity change from 0 to 256 [ 1381.594082][ T8548] XFS (loop1): Ending clean mount [ 1381.809436][ T8588] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1381.966339][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1382.229170][ T8599] netlink: 'syz.3.11895': attribute type 11 has an invalid length. [ 1383.148742][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11894'. [ 1383.879843][ T8656] netlink: 959 bytes leftover after parsing attributes in process `syz.0.11910'. [ 1384.390827][ T8670] loop0: detected capacity change from 0 to 1764 [ 1387.528933][ T8780] loop1: detected capacity change from 0 to 2048 [ 1387.597534][ T8786] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1387.877185][ T8792] netlink: 'syz.3.11953': attribute type 3 has an invalid length. [ 1387.918069][ T8792] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11953'. [ 1387.946661][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11952'. [ 1388.606526][ T8814] loop3: detected capacity change from 0 to 8 [ 1388.613858][ T8814] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1389.420601][ T8843] netlink: 'syz.0.11969': attribute type 29 has an invalid length. [ 1389.468576][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11969'. [ 1389.590945][ T8847] loop1: detected capacity change from 0 to 1024 [ 1389.735678][ T8847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.763633][ T8853] loop0: detected capacity change from 0 to 512 [ 1389.810087][ T8853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1389.900471][ T8853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1389.942101][ T8853] System zones: 1-12 [ 1390.013529][ T8853] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 1390.051481][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.096956][ T8853] EXT4-fs (loop0): 1 truncate cleaned up [ 1390.130786][ T8853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.348243][ T8853] EXT4-fs error (device loop0): ext4_lookup:1858: inode #16: comm syz.0.11973: iget: bogus i_mode (110355) [ 1390.593676][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.622778][ T8920] tc_dump_action: action bad kind [ 1391.974336][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1392.017448][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1392.340889][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12001'. [ 1392.627857][ T8960] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1393.735140][ T9005] netlink: 25 bytes leftover after parsing attributes in process `syz.3.12019'. [ 1393.756725][ T9005] netlink: 25 bytes leftover after parsing attributes in process `syz.3.12019'. [ 1395.761392][ T9081] netlink: 'syz.3.12044': attribute type 2 has an invalid length. [ 1396.597142][ T9114] loop1: detected capacity change from 0 to 164 [ 1397.318448][ T9141] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 7 out of range (1000000..45000000) [ 1397.454664][ T9148] netlink: 'syz.1.12065': attribute type 1 has an invalid length. [ 1397.462593][ T9148] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12065'. [ 1397.536715][ T9148] NCSI netlink: No device for ifindex 0 [ 1397.594727][ T9152] loop3: detected capacity change from 0 to 512 [ 1397.693838][ T9152] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 1397.702719][ T9152] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1397.748207][ T9152] EXT4-fs (loop3): mount failed [ 1398.666451][ T9193] loop3: detected capacity change from 0 to 1024 [ 1398.763110][ T9193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.938376][ T9193] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #11: comm syz.3.12077: directory missing '..' [ 1399.032405][ T9193] EXT4-fs (loop3): Remounting filesystem read-only [ 1399.187931][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.227539][ T9210] bridge0: port 3(netdevsim0) entered blocking state [ 1399.234469][ T9210] bridge0: port 3(netdevsim0) entered forwarding state [ 1399.813935][ T9221] loop1: detected capacity change from 0 to 4096 [ 1399.879697][ T9221] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1399.935525][ T9231] netlink: 'syz.3.12087': attribute type 7 has an invalid length. [ 1399.964310][ T9221] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1400.675045][ T5898] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1400.881081][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 1400.888692][ T5898] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 1400.921618][ T5898] usb 4-1: config 254 has no interface number 0 [ 1400.936570][ T5898] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1400.958881][ T5898] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1400.981621][ T5898] usb 4-1: config 254 interface 235 has no altsetting 0 [ 1401.002622][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1401.018728][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1401.051254][ T5898] usb 4-1: Product: syz [ 1401.065561][ T5898] usb 4-1: Manufacturer: syz [ 1401.070221][ T5898] usb 4-1: SerialNumber: syz [ 1401.106611][ T9239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1401.412895][ T9239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1401.423645][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12097'. [ 1401.445780][ T5898] usbtest 4-1:254.235: Linux gadget zero [ 1401.451508][ T5898] usbtest 4-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1401.746413][ T9284] loop1: detected capacity change from 0 to 128 [ 1401.767877][ T5898] usb 4-1: USB disconnect, device number 60 [ 1401.798778][ T9284] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1401.846749][ T9284] hpfs: filesystem error: improperly stopped [ 1401.864752][ T9284] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1401.894600][ T9284] hpfs: You really don't want any checks? You are crazy... [ 1401.920329][ T9284] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 1401.954592][ T9284] hpfs: code page support is disabled [ 1401.971037][ T9284] hpfs: hpfs_map_4sectors(): unaligned read [ 1401.989785][ T9284] hpfs: hpfs_map_4sectors(): unaligned read [ 1401.995940][ T9284] hpfs: filesystem error: unable to find root dir [ 1404.305976][ T9370] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1404.357348][ T9370] bond6 (unregistering): Released all slaves [ 1405.678121][ T9481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12139'. [ 1405.706354][ T9481] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12139'. [ 1405.733923][ T9481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12139'. [ 1405.774773][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12139'. [ 1406.006378][ T9490] loop2: detected capacity change from 0 to 512 [ 1406.153263][ T9490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.234865][ T9488] loop0: detected capacity change from 0 to 4096 [ 1406.302793][ T9490] ext4 filesystem being mounted at /2738/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.332516][ T9488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.694870][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.841598][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.005082][ T4427] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1408.437414][ T4427] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1408.471446][ T4427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.514741][ T4427] usb 3-1: Product: syz [ 1408.519041][ T4427] usb 3-1: Manufacturer: syz [ 1408.523678][ T4427] usb 3-1: SerialNumber: syz [ 1408.563183][ T4427] usb 3-1: config 0 descriptor?? [ 1408.679456][ T4427] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 036 [ 1409.111267][ T4427] (null): failure reading functionality [ 1409.215157][ T4427] i2c i2c-2: failure reading functionality [ 1409.239660][ T4427] i2c i2c-2: connected i2c-tiny-usb device [ 1409.270338][ T4427] usb 3-1: USB disconnect, device number 36 [ 1409.460429][ T9605] netlink: 'syz.3.12170': attribute type 2 has an invalid length. [ 1409.490663][ T9605] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12170'. [ 1409.834973][ T9568] loop0: detected capacity change from 0 to 32768 [ 1409.940594][ T9568] jfs_strtoUCS: char2uni returned -22. [ 1409.970255][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12174'. [ 1409.981437][ T9568] charset = cp949, char = 0xd4 [ 1410.078964][ T9620] [U] ªeÍ[è¯Â¦Ooj°4Ò¥¶1=³Ú™ªß7yoÕü|.Â2àõ-s^Š™²{ [ 1410.101845][ T9568] Process accounting resumed [ 1410.591756][ T9634] xt_bpf: check failed: parse error [ 1411.527916][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12190'. [ 1412.102727][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12198'. [ 1412.585042][ T9705] ip6erspan1: entered allmulticast mode [ 1414.067033][ T9743] devtmpfs: Cannot enable quota on remount [ 1414.239732][ T9712] loop3: detected capacity change from 0 to 40427 [ 1414.338409][ T9712] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1414.346216][ T9712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1414.409460][ T9712] F2FS-fs (loop3): invalid crc value [ 1414.833730][ T9712] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1414.875075][ T9712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1414.977746][T16584] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1415.088810][ T9712] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 1415.225385][T16584] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.249609][T16584] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1415.258688][T16584] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1415.272945][T16584] usb 2-1: string descriptor 0 read error: -22 [ 1415.279492][T16584] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1415.302940][T16584] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1415.339901][T16584] usb 2-1: 0:2 : does not exist [ 1415.400173][T16584] usb-storage 2-1:1.1: USB Mass Storage device detected [ 1415.864461][T16584] us122l: couldn't allocate write buffer [ 1415.900445][T16584] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 1415.954878][T16584] usb 2-1: USB disconnect, device number 49 [ 1416.393086][ T9772] loop0: detected capacity change from 0 to 32768 [ 1416.510474][ T9772] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1416.531347][ T9811] loop2: detected capacity change from 0 to 4096 [ 1416.680296][ T9772] XFS (loop0): Ending clean mount [ 1416.842986][ T9772] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 1417.126680][ T5776] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1417.185361][ T9833] loop1: detected capacity change from 0 to 1764 [ 1417.347856][ T9833] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1418.821165][ T9879] loop2: detected capacity change from 0 to 64 [ 1418.892448][ T9884] netlink: 'syz.1.12242': attribute type 1 has an invalid length. [ 1418.924935][ T9884] netlink: 232 bytes leftover after parsing attributes in process `syz.1.12242'. [ 1421.028680][ T9950] loop1: detected capacity change from 0 to 4096 [ 1421.069830][ T9950] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1421.308661][ T9950] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 1421.712537][ T12] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 1421.787783][ T5777] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 1421.819724][ T5777] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1421.827450][ T5777] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 