last executing test programs: 2.838499522s ago: executing program 0 (id=5167): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) 2.711696425s ago: executing program 0 (id=5171): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1a, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048891}, 0x0) 2.691718395s ago: executing program 3 (id=5172): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@empty}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010101}}]}, 0x80}}, 0x0) 2.575880098s ago: executing program 0 (id=5174): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 2.446960491s ago: executing program 3 (id=5177): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOCK(r0, 0x0, 0x0) 2.227655536s ago: executing program 3 (id=5179): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="af1885", 0x3}], 0x1) 2.199956227s ago: executing program 0 (id=5180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.970944932s ago: executing program 0 (id=5183): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800060003000000080007000500000008000100100000000600020001000000040005"], 0x84}}, 0x20008040) 1.970851363s ago: executing program 3 (id=5184): ioperm(0x4, 0x100, 0x82fa) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) 1.906880574s ago: executing program 0 (id=5185): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f0000000180)={[{@rescan_uuid_tree}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@user_subvol_rm}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'nologreplay'}}, {@discard_async}, {@nodatacow}, {@fatal_errors_bug}, {@nodiscard}, {@enospc_debug}, {@nospace_cache}, {@notreelog}, {@space_cache}]}, 0x9, 0x559d, &(0x7f0000004040)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.797878647s ago: executing program 3 (id=5187): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1.588026842s ago: executing program 3 (id=5189): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0x8, 0x6, "20fef8c423e2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.23503312s ago: executing program 1 (id=5194): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, @fallback=0x68afcc069f96e8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.110467523s ago: executing program 1 (id=5196): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x1, 0xc5a, &(0x7f0000001040)="$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") chdir(&(0x7f00000003c0)='./bus\x00') 1.017823925s ago: executing program 2 (id=5197): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x5, 0x4) 791.707661ms ago: executing program 1 (id=5198): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 790.551301ms ago: executing program 2 (id=5199): r0 = io_uring_setup(0x17f2, &(0x7f0000000040)={0x0, 0x4965, 0x100, 0x0, 0x225}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002bc0)=[{0xffffffffffffff34, 0x0, 0x0}], 0x1) 551.024877ms ago: executing program 2 (id=5200): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local}}}}) 410.37106ms ago: executing program 1 (id=5201): r0 = mq_open(&(0x7f0000000400)='\xeeB\xcf\xe2\v\xba\xd0\xfe\x1b\x00w;q\x1f\x12\b\x99g(a\x96?\x88\x91\x9em\x1e`\x1a\x92|\x8e\x9b!\xefk\xfd\x97\x18\v\xf0\xd2\xb6_\x8ddw\xb5e\xb1\xd2\x15\x97', 0x8c3, 0x92, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 390.85489ms ago: executing program 2 (id=5202): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x1}, 0x2) 162.543066ms ago: executing program 1 (id=5203): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000780)={0x0, 0xd}, &(0x7f0000000800)=0x8) 122.904457ms ago: executing program 2 (id=5204): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x3}) 19.820489ms ago: executing program 2 (id=5205): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xd2, 0xc0103) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x110, "fa6c4addd6632ad936495f171cdd79428d7730f72526a6ba35b89d5bbbccba9d", 0xfffffffffffffffc, 0x6, 0x3, 0x1, 0x10000, 0x3, 0x2, 0x1400, [0xfffffff9, 0x53dc, 0xe, 0x5]}) 0s ago: executing program 1 (id=5206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) kernel console output (not intermixed with test programs): cketSize 0 [ 218.841537][ T5855] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 218.863453][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.886033][ T5855] usb 2-1: config 0 descriptor?? [ 218.915033][ T5855] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input19 [ 219.237804][ T970] usb 2-1: USB disconnect, device number 17 [ 219.479203][T13769] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 220.143850][T13808] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 221.090308][T13865] ipt_REJECT: ECHOREPLY no longer supported. [ 221.116452][T13867] syz.0.2827 uses old SIOCAX25GETINFO [ 221.227251][T13869] loop3: detected capacity change from 0 to 4096 [ 221.288846][T13869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.376604][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.813889][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2842'. [ 221.956243][T13910] loop3: detected capacity change from 0 to 1024 [ 221.986290][T13912] netlink: 'syz.2.2847': attribute type 39 has an invalid length. [ 222.050418][T13918] netlink: 'syz.1.2849': attribute type 6 has an invalid length. [ 222.090672][T13918] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2849'. [ 222.425388][ T5828] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 222.618638][ T5828] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 222.633266][T13950] loop0: detected capacity change from 0 to 2048 [ 222.634442][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 222.680194][ T5828] usb 3-1: Product: syz [ 222.692224][ T5828] usb 3-1: Manufacturer: syz [ 222.731832][T13950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.954005][ T5828] scsi host1: uas [ 223.029961][T13981] veth1_macvtap: left promiscuous mode [ 223.180014][ C0] usb 3-1: stat urb: status -71 [ 223.186099][ C0] usb 3-1: cmd cmplt err -71 [ 223.196059][ T5828] usb 3-1: USB disconnect, device number 17 [ 223.206189][ T5834] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 223.220110][ T5828] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 223.228649][ T5828] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 223.320227][T13981] syz.1.2870 (13981) used greatest stack depth: 19752 bytes left [ 223.379709][T14003] ip6tnl1: entered promiscuous mode [ 223.409537][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.423924][ T5834] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.442981][ T5834] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.478548][ T5834] usb 1-1: string descriptor 0 read error: -22 [ 223.484916][ T5834] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 223.514267][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.551569][ T5834] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 223.578113][ T5834] usb 1-1: MIDIStreaming interface descriptor not found [ 223.704784][ T28] audit: type=1326 audit(1792096548.948:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 223.774607][ T28] audit: type=1326 audit(1792096548.948:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 223.873696][ T28] audit: type=1326 audit(1792096548.987:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 223.912689][ T970] usb 1-1: USB disconnect, device number 18 [ 223.946896][ T28] audit: type=1326 audit(1792096548.987:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 223.971108][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.054332][ T28] audit: type=1326 audit(1792096548.987:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 224.150335][ T28] audit: type=1326 audit(1792096548.987:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 224.174437][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.189642][ T28] audit: type=1326 audit(1792096548.987:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 224.220564][ T28] audit: type=1326 audit(1792096548.987:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 224.291193][ T28] audit: type=1326 audit(1792096548.987:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 224.392487][T14073] netlink: 'syz.3.2888': attribute type 5 has an invalid length. [ 224.574738][ T5435] veth1_macvtap: entered promiscuous mode [ 225.298018][ T5828] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.509418][ T5828] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.520082][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.552223][ T5828] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.578345][ T28] audit: type=1326 audit(1792096550.825:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.2.2914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 225.587715][ T5828] usb 4-1: string descriptor 0 read error: -22 [ 225.615720][ T5828] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 225.668176][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.710866][ T5828] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.735220][ T5828] usb 4-1: MIDIStreaming interface descriptor not found [ 225.945667][T14173] futex_wake_op: syz.0.2919 tries to shift op by 144; fix this program [ 225.986334][T14173] futex_wake_op: syz.0.2919 tries to shift op by 144; fix this program [ 226.070098][ T9] usb 4-1: USB disconnect, device number 18 [ 226.282149][T14202] netlink: 'syz.0.2925': attribute type 21 has an invalid length. [ 226.297394][T14202] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2925'. [ 226.436958][T14213] netlink: 'syz.1.2927': attribute type 2 has an invalid length. [ 226.843027][T14233] gretap1: entered allmulticast mode [ 227.117679][T14252] loop3: detected capacity change from 0 to 8 [ 227.172932][T14252] SQUASHFS error: Corrupted symlink [ 227.336280][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2949'. [ 227.500941][T14270] netlink: 'syz.2.2950': attribute type 30 has an invalid length. [ 227.612711][T14270] bond2: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 227.643686][T14270] bond2 (unregistering): Released all slaves [ 227.709504][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2954'. [ 228.187741][T14374] loop1: detected capacity change from 0 to 256 [ 228.283031][T14374] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 230.153385][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 230.357355][ T23] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 230.373604][ T23] usb 1-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.399110][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 230.416122][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40 [ 230.426587][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.443605][ T23] usb 1-1: Product: syz [ 230.451200][ T23] usb 1-1: Manufacturer: syz [ 230.460512][ T23] usb 1-1: SerialNumber: syz [ 230.703044][ T23] usbhid 1-1:1.0: can't add hid device: -71 [ 230.720273][ T23] usbhid: probe of 1-1:1.0 failed with error -71 [ 230.740128][ T23] usb 1-1: USB disconnect, device number 19 [ 231.248490][ T5779] Bluetooth: hci1: Malformed LE Event: 0x1d [ 231.375141][T14555] loop1: detected capacity change from 0 to 4096 [ 231.390072][T14555] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 231.467510][T14555] ntfs3: loop1: ino=19, mi_enum_attr [ 231.472930][T14555] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 231.490999][T14563] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 231.499242][T14563] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3053'. [ 231.513978][T14563] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3053'. [ 231.546736][T14565] 8021q: VLANs not supported on lo [ 231.672114][T14567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3055'. [ 232.027448][T14582] loop2: detected capacity change from 0 to 4096 [ 232.084155][T14582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.150872][T14582] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #12: block 80: comm syz.2.3061: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 232.173495][T14582] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.3061: directory missing '..' [ 232.237412][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.277903][T14601] overlayfs: workdir and upperdir must be separate subtrees [ 232.435446][T14607] loop1: detected capacity change from 0 to 512 [ 232.442692][T14609] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14609] [ 232.651955][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3077'. [ 232.966934][T14673] netlink: 'syz.1.3083': attribute type 1 has an invalid length. [ 233.027078][ T5828] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 233.223659][ T5828] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 233.246801][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.275391][ T5828] usb 4-1: Product: syz [ 233.285252][ T5828] usb 4-1: Manufacturer: syz [ 233.290994][ T5828] usb 4-1: SerialNumber: syz [ 233.316220][ T5828] usb 4-1: USB2VGA dongle found at address 19 [ 233.330987][ T5828] usb 4-1: Allocated 8 output buffers [ 233.436989][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 233.539867][ T5828] usb 4-1: Failed to early initialize device [ 233.557369][ T5828] usb 4-1: USB disconnect, device number 19 [ 233.635832][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 233.651840][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.667930][ T9] usb 2-1: config 0 has no interface number 0 [ 233.674473][ T9] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 233.686505][ T9] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.704086][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 233.720541][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.731588][ T9] usb 2-1: Product: syz [ 233.735790][ T9] usb 2-1: Manufacturer: syz [ 233.740744][T14730] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3100'. [ 233.751082][ T9] usb 2-1: SerialNumber: syz [ 233.758661][ T9] usb 2-1: config 0 descriptor?? [ 233.781244][ T9] asix: probe of 2-1:0.251 failed with error -22 [ 233.939338][T14744] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 