1421.864440][ T12] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 1421.873250][ T9982] TCP: TCP_TX_DELAY enabled [ 1422.645960][T10016] fuse: blksize only supported for fuseblk [ 1422.825234][T10022] tipc: Can't bind to reserved service type 32 [ 1423.298530][T10029] loop1: detected capacity change from 0 to 4096 [ 1424.246554][T10065] xt_socket: unknown flags 0x58 [ 1424.478603][T10074] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12300'. [ 1424.953244][T10093] tipc: Trying to set illegal importance in message [ 1425.128346][T10099] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12307'. [ 1425.144758][T10099] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1425.157803][T10099] 0ªX¹¦D: entered allmulticast mode [ 1425.160830][T10101] xt_cgroup: invalid path, errno=-2 [ 1425.170038][T10099] veth0_macvtap: entered allmulticast mode [ 1425.176266][ T5898] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1425.200240][T10099] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1425.387937][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 1425.401703][ T5898] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1425.424167][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.445850][ T5898] usb 4-1: Product: syz [ 1425.450272][ T5898] usb 4-1: Manufacturer: syz [ 1425.475802][ T5898] usb 4-1: SerialNumber: syz [ 1425.658674][T21042] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1425.879233][T21042] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1425.919159][T21042] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1425.929421][T21042] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.972198][T21042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.995379][ T5898] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1426.005723][T10105] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1426.019287][ T5898] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1426.063914][T21042] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1426.100809][ T5898] usb 4-1: USB disconnect, device number 61 [ 1426.292607][T10145] loop1: detected capacity change from 0 to 1024 [ 1426.450765][T10145] hfsplus: xattr searching failed [ 1426.479262][ T28] audit: type=1800 audit(2000000296.404:9001): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12315" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1426.709442][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.896518][T21042] usb 3-1: USB disconnect, device number 37 [ 1427.408132][T10203] loop3: detected capacity change from 0 to 64 [ 1428.445668][T10238] netlink: zone id is out of range [ 1428.542705][T10245] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12333'. [ 1428.619400][T10245] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.12333'. [ 1429.096976][T10264] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12340'. [ 1429.405809][T10280] netlink: 460 bytes leftover after parsing attributes in process `syz.1.12343'. [ 1429.728430][T10289] loop0: detected capacity change from 0 to 1024 [ 1430.008821][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1430.014650][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1430.059788][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1430.081090][ T49] hfsplus: b-tree write err: -5, ino 26 [ 1430.586281][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12354'. [ 1430.860011][T10330] loop3: detected capacity change from 0 to 1024 [ 1430.931518][T10338] xt_connbytes: Forcing CT accounting to be enabled [ 1431.273570][T10347] xt_policy: too many policy elements [ 1432.000467][T10372] netlink: 'syz.0.12370': attribute type 3 has an invalid length. [ 1432.316519][T21042] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1432.535268][T21042] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.545856][T21042] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1432.567473][T21042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.630140][T21042] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1432.858074][T10410] loop1: detected capacity change from 0 to 512 [ 1432.890175][T10410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1432.915680][T10410] EXT4-fs: Ignoring removed mblk_io_submit option [ 1432.973451][T10410] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1433.032261][T10410] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1433.057801][T10410] EXT4-fs (loop1): 1 truncate cleaned up [ 1433.065651][T10410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.103753][T10410] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 4: comm syz.1.12381: lblock 0 mapped to illegal pblock 4 (length 1) [ 1433.118776][T10410] EXT4-fs (loop1): Remounting filesystem read-only [ 1433.220820][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.656207][T10431] delete_channel: no stack [ 1433.974761][T10440] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1434.127892][T21042] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1434.409334][T21042] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1434.658637][T21042] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1434.678576][T21042] usb 3-1: USB disconnect, device number 38 [ 1435.163870][T10489] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12401'. [ 1436.575627][T10540] loop0: detected capacity change from 0 to 64 [ 1436.672054][T10540] syz.0.12416: attempt to access beyond end of device [ 1436.672054][T10540] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1436.697421][T21042] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1436.725068][T10540] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1437.304626][T21042] usb 3-1: Using ep0 maxpacket: 32 [ 1437.323183][T21042] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1437.338214][T21042] usb 3-1: config 0 has no interface number 0 [ 1437.358741][T21042] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1437.472179][T10572] netlink: 'syz.3.12423': attribute type 3 has an invalid length. [ 1437.501076][T10572] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12423'. [ 1437.911773][T21042] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1438.009333][T21042] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1438.033478][T21042] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1438.063578][T21042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.237056][T21042] usb 3-1: Product: syz [ 1438.247927][T21042] usb 3-1: Manufacturer: syz [ 1438.258738][T21042] usb 3-1: SerialNumber: syz [ 1438.275346][T21042] usb 3-1: config 0 descriptor?? [ 1438.294075][T21042] f81534 3-1:0.12: unsupported endpoint max packet size [ 1438.376091][T10593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12430'. [ 1438.447830][T10575] loop1: detected capacity change from 0 to 32768 [ 1438.497726][T10575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12425 (10575) [ 1438.591290][T10575] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1438.629312][T10575] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1438.689561][T10575] BTRFS info (device loop1): setting nodatasum [ 1438.729433][T10575] BTRFS info (device loop1): force zlib compression, level 3 [ 1438.764628][T10575] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1438.797925][T10575] BTRFS info (device loop1): use lzo compression, level 0 [ 1438.819815][T10575] BTRFS info (device loop1): turning on flush-on-commit [ 1438.838605][T10575] BTRFS info (device loop1): enabling auto defrag [ 1438.855779][T10575] BTRFS info (device loop1): max_inline at 4096 [ 1438.866168][T10575] BTRFS info (device loop1): using free space tree [ 1439.056157][T10575] BTRFS info (device loop1): enabling ssd optimizations [ 1439.604255][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1439.829183][T21042] usb 3-1: USB disconnect, device number 39 [ 1441.462646][T10685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12450'. [ 1442.259134][T10664] loop0: detected capacity change from 0 to 32768 [ 1442.334260][T10664] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1442.395637][T10664] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1442.441152][T10664] BTRFS info (device loop0): using free space tree [ 1442.739156][T10664] BTRFS info (device loop0): enabling ssd optimizations [ 1442.746275][T10664] BTRFS info (device loop0): auto enabling async discard [ 1443.112913][T10659] Process accounting paused [ 1443.114513][T10687] loop1: detected capacity change from 0 to 32768 [ 1443.197900][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1443.389657][T10687] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1443.757209][T21042] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1443.784455][ T5779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5779) [ 1443.851308][T10687] XFS (loop1): Ending clean mount [ 1444.285231][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1444.623965][T21042] usb 3-1: Using ep0 maxpacket: 16 [ 1444.734604][T21042] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1444.743008][T21042] usb 3-1: config 0 has no interface number 0 [ 1444.916753][T21042] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1444.940769][T21042] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1444.960111][T21042] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1444.979435][T21042] usb 3-1: Product: syz [ 1444.983788][T21042] usb 3-1: SerialNumber: syz [ 1445.037285][T21042] usb 3-1: config 0 descriptor?? [ 1445.069962][T21042] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input66 [ 1445.121185][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12473'. [ 1445.445491][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1445.453686][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1445.464140][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1445.471507][T21042] usb 3-1: USB disconnect, device number 40 [ 1445.477518][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1445.477546][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1445.570965][T10811] loop3: detected capacity change from 0 to 164 [ 1445.632159][T21042] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1445.649163][T10811] ISOFS: unable to read i-node block [ 1445.676179][T10811] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1445.967515][T10818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12479'. [ 1446.016963][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12479'. [ 1446.084428][T10818] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12479'. [ 1446.196483][T10818] netlink: 'syz.1.12479': attribute type 2 has an invalid length. [ 1446.207340][T10818] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12479'. [ 1446.294304][T10833] loop2: detected capacity change from 0 to 8 [ 1446.301619][T10833] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1446.416541][ T7004] udevd[7004]: incorrect cramfs checksum on /dev/loop2 [ 1446.649010][T10833] cramfs: bad data blocksize 4294934200 [ 1446.682993][ T5779] udevd[5779]: incorrect cramfs checksum on /dev/loop2 [ 1446.771093][T10833] cramfs: bad data blocksize 4294934200 [ 1446.792671][ T28] audit: type=1800 audit(2000000315.124:9002): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12482" name="file1" dev="loop2" ino=33092 res=0 errno=0 [ 1446.959214][T10853] SET target dimension over the limit! [ 