233.948632][T14744] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.019241][ T970] usb 2-1: USB disconnect, device number 18 [ 234.097243][T14756] netlink: 'syz.0.3109': attribute type 7 has an invalid length. [ 234.105312][T14756] netlink: 'syz.0.3109': attribute type 8 has an invalid length. [ 235.001842][T14808] loop2: detected capacity change from 0 to 256 [ 235.003579][T14809] syz.0.3134 uses obsolete (PF_INET,SOCK_PACKET) [ 235.098816][ T970] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 235.168435][T14790] loop1: detected capacity change from 0 to 32768 [ 235.294444][ T970] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.317194][ T970] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.337060][ T970] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.353577][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.385892][ T970] usb 4-1: SerialNumber: syz [ 235.441992][T14828] loop0: detected capacity change from 0 to 64 [ 235.488298][ T5834] IPVS: starting estimator thread 0... [ 235.572377][T14828] syz.0.3139: attempt to access beyond end of device [ 235.572377][T14828] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 235.590780][T14828] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 235.629815][T14831] IPVS: using max 20 ests per chain, 48000 per kthread [ 235.654087][ T970] usb 4-1: 0:2 : does not exist [ 235.709622][ T970] usb 4-1: USB disconnect, device number 20 [ 235.803220][T13757] udevd[13757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.950485][ T5828] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 236.091307][T14873] wg1: entered promiscuous mode [ 236.096341][T14873] wg1: entered allmulticast mode [ 236.152593][ T5828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.191420][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 68, changing to 10 [ 236.215571][ T5828] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 236.228050][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.236499][ T5828] usb 2-1: Product: syz [ 236.241445][ T5828] usb 2-1: Manufacturer: syz [ 236.246548][ T5828] usb 2-1: SerialNumber: syz [ 236.506298][ T5828] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 236.573892][ T5828] usb 2-1: USB disconnect, device number 19 [ 237.439793][T14958] comedi comedi4: bad chanlist[0]=0x000000ea chan=234 range length=2 [ 237.517304][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 237.517318][ T28] audit: type=1326 audit(1792096562.752:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.602816][ T28] audit: type=1326 audit(1792096562.752:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.643072][T14968] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3184'. [ 237.647582][ T28] audit: type=1326 audit(1792096562.772:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.661225][T14967] autofs4:pid:14967:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 237.696695][ T28] audit: type=1326 audit(1792096562.772:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.725514][ T28] audit: type=1326 audit(1792096562.772:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.761695][ T28] audit: type=1326 audit(1792096562.772:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.797124][ T28] audit: type=1326 audit(1792096562.772:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.849552][ T28] audit: type=1326 audit(1792096562.792:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 237.880182][ T28] audit: type=1326 audit(1792096562.792:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14961 comm="syz.2.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 238.112201][T14984] No such timeout policy "syz1" [ 238.127983][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 238.599671][T15014] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3199'. [ 239.241963][T15053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3214'. [ 239.816323][T15090] loop1: detected capacity change from 0 to 512 [ 239.825581][T15090] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.872617][T15090] EXT4-fs (loop1): orphan cleanup on readonly fs [ 239.912031][T15090] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 239.980735][T15090] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3227: attempt to clear invalid blocks 2 len 1 [ 240.022503][T15090] EXT4-fs (loop1): Remounting filesystem read-only [ 240.030387][T15090] EXT4-fs (loop1): 1 truncate cleaned up [ 240.037725][T15090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.102648][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.668058][T15140] loop0: detected capacity change from 0 to 2048 [ 240.709883][T15145] loop1: detected capacity change from 0 to 64 [ 240.726411][T15140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.885689][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.040542][T15168] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3252'. [ 241.064932][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 241.281456][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'. [ 241.291157][T15182] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3261'. [ 241.898780][T15224] loop1: detected capacity change from 0 to 512 [ 241.932165][T15224] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 241.941545][T15224] EXT4-fs (loop1): orphan cleanup on readonly fs [ 241.951560][T15224] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 241.961205][T15224] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.3279: Failed to acquire dquot type 1 [ 241.977878][T15224] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3279: bg 0: block 40: padding at end of block bitmap is not set [ 241.999672][T15224] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 242.014418][T15224] EXT4-fs (loop1): 1 truncate cleaned up [ 242.023552][T15224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.085792][T12137] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 242.095335][T15224] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.3279: bad symlink. [ 242.181070][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.293991][T15243] xt_nfacct: accounting object `syz1' does not exist [ 242.306105][T12137] usb 1-1: Using ep0 maxpacket: 32 [ 242.326478][T12137] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 242.335855][T12137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.344008][T12137] usb 1-1: Product: syz [ 242.362517][T12137] usb 1-1: Manufacturer: syz [ 242.370455][T12137] usb 1-1: SerialNumber: syz [ 242.390911][T12137] usb 1-1: config 0 descriptor?? [ 242.822373][T12137] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 242.846654][T12137] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 242.859813][T15279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3300'. [ 242.902705][T15279] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3300'. [ 242.978142][T12137] peak_usb: probe of 1-1:0.0 failed with error -71 [ 243.001293][T12137] usb 1-1: USB disconnect, device number 20 [ 243.248688][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 243.307295][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 243.905928][T15343] ip6tnl1: entered allmulticast mode [ 243.942399][ T2889] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 243.958538][ T2889] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 243.962305][T15352] sctp: [Deprecated]: syz.1.3330 (pid 15352) Use of int in maxseg socket option. [ 243.962305][T15352] Use struct sctp_assoc_value instead [ 243.973951][ T5832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.165903][T15363] loop0: detected capacity change from 0 to 256 [ 244.197801][ T5834] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 244.211200][T15366] ./file0: Can't lookup blockdev [ 244.238682][ T5832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.308861][ T5832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.401804][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.423978][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 244.439497][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.447549][ T5834] usb 4-1: Product: syz [ 244.470315][ T5834] usb 4-1: Manufacturer: syz [ 244.485159][ T5834] usb 4-1: SerialNumber: syz [ 244.501453][ T5834] usb 4-1: config 0 descriptor?? [ 244.529743][ T5834] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 244.536198][ T5834] hdpvr: probe of 4-1:0.0 failed with error -12 [ 244.605545][T15390] libceph: osd_idle_ttl out of range [ 244.741993][ T5834] usb 4-1: USB disconnect, device number 21 [ 244.912340][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3352'. [ 244.926026][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3352'. [ 245.035861][T15421] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3356'. [ 246.057898][T15470] loop1: detected capacity change from 0 to 512 [ 246.068716][T15470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.123164][T15470] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #17: comm syz.1.3380: corrupted in-inode xattr: e_name out of bounds [ 246.146723][T15470] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.3380: couldn't read orphan inode 17 (err -117) [ 246.186291][T15470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.242921][T15480] loop2: detected capacity change from 0 to 1024 [ 246.304845][T15470] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 246.412939][T15480] hfsplus: invalid length 1280 has been corrected to 255 [ 246.442658][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.570424][T15494] bond0: Error: Cannot enslave bond to itself. [ 246.759368][T15504] loop3: detected capacity change from 0 to 512 [ 246.818283][T15504] EXT4-fs (loop3): 1 truncate cleaned up [ 246.861847][T15504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.029512][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.050848][T15519] loop2: detected capacity change from 0 to 512 [ 247.065731][T15519] EXT4-fs: Ignoring removed bh option [ 247.130515][T15519] EXT4-fs: inline encryption not supported [ 247.190583][T15519] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.265681][T15519] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 247.350786][T15519] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3397: bg 0: block 248: padding at end of block bitmap is not set [ 247.382096][T15535] netlink: 'syz.3.3402': attribute type 3 has an invalid length. [ 247.480930][T15519] __quota_error: 1 callbacks suppressed [ 247.480949][T15519] Quota error (device loop2): write_blk: dquota write failed [ 247.520845][T15519] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 247.534712][T15542] x_tables: duplicate underflow at hook 2 [ 247.551429][T15519] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3397: Failed to acquire dquot type 1 [ 247.676495][T15519] EXT4-fs (loop2): 1 truncate cleaned up [ 247.691734][T15549] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.702318][T15519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 247.871232][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.898294][T15519] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz.2.3397: deleted inode referenced: 12 [ 247.925746][ T28] audit: type=1326 audit(1792096573.152:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.3.3413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 247.990693][ T28] audit: type=1326 audit(1792096573.152:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.3.3413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 248.051268][ T28] audit: type=1326 audit(1792096573.172:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.3.3413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 248.108878][T15563] xt_CT: No such helper "netbios-ns" [ 248.122459][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 248.141480][ T28] audit: type=1326 audit(1792096573.172:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.3.3413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 248.246917][ T28] audit: type=1326 audit(1792096573.172:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.3.3413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 248.474822][T15584] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 248.474863][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 248.704510][T15593] 9pnet: Could not find request transport: tcp ƒg]‘H`÷+ n½¤‘1áÎo²«H&TÐxZ];£‚@ÔfIS\TsVó ÌEµž8Mj&}âø£s$¤å¡) æ‰LtyÉOÙÔ§V2³ß}ʦûXKPá[³ : ð+(Ÿ°wÑü [ 249.018394][T15611] loop2: detected capacity change from 0 to 164 [ 249.128668][T15611] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 249.645360][T15606] loop1: detected capacity change from 0 to 32768 [ 249.681746][T15606] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 249.882823][T15606] XFS (loop1): Ending clean mount [ 249.904763][T15606] XFS (loop1): Quotacheck needed: Please wait. [ 250.020969][T15606] XFS (loop1): Quotacheck: Done. [ 250.089676][T15657] loop2: detected capacity change from 0 to 512 [ 250.114682][ T28] audit: type=1326 audit(1792096575.340:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.3.3455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 250.158629][ T28] audit: type=1326 audit(1792096575.340:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.3.3455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 250.182815][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.198276][ T28] audit: type=1326 audit(1792096575.340:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.3.3455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 250.249515][ T5782] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 250.260672][T15657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.326019][T15666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3456'. [ 250.452417][T15657] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #17: comm syz.2.3453: corrupted in-inode xattr: e_name out of bounds [ 250.535048][T15657] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3453: couldn't read orphan inode 17 (err -117) [ 250.604529][T15657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.720345][T15657] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 250.761147][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'. [ 250.862104][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.241003][T15707] netlink: 'syz.3.3468': attribute type 21 has an invalid length. [ 251.273097][T15707] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3468'. [ 251.947647][T15747] netlink: 'syz.0.3485': attribute type 6 has an invalid length. [ 252.047654][T15753] x_tables: duplicate underflow at hook 2 [ 252.174905][T15759] usb usb1: usbfs: process 15759 (syz.1.3490) did not claim interface 0 before use [ 252.208373][T15762] xt_hashlimit: max too large, truncated to 1048576 [ 252.429440][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 252.442456][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 252.857120][T15789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3504'. [ 252.948636][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'. [ 252.998704][T15797] loop0: detected capacity change from 0 to 512 [ 253.080048][T15797] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 253.113475][T15797] FAT-fs (loop0): Filesystem has been set read-only [ 253.132130][T15797] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 253.156416][T15797] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 253.509657][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3522'. [ 253.818456][T15839] netlink: 'syz.2.3526': attribute type 5 has an invalid length. [ 254.081802][T15824] loop1: detected capacity change from 0 to 32768 [ 254.146238][T15824] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 254.172010][T15824] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.263550][T15829] loop3: detected capacity change from 0 to 40427 [ 254.281759][T15829] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 254.296277][T15829] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 254.316576][T15829] F2FS-fs (loop3): Image doesn't support compression [ 254.323336][T15829] F2FS-fs (loop3): Image doesn't support compression [ 254.332777][T15829] F2FS-fs (loop3): invalid crc value [ 254.390456][T15824] XFS (loop1): Ending clean mount [ 254.423158][T15865] autofs4:pid:15865:autofs_fill_super: called with bogus options [ 254.438455][T15824] XFS (loop1): Quotacheck needed: Please wait. [ 254.501901][T15824] XFS (loop1): Quotacheck: Done. [ 254.586360][T15829] F2FS-fs (loop3): Start checkpoint disabled! [ 254.660778][T15829] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 254.660820][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.676645][T15829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 255.377404][T15900] netlink: 'syz.3.3540': attribute type 10 has an invalid length. [ 255.450438][T15902] syz.1.3549: attempt to access beyond end of device [ 255.450438][T15902] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 255.472797][T15902] gfs2: error 10 reading superblock [ 255.574134][T15900] team0 (unregistering): Port device team_slave_0 removed [ 255.598657][T15900] team0 (unregistering): Port device team_slave_1 removed [ 255.797604][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.431932][T15928] loop2: detected capacity change from 0 to 32768 [ 256.443045][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.449488][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.469216][T15928] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3557 (15928) [ 256.529569][T15928] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 256.571146][T15928] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 256.592028][T15928] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 256.633148][T15928] BTRFS info (device loop2): use zstd compression, level 3 [ 256.653422][T15928] BTRFS info (device loop2): using free space tree [ 256.782831][T15928] BTRFS info (device loop2): enabling ssd optimizations [ 256.798450][T15928] BTRFS info (device loop2): auto enabling async discard [ 256.828363][ T970] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 256.897627][T15951] loop0: detected capacity change from 0 to 32768 [ 256.958599][T15951] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 256.988621][ T5776] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 257.028744][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 257.040590][ T970] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 257.050370][ T970] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 257.051071][T15951] XFS (loop0): Ending clean mount [ 257.058480][ T970] usb 2-1: Product: syz [ 257.058500][ T970] usb 2-1: Manufacturer: syz [ 257.058516][ T970] usb 2-1: SerialNumber: syz [ 257.079898][ T970] usb 2-1: config 0 descriptor?? [ 257.103983][ T970] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 257.241790][T15951] XFS (loop0): Quotacheck needed: Please wait. [ 257.332126][T15951] XFS (loop0): Quotacheck: Done. [ 257.447468][ T5777] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 257.531054][ T970] gspca_zc3xx: reg_r err -71 [ 257.556422][ T970] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 257.607151][ T970] usb 2-1: USB disconnect, device number 20 [ 257.676925][T16020] sctp: [Deprecated]: syz.2.3578 (pid 16020) Use of int in max_burst socket option. [ 257.676925][T16020] Use struct sctp_assoc_value instead [ 257.703937][ T5828] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 257.784108][T16022] loop2: detected capacity change from 0 to 2048 [ 257.792231][T16022] EXT4-fs: Ignoring removed i_version option [ 257.826778][T16027] netlink: 'syz.0.3577': attribute type 5 has an invalid length. [ 257.836703][T16022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.890258][T16022] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #12: block 2: comm syz.2.3579: lblock 0 mapped to illegal pblock 2 (length 1) [ 257.902193][T16031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.911614][T16031] IPv6: NLM_F_CREATE should be set when creating new route [ 257.918881][T16031] IPv6: NLM_F_CREATE should be set when creating new route [ 257.926839][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 257.941183][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.959251][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.971066][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.980484][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.984419][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.992662][ T5828] usb 4-1: config 0 descriptor?? [ 258.006704][ T5828] hub 4-1:0.0: USB hub found [ 258.225433][ T5828] hub 4-1:0.0: 19 ports detected [ 258.235778][ T5828] hub 4-1:0.0: insufficient power available to use all downstream ports [ 258.251480][T16045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3584'. [ 258.322126][T16050] netlink: 'syz.2.3587': attribute type 3 has an invalid length. [ 258.429647][ T5828] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 258.446735][ T5828] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 258.474659][ T5828] usbhid 4-1:0.0: can't add hid device: -71 [ 258.490421][ T5828] usbhid: probe of 4-1:0.0 failed with error -71 [ 258.533096][ T5828] usb 4-1: USB disconnect, device number 22 [ 258.777839][T16109] syz.0.3599: attempt to access beyond end of device [ 258.777839][T16109] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 258.793297][T16077] bond2: Unable to set down delay as MII monitoring is disabled [ 258.819067][T16109] syz.0.3599: attempt to access beyond end of device [ 258.819067][T16109] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 258.839151][T16077] bond2 (unregistering): Released all slaves [ 258.885758][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 258.922000][T16109] syz.0.3599: attempt to access beyond end of device [ 258.922000][T16109] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 258.938251][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 258.949264][T16109] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 258.959378][T16109] UDF-fs: Scanning with blocksize 512 failed [ 258.981412][T16109] syz.0.3599: attempt to access beyond end of device [ 258.981412][T16109] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 259.010286][T16109] syz.0.3599: attempt to access beyond end of device [ 259.010286][T16109] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 259.040836][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 259.063721][T16109] syz.0.3599: attempt to access beyond end of device [ 259.063721][T16109] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 259.094090][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 259.108215][T16155] vlan0: entered promiscuous mode [ 259.114510][T16109] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 259.142966][T16109] UDF-fs: Scanning with blocksize 1024 failed [ 259.176272][T16109] syz.0.3599: attempt to access beyond end of device [ 259.176272][T16109] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 259.218584][T16109] syz.0.3599: attempt to access beyond end of device [ 259.218584][T16109] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 259.266550][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 259.278778][T16109] syz.0.3599: attempt to access beyond end of device [ 259.278778][T16109] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 259.296032][T16163] loop3: detected capacity change from 0 to 512 [ 259.304504][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 259.330324][T16163] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 259.344558][T16109] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 259.391448][T16109] UDF-fs: Scanning with blocksize 2048 failed [ 259.411452][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 259.440572][T16109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 259.482509][T16109] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 259.501061][T16109] UDF-fs: Scanning with blocksize 4096 failed [ 259.520262][T16109] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 259.854688][T16191] sctp: [Deprecated]: syz.2.3617 (pid 16191) Use of int in maxseg socket option. [ 259.854688][T16191] Use struct sctp_assoc_value instead [ 259.874059][T16189] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3616'. [ 260.015156][ T5828] nvmet: connect request for invalid subsystem testsubsys! [ 260.030004][T16193] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 260.183381][T16211] xt_recent: Unsupported userspace flags (000000de) [ 260.816933][T16249] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 260.831270][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.886308][T16254] netlink: 'syz.2.3644': attribute type 4 has an invalid length. [ 261.034010][ T9] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 261.052346][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.333289][T16276] netlink: 'syz.2.3655': attribute type 10 has an invalid length. [ 261.422095][T16276] team0 (unregistering): Port device team_slave_0 removed [ 261.450382][T16276] team0 (unregistering): Port device team_slave_1 removed [ 261.490101][ T9] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 261.506070][ T9] pn533_usb: probe of 2-1:1.0 failed with error -71 [ 261.528865][ T9] usb 2-1: USB disconnect, device number 21 [ 261.561875][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.826857][T16303] netlink: 'syz.2.3663': attribute type 10 has an invalid length. [ 262.032117][T16315] netlink: 'syz.0.3668': attribute type 10 has an invalid length. [ 262.177087][T16315] team0 (unregistering): Port device team_slave_0 removed [ 262.213382][T16315] team0 (unregistering): Port device team_slave_1 removed [ 262.270639][T16322] bridge5: entered promiscuous mode [ 262.284639][T16322] bridge5: entered allmulticast mode [ 262.470688][T16341] --map-set only usable from mangle table [ 262.645513][T16353] netlink: 'syz.2.3685': attribute type 1 has an invalid length. [ 262.914154][T16368] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3692'. [ 263.239030][T16389] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3703'. [ 263.284948][T16391] loop1: detected capacity change from 0 to 512 [ 263.319296][T16391] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 263.334775][T16391] EXT4-fs (loop1): invalid journal inode [ 263.340641][T16391] EXT4-fs (loop1): can't get journal size [ 263.381624][T16391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 263.438871][T16391] System zones: 1-12, 13-13 [ 263.495581][T16391] EXT4-fs (loop1): 1 truncate cleaned up [ 263.545323][T16391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.674784][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.801481][T16419] netlink: 'syz.1.3711': attribute type 10 has an invalid length. [ 263.989191][T16419] team0 (unregistering): Port device team_slave_0 removed [ 264.080975][T16419] team0 (unregistering): Port device team_slave_1 removed [ 264.179734][T16431] netlink: 'syz.0.3720': attribute type 10 has an invalid length. [ 264.335056][T16443] netlink: 'syz.0.3725': attribute type 16 has an invalid length. [ 264.353278][T16443] netlink: 'syz.0.3725': attribute type 17 has an invalid length. [ 264.465283][T16443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.343226][T16503] sctp: [Deprecated]: syz.3.3745 (pid 16503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.343226][T16503] Use struct sctp_sack_info instead [ 265.354294][T16504] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 265.649179][T16520] netlink: 'syz.1.3754': attribute type 3 has an invalid length. [ 265.739276][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3755'. [ 266.005305][T16542] loop2: detected capacity change from 0 to 512 [ 266.033482][T16542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.042588][T16542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.072568][T16542] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 266.161608][T16542] EXT4-fs (loop2): 1 truncate cleaned up [ 