1447.064610][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1448.667271][T10906] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.12504' sets config #1 [ 1448.714004][T10911] Unknown options in mask 5 [ 1449.004078][T10919] loop3: detected capacity change from 0 to 2048 [ 1449.078459][T10919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1449.612428][T10941] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1449.612428][T10941] program syz.0.12515 not setting count and/or reply_len properly [ 1449.760272][T10946] loop1: detected capacity change from 0 to 512 [ 1449.867310][T10946] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1449.947255][T10946] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.12516: inode has both inline data and extents flags [ 1449.993899][T10946] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.12516: couldn't read orphan inode 15 (err -117) [ 1450.094154][T10946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.350897][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.419481][T10967] loop0: detected capacity change from 0 to 512 [ 1450.459566][T10967] EXT4-fs: Ignoring removed nobh option [ 1450.529100][T10967] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1450.586853][T10967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1450.631980][T10967] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1450.680930][T10967] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.12521: attempt to clear invalid blocks 1024 len 1 [ 1450.727124][T10967] EXT4-fs (loop0): Remounting filesystem read-only [ 1450.771161][T10967] EXT4-fs (loop0): 1 truncate cleaned up [ 1450.808612][T10967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1450.937193][T10981] netlink: 'syz.1.12524': attribute type 1 has an invalid length. [ 1451.056747][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1452.019918][T11020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12536'. [ 1452.130252][T11026] binder: 11025:11026 ioctl c0306201 200000001580 returned -14 [ 1452.804800][T11051] bond6: option arp_all_targets: invalid value (18446744073709551615) [ 1452.879661][T11051] bond6 (unregistering): Released all slaves [ 1454.055561][T11154] loop3: detected capacity change from 0 to 4096 [ 1454.141761][T11167] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1454.340136][T16584] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1454.494644][T11175] ip6tnl4: entered allmulticast mode [ 1454.548448][T16584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1454.568036][T16584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1454.604913][T16584] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1454.620522][T16584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.664015][T16584] usb 2-1: Product: syz [ 1454.678109][T16584] usb 2-1: Manufacturer: syz [ 1454.698099][T16584] usb 2-1: SerialNumber: syz [ 1454.744914][T16584] usb 2-1: config 0 descriptor?? [ 1454.777199][T16584] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input67 [ 1455.237229][T16584] usb 2-1: USB disconnect, device number 50 [ 1455.667678][T11170] loop0: detected capacity change from 0 to 32768 [ 1455.731593][ T28] audit: type=1800 audit(2000000323.387:9003): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12562" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1456.936565][T11253] loop3: detected capacity change from 0 to 256 [ 1457.463267][T11271] netlink: 'syz.1.12586': attribute type 1 has an invalid length. [ 1458.056747][T11291] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12593'. [ 1458.119736][T11291] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12593'. [ 1459.082815][T11334] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12605'. [ 1459.154828][ T23] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1459.344980][T11340] loop2: detected capacity change from 0 to 256 [ 1459.361148][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1459.368938][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.372408][T11340] exfat: Deprecated parameter 'utf8' [ 1459.406181][T11340] exfat: Deprecated parameter 'utf8' [ 1459.411643][T11340] exfat: Deprecated parameter 'namecase' [ 1459.433009][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.479946][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1459.511402][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.572860][ T23] usb 4-1: config 0 descriptor?? [ 1459.599311][T11340] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1459.617163][ T23] hub 4-1:0.0: USB hub found [ 1459.881302][ T23] hub 4-1:0.0: 13 ports detected [ 1459.894419][ T23] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1460.111315][ T23] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1460.117748][ T23] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1460.174985][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 1460.185779][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 1460.244876][ T23] usb 4-1: USB disconnect, device number 62 [ 1460.723467][T11387] xt_bpf: check failed: parse error [ 1461.016359][T11397] loop2: detected capacity change from 0 to 512 [ 1461.252562][T11397] syz.2.12623: attempt to access beyond end of device [ 1461.252562][T11397] loop2: rw=2051, sector=12608, nr_sectors = 16128 limit=512 [ 1461.518937][T11412] netlink: 'syz.0.12627': attribute type 10 has an invalid length. [ 1461.526927][T11412] team0: Device wg1 is up. Set it down before adding it as a team port [ 1461.909885][T11422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.951010][T11431] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1461.988300][T11431] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1462.443252][T11441] loop2: detected capacity change from 0 to 4096 [ 1462.491529][T11444] loop1: detected capacity change from 0 to 4096 [ 1462.677530][T11444] ntfs3: loop1: ino=b, Correct links count -> 1. [ 1462.708359][T11444] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1462.910394][T11441] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1463.154143][T11441] ntfs3: loop2: Failed to load $Extend (-22). [ 1463.170796][T11441] ntfs3: loop2: Failed to initialize $Extend. [ 1464.220399][T11488] netlink: 'syz.2.12649': attribute type 21 has an invalid length. [ 1464.229136][T11488] netlink: 'syz.2.12649': attribute type 7 has an invalid length. [ 1465.048073][T11544] openvswitch: netlink: Message has 4 unknown bytes. [ 1465.790413][T11495] bond6 (unregistering): Released all slaves [ 1466.452581][T11598] raw_sendmsg: syz.0.12665 forgot to set AF_INET. Fix it! [ 1467.666950][T11645] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12680'. [ 1468.692683][T11686] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1469.076837][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1469.124815][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1469.282372][ T28] audit: type=1326 audit(2000000335.874:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.404802][ T28] audit: type=1326 audit(2000000335.874:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.429123][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.476647][T11712] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1469.485070][ T28] audit: type=1326 audit(2000000335.911:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.584253][ T28] audit: type=1326 audit(2000000335.920:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.609040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.672023][ T28] audit: type=1326 audit(2000000335.920:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.696384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.798132][T11725] loop1: detected capacity change from 0 to 256 [ 1469.809368][ T28] audit: type=1326 audit(2000000335.920:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.861101][T11729] cgroup: Name too long [ 1469.944462][ T28] audit: type=1326 audit(2000000335.920:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1469.968766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.076813][ T28] audit: type=1326 audit(2000000335.920:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1470.241010][ T28] audit: type=1326 audit(2000000335.920:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.12700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1470.294797][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12709'. [ 1470.898140][ T5837] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1471.104463][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 1471.117593][ T5837] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1471.131801][ T5837] usb 3-1: config 179 has no interface number 0 [ 1471.147602][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1471.174897][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1471.220537][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1471.258688][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1471.271652][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12719'. [ 1471.284056][ T5837] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1471.353574][T16584] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1471.585156][T16584] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1471.605234][T16584] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1471.635844][T16584] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1471.668287][T16584] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1471.705217][T16584] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1471.777401][T16584] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1471.786537][T16584] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1471.832582][T16584] usb 4-1: Product: syz [ 1471.836811][T16584] usb 4-1: Manufacturer: syz [ 1471.882290][T16584] cdc_wdm 4-1:1.0: skipping garbage [ 1471.915042][T16584] cdc_wdm 4-1:1.0: skipping garbage [ 1471.950954][T16584] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1471.982643][T16584] cdc_wdm 4-1:1.0: Unknown control protocol [ 1472.014975][ T5837] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1472.035200][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.070911][T11749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1472.294444][ T5837] usb 4-1: USB disconnect, device number 63 [ 1472.481879][T11812] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12726'. [ 1473.873707][T11860] loop3: detected capacity change from 0 to 512 [ 1473.946307][ T4427] usb 3-1: USB disconnect, device number 41 [ 1473.955795][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1474.008823][T11860] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.12741: bad orphan inode 13 [ 1474.136784][T11860] ext4_test_bit(bit=12, block=4) = 1 [ 1474.147651][T11860] is_bad_inode(inode)=0 [ 1474.165089][T11860] NEXT_ORPHAN(inode)=0 [ 1474.169227][T11860] max_ino=32 [ 1474.172460][T11860] i_nlink=1 [ 1474.208635][T11860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.414168][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.716389][T11888] netlink: 'syz.3.12746': attribute type 8 has an invalid length. [ 1474.745241][T11888] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12746'. [ 1475.043440][T11899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12750'. [ 1475.392359][T11910] loop3: detected capacity change from 0 to 1024 [ 1475.465976][T11910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.568175][T11910] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.12754: Attempting to read directory block (623) that is past i_size (638464) [ 1475.731047][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.768710][T11919] loop2: detected capacity change from 0 to 2048 [ 1476.082962][T11919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1476.913365][T11845] Process accounting resumed [ 1477.147915][T11970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12769'. [ 1478.097398][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12781'. [ 1478.898708][T12036] loop2: detected capacity change from 0 to 512 [ 1479.031239][T12036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.063762][T12036] ext4 filesystem being mounted at /2849/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.125239][T12041] netlink: 'syz.3.12792': attribute type 4 has an invalid length. [ 1479.143385][T12036] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.12789: Directory block failed checksum [ 1479.699023][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.415437][T12089] loop1: detected capacity change from 0 to 512 [ 1480.638310][T12089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1480.694390][T12089] ext4 filesystem being mounted at /3345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1481.155688][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.499162][T12158] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.097610][T12172] loop3: detected capacity change from 0 to 4096 [ 1483.127048][T12172] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1483.157279][T12181] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12835'. [ 1483.183657][T12172] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1484.824574][T12178] loop2: detected capacity change from 0 to 32768 [ 1485.040701][T12178] ea_get: invalid extended attribute [ 1485.065266][T12178] ea_get: invalid extended attribute [ 1485.905834][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1486.251608][T12264] loop0: detected capacity change from 0 to 32768 [ 1486.265836][T12287] geneve1: entered allmulticast mode [ 1486.506297][T12264] ERROR: (device loop0): diWrite: ixpxd invalid [ 1486.506297][T12264] [ 1486.522459][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12858'. [ 1486.584216][T12264] ERROR: (device loop0): remounting filesystem as read-only [ 1486.664803][T12264] ERROR: (device loop0): txCommit: [ 1486.664803][T12264] [ 1486.902867][T12305] x_tables: duplicate entry at hook 2 [ 1488.528879][T12358] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1489.421792][T12396] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1490.443800][T12431] loop1: detected capacity change from 0 to 4096 [ 1490.589049][T12443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1490.594794][T12444] loop2: detected capacity change from 0 to 256 [ 1490.662493][T12444] exfat: Deprecated parameter 'utf8' [ 1490.741987][ T788] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1490.959110][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1490.971104][T12444] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d) [ 1491.014598][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.055725][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1491.101512][ T788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1491.154219][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.162317][ T788] usb 4-1: Product: syz [ 1491.198350][ T788] usb 4-1: Manufacturer: syz [ 1491.203039][ T788] usb 4-1: SerialNumber: syz [ 1491.275466][ T788] usb 4-1: config 0 descriptor?? [ 1491.564932][ T788] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 1491.599643][ T788] 00 00 00 00 00 00 00 00 [ 1491.604250][ T788] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 1491.850376][ T788] usb 4-1: USB disconnect, device number 64 [ 1492.590793][T12508] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1492.670733][T12516] loop3: detected capacity change from 0 to 8 [ 1493.172356][T12533] netlink: 'syz.3.12925': attribute type 1 has an invalid length. [ 1493.566233][T12549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12930'. [ 1494.161945][T12568] MTD: Attempt to mount non-MTD device "./file0" [ 1494.180039][T12568] ./file0: Can't open blockdev [ 1494.266294][ T788] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1494.351050][T12571] ip6t_srh: unknown srh invflags 4000 [ 1494.474252][ T788] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1494.515982][ T788] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1494.525996][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1494.577107][ T788] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1494.597456][ T788] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1494.619357][ T788] usb 4-1: Product: syz [ 1494.623606][ T788] usb 4-1: Manufacturer: syz [ 1494.658463][ T788] usb 4-1: SerialNumber: syz [ 1494.707921][ T788] usb 4-1: config 0 descriptor?? [ 1494.768751][ T788] hub 4-1:0.0: bad descriptor, ignoring hub [ 1494.795258][ T788] hub: probe of 4-1:0.0 failed with error -5 [ 1494.832764][ T788] usb 4-1: selecting invalid altsetting 0 [ 1495.034777][T12556] loop0: detected capacity change from 0 to 32768 [ 1495.163019][T12535] loop2: detected capacity change from 0 to 32768 [ 1495.592614][T16584] usb 4-1: USB disconnect, device number 65 [ 1495.751874][T12535] JBD2: Ignoring recovery information on journal [ 1496.179484][T12626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1496.268906][T12535] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1496.840266][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 1497.063425][T12654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12953'. [ 1497.540563][T12669] loop0: detected capacity change from 0 to 256 [ 1497.579274][T12670] ip6tnl4: entered allmulticast mode [ 1497.744580][T12669] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1497.964385][T12669] exFAT-fs (loop0): invalid start cluster (12296) [ 1497.980558][T12686] openvswitch: netlink: Actions may not be safe on all matching packets [ 1498.407005][T12702] loop0: detected capacity change from 0 to 1024 [ 1498.491050][T12702] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1499.232932][T12714] bond6: option min_links: invalid value (18446744073709551613) [ 1499.352150][T12714] bond6: option min_links: allowed values 0 - 2147483647 [ 1499.376048][T12714] bond6 (unregistering): Released all slaves [ 1499.530455][T12692] loop3: detected capacity change from 0 to 32768 [ 1499.644309][T12793] loop1: detected capacity change from 0 to 256 [ 1499.763199][T12793] FAT-fs (loop1): Directory bread(block 64) failed [ 1499.807559][T12793] FAT-fs (loop1): Directory bread(block 65) failed [ 1499.834696][T12793] FAT-fs (loop1): Directory bread(block 66) failed [ 1499.902208][T12793] FAT-fs (loop1): Directory bread(block 67) failed [ 1499.977333][T12793] FAT-fs (loop1): Directory bread(block 68) failed [ 1500.020940][T12793] FAT-fs (loop1): Directory bread(block 69) failed [ 1500.046739][T12793] FAT-fs (loop1): Directory bread(block 70) failed [ 1500.053339][T12793] FAT-fs (loop1): Directory bread(block 71) failed [ 1500.071429][T12793] FAT-fs (loop1): Directory bread(block 72) failed [ 1500.078049][T12793] FAT-fs (loop1): Directory bread(block 73) failed [ 1500.802065][T12825] loop2: detected capacity change from 0 to 1024 [ 1501.079733][T12825] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1501.086727][T12825] hfsplus: xattr searching failed [ 1501.227903][ T23] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1501.454916][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1501.465318][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.516995][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1501.632752][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.697542][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.733573][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1501.759242][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1501.787470][ T23] usb 2-1: Product: syz [ 1501.824453][ T23] usb 2-1: Manufacturer: syz [ 1501.857161][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 1501.862441][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 1501.926334][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1501.932346][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 1502.202555][T12878] bond0: (slave gre0): refused to change device type [ 1502.204070][T12831] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1502.313260][ T23] usb 2-1: USB disconnect, device number 51 [ 1502.988868][T12915] loop2: detected capacity change from 0 to 16 [ 1503.011453][T12915] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1503.526725][ T23] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1503.734802][ T23] usb 2-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 1503.761038][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1503.828716][ T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1503.878322][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.918129][ T23] usb 2-1: Product: syz [ 1503.944482][ T23] usb 2-1: Manufacturer: syz [ 1503.970579][ T23] usb 2-1: SerialNumber: syz [ 1504.197567][T12944] loop0: detected capacity change from 0 to 8192 [ 1504.253876][T12944] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1504.321287][ T23] usb 2-1: 0:1 : does not exist [ 1504.330367][T12944] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1504.348958][ T23] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 1504.379967][T12944] REISERFS (device loop0): using ordered data mode [ 1504.401770][T12944] reiserfs: using flush barriers [ 1504.409385][ T23] usb 2-1: unit 13 not found! [ 1504.439302][T12944] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1504.516407][ T23] usb 2-1: USB disconnect, device number 52 [ 1504.598134][T12944] REISERFS (device loop0): checking transaction log (loop0) [ 1504.703873][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1504.736660][T12944] REISERFS (device loop0): Using r5 hash to sort names [ 1504.785332][T12944] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1505.491990][T12998] netlink: 'syz.0.13021': attribute type 21 has an invalid length. [ 1505.536649][T12998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13021'. [ 1505.695518][ T23] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1505.928928][ T23] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1505.970535][ T23] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1506.009988][ T23] usb 2-1: config 0 has no interface number 0 [ 1506.027607][ T23] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1506.085935][ T23] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1506.125728][ T23] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1506.172037][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.203168][ T23] usb 2-1: config 0 descriptor?? [ 1506.329782][T13025] loop2: detected capacity change from 0 to 64 [ 1506.728062][ T23] usb 2-1: USB disconnect, device number 53 [ 1506.969609][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13035'. [ 1507.023228][T13053] loop2: detected capacity change from 0 to 736 [ 1507.674638][T13072] netlink: 'syz.1.13040': attribute type 6 has an invalid length. [ 1508.764282][ T788] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1509.006494][ T788] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1509.016721][ T788] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1509.033437][ T788] usb 2-1: Product: syz [ 1509.038422][ T788] usb 2-1: Manufacturer: syz [ 1509.043224][ T788] usb 2-1: SerialNumber: syz [ 1509.061615][T13121] netlink: 'syz.3.13055': attribute type 1 has an invalid length. [ 1509.081728][ T788] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1509.114262][T13121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13055'. [ 1509.579752][ T788] vp7045: USB control message 'in' went wrong. [ 1509.598494][ T788] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1509.645047][ T788] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1509.703794][ T788] usb 2-1: USB disconnect, device number 54 [ 1509.926665][T13144] Process accounting paused [ 1510.120500][T13158] netlink: 376 bytes leftover after parsing attributes in process `syz.0.13064'. [ 1510.472448][T13173] netlink: 'syz.0.13067': attribute type 1 has an invalid length. [ 1510.505199][T13173] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13067'. [ 1510.818846][T13181] loop3: detected capacity change from 0 to 1024 [ 1511.390426][T13204] cgroup: Bad value for 'name' [ 1511.748788][T13217] Malformed UNC in devname [ 1511.748788][T13217] [ 1511.755473][T13217] CIFS: VFS: Malformed UNC in devname [ 1512.451690][T13243] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1513.522208][T13279] loop0: detected capacity change from 0 to 256 [ 1513.550774][T13279] exfat: Deprecated parameter 'utf8' [ 1513.556155][T13279] exfat: Deprecated parameter 'utf8' [ 1513.649904][T13279] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1513.672636][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1513.841819][T13279] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1514.833659][T13325] loop1: detected capacity change from 0 to 512 [ 1514.881249][T13325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1514.888028][T13325] EXT4-fs: Ignoring removed bh option [ 1514.978315][T13325] EXT4-fs (loop1): 1 truncate cleaned up [ 1514.985411][T13325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1515.203309][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.725198][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13122'. [ 1515.764901][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13122'. [ 1516.646647][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13132'. [ 1516.947718][T13305] loop2: detected capacity change from 0 to 32768 [ 1516.949463][T13391] syz.3.13135: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1517.078035][T13391] CPU: 1 PID: 13391 Comm: syz.3.13135 Not tainted syzkaller #0 [ 1517.085674][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1517.095760][T13391] Call Trace: [ 1517.099071][T13391] [ 1517.102027][T13391] dump_stack_lvl+0x18c/0x250 [ 1517.106768][T13391] ? show_regs_print_info+0x20/0x20 [ 1517.112014][T13391] ? load_image+0x420/0x420 [ 1517.116566][T13391] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1517.123023][T13391] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1517.129593][T13391] warn_alloc+0x246/0x340 [ 1517.133974][T13391] ? stack_trace_save+0xaa/0x100 [ 1517.138964][T13391] ? zone_watermark_ok_safe+0x230/0x230 [ 1517.144557][T13391] ? kasan_set_track+0x5f/0x70 [ 1517.149365][T13391] ? kasan_set_track+0x4e/0x70 [ 1517.154159][T13391] ? __kasan_kmalloc+0x8f/0xa0 [ 1517.158957][T13391] ? xsk_init_queue+0xad/0x100 [ 1517.163837][T13391] ? xsk_setsockopt+0x413/0x750 [ 1517.168721][T13391] ? do_sock_setsockopt+0x175/0x1a0 [ 1517.174043][T13391] ? __x64_sys_setsockopt+0x182/0x200 [ 1517.179458][T13391] __vmalloc_node_range+0x129/0x1320 [ 1517.184834][T13391] ? free_vm_area+0x50/0x50 [ 1517.189395][T13391] vmalloc_user+0x74/0x80 [ 1517.193763][T13391] ? xskq_create+0xbf/0x170 [ 1517.198331][T13391] xskq_create+0xbf/0x170 [ 1517.202692][T13391] xsk_init_queue+0xad/0x100 [ 1517.207408][T13391] xsk_setsockopt+0x413/0x750 [ 1517.212128][T13391] ? xsk_poll+0x670/0x670 [ 1517.216499][T13391] ? __fget_files+0x28/0x460 [ 1517.221585][T13391] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1517.227176][T13391] ? security_socket_setsockopt+0x7e/0xa0 [ 1517.233101][T13391] ? xsk_poll+0x670/0x670 [ 1517.237474][T13391] do_sock_setsockopt+0x175/0x1a0 [ 1517.242563][T13391] ? __fdget+0x180/0x210 [ 1517.246856][T13391] __x64_sys_setsockopt+0x182/0x200 [ 1517.252187][T13391] do_syscall_64+0x55/0xb0 [ 1517.256638][T13391] ? clear_bhb_loop+0x40/0x90 [ 1517.261439][T13391] ? clear_bhb_loop+0x40/0x90 [ 1517.266149][T13391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1517.272079][T13391] RIP: 0033:0x7f6a5419e0d9 [ 1517.276529][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.296230][T13391] RSP: 002b:00007f6a55095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1517.304706][T13391] RAX: ffffffffffffffda RBX: 00007f6a54425fa0 RCX: 00007f6a5419e0d9 [ 1517.312715][T13391] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1517.320714][T13391] RBP: 00007f6a54235024 R08: 0000000000000004 R09: 0000000000000000 [ 1517.328714][T13391] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.336799][T13391] R13: 00007f6a54426038 R14: 00007f6a54425fa0 R15: 00007fffb69fea58 [ 1517.344818][T13391] [ 1517.379946][T13305] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1517.395621][T13305] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1517.404346][T13305] BTRFS info (device loop2): using free space tree [ 1517.490409][T13391] Mem-Info: [ 1517.499416][T13391] active_anon:11255 inactive_anon:8 isolated_anon:0 [ 1517.499416][T13391] active_file:1551 inactive_file:45188 isolated_file:0 [ 1517.499416][T13391] unevictable:768 dirty:209 writeback:0 [ 1517.499416][T13391] slab_reclaimable:11329 slab_unreclaimable:102167 [ 1517.499416][T13391] mapped:25293 shmem:5444 pagetables:706 [ 1517.499416][T13391] sec_pagetables:0 bounce:0 [ 1517.499416][T13391] kernel_misc_reclaimable:0 [ 1517.499416][T13391] free:1336089 free_pcp:8392 free_cma:0 [ 1517.563816][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1517.570223][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1517.592275][T13391] Node 0 active_anon:45920kB inactive_anon:32kB active_file:6204kB inactive_file:180548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101172kB dirty:836kB writeback:0kB shmem:21040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11244kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no [ 1517.603540][T13406] loop0: detected capacity change from 0 to 1764 [ 1517.636940][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1517.688409][T13391] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1517.721095][ T5898] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1517.733030][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1517.767867][T13391] Node 0 [ 1517.831814][T13406] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1517.879873][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1517.880867][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1517.903055][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1517.927860][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1517.971171][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1517.973115][ T5898] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1517.992233][T13391] DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.026200][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1518.035723][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1518.063157][T13391] lowmem_reserve[]: [ 1518.074055][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.079498][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1518.118512][T13391] 0 [ 1518.131666][T13305] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1518.142315][ T5898] usb 2-1: config 0 descriptor?? [ 1518.181804][T13305] BTRFS error (device loop2): open_ctree failed: -12 [ 1518.198853][T13391] 2521 2522 2522 2522 [ 1518.241520][T13391] Node 0 DMA32 free:1425388kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45584kB inactive_anon:32kB active_file:6204kB inactive_file:179740kB unevictable:1536kB writepending:872kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:20276kB local_pcp:17176kB free_cma:0kB [ 1518.340776][T13391] lowmem_reserve[]: 0 0 0 0 0 [ 1518.345686][T13391] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1518.471069][ T5898] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1518.482003][T13391] lowmem_reserve[]: 0 0 0 0 0 [ 1518.486802][T13391] Node 1 Normal free:3903388kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12656kB local_pcp:4096kB free_cma:0kB [ 1518.544123][ T5898] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1518.684008][ T5898] [drm:udl_init] *ERROR* Selecting channel failed [ 1518.745016][T13391] lowmem_reserve[]: 0 0 0 0 0 [ 1518.749898][T13391] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1518.799896][ T5898] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1518.816931][T13391] Node 0 DMA32: 177*4kB (UME) 395*8kB (UME) 95*16kB (UME) 575*32kB (UME) 669*64kB (UME) 254*128kB (UME) 103*256kB (UM) 30*512kB (UME) 19*1024kB (UME) 7*2048kB (UM) 305*4096kB (UM) = 1423916kB [ 1518.874125][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13140'. [ 1518.885788][ T5898] [drm] Initialized udl on minor 2 [ 1518.906927][ T5898] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1518.941254][ T5898] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1518.957519][T13391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1518.977178][ T5779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5779) [ 1519.002645][ T5898] usb 2-1: USB disconnect, device number 55 [ 1519.009455][T16584] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1519.043301][T13391] Node 1 Normal: 181*4kB (UE) 59*8kB (UE) 37*16kB (UE) 235*32kB (UE) 89*64kB (UME) 26*128kB (UME) 6*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (U) 947*4096kB (M) = 3903388kB [ 1519.145702][T13391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.220352][T13391] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1519.273322][T13391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.294575][T13391] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1519.303961][T13391] 51963 total pagecache pages [ 1519.354689][T13391] 0 pages in swap cache [ 1519.359677][T13391] Free swap = 124472kB [ 1519.363877][T13391] Total swap = 124996kB [ 1519.368068][T13391] 2097051 pages RAM [ 1519.413792][T13391] 0 pages HighMem/MovableOnly [ 1519.418662][T13391] 416958 pages reserved [ 1519.422881][T13391] 0 pages cma reserved [ 1519.598254][T13458] usb usb7: check_ctrlrecip: process 13458 (syz.0.13143) requesting ep 01 but needs 81 [ 1519.670523][T13458] usb usb7: usbfs: process 13458 (syz.0.13143) did not claim interface 0 before use [ 1520.707047][T13440] loop2: detected capacity change from 0 to 32768 [ 1522.611466][ T5837] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1522.881766][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 1522.903295][T13537] loop2: detected capacity change from 0 to 32768 [ 1522.910257][ T5837] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1522.941395][ T5837] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1522.958358][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.977661][ T5837] usb 2-1: Product: syz [ 1522.990396][ T5837] usb 2-1: Manufacturer: syz [ 1523.002859][ T5837] usb 2-1: SerialNumber: syz [ 1523.014751][ T5837] r8152-cfgselector 2-1: config 0 descriptor?? [ 1523.039599][T13537] jfs_strtoUCS: char2uni returned -22. [ 1523.056022][T13537] charset = cp936, char = 0xd4 [ 1523.380361][ T5837] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1523.499649][T13575] loop3: detected capacity change from 0 to 256 [ 1523.518022][T13575] exfat: Deprecated parameter 'utf8' [ 1523.554964][T13575] exfat: Deprecated parameter 'utf8' [ 1523.560449][T13575] exfat: Deprecated parameter 'utf8' [ 1523.574099][ T5898] usb 2-1: USB disconnect, device number 56 [ 1523.635837][T13575] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1525.487062][T13647] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by ""[13647] [ 1526.233461][T13680] (null): rxe_set_mtu: Set mtu to 4096 [ 1526.246868][T13680] lo speed is unknown, defaulting to 1000 [ 1526.279744][T13680] lo speed is unknown, defaulting to 1000 [ 1526.286330][T13680] lo speed is unknown, defaulting to 1000 [ 1526.401900][ T28] audit: type=1326 audit(2000000388.550:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.13203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21dd39e0d9 code=0x0 [ 1526.893058][T13687] block device autoloading is deprecated and will be removed. [ 1527.108154][T13680] infiniband syz1: set down [ 1527.112958][T16584] lo speed is unknown, defaulting to 1000 [ 1527.155348][T13680] infiniband syz1: added lo [ 1527.344664][T13680] RDS/IB: syz1: added [ 1527.361108][T13680] smc: adding ib device syz1 with port count 1 [ 1527.372366][T13680] smc: ib device syz1 port 1 has pnetid [ 1527.383076][ T5898] lo speed is unknown, defaulting to 1000 [ 1527.390180][T13680] lo speed is unknown, defaulting to 1000 [ 1527.909507][T13680] lo speed is unknown, defaulting to 1000 [ 1528.334616][T13731] loop0: detected capacity change from 0 to 512 [ 1528.449035][T13731] EXT4-fs (loop0): 1 truncate cleaned up [ 1528.467323][T13731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.879318][T13680] lo speed is unknown, defaulting to 1000 [ 1529.002384][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.762818][T13680] lo speed is unknown, defaulting to 1000 [ 1531.082952][ T28] audit: type=1326 audit(2000000392.829:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13791 comm="syz.0.13242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1531.217941][ T28] audit: type=1326 audit(2000000392.866:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13791 comm="syz.0.13242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1531.327797][ T28] audit: type=1326 audit(2000000392.903:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13791 comm="syz.0.13242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1531.481537][ T28] audit: type=1326 audit(2000000392.903:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13791 comm="syz.0.13242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1531.591896][ T28] audit: type=1326 audit(2000000392.903:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13791 comm="syz.0.13242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1531.694868][T13803] loop0: detected capacity change from 0 to 4096 [ 1531.965588][T13803] ntfs3: loop0: ino=5, "/" directory corrupted [ 1531.980692][T13803] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1532.695382][T13835] loop0: detected capacity change from 0 to 128 [ 1532.782175][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13257'. [ 1532.984818][ T5776] sysv_free_block: flc_count > flc_size [ 1533.017461][ T5776] sysv_free_block: flc_count > flc_size [ 1533.033064][ T5776] sysv_free_block: flc_count > flc_size [ 1533.038709][ T5776] sysv_free_block: flc_count > flc_size [ 1533.086759][ T5776] sysv_free_block: flc_count > flc_size [ 1533.092568][ T5776] sysv_free_block: flc_count > flc_size [ 1533.134515][ T5776] sysv_free_block: flc_count > flc_size [ 1533.140162][ T5776] sysv_free_block: flc_count > flc_size [ 1533.150493][T13847] netlink: 'syz.1.13261': attribute type 21 has an invalid length. [ 1533.181803][ T5776] sysv_free_block: flc_count > flc_size [ 1533.199169][ T5776] sysv_free_block: flc_count > flc_size [ 1533.221973][ T5776] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1533.655330][T13862] loop3: detected capacity change from 0 to 2048 [ 1533.715912][T13862] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1533.846737][T13862] UDF-fs: unknown compression code (0) [ 1534.088737][T13876] netlink: 'syz.0.13271': attribute type 3 has an invalid length. [ 1534.462278][T13886] loop0: detected capacity change from 0 to 2048 [ 1534.535616][T13886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1534.780670][T13898] cgroup: name respecified [ 1534.942996][ T28] audit: type=1326 audit(2000000396.435:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.058475][ T28] audit: type=1326 audit(2000000396.463:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.212277][ T28] audit: type=1326 audit(2000000396.463:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.309250][ T28] audit: type=1326 audit(2000000396.463:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.461193][ T28] audit: type=1326 audit(2000000396.463:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.606020][ T28] audit: type=1326 audit(2000000396.463:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.695753][ T28] audit: type=1326 audit(2000000396.472:9025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.799754][ T28] audit: type=1326 audit(2000000396.472:9026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1535.928786][ T28] audit: type=1326 audit(2000000396.472:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.3.13281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1537.571319][T13988] loop1: detected capacity change from 0 to 512 [ 1537.642259][T13988] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1537.688142][T13988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1537.759563][T13988] System zones: 1-12 [ 1537.800660][T13988] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1537.836585][T13988] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.13311: invalid indirect mapped block 12 (level 1) [ 1537.887908][T13988] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.13311: invalid indirect mapped block 2 (level 2) [ 1537.954173][T13988] EXT4-fs (loop1): 1 truncate cleaned up [ 1538.001658][T13988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1538.136867][T14004] loop3: detected capacity change from 0 to 512 [ 1538.198147][T14004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1538.249832][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1538.296446][T14004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.383494][T14004] ext4 filesystem being mounted at /3421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.624516][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.974605][ T788] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1539.191407][ T788] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1539.201284][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.251643][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1539.285218][ T788] usb 2-1: config 0 descriptor?? [ 1539.308712][ T788] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1539.752913][ T788] gspca_sunplus: reg_w_riv err -71 [ 1539.774417][ T788] sunplus: probe of 2-1:0.0 failed with error -71 [ 1539.834198][ T788] usb 2-1: USB disconnect, device number 57 [ 1540.891291][T14102] loop1: detected capacity change from 0 to 2048 [ 1540.921862][T14102] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 1541.009501][T14102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1541.134762][T14113] loop2: detected capacity change from 0 to 1024 [ 1541.255897][T14113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1541.392830][T14113] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.13343: inode #12: comm syz.2.13343: iget: illegal inode # [ 1541.662614][T14113] EXT4-fs (loop2): Remounting filesystem read-only [ 1541.807733][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.981493][T14139] loop0: detected capacity change from 0 to 4096 [ 1542.062235][T14139] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1542.175969][T14139] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1542.504627][T14156] loop3: detected capacity change from 0 to 256 [ 1542.622594][T14157] Process accounting resumed [ 1543.492021][T14191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1543.921803][T14202] x_tables: unsorted underflow at hook 3 [ 1544.783818][T14235] loop0: detected capacity change from 0 to 128 [ 1545.018279][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13380'. [ 1545.733258][T14273] loop0: detected capacity change from 0 to 16 [ 1545.812687][T14273] erofs: (device loop0): mounted with root inode @ nid 36. [ 1546.353449][T14296] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1546.829099][T14314] trusted_key: encrypted_key: master key parameter is missing [ 1547.596163][ T5837] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1547.879488][ T5837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1547.898680][ T5837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1547.919827][ T5837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1547.956480][ T5837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1548.101025][T14361] netlink: 'syz.3.13415': attribute type 10 has an invalid length. [ 1548.127454][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13415'. [ 1548.149756][ T5837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1548.170549][T14361] netlink: 'syz.3.13415': attribute type 10 has an invalid length. [ 1548.202321][ T5837] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1548.212812][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13415'. [ 1548.222656][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.266880][T14325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1548.278477][T14325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1548.285810][T14325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1548.811944][ T5837] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 1549.056496][T14394] loop1: detected capacity change from 0 to 128 [ 1549.138501][ T5837] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1549.167849][ T5837] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1549.211785][T21042] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1549.461577][ T5837] usb 3-1: USB disconnect, device number 42 [ 1549.470257][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1549.503859][T21042] usb 4-1: Using ep0 maxpacket: 8 [ 1549.515297][ T5837] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1549.563420][T21042] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1549.577680][ T5837] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1549.828913][T21042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.837007][T21042] usb 4-1: Product: syz [ 1549.851548][ T5837] mos7720 3-1:1.0: device disconnected [ 1549.868259][T21042] usb 4-1: Manufacturer: syz [ 1549.883060][T21042] usb 4-1: SerialNumber: syz [ 1549.897821][T21042] usb 4-1: config 0 descriptor?? [ 1549.918013][T21042] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1550.414504][T21042] gspca_sonixj: reg_r err -71 [ 1550.419408][T21042] sonixj: probe