266.172784][T16542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.206093][T16556] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 266.251608][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.505331][T16574] netlink: 396 bytes leftover after parsing attributes in process `syz.0.3777'. [ 266.568537][T16576] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 266.603975][T16576] overlayfs: missing 'lowerdir' [ 266.730695][T16586] netlink: 'syz.2.3783': attribute type 5 has an invalid length. [ 267.487271][T16636] loop2: detected capacity change from 0 to 16 [ 267.502917][T16636] erofs: (device loop2): mounted with root inode @ nid 36. [ 267.543054][T16636] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 267.566506][T16636] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 267.994588][T16668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3819'. [ 268.670315][T16716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.677692][T16716] IPv6: NLM_F_CREATE should be set when creating new route [ 268.684996][T16716] IPv6: NLM_F_CREATE should be set when creating new route [ 268.685335][T16718] SET target dimension over the limit! [ 268.836557][ T27] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 268.963174][T16734] netlink: 'syz.1.3851': attribute type 2 has an invalid length. [ 269.018382][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.039055][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.066797][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 269.080705][ T27] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 269.090514][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.131862][ T27] ttusb_dec_send_command: command bulk message failed: error -8 [ 269.148128][ T27] ttusb-dec: probe of 4-1:1.0 failed with error -8 [ 269.218015][T16750] sctp: [Deprecated]: syz.2.3857 (pid 16750) Use of int in max_burst socket option deprecated. [ 269.218015][T16750] Use struct sctp_assoc_value instead [ 269.341692][ T9] usb 4-1: USB disconnect, device number 23 [ 269.493080][T16770] loop0: detected capacity change from 0 to 2048 [ 269.517457][T16773] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.541859][T16770] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 269.556416][T16770] Remounting filesystem read-only [ 269.697379][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 269.882141][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.905673][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.913997][ T8] usb 3-1: Product: syz [ 269.918778][ T8] usb 3-1: Manufacturer: syz [ 269.923416][ T8] usb 3-1: SerialNumber: syz [ 269.965342][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.288663][T16813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.518775][ T5828] usb 3-1: USB disconnect, device number 18 [ 270.685309][T16835] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3889'. [ 270.721090][T16835] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3889'. [ 270.884901][T16846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3895'. [ 270.972951][T16852] ±ÿ: renamed from lo (while UP) [ 271.008438][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 271.015523][ T9] ath9k_htc: Failed to initialize the device [ 271.038927][ T5828] usb 3-1: ath9k_htc: USB layer deinitialized [ 271.168016][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.224573][T16868] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3903'. [ 271.717150][T16895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3917'. [ 271.882461][T16903] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.891643][T16903] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3921'. [ 272.398898][T16930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3933'. [ 272.621593][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3938'. [ 272.638853][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 272.638868][ T28] audit: type=1326 audit(1792096597.844:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.2.3939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 272.698796][ T28] audit: type=1326 audit(1792096597.844:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.2.3939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 272.771370][ T28] audit: type=1326 audit(1792096597.904:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.2.3939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 272.848937][ T28] audit: type=1326 audit(1792096597.904:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.2.3939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 272.916290][T16948] loop0: detected capacity change from 0 to 1024 [ 272.929105][ T28] audit: type=1326 audit(1792096597.904:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.2.3939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 272.953192][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.997473][T16948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.047912][T16948] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #11: comm syz.0.3942: directory missing '..' [ 273.228875][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.383871][T16972] netlink: 'syz.2.3949': attribute type 2 has an invalid length. [ 273.401591][T16972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3949'. [ 273.478329][T16974] veth5: entered promiscuous mode [ 273.492973][T16974] veth5: entered allmulticast mode [ 273.552146][T16995] xt_TCPMSS: Only works on TCP SYN packets [ 273.901666][T17013] IPv6: Can't replace route, no match found [ 273.929514][T17015] loop0: detected capacity change from 0 to 64 [ 273.947044][T17015] hfs: unable to locate alternate MDB [ 273.955679][T17015] hfs: continuing without an alternate MDB [ 274.278797][T17036] loop0: detected capacity change from 0 to 256 [ 274.392371][T17036] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 274.414639][T17036] exFAT-fs (loop0): failed to load alloc-bitmap [ 274.428129][T17036] exFAT-fs (loop0): failed to recognize exfat type [ 274.878091][ C1] sd 0:0:1:0: [sda] tag#1945 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 274.888650][ C1] sd 0:0:1:0: [sda] tag#1945 CDB: Read(6) 08 00 9f d1 fe de [ 274.999132][T17078] ip_tables: iptables: counters copy to user failed while replacing table [ 275.381398][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 275.560528][ T970] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 275.571314][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 275.593954][ T27] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 275.610561][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.627257][ T27] usb 2-1: Product: syz [ 275.631801][ T27] usb 2-1: Manufacturer: syz [ 275.636459][ T27] usb 2-1: SerialNumber: syz [ 275.659130][ T27] usb 2-1: config 0 descriptor?? [ 275.677444][ T27] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 275.754745][ T970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.772314][ T970] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 275.785938][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.878833][ T27] gspca_ov534_9: reg_w failed -71 [ 276.051004][ T5828] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.110850][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 276.240239][ T5828] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 276.251998][ T5828] usb 4-1: config 0 has no interface number 0 [ 276.258196][ T5828] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 276.268628][ T5828] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.295471][ T970] usb 3-1: USB disconnect, device number 19 [ 276.302185][ T5828] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 276.315980][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.321010][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 276.334384][ T5828] usb 4-1: Product: syz [ 276.338703][ T5828] usb 4-1: Manufacturer: syz [ 276.345974][ T5828] usb 4-1: SerialNumber: syz [ 276.367929][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.376867][ T5828] usb 4-1: config 0 descriptor?? [ 276.390108][T17129] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 276.402979][ T23] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 276.412616][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.420654][ T23] usb 1-1: Product: syz [ 276.422688][ T5828] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 276.426123][ T23] usb 1-1: Manufacturer: syz [ 276.438976][ T23] usb 1-1: SerialNumber: syz [ 276.451760][ T23] usb 1-1: config 0 descriptor?? [ 276.456868][ T5828] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 276.461071][ T27] gspca_ov534_9: Unknown sensor 0000 [ 276.466159][ T27] ov534_9: probe of 2-1:0.0 failed with error -22 [ 276.479301][ T23] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 276.489046][ T23] usb 1-1: selecting invalid altsetting 1 [ 276.496742][ T27] usb 2-1: USB disconnect, device number 22 [ 276.710891][T17177] loop1: detected capacity change from 0 to 512 [ 276.730040][T17177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.751539][T17177] EXT4-fs (loop1): 1 truncate cleaned up [ 276.758725][T17177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.854687][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.941373][ T5828] usb 4-1: USB disconnect, device number 24 [ 276.952590][ T5828] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 276.969905][ T5828] cyberjack 4-1:0.69: device disconnected [ 276.997316][ T28] audit: type=1326 audit(1792096602.202:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.2.4013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 276.997953][ T23] usb 1-1: USB disconnect, device number 21 [ 277.025444][ T28] audit: type=1326 audit(1792096602.202:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.2.4013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 277.058552][ T28] audit: type=1326 audit(1792096602.232:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.2.4013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 277.124613][ T28] audit: type=1326 audit(1792096602.232:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.2.4013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 277.159721][ T28] audit: type=1326 audit(1792096602.232:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.2.4013" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 277.196119][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 277.220745][T17209] loop2: detected capacity change from 0 to 2048 [ 277.259284][T17209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.283649][T17209] ext4 filesystem being mounted at /996/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.339408][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.255092][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4038'. [ 278.537224][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4041'. [ 278.758758][T17258] loop0: detected capacity change from 0 to 32768 [ 278.785828][T17258] (syz.0.4036,17258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.818208][T17258] (syz.0.4036,17258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.871674][T17258] JBD2: Ignoring recovery information on journal [ 278.952930][T17258] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 279.020369][T17258] (syz.0.4036,17258,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 279.148046][T17258] (syz.0.4036,17258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 279.226621][T17258] (syz.0.4036,17258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 279.256676][T17258] (syz.0.4036,17258,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 279.290354][T17258] (syz.0.4036,17258,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 279.321407][T17258] (syz.0.4036,17258,1):ocfs2_quota_read:201 ERROR: status = -5 [ 279.348252][T17258] __quota_error: 4 callbacks suppressed [ 279.348269][T17258] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 279.373083][T17258] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 279.395503][T17258] (syz.0.4036,17258,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 279.415321][T17258] (syz.0.4036,17258,1):ocfs2_mknod:315 ERROR: status = -5 [ 279.428425][T17258] (syz.0.4036,17258,1):ocfs2_mknod:504 ERROR: status = -5 [ 279.438047][T17258] (syz.0.4036,17258,1):ocfs2_mkdir:661 ERROR: status = -5 [ 279.545323][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 279.875555][T17329] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4068'. [ 280.200415][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4077'. [ 280.250194][T17345] nvme nvme0: failed to connect socket: -111 [ 280.443709][ T5828] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.546443][T17372] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4085'. [ 280.563627][T17372] unsupported nlmsg_type 40 [ 280.773817][ T5828] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.852393][T17389] sctp: [Deprecated]: syz.2.4096 (pid 17389) Use of int in max_burst socket option. [ 280.852393][T17389] Use struct sctp_assoc_value instead [ 280.918243][ T1135] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.114615][T17401] netlink: 'syz.3.4100': attribute type 5 has an invalid length. [ 281.129123][T17401] netlink: 'syz.3.4100': attribute type 5 has an invalid length. [ 281.216709][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4102'. [ 281.282126][T17408] (null): rxe_set_mtu: Set mtu to 1024 [ 281.316352][T17385] loop1: detected capacity change from 0 to 32768 [ 281.342580][T17385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4093 (17385) [ 281.399719][T17385] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.438493][T17385] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 281.468503][T17385] BTRFS info (device loop1): setting nodatasum [ 281.492239][T17385] BTRFS info (device loop1): force zlib compression, level 3 [ 281.507070][T17385] BTRFS info (device loop1): metadata ratio 1 [ 281.513342][T17385] BTRFS info (device loop1): turning on flush-on-commit [ 281.530787][T17385] BTRFS info (device loop1): allowing