of 4-1:0.0 failed with error -71 [ 1550.465247][T21042] usb 4-1: USB disconnect, device number 66 [ 1551.821892][T14513] netlink: 'syz.1.13450': attribute type 5 has an invalid length. [ 1551.830602][T14513] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13450'. [ 1552.645913][T14537] loop3: detected capacity change from 0 to 2048 [ 1552.728572][T14537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1554.630503][T14619] loop3: detected capacity change from 0 to 256 [ 1556.638894][T14686] loop3: detected capacity change from 0 to 16 [ 1556.699667][T14686] erofs: (device loop3): mounted with root inode @ nid 36. [ 1556.764525][T14686] cifs: Unknown parameter 'cache_strategy' [ 1557.123127][T14655] loop2: detected capacity change from 0 to 32768 [ 1557.560771][T14716] affs: No valid root block on device nbd1 [ 1558.550081][T14747] ieee802154 phy0 wpan0: encryption failed: -22 [ 1560.294540][T14811] loop3: detected capacity change from 0 to 256 [ 1560.499379][T14824] tmpfs: Bad value for 'mpol' [ 1560.629385][ T5837] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1560.657543][T14829] loop2: detected capacity change from 0 to 16 [ 1560.690015][T14829] erofs: (device loop2): mounted with root inode @ nid 36. [ 1560.938437][ T5837] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1560.965289][ T5837] usb 2-1: config 0 has no interface number 0 [ 1560.971799][ T5837] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1561.030351][ T5837] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1561.086518][ T5837] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1561.106890][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.127906][ T5837] usb 2-1: Product: syz [ 1561.132231][ T5837] usb 2-1: Manufacturer: syz [ 1561.137074][ T5837] usb 2-1: SerialNumber: syz [ 1561.184860][ T5837] usb 2-1: config 0 descriptor?? [ 1561.191324][T14809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1561.237918][ T5837] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1561.278518][ T5837] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1561.643061][T14857] loop2: detected capacity change from 0 to 256 [ 1561.646732][T14858] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1561.786091][ T788] usb 2-1: USB disconnect, device number 58 [ 1561.844772][ T788] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1561.885172][ T788] cyberjack 2-1:0.69: device disconnected [ 1562.145777][T14879] loop3: detected capacity change from 0 to 2048 [ 1562.167428][T14879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1562.356374][T14885] loop2: detected capacity change from 0 to 64 [ 1562.636119][T14891] SET target dimension over the limit! [ 1562.986771][T14907] xt_nat: multiple ranges no longer supported [ 1563.512444][T14927] loop3: detected capacity change from 0 to 1024 [ 1563.688733][T14927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.287183][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.913586][T14974] loop3: detected capacity change from 0 to 4096 [ 1565.159889][T14987] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1565.366665][ T28] audit: type=1326 audit(2000000424.488:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.445779][ T28] audit: type=1326 audit(2000000424.488:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.472319][ T28] audit: type=1326 audit(2000000424.516:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.499087][ T28] audit: type=1326 audit(2000000424.516:9031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.524346][ T28] audit: type=1326 audit(2000000424.525:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.630390][ T28] audit: type=1326 audit(2000000424.525:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.708080][T14997] delete_channel: no stack [ 1565.749145][ T28] audit: type=1326 audit(2000000424.534:9034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.866607][ T28] audit: type=1326 audit(2000000424.544:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1565.997249][ T28] audit: type=1326 audit(2000000424.544:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14989 comm="syz.0.13592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b25b9e0d9 code=0x7ffc0000 [ 1566.055813][T14972] loop2: detected capacity change from 0 to 32768 [ 1566.120403][T15011] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1566.187141][T14972] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1566.246683][T14972] JBD2: Ignoring recovery information on journal [ 1566.420019][T14972] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1566.534047][T15021] netlink: 'syz.0.13602': attribute type 10 has an invalid length. [ 1566.629935][T15021] team0: Cannot enslave team device to itself [ 1566.798402][T15027] loop3: detected capacity change from 0 to 1024 [ 1566.843260][T14972] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 1566.847017][T15027] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 1567.068771][T14972] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1567.106653][T14972] OCFS2: File system is now read-only. [ 1567.112213][T14972] (syz.2.13585,14972,0):ocfs2_search_one_group:1706 ERROR: status = -30 [ 1567.145885][T14972] (syz.2.13585,14972,0):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 1567.168729][T14972] (syz.2.13585,14972,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1567.177429][T14972] (syz.2.13585,14972,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 1567.243825][T14972] (syz.2.13585,14972,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 1567.252516][T14972] (syz.2.13585,14972,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1567.301519][T14972] (syz.2.13585,14972,0):ocfs2_mknod:385 ERROR: status = -30 [ 1567.635239][T14972] (syz.2.13585,14972,0):ocfs2_mknod:502 ERROR: status = -30 [ 1567.642634][T14972] (syz.2.13585,14972,0):ocfs2_mkdir:659 ERROR: status = -30 [ 1567.858832][T15060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13615'. [ 1568.005090][T15056] loop0: detected capacity change from 0 to 4096 [ 1568.053683][T15056] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1568.077736][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 1568.802835][T15088] netdevsim netdevsim0 ªªªªªª: set [1, 1] type 2 family 0 port 20004 - 0 [ 1568.892383][T15088] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1568.910602][T15088] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1568.949533][T15088] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1568.988939][T15088] netdevsim netdevsim0 ªªªªªª: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1569.000910][T15088] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1569.016368][T15098] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1569.023513][T15088] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1569.040965][T15088] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1569.795783][T15125] x_tables: duplicate underflow at hook 2 [ 1569.905301][T15129] netlink: 'syz.0.13634': attribute type 1 has an invalid length. [ 1570.584017][T15155] netlink: 'syz.1.13643': attribute type 46 has an invalid length. [ 1570.591996][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13643'. [ 1570.870739][T15167] loop3: detected capacity change from 0 to 164 [ 1571.065544][T15173] loop0: detected capacity change from 0 to 256 [ 1571.282312][T15176] netlink: 'syz.2.13650': attribute type 12 has an invalid length. [ 1571.502743][T15176] bond3: option primary_reselect: invalid value (255) [ 1571.646361][T15176] bond3 (unregistering): Released all slaves [ 1571.728849][T15247] ceph: No source [ 1571.810390][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13652'. [ 1572.000304][T15264] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13654'. [ 1572.043524][T15264] openvswitch: netlink: Key type 29 is not supported [ 1573.028224][T15297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13665'. [ 1573.183966][T15303] netlink: 'syz.1.13667': attribute type 29 has an invalid length. [ 1573.208099][T15303] netlink: 'syz.1.13667': attribute type 29 has an invalid length. [ 1573.987195][T15330] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0) [ 1574.395990][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13682'. [ 1574.736875][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13682'. [ 1574.958870][ T28] audit: type=1326 audit(2000000433.314:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd23d9e0d9 code=0x7ffc0000 [ 1575.094529][ T28] audit: type=1326 audit(2000000433.314:9038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd23d9e0d9 code=0x7ffc0000 [ 1575.174565][ T28] audit: type=1326 audit(2000000433.323:9039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd23d9e0d9 code=0x7ffc0000 [ 1575.313196][T15370] Process accounting paused [ 1575.322244][ T28] audit: type=1326 audit(2000000433.323:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fbd23d9e0d9 code=0x7ffc0000 [ 1575.405975][ T28] audit: type=1326 audit(2000000433.332:9041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd23d9e0d9 code=0x7ffc0000 [ 1575.532034][ T28] audit: type=1326 audit(2000000433.397:9042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd23d5e90e code=0x7ffc0000 [ 1575.666562][ T28] audit: type=1326 audit(2000000433.397:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd23d5e90e code=0x7ffc0000 [ 1575.781913][ T28] audit: type=1326 audit(2000000433.406:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd23d5e90e code=0x7ffc0000 [ 1575.888329][ T28] audit: type=1326 audit(2000000433.415:9045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd23d5e90e code=0x7ffc0000 [ 1575.973544][ T28] audit: type=1326 audit(2000000433.415:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.1.13685" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd23d5e90e code=0x7ffc0000 [ 1576.037420][T15389] loop0: detected capacity change from 0 to 4096 [ 1576.210664][T15400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1576.214519][T15389] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1576.320184][T15389] Remounting filesystem read-only [ 1576.509546][T15389] NILFS (loop0): mounting fs with errors [ 1576.868100][T15419] netlink: 'syz.3.13704': attribute type 1 has an invalid length. [ 1576.915125][T15419] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13704'. [ 1577.413315][T15438] loop1: detected capacity change from 0 to 2048 [ 1577.472665][T15438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1579.606535][T15512] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1579.824576][T15512] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.866907][T15512] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1579.892122][T15512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.909257][T15512] usb 2-1: Product: syz [ 1579.918117][T15512] usb 2-1: Manufacturer: syz [ 1579.928855][T15512] usb 2-1: SerialNumber: syz [ 1580.295827][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1580.367318][T15512] usb 2-1: Cannot retrieve CPort count: -71 [ 1580.384691][T15512] usb 2-1: Cannot retrieve CPort count: -71 [ 1580.396031][T15512] es2_ap_driver: probe of 2-1:246.0 failed with error -71 [ 1580.407472][T15542] loop3: detected capacity change from 0 to 4096 [ 1580.416645][T15545] loop0: detected capacity change from 0 to 512 [ 1580.427538][T15512] usb 2-1: USB disconnect, device number 59 [ 