degraded mounts [ 281.543918][T17385] BTRFS info (device loop1): using free space tree [ 281.639182][T17408] infiniband syz1: set active [ 281.644183][ T5828] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 281.652660][T17385] BTRFS info (device loop1): enabling ssd optimizations [ 281.658559][T17408] infiniband syz1: added bond0 [ 281.765502][T17408] RDS/IB: syz1: added [ 281.782492][T17408] smc: adding ib device syz1 with port count 1 [ 281.789686][T17408] smc: ib device syz1 port 1 has pnetid [ 281.833918][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 281.849923][ T5828] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 281.884839][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.892935][ T5828] usb 1-1: Product: syz [ 281.930600][ T5828] usb 1-1: Manufacturer: syz [ 281.940914][ T5828] usb 1-1: SerialNumber: syz [ 281.967184][ T5828] usb 1-1: config 0 descriptor?? [ 281.975732][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.996572][ T5828] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 282.002766][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.169753][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.232632][ T5828] gspca_ov534_9: reg_w failed -71 [ 282.279450][T17452] loop2: detected capacity change from 0 to 512 [ 282.385657][T17452] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 282.428928][T17452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 282.442253][T17452] System zones: 0-1, 15-15, 18-18, 34-34 [ 282.449304][T17452] EXT4-fs (loop2): orphan cleanup on readonly fs [ 282.459178][T17452] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 282.471660][T17452] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 282.488103][T17452] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 282.505839][T17452] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.4112: bad orphan inode 16 [ 282.526833][T17452] ext4_test_bit(bit=15, block=18) = 1 [ 282.532541][T17452] is_bad_inode(inode)=0 [ 282.550803][T17452] NEXT_ORPHAN(inode)=0 [ 282.586018][ T27] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.600856][T17452] max_ino=32 [ 282.606494][T17452] i_nlink=2 [ 282.611030][T17452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.675549][T17452] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 282.740921][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.794487][ T5828] gspca_ov534_9: Unknown sensor 0000 [ 282.794568][ T5828] ov534_9: probe of 1-1:0.0 failed with error -22 [ 282.829027][ T5828] usb 1-1: USB disconnect, device number 22 [ 282.941878][T17476] loop2: detected capacity change from 0 to 512 [ 282.976350][T17476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 283.021447][T17476] EXT4-fs (loop2): 1 truncate cleaned up [ 283.036765][T17476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.212472][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.442665][T17503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.474760][ T23] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 283.585274][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 283.666481][ T23] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 283.677016][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.705060][ T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 283.714082][ T23] usb 2-1: config 1 has no interface number 1 [ 283.725035][ T23] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.743917][ T23] usb 2-1: config 1 interface 105 has no altsetting 0 [ 283.753728][ T23] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 283.775895][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.783982][ T23] usb 2-1: Product: syz [ 283.790239][ T23] usb 2-1: Manufacturer: syz [ 283.792286][ T8] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 283.795295][ T23] usb 2-1: SerialNumber: syz [ 283.812772][ T8] usb 3-1: config 0 has no interface number 0 [ 283.833229][ T8] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 283.848069][ T8] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.859305][T17520] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 283.859325][T17520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4129'. [ 283.873909][ T8] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 283.892295][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.900692][ T8] usb 3-1: Product: syz [ 283.911170][ T8] usb 3-1: Manufacturer: syz [ 283.915888][ T8] usb 3-1: SerialNumber: syz [ 283.940314][ T8] usb 3-1: config 0 descriptor?? [ 283.952673][T17496] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 283.967700][ T8] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 284.013206][ T8] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 284.065267][ T23] aqc111: probe of 2-1:1.105 failed with error -22 [ 284.315469][ T23] usb 2-1: USB disconnect, device number 23 [ 284.382862][T17516] loop3: detected capacity change from 0 to 32768 [ 284.422429][T17516] (syz.3.4128,17516,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.442765][T17516] (syz.3.4128,17516,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.471953][T17516] JBD2: Ignoring recovery information on journal [ 284.487124][ T8] usb 3-1: USB disconnect, device number 20 [ 284.530320][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 284.577279][T17516] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 284.593133][ T8] cyberjack 3-1:0.69: device disconnected [ 284.733570][T17567] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 284.759823][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.767539][T17567] CIFS: Attempting to mount //::1/share [ 284.802617][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 285.128924][T17580] netlink: 'syz.2.4138': attribute type 1 has an invalid length. [ 285.145489][T17580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4138'. [ 285.542541][T17608] netlink: 'syz.1.4150': attribute type 1 has an invalid length. [ 285.550924][ T28] audit: type=1326 audit(1792096610.757:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17605 comm="syz.2.4157" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x0 [ 285.553036][T17608] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4150'. [ 285.574605][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.639495][T17567] CIFS: VFS: Error connecting to socket. Aborting operation. [ 285.650782][T17567] CIFS: VFS: cifs_mount failed w/return code = -4 [ 285.892435][T17622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4159'. [ 286.056264][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.159625][T17636] overlayfs: missing 'lowerdir' [ 286.615906][T17632] loop2: detected capacity change from 0 to 32768 [ 286.668395][T17632] [ 286.668395][T17632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.668395][T17632] [ 286.729821][ T5776] [ 286.729821][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.729821][ T5776] [ 286.743177][ T5776] [ 286.743177][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.743177][ T5776] [ 286.842293][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 287.032888][T17679] netlink: 'syz.2.4184': attribute type 3 has an invalid length. [ 287.042268][T17679] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4184'. [ 287.051434][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 287.069241][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.121070][ T9] usb 4-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 287.147540][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.155596][ T9] usb 4-1: Product: syz [ 287.191565][ T9] usb 4-1: Manufacturer: syz [ 287.206763][ T9] usb 4-1: SerialNumber: syz [ 287.220434][ T9] usb 4-1: config 0 descriptor?? [ 287.237335][ T9] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 287.276175][ T9] ums-datafab 4-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 287.322830][T17661] loop0: detected capacity change from 0 to 32768 [ 287.356922][ T9] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 287.398819][T17661] ERROR: (device loop0): diAllocAG: numfree > numinos [ 287.398819][T17661] [ 287.414091][T17661] ERROR: (device loop0): remounting filesystem as read-only [ 287.422747][T17661] ialloc: diAlloc returned -5! [ 287.468871][ T9] usb 4-1: USB disconnect, device number 25 [ 287.826821][T17722] netlink: 'syz.0.4195': attribute type 2 has an invalid length. [ 287.834739][T17722] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4195'. [ 288.127173][T17736] netlink: 'syz.1.4203': attribute type 1 has an invalid length. [ 288.145586][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4203'. [ 288.223602][T17741] afs: Bad value for 'source' [ 288.507117][T17759] netlink: 'syz.2.4213': attribute type 12 has an invalid length. [ 288.965129][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4227'. [ 289.102629][T17793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4230'. [ 289.325832][T17780] loop0: detected capacity change from 0 to 32768 [ 289.355351][T17780] (syz.0.4224,17780,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.392148][T17780] (syz.0.4224,17780,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.491295][T17780] JBD2: Ignoring recovery information on journal [ 289.571838][T17780] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 289.707448][T17816] ip6t_rt: address list match requested but addrnr is 0 [ 289.896301][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 290.139789][T17812] loop1: detected capacity change from 0 to 32768 [ 290.214503][T17812] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.327408][T17812] XFS (loop1): Ending clean mount [ 290.508559][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.698918][T17864] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4257'. [ 290.748685][T17866] overlayfs: missing 'lowerdir' [ 291.305299][T17894] loop1: detected capacity change from 0 to 4096 [ 291.413610][T17906] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.509779][ T28] audit: type=1326 audit(1792096616.705:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.4277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 291.585509][ T28] audit: type=1326 audit(1792096616.705:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.4277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 291.639002][ T28] audit: type=1326 audit(1792096616.745:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.4277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 291.668942][ T28] audit: type=1326 audit(1792096616.745:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.4277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 291.738904][ T28] audit: type=1326 audit(1792096616.745:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.4277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 291.763057][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.159922][T17940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.472903][T17932] loop1: detected capacity change from 0 to 32768 [ 292.498241][T17932] (syz.1.4286,17932,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.529945][T17932] (syz.1.4286,17932,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.604788][T17932] JBD2: Ignoring recovery information on journal [ 292.638577][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.649432][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.659573][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.671351][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.681310][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.692003][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.765940][T17932] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 292.798793][T17932] (syz.1.4286,17932,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 292.886944][T18008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4305'. [ 292.896750][T18008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4305'. [ 292.926154][T17932] (syz.1.4286,17932,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 292.968139][T17932] (syz.1.4286,17932,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 292.988502][T17932] (syz.1.4286,17932,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 293.007730][T17932] (syz.1.4286,17932,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 293.017193][T17932] (syz.1.4286,17932,1):ocfs2_quota_read:201 ERROR: status = -5 [ 293.031036][T17932] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 293.040410][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 293.056079][T17932] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 293.068648][T17932] (syz.1.4286,17932,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 293.079462][T17932] (syz.1.4286,17932,1):ocfs2_mknod:315 ERROR: status = -5 [ 293.088462][T17932] (syz.1.4286,17932,1):ocfs2_mknod:504 ERROR: status = -5 [ 293.101454][T17932] (syz.1.4286,17932,1):ocfs2_mkdir:661 ERROR: status = -5 [ 293.130448][T18015] block device autoloading is deprecated and will be removed. [ 293.180115][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 293.242231][ T23] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 293.261702][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.287110][ T23] usb 3-1: Product: syz [ 293.299832][ T23] usb 3-1: Manufacturer: syz [ 293.304491][ T23] usb 3-1: SerialNumber: syz [ 293.333572][ T23] ums-karma 3-1:1.0: USB Mass Storage device detected [ 293.381696][ T23] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 293.381696][ T23] Please send a copy of this message to and [ 293.758525][ T28] audit: type=1326 audit(1792096618.954:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.3.4320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 293.790370][ T28] audit: type=1326 audit(1792096618.954:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.3.4320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 293.830372][ T23] ums-karma: probe of 3-1:1.0 failed with error -5 [ 293.867662][ T23] usb 3-1: USB disconnect, device number 21 [ 293.885139][ T28] audit: type=1326 audit(1792096618.954:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.3.4320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710e99e559 code=0x7ffc0000 [ 294.027180][T18067] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 294.040506][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 294.156491][T18075] netlink: 'syz.3.4330': attribute type 1 has an invalid length. [ 294.219764][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.377668][T18083] loop1: detected capacity change from 0 to 8 [ 294.430444][T18083] SQUASHFS error: zlib decompression failed, data probably corrupt [ 294.445972][T18083] SQUASHFS error: Failed to read block 0x9b: -5 [ 294.474316][T18083] SQUASHFS error: Unable to read metadata cache entry [99] [ 294.499605][T18083] SQUASHFS error: Unable to read inode 0x127 [ 294.594589][T18071] loop0: detected capacity change from 0 to 32768 [ 294.623125][T18071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4328 (18071) [ 294.664757][T18071] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.699838][T18071] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 294.708561][T18071] BTRFS info (device loop0): force clearing of disk cache [ 294.749783][T18071] BTRFS info (device loop0): metadata ratio 0 [ 294.756003][T18071] BTRFS info (device loop0): using free space tree [ 294.899893][T18071] BTRFS info (device loop0): enabling ssd optimizations [ 294.930717][T18071] BTRFS info (device loop0): auto enabling async discard [ 294.988468][T18071] BTRFS info (device loop0): rebuilding free space tree [ 295.231093][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.256359][T18134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4348'. [ 295.793566][T18126] loop2: detected capacity change from 0 to 32768 [ 295.840432][T18126] (syz.2.4345,18126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.876164][T18126] (syz.2.4345,18126,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.970735][T18126] JBD2: Ignoring recovery information on journal [ 296.145737][T18126] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 296.151291][T18168] C: renamed from team_slave_0 [ 296.187150][T18126] (syz.2.4345,18126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 296.207448][T18168] netlink: 'syz.3.4357': attribute type 3 has an invalid length. [ 296.236762][T18168] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4357'. [ 296.271460][T18168] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 296.372978][T18126] (syz.2.4345,18126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 296.409072][T18177] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4363'. [ 296.440603][T18126] (syz.2.4345,18126,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 296.476964][T18126] (syz.2.4345,18126,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 296.495991][T18179] geneve1: entered promiscuous mode [ 296.498169][T18126] (syz.2.4345,18126,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 296.523510][T18126] (syz.2.4345,18126,0):ocfs2_quota_read:201 ERROR: status = -5 [ 296.529210][T18183] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4366'. [ 296.535647][T18126] __quota_error: 6 callbacks suppressed [ 296.535661][T18126] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6 [ 296.584163][T18126] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 296.609455][T18126] (syz.2.4345,18126,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 296.618738][T18183] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4366'. [ 296.645190][T18126] (syz.2.4345,18126,1):ocfs2_mknod:315 ERROR: status = -5 [ 296.652761][T18126] (syz.2.4345,18126,1):ocfs2_mknod:504 ERROR: status = -5 [ 296.670256][T18126] (syz.2.4345,18126,1):ocfs2_mkdir:661 ERROR: status = -5 [ 296.802541][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 297.146024][T18212] loop1: detected capacity change from 0 to 256 [ 297.648069][T18242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4386'. [ 298.235765][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4403'. [ 298.900440][T18316] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4418'. [ 299.163498][T18327] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 299.233569][T18327] bond3 (unregistering): Released all slaves [ 300.017063][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4436'. [ 300.212220][T18425] loop2: detected capacity change from 0 to 512 [ 300.368262][T18313] syz.1.4417 (18313): drop_caches: 2 [ 300.560711][T18440] befs: (nullb0): No write support. Marking filesystem read-only [ 300.587944][T18440] befs: (nullb0): invalid magic header [ 301.282402][T18493] netlink: 'syz.3.4465': attribute type 19 has an invalid length. [ 301.758036][T18525] loop3: detected capacity change from 0 to 164 [ 301.902750][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.543046][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.967054][T18621] loop1: detected capacity change from 0 to 16 [ 302.988100][T18621] erofs: (device loop1): mounted with root inode @ nid 36. [ 302.991843][T18620] loop2: detected capacity change from 0 to 1764 [ 302.995706][ T5828] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 303.075601][T18620] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 303.217506][ T5828] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.233221][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.255435][ T5828] usb 1-1: Product: syz [ 303.259671][ T5828] usb 1-1: Manufacturer: syz [ 303.283194][ T5828] usb 1-1: SerialNumber: syz [ 303.307848][ T5828] usb 1-1: config 0 descriptor?? [ 303.379341][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4515'. [ 303.403359][T18644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4515'. [ 303.537815][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4518'. [ 303.544978][ T5828] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 303.564914][T18651] netlink: 'syz.1.4520': attribute type 7 has an invalid length. [ 303.577053][ T5828] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 303.590472][ T5828] usb 1-1: USB disconnect, device number 23 [ 303.787867][T18674] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4525'. [ 303.879003][T18678] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.904033][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 303.973361][ T8] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 304.155075][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.183389][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.201101][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.202061][T18699] loop2: detected capacity change from 0 to 64 [ 304.210757][ T8] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 304.257506][ T8] usb 4-1: Product: syz [ 304.263677][ T8] usb 4-1: Manufacturer: syz [ 304.301235][ T8] hub 4-1:4.0: USB hub found [ 304.519184][ T8] hub 4-1:4.0: 5 ports detected [ 304.543340][ T8] hub 4-1:4.0: insufficient power available to use all downstream ports [ 304.653176][ T28] audit: type=1326 audit(1792096629.849:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18722 comm="syz.0.4545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 304.720339][ T8] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 304.727170][ T28] audit: type=1326 audit(1792096629.879:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18722 comm="syz.0.4545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 304.743902][ T8] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 304.792327][ T28] audit: type=1326 audit(1792096629.879:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18722 comm="syz.0.4545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 304.833888][ T8] usb 4-1: USB disconnect, device number 26 [ 304.850958][ T28] audit: type=1326 audit(1792096629.879:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18722 comm="syz.0.4545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 305.144197][T18745] binder: 18743:18745 ioctl c0306201 200000001580 returned -14 [ 305.350354][T18758] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.570575][T18766] netlink: 'syz.2.4559': attribute type 1 has an invalid length. [ 305.607996][T18766] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4559'. [ 305.636268][T18766] NCSI netlink: No device for ifindex 0 [ 305.815934][T18772] nvme_fabrics: missing parameter 'host_traddr=%s' [ 306.736530][T18789] loop1: detected capacity change from 0 to 32768 [ 306.751105][T18789] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.4569 (18789) [ 306.796750][T18789] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 306.817355][T18789] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 306.834621][T18789] BTRFS info (device loop1): using free space tree [ 306.872047][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4588'. [ 306.995728][T18789] BTRFS info (device loop1): enabling ssd optimizations [ 307.002806][T18789] BTRFS info (device loop1): auto enabling async discard [ 307.377899][ T5782] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 308.870744][T18872] syz.3.4599 (18872): drop_caches: 2 [ 308.928308][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4619'. [ 308.935307][T18914] cgroup: Name too long [ 309.527073][T18950] netlink: 'syz.2.4636': attribute type 1 has an invalid length. [ 310.203887][T18985] loop0: detected capacity change from 0 to 512 [ 310.231799][T18989] bridge0: port 3(hsr0) entered blocking state [ 310.235651][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 310.260244][T18989] bridge0: port 3(hsr0) entered disabled state [ 310.269220][T13757] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 310.299330][T18989] hsr0: entered allmulticast mode [ 310.310751][T18989] hsr_slave_0: entered allmulticast mode [ 310.321125][T18989] hsr_slave_1: entered allmulticast mode [ 310.328839][T18989] hsr0: entered promiscuous mode [ 310.335234][T18989] bridge0: port 3(hsr0) entered blocking state [ 310.341627][T18989] bridge0: port 3(hsr0) entered forwarding state [ 311.502839][T19053] loop1: detected capacity change from 0 to 256 [ 311.536262][T19053] FAT-fs (loop1): Directory bread(block 64) failed [ 311.542962][T19053] FAT-fs (loop1): Directory bread(block 65) failed [ 311.582345][T19053] FAT-fs (loop1): Directory bread(block 66) failed [ 311.605898][T19053] FAT-fs (loop1): Directory bread(block 67) failed [ 311.612589][T19053] FAT-fs (loop1): Directory bread(block 68) failed [ 311.644408][T19053] FAT-fs (loop1): Directory bread(block 69) failed [ 311.653676][T19053] FAT-fs (loop1): Directory bread(block 70) failed [ 311.685943][T19053] FAT-fs (loop1): Directory bread(block 71) failed [ 311.692677][T19053] FAT-fs (loop1): Directory bread(block 72) failed [ 311.707544][T19053] FAT-fs (loop1): Directory bread(block 73) failed [ 311.812167][T19064] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[19064] [ 312.587621][T19068] loop0: detected capacity change from 0 to 32768 [ 312.637803][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4700'. [ 312.650093][T13757] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.707495][T19101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4700'. [ 312.917573][ T27] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 313.072185][T19125] xt_SECMARK: invalid mode: 2 [ 313.126404][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 313.143873][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 313.161143][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 313.186820][ T27] usb 2-1: Product: syz [ 313.191057][ T27] usb 2-1: Manufacturer: syz [ 313.210887][ T27] usb 2-1: SerialNumber: syz [ 313.228519][ T27] usb 2-1: config 0 descriptor?? [ 313.250911][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 313.381585][T19145] usb usb8: usbfs: process 19145 (syz.0.4717) did not claim interface 0 before use [ 313.676484][ T27] gspca_sn9c2028: read1 error -71 [ 313.694018][ T27] gspca_sn9c2028: read1 error -71 [ 313.716669][ T27] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 313.731140][ T27] usb 2-1: USB disconnect, device number 24 [ 314.224998][ T28] audit: type=1400 audit(1792096639.416:231): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=19195 comm="syz.0.4738" [ 314.302158][T19193] syz.2.4735 (19193): drop_caches: 2 [ 314.370988][T19204] netlink: 'syz.0.4742': attribute type 11 has an invalid length. [ 314.394927][T19204] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4742'. [ 314.517782][ T28] audit: type=1326 audit(1792096639.706:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.552475][ T28] audit: type=1326 audit(1792096639.706:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.607591][T19212] infiniband syz1: set active [ 314.616957][ T28] audit: type=1326 audit(1792096639.736:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.656440][ T28] audit: type=1326 audit(1792096639.736:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.690280][ T28] audit: type=1326 audit(1792096639.736:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.726857][ T28] audit: type=1326 audit(1792096639.736:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.782376][ T28] audit: type=1326 audit(1792096639.736:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.828082][ T28] audit: type=1326 audit(1792096639.736:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.874737][ T28] audit: type=1326 audit(1792096639.736:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.0.4745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd7e9b9e559 code=0x7ffc0000 [ 314.922038][T19226] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 314.932966][T19223] syz.0.4751 (19223): drop_caches: 2 [ 314.944557][ T27] kernel write not supported for file /2375/clear_refs (pid: 27 comm: kworker/1:1) [ 315.170952][T19239] set match dimension is over the limit! [ 315.384193][T19254] netlink: 'syz.2.4765': attribute type 1 has an invalid length. [ 315.447995][ T5828] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 315.465732][T19260] loop3: detected capacity change from 0 to 1024 [ 315.529426][T19264] loop2: detected capacity change from 0 to 256 [ 315.538968][T19260] hfsplus: xattr searching failed [ 315.551882][T19264] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 315.590053][T19264] exFAT-fs (loop2): failed to count the number of clusters in root [ 315.637207][T19264] exFAT-fs (loop2): failed to recognize exfat type [ 315.649476][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.673573][ T5828] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 315.717200][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.761375][ T5828] usb 2-1: config 0 descriptor?? [ 315.783988][ T5828] smsusb:smsusb_probe: board id=8, interface number 0 [ 315.801737][ T5828] smsusb:smsusb_probe: Device initialized with return code -19 [ 315.986648][ T5828] usb 2-1: USB disconnect, device number 25 [ 316.156878][T19304] loop2: detected capacity change from 0 to 256 [ 316.250850][T19304] FAT-fs (loop2): Directory bread(block 64) failed [ 316.263058][T19304] FAT-fs (loop2): Directory bread(block 65) failed [ 316.290363][T19304] FAT-fs (loop2): Directory bread(block 66) failed [ 316.296962][T19304] FAT-fs (loop2): Directory bread(block 67) failed [ 316.323194][T19304] FAT-fs (loop2): Directory bread(block 68) failed [ 316.340631][T19304] FAT-fs (loop2): Directory bread(block 69) failed [ 316.355269][T19304] FAT-fs (loop2): Directory bread(block 70) failed [ 316.367362][T19304] FAT-fs (loop2): Directory bread(block 71) failed [ 316.374058][T19304] FAT-fs (loop2): Directory bread(block 72) failed [ 316.386566][T19304] FAT-fs (loop2): Directory bread(block 73) failed [ 316.665376][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4792'. [ 316.854430][T19339] program syz.0.4797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.931506][T19346] netlink: 959 bytes leftover after parsing attributes in process `syz.1.4800'. [ 317.350293][T19373] No such timeout policy "syz1" [ 317.601891][T19391] netlink: 9456 bytes leftover after parsing attributes in process `syz.2.4820'. [ 317.757886][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 317.797497][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4824'. [ 317.862044][T19400] netlink: 'syz.2.4825': attribute type 5 has an invalid length. [ 317.915566][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.958242][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 317.972972][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 317.992628][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.014819][ T9] usb 2-1: Product: syz [ 318.027964][ T9] usb 2-1: Manufacturer: syz [ 318.032988][ T9] usb 2-1: SerialNumber: syz [ 318.053086][ T9] usb 2-1: config 0 descriptor?? [ 318.071630][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 318.428643][ T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 318.482217][ T9] gspca_sq930x: ucbus_write failed -71 [ 318.488281][ T9] sq930x: probe of 2-1:0.0 failed with error -71 [ 318.504604][ T9] usb 2-1: USB disconnect, device number 26 [ 318.560502][T19437] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 318.598320][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 318.628187][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 318.639782][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 318.651466][ T27] usb 4-1: config 179 has no interface number 0 [ 318.657806][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 318.674639][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 318.674675][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 318.674698][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 318.674732][ T27] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 318.674760][ T27] usb 4-1: config 179 interface 65 has no altsetting 0 [ 318.674797][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 318.674820][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.724470][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input22 [ 318.811309][ T5125] input input22: unable to receive magic message: -110 [ 318.817758][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.817790][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 318.817855][ T23] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 318.817880][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.840227][ T23] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 318.898381][ T5125] input input22: unable to receive magic message: -32 [ 318.902090][ T5125] input input22: unable to receive magic message: -32 [ 318.911534][T13757] input input22: unable to receive magic message: -32 [ 318.916257][ T5125] input input22: unable to receive magic message: -32 [ 318.956283][ T5125] input input22: unable to receive magic message: -32 [ 319.083387][T19456] netlink: 'syz.0.4838': attribute type 21 has an invalid length. [ 319.098393][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4838'. [ 319.163697][T19460] siw: device registration error -23 [ 319.216570][ T5828] usb 4-1: USB disconnect, device number 27 [ 319.216700][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 319.237301][ T5828] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 319.804692][T19483] loop1: detected capacity change from 0 to 32768 [ 319.889126][T19483] JBD2: Ignoring recovery information on journal [ 319.982968][T19500] netlink: 'syz.0.4853': attribute type 3 has an invalid length. [ 319.991228][T19500] netlink: 'syz.0.4853': attribute type 1 has an invalid length. [ 319.999715][T19500] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4853'. [ 320.009375][T19500] NCSI netlink: No device for ifindex 33022 [ 320.051522][T19483] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 320.165692][ T5828] usb 3-1: USB disconnect, device number 22 [ 320.207860][ T5828] idmouse 3-1:1.0: disconnected [ 320.359803][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 320.651928][T19535] x_tables: unsorted underflow at hook 4 [ 320.702290][T19537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4866'. [ 320.738574][T19537] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4866'. [ 320.781157][T19537] netlink: 'syz.3.4866': attribute type 5 has an invalid length. [ 320.803427][T19537] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4866'. [ 321.051127][T19548] loop2: detected capacity change from 0 to 2048 [ 321.085069][T19548] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 321.150249][T19553] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.150633][T19548] bio_check_eod: 3 callbacks suppressed [ 321.150646][T19548] syz.2.4869: attempt to access beyond end of device [ 321.150646][T19548] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 321.319568][T19548] syz.2.4869: attempt to access beyond end of device [ 321.319568][T19548] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 321.346376][T19548] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 321.532078][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4876'. [ 321.710658][T19571] ip_tables: iptables: counters copy to user failed while replacing table [ 321.919241][ T28] audit: type=1400 audit(1792096647.104:241): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19578 comm="syz.1.4884" [ 322.037757][ T28] audit: type=1326 audit(1792096647.224:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.071254][T19564] loop0: detected capacity change from 0 to 32768 [ 322.122597][ T28] audit: type=1326 audit(1792096647.224:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.182277][ T28] audit: type=1326 audit(1792096647.224:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.242059][T19593] netlink: 'syz.3.4889': attribute type 16 has an invalid length. [ 322.252132][ T28] audit: type=1326 audit(1792096647.224:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.282413][T19593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4889'. [ 322.298807][T19593] veth1_macvtap: entered allmulticast mode [ 322.318720][ T28] audit: type=1326 audit(1792096647.224:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.371194][T19599] netlink: 'syz.2.4892': attribute type 21 has an invalid length. [ 322.379629][ T28] audit: type=1326 audit(1792096647.224:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.429104][ T28] audit: type=1326 audit(1792096647.224:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 322.464578][ T28] audit: type=1326 audit(1792096647.224:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.2.4885" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43ab79e559 code=0x7ffc0000 [ 323.343569][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 323.554404][T19665] xfrm1: entered allmulticast mode [ 323.603127][T19669] loop2: detected capacity change from 0 to 256 [ 323.639228][T19669] exfat: Deprecated parameter 'namecase' [ 323.704665][T19669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 323.707253][T19676] netlink: 'syz.1.4927': attribute type 1 has an invalid length. [ 323.730775][T19676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4927'. [ 324.046573][T19698] netlink: 'syz.2.4932': attribute type 11 has an invalid length. [ 325.061378][T19758] netlink: 'syz.1.4955': attribute type 13 has an invalid length. [ 325.214531][T19770] loop2: detected capacity change from 0 to 512 [ 325.226924][T19770] EXT4-fs: Ignoring removed nobh option [ 325.302466][T19770] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #3: comm syz.2.4962: corrupted inode contents [ 325.359890][T19770] EXT4-fs (loop2): Remounting filesystem read-only [ 325.372327][T19770] Quota error (device loop2): write_blk: dquota write failed [ 325.380163][T19770] EXT4-fs (loop2): 1 truncate cleaned up [ 325.387216][T19770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.404799][T19770] ext4 filesystem being mounted at /1243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.570950][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.164663][T19828] netem: change failed [ 326.295624][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.319864][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.343259][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.365354][T19836] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 326.389336][T19836] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 326.465724][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.477201][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.492415][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.511127][T19836] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.651182][ T5828] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 326.841558][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 326.853123][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 326.879127][ T5828] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 326.904723][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.925020][ T5828] usb 1-1: Product: syz [ 326.929266][ T5828] usb 1-1: Manufacturer: syz [ 326.941153][ T5828] usb 1-1: SerialNumber: syz [ 326.954064][ T5828] usb 1-1: config 0 descriptor?? [ 326.963871][T19878] loop1: detected capacity change from 0 to 256 [ 326.975664][T19840] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.990619][ T5828] hub 1-1:0.0: bad descriptor, ignoring hub [ 327.011048][ T5828] hub: probe of 1-1:0.0 failed with error -5 [ 327.023084][ T5828] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 327.099618][T19889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.396548][ T27] usb 1-1: USB disconnect, device number 24 [ 327.396670][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 327.582058][T19915] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 328.104783][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5031'. [ 328.261694][T19954] xt_CT: No such helper "snmp_trap" [ 328.394996][T19967] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.499268][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 328.499280][ T28] audit: type=1326 audit(1792096653.682:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.552112][ T28] audit: type=1326 audit(1792096653.742:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.631056][ T28] audit: type=1326 audit(1792096653.742:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.684047][ T28] audit: type=1326 audit(1792096653.742:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.684154][T19983] netlink: 'syz.2.5047': attribute type 11 has an invalid length. [ 328.708170][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.747710][ T28] audit: type=1326 audit(1792096653.742:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.785180][ T28] audit: type=1326 audit(1792096653.742:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.860796][ T28] audit: type=1326 audit(1792096653.772:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.899192][ T28] audit: type=1326 audit(1792096653.772:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.5043" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6fac99e559 code=0x7ffc0000 [ 328.949493][T19993] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 329.153123][T20003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5058'. [ 329.167012][T20003] openvswitch: netlink: Missing key (keys=40, expected=80) [ 329.447883][T20021] netlink: 'syz.1.5067': attribute type 1 has an invalid length. [ 329.761048][ T5828] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 329.866639][T20056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5081'. [ 329.910794][T20058] tmpfs: Bad value for 'mpol' [ 329.931024][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 329.955004][ T5828] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.969344][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.978100][ T5828] usb 1-1: Product: syz [ 329.987189][ T5828] usb 1-1: Manufacturer: syz [ 330.000299][ T5828] usb 1-1: SerialNumber: syz [ 330.050197][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.111096][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 