1580.452116][T15542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1580.504130][T15545] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1580.548245][T15545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1580.568747][T15542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.606896][T15545] System zones: 0-1, 15-15, 18-18, 34-34 [ 1580.613007][T15545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1580.696835][T15545] __quota_error: 62 callbacks suppressed [ 1580.696856][T15545] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1580.742355][T15545] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1580.769262][T15545] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1580.777206][T15545] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.13740: bad orphan inode 16 [ 1580.799057][T15545] ext4_test_bit(bit=15, block=18) = 1 [ 1580.804543][T15545] is_bad_inode(inode)=0 [ 1580.820318][T15545] NEXT_ORPHAN(inode)=0 [ 1580.832323][T15545] max_ino=32 [ 1580.846677][T15545] i_nlink=2 [ 1580.851310][T15545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1580.910031][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.951198][T15545] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1581.201997][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.223449][ T28] audit: type=1326 audit(2000000439.114:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1581.329677][ T28] audit: type=1326 audit(2000000439.142:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1581.484513][ T28] audit: type=1326 audit(2000000439.142:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1581.580263][T15586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1581.622387][ T28] audit: type=1326 audit(2000000439.142:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1581.719995][ T28] audit: type=1326 audit(2000000439.142:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1581.891165][ T28] audit: type=1326 audit(2000000439.142:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1581.963501][ T28] audit: type=1326 audit(2000000439.142:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1582.121214][ T28] audit: type=1326 audit(2000000439.142:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1582.251008][ T28] audit: type=1326 audit(2000000439.142:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.3.13744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a5419e0d9 code=0x7ffc0000 [ 1582.708241][T15611] sit0: left promiscuous mode [ 1582.834637][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13761'. [ 1583.077448][T15611] 8021q: adding VLAN 0 to HW filter on device .` [ 1583.129209][T15637] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13766'. [ 1583.205665][T15611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1583.376857][T15637] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13766'. [ 1584.393680][T15672] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002 [ 1584.810997][T15684] netlink: 'syz.0.13780': attribute type 1 has an invalid length. [ 1584.819025][T15684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13780'. [ 1584.867029][T15645] loop1: detected capacity change from 0 to 32768 [ 1584.930466][T15645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.13767 (15645) [ 1585.051661][T15645] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1585.114169][T15645] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1585.122926][T15645] BTRFS info (device loop1): force clearing of disk cache [ 1585.179429][T15645] BTRFS info (device loop1): force zlib compression, level 3 [ 1585.186924][T15645] BTRFS info (device loop1): disabling free space tree [ 1585.226794][T15645] BTRFS info (device loop1): max_inline at 0 [ 1585.232984][T15645] BTRFS info (device loop1): enabling free space tree [ 1585.295830][T15645] BTRFS info (device loop1): using free space tree [ 1585.505822][T15645] BTRFS info (device loop1): enabling ssd optimizations [ 1585.512860][T15645] BTRFS info (device loop1): auto enabling async discard [ 1585.646204][T15645] BTRFS warning (device loop1): get dev_stats failed, device not found [ 1585.858529][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1586.325578][T15735] loop3: detected capacity change from 0 to 2048 [ 1586.529560][T15735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1586.662581][T15748] loop1: detected capacity change from 0 to 2048 [ 1586.723071][T15750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13795'. [ 1586.878204][T15748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.002035][T15748] ext4 filesystem being mounted at /3605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.344520][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.016976][T15825] binder: 15823:15825 ioctl c018620c 200000000240 returned -22 [ 1589.540331][T15836] bond6: peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1589.590495][T15836] bond6: option use_carrier: invalid value (6) [ 1589.619206][T15836] bond6 (unregistering): Released all slaves [ 1592.248156][T16008] loop0: detected capacity change from 0 to 2048 [ 1592.331024][T16008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1592.815388][T16034] loop0: detected capacity change from 0 to 1024 [ 1592.843457][T16034] EXT4-fs: inline encryption not supported [ 1592.926082][T16034] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1592.986765][T16034] EXT4-fs (loop0): 1 truncate cleaned up [ 1592.996622][T16034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1593.281560][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.006855][T16077] netlink: 144 bytes leftover after parsing attributes in process `syz.2.13873'. [ 1594.404044][T16097] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1594.455542][T16097] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.13881'. [ 1594.488438][ T788] ------------[ cut here ]------------ [ 1594.495765][ T788] WARNING: CPU: 1 PID: 788 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1594.506799][ T788] Modules linked in: [ 1594.511076][ T788] CPU: 1 PID: 788 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1594.519834][ T788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1594.532719][ T788] Workqueue: events nf_tables_trans_destroy_work [ 1594.539621][ T788] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1594.546322][ T788] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1594.567623][ T788] RSP: 0018:ffffc90003a5f9d8 EFLAGS: 00010293 [ 1594.574104][ T788] RAX: ffffffff88dbbdab RBX: ffff888025cc58f0 RCX: ffff88802149da00 [ 1594.582730][ T788] RDX: 0000000000000000 RSI: ffff888025cc5800 RDI: ffff88805c125228 [ 1594.591501][ T788] RBP: ffffc90003a5fbb0 R08: ffff88802149da00 R09: 000000000000000f [ 1594.599789][ T788] R10: 0000000000000020 R11: 0000000000000000 R12: ffff888025cc58c0 [ 1594.608545][ T788] R13: dffffc0000000000 R14: ffff888025cc5910 R15: dffffc0000000000 [ 1594.616656][ T788] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1594.626002][ T788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.632937][ T788] CR2: 0000200000000200 CR3: 00000000529a1000 CR4: 00000000003506e0 [ 1594.641204][ T788] Call Trace: [ 1594.644519][ T788] [ 1594.647564][ T788] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.653209][ T788] nft_set_destroy+0x489/0xa20 [ 1594.658067][ T788] ? __kmem_cache_free+0xba/0x1f0 [ 1594.663240][ T788] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1594.669606][ T788] ? __lock_acquire+0x7d80/0x7d80 [ 1594.674983][ T788] ? nft_object_dump+0x1e0/0x1e0 [ 1594.680035][ T788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1594.685367][ T788] ? process_scheduled_works+0x975/0x1600 [ 1594.691376][ T788] ? process_scheduled_works+0x975/0x1600 [ 1594.697231][ T788] process_scheduled_works+0xa60/0x1600 [ 1594.702961][ T788] ? worker_attach_to_pool+0x370/0x370 [ 1594.708514][ T788] ? assign_work+0x3cc/0x5d0 [ 1594.714189][ T788] worker_thread+0xa5e/0xfe0 [ 1594.718873][ T788] kthread+0x2fa/0x390 [ 1594.723241][ T788] ? pr_cont_work+0x550/0x550 [ 1594.728053][ T788] ? kthread_blkcg+0xd0/0xd0 [ 1594.732879][ T788] ret_from_fork+0x48/0x80 [ 1594.737343][ T788] ? kthread_blkcg+0xd0/0xd0 [ 1594.742608][ T788] ret_from_fork_asm+0x11/0x20 [ 1594.747545][ T788] [ 1594.750697][ T788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1594.758273][ T788] CPU: 1 PID: 788 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1594.765679][ T788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1594.775766][ T788] Workqueue: events nf_tables_trans_destroy_work [ 1594.782155][ T788] Call Trace: [ 1594.785464][ T788] [ 1594.788444][ T788] dump_stack_lvl+0x18c/0x250 [ 1594.793161][ T788] ? show_regs_print_info+0x20/0x20 [ 1594.798515][ T788] ? load_image+0x420/0x420 [ 1594.803072][ T788] panic+0x2ca/0x720 [ 1594.807017][ T788] ? bpf_jit_dump+0xd0/0xd0 [ 1594.811656][ T788] ? ret_from_fork_asm+0x11/0x20 [ 1594.816635][ T788] __warn+0x2e0/0x470 [ 1594.820647][ T788] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1594.825908][ T788] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1594.831123][ T788] report_bug+0x2be/0x4f0 [ 1594.835468][ T788] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1594.840682][ T788] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1594.845987][ T788] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1594.851203][ T788] handle_bug+0xcf/0x120 [ 1594.855467][ T788] exc_invalid_op+0x1a/0x50 [ 1594.859980][ T788] asm_exc_invalid_op+0x1a/0x20 [ 1594.864846][ T788] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1594.870757][ T788] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1594.890395][ T788] RSP: 0018:ffffc90003a5f9d8 EFLAGS: 00010293 [ 1594.896563][ T788] RAX: ffffffff88dbbdab RBX: ffff888025cc58f0 RCX: ffff88802149da00 [ 1594.904668][ T788] RDX: 0000000000000000 RSI: ffff888025cc5800 RDI: ffff88805c125228 [ 1594.913101][ T788] RBP: ffffc90003a5fbb0 R08: ffff88802149da00 R09: 000000000000000f [ 1594.921087][ T788] R10: 0000000000000020 R11: 0000000000000000 R12: ffff888025cc58c0 [ 1594.929081][ T788] R13: dffffc0000000000 R14: ffff888025cc5910 R15: dffffc0000000000 [ 1594.937100][ T788] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1594.942412][ T788] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1594.947726][ T788] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.952951][ T788] nft_set_destroy+0x489/0xa20 [ 1594.957731][ T788] ? __kmem_cache_free+0xba/0x1f0 [ 1594.962778][ T788] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1594.968784][ T788] ? __lock_acquire+0x7d80/0x7d80 [ 1594.973837][ T788] ? nft_object_dump+0x1e0/0x1e0 [ 1594.978796][ T788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1594.984079][ T788] ? process_scheduled_works+0x975/0x1600 [ 1594.989819][ T788] ? process_scheduled_works+0x975/0x1600 [ 1594.995560][ T788] process_scheduled_works+0xa60/0x1600 [ 1595.001185][ T788] ? worker_attach_to_pool+0x370/0x370 [ 1595.007473][ T788] ? assign_work+0x3cc/0x5d0 [ 1595.012097][ T788] worker_thread+0xa5e/0xfe0 [ 1595.016741][ T788] kthread+0x2fa/0x390 [ 1595.020831][ T788] ? pr_cont_work+0x550/0x550 [ 1595.025532][ T788] ? kthread_blkcg+0xd0/0xd0 [ 1595.030137][ T788] ret_from_fork+0x48/0x80 [ 1595.034745][ T788] ? kthread_blkcg+0xd0/0xd0 [ 1595.039357][ T788] ret_from_fork_asm+0x11/0x20 [ 1595.044148][ T788] [ 1595.047302][ T788] Kernel Offset: disabled [ 1595.051899][ T788] Rebooting in 86400 seconds..