330.129689][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.140847][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.156722][ T8] usb 2-1: Product: syz [ 330.166195][ T8] usb 2-1: Manufacturer: syz [ 330.172661][ T8] usb 2-1: SerialNumber: syz [ 330.185359][ T8] r8152-cfgselector 2-1: config 0 descriptor?? [ 330.235366][T20074] UBIFS error (pid: 20074): cannot open "ubi0/file0", error -22 [ 330.542116][ T5828] usb 1-1: USB disconnect, device number 25 [ 330.610602][ T8] r8152-cfgselector 2-1: Unknown version 0x0000 [ 330.627468][ T8] r8152-cfgselector 2-1: USB disconnect, device number 27 [ 330.677721][T20101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5095'. [ 330.692105][T20101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5095'. [ 330.778928][T20107] netlink: 'syz.2.5098': attribute type 21 has an invalid length. [ 330.789806][T20107] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5098'. [ 331.043979][T20122] netlink: 'syz.2.5105': attribute type 5 has an invalid length. [ 331.111653][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 331.119170][ T9] ath9k_htc: Failed to initialize the device [ 331.134443][ T5828] usb 1-1: ath9k_htc: USB layer deinitialized [ 331.391563][T20144] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5115'. [ 331.694912][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5123'. [ 331.731574][T20161] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5123'. [ 331.740614][T20161] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5123'. [ 332.143816][T20192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5136'. [ 332.716966][T20228] netlink: 'syz.0.5154': attribute type 30 has an invalid length. [ 332.868850][T20236] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 332.968600][T20242] loop0: detected capacity change from 0 to 512 [ 333.452008][T20269] 0x000000000000-0x000000010000 : "" [ 333.521895][T20269] ftl_cs: FTL header not found. [ 333.537069][T20276] loop1: detected capacity change from 0 to 16 [ 333.577807][T20276] erofs: (device loop1): mounted with root inode @ nid 36. [ 333.623229][T20276] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4 in[16, 2904] out[808] [ 333.683104][T20276] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4 in[16, 2904] out[808] [ 333.751541][ T28] audit: type=1800 audit(1792096658.933:258): pid=20276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5176" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 333.952390][T20294] netlink: 'syz.2.5182': attribute type 16 has an invalid length. [ 334.111871][T20295] loop1: detected capacity change from 0 to 4096 [ 334.138077][T20295] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 334.181133][T20295] ntfs3: loop1: mft corrupted [ 334.191656][T20295] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 334.229438][T20295] ntfs3: loop1: Failed to load $LogFile (-22). [ 334.761689][ T5828] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 334.796703][T20301] loop0: detected capacity change from 0 to 32768 [ 334.817477][T20301] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.5185 (20301) [ 334.884226][T20301] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 334.907045][T20331] loop1: detected capacity change from 0 to 2048 [ 334.911502][T20301] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 334.941552][T20301] BTRFS info (device loop0): enabling auto defrag [ 334.952145][T20301] BTRFS info (device loop0): force clearing of disk cache [ 334.953663][ T5828] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 334.959365][T20301] BTRFS info (device loop0): disabling log replay at mount time [ 334.992416][T20331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.005622][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.013821][T20301] BTRFS info (device loop0): turning on async discard [ 335.020630][T20301] BTRFS info (device loop0): setting nodatacow, compression disabled [ 335.036056][ T5828] usb 4-1: config 0 descriptor?? [ 335.046159][ T5828] cp210x 4-1:0.0: cp210x converter detected [ 335.063561][T20331] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 335.069310][T20301] BTRFS info (device loop0): turning off async discard [ 335.107869][T20301] BTRFS info (device loop0): disabling free space tree [ 335.132575][T20301] BTRFS info (device loop0): disabling tree log [ 335.139860][T20301] BTRFS info (device loop0): enabling disk space caching [ 335.150593][T20301] BTRFS info (device loop0): disk space caching is enabled [ 335.378389][T20301] BTRFS error (device loop0: state M): nologreplay must be used with ro mount option [ 335.412065][T20301] BTRFS info (device loop0: state M): left=0, need=98304, flags=5 [ 335.420555][T20301] BTRFS info (device loop0: state M): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 335.432129][T20301] BTRFS info (device loop0: state M): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 335.447100][T20301] BTRFS info (device loop0: state M): global_block_rsv: size 1048576 reserved 1044480 [ 335.458091][T20301] BTRFS info (device loop0: state M): trans_block_rsv: size 0 reserved 0 [ 335.463353][ T5828] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 335.466644][T20301] BTRFS info (device loop0: state M): chunk_block_rsv: size 0 reserved 0 [ 335.482729][T20301] BTRFS info (device loop0: state M): delayed_block_rsv: size 0 reserved 0 [ 335.491879][T20301] BTRFS info (device loop0: state M): delayed_refs_rsv: size 0 reserved 0 [ 335.504826][ T5828] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 335.515731][T20301] BTRFS error (device loop0: state M): allocation failed flags 4, wanted 4096 tree-log 0, relocation: 0 [ 335.547648][ T5828] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 335.565017][T20301] BTRFS info (device loop0: state M): space_info DATA+METADATA (sub-group id 0) has -1048576 free, is full [ 335.577381][T20301] BTRFS info (device loop0: state M): space_info total=3276800, used=53248, pinned=0, reserved=0, may_use=1048576, readonly=3223552 zone_unusable=0 [ 335.593272][T20301] BTRFS info (device loop0: state M): global_block_rsv: size 1048576 reserved 1044480 [ 335.604041][T20301] BTRFS info (device loop0: state M): trans_block_rsv: size 0 reserved 0 [ 335.612655][T20301] BTRFS info (device loop0: state M): chunk_block_rsv: size 0 reserved 0 [ 335.621164][T20301] BTRFS info (device loop0: state M): delayed_block_rsv: size 0 reserved 0 [ 335.629860][T20301] BTRFS info (device loop0: state M): delayed_refs_rsv: size 0 reserved 0 [ 335.648246][ T5828] usb 4-1: cp210x converter now attached to ttyUSB0 [ 335.686692][ T5828] usb 4-1: USB disconnect, device number 28 [ 335.703257][T20301] BTRFS info (device loop0: state M): block group 5242880 has 1638400 bytes, 53248 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1585152 bytes available) [readonly] [ 335.723967][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 335.745308][ T5828] cp210x 4-1:0.0: device disconnected [ 335.764549][T20301] BTRFS info (device loop0: state M): block group has cluster?: no [ 335.797371][T20301] BTRFS info (device loop0: state M): 0 free space entries at or bigger than 4096 bytes [ 335.823373][T20301] BTRFS info (device loop0: state M): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [readonly] [ 335.856785][T20301] BTRFS critical (device loop0: state M): entry offset 6881280, bytes 1638400, bitmap no [ 335.869200][T20301] BTRFS info (device loop0: state M): block group has cluster?: no [ 335.878032][T20301] BTRFS info (device loop0: state M): 0 free space entries at or bigger than 4096 bytes [ 335.890030][T20301] BTRFS info (device loop0: state M): 3223552 bytes available across all block groups [ 335.913178][T20301] BTRFS warning (device loop0: state M): Skipping commit of aborted transaction. [ 335.946793][T20301] ------------[ cut here ]------------ [ 335.952538][T20301] BTRFS: Transaction aborted (error -28) [ 335.959291][T20301] WARNING: CPU: 0 PID: 20301 at fs/btrfs/transaction.c:2033 btrfs_commit_transaction+0x2d00/0x3500 [ 335.970399][T20301] Modules linked in: [ 335.974465][T20301] CPU: 0 PID: 20301 Comm: syz.0.5185 Not tainted syzkaller #0 [ 335.982012][T20301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.992508][T20301] RIP: 0010:btrfs_commit_transaction+0x2d00/0x3500 [ 335.999392][T20301] Code: be 01 00 00 00 49 8d 7f e8 e8 0c cc ab 00 e9 2c d9 ff ff e8 92 a1 fe fd 48 c7 c7 00 a5 0d 8b 8b 5c 24 18 89 de e8 20 60 c8 fd <0f> 0b e9 4d f9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 50 d4 ff [ 336.019048][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.025571][T20301] RSP: 0018:ffffc9001928f7c0 EFLAGS: 00010246 [ 336.031741][T20301] RAX: f2304285aeb27f00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 336.039789][T20301] RDX: ffffc9000c9c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 336.047881][T20301] RBP: ffffc9001928fae8 R08: ffffc9001928f4c7 R09: 1ffff92003251e98 [ 336.056041][T20301] R10: dffffc0000000000 R11: fffff52003251e99 R12: fffff52003251f1c [ 336.064169][T20301] R13: ffff88807e2bd000 R14: 0000000000000000 R15: dffffc0000000000 [ 336.072527][T20301] FS: 00007fd7eab1d6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 336.081602][T20301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.088257][T20301] CR2: 0000001b2d824220 CR3: 000000005504b000 CR4: 00000000003506f0 [ 336.096423][T20301] Call Trace: [ 336.099744][T20301] [ 336.103034][T20301] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.109180][T20301] ? btrfs_commit_transaction+0x199/0x3500 [ 336.115204][T20301] ? btrfs_commit_transaction_async+0x490/0x490 [ 336.121634][T20301] ? __lock_acquire+0x7eb0/0x7eb0 [ 336.126737][T20301] ? do_raw_spin_lock+0x11f/0x2b0 [ 336.131910][T20301] ? do_raw_spin_unlock+0x121/0x230 [ 336.137218][T20301] ? _raw_spin_unlock+0x28/0x40 [ 336.142217][T20301] ? btrfs_record_root_in_trans+0x90/0x180 [ 336.148090][T20301] ? start_transaction+0x453/0x1110 [ 336.153523][T20301] btrfs_set_free_space_cache_v1_active+0x71/0x1c0 [ 336.160089][T20301] btrfs_remount+0x74d/0x1630 [ 336.164916][T20301] ? btrfs_kill_super+0x50/0x50 [ 336.169852][T20301] ? dentry_lru_isolate+0x2e0/0x2e0 [ 336.175165][T20301] ? hook_sb_remount+0x1b/0xc0 [ 336.179972][T20301] ? bpf_lsm_sb_remount+0x9/0x10 [ 336.185046][T20301] reconfigure_super+0x229/0x8e0 [ 336.190036][T20301] path_mount+0xcfe/0xfa0 [ 336.194461][T20301] __se_sys_mount+0x2e7/0x3d0 [ 336.199182][T20301] ? __x64_sys_mount+0xc0/0xc0 [ 336.204328][T20301] ? lockdep_hardirqs_on+0x98/0x150 [ 336.209585][T20301] ? __x64_sys_mount+0x20/0xc0 [ 336.214490][T20301] do_syscall_64+0x55/0xb0 [ 336.218962][T20301] ? clear_bhb_loop+0x40/0x90 [ 336.223725][T20301] ? clear_bhb_loop+0x40/0x90 [ 336.228443][T20301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.234508][T20301] RIP: 0033:0x7fd7e9b9f7ca [ 336.238964][T20301] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.258675][T20301] RSP: 002b:00007fd7eab1ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.267187][T20301] RAX: ffffffffffffffda RBX: 00007fd7eab1cee0 RCX: 00007fd7e9b9f7ca [ 336.275289][T20301] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 336.283383][T20301] RBP: 0000200000000f40 R08: 00007fd7eab1cee0 R09: 0000000001a6a038 [ 336.291484][T20301] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 336.299475][T20301] R13: 00007fd7eab1cea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 336.307837][T20301] [ 336.310864][T20301] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.318153][T20301] CPU: 0 PID: 20301 Comm: syz.0.5185 Not tainted syzkaller #0 [ 336.325622][T20301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.335686][T20301] Call Trace: [ 336.338966][T20301] [ 336.341908][T20301] dump_stack_lvl+0x18c/0x250 [ 336.346586][T20301] ? show_regs_print_info+0x20/0x20 [ 336.351789][T20301] ? load_image+0x420/0x420 [ 336.356292][T20301] panic+0x2ca/0x720 [ 336.360181][T20301] ? bpf_jit_dump+0xd0/0xd0 [ 336.364707][T20301] __warn+0x2e0/0x470 [ 336.368696][T20301] ? btrfs_commit_transaction+0x2d00/0x3500 [ 336.374592][T20301] ? btrfs_commit_transaction+0x2d00/0x3500 [ 336.380488][T20301] report_bug+0x2be/0x4f0 [ 336.384816][T20301] ? btrfs_commit_transaction+0x2d00/0x3500 [ 336.390709][T20301] ? btrfs_commit_transaction+0x2d00/0x3500 [ 336.396601][T20301] ? btrfs_commit_transaction+0x2d02/0x3500 [ 336.402503][T20301] handle_bug+0xcf/0x120 [ 336.406755][T20301] exc_invalid_op+0x1a/0x50 [ 336.411257][T20301] asm_exc_invalid_op+0x1a/0x20 [ 336.416119][T20301] RIP: 0010:btrfs_commit_transaction+0x2d00/0x3500 [ 336.422669][T20301] Code: be 01 00 00 00 49 8d 7f e8 e8 0c cc ab 00 e9 2c d9 ff ff e8 92 a1 fe fd 48 c7 c7 00 a5 0d 8b 8b 5c 24 18 89 de e8 20 60 c8 fd <0f> 0b e9 4d f9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 50 d4 ff [ 336.442360][T20301] RSP: 0018:ffffc9001928f7c0 EFLAGS: 00010246 [ 336.448426][T20301] RAX: f2304285aeb27f00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 336.456395][T20301] RDX: ffffc9000c9c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 336.464364][T20301] RBP: ffffc9001928fae8 R08: ffffc9001928f4c7 R09: 1ffff92003251e98 [ 336.472339][T20301] R10: dffffc0000000000 R11: fffff52003251e99 R12: fffff52003251f1c [ 336.480306][T20301] R13: ffff88807e2bd000 R14: 0000000000000000 R15: dffffc0000000000 [ 336.488291][T20301] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.494374][T20301] ? btrfs_commit_transaction+0x199/0x3500 [ 336.500192][T20301] ? btrfs_commit_transaction_async+0x490/0x490 [ 336.506431][T20301] ? __lock_acquire+0x7eb0/0x7eb0 [ 336.511455][T20301] ? do_raw_spin_lock+0x11f/0x2b0 [ 336.516502][T20301] ? do_raw_spin_unlock+0x121/0x230 [ 336.521703][T20301] ? _raw_spin_unlock+0x28/0x40 [ 336.526556][T20301] ? btrfs_record_root_in_trans+0x90/0x180 [ 336.532373][T20301] ? start_transaction+0x453/0x1110 [ 336.537575][T20301] btrfs_set_free_space_cache_v1_active+0x71/0x1c0 [ 336.544088][T20301] btrfs_remount+0x74d/0x1630 [ 336.548784][T20301] ? btrfs_kill_super+0x50/0x50 [ 336.553632][T20301] ? dentry_lru_isolate+0x2e0/0x2e0 [ 336.558828][T20301] ? hook_sb_remount+0x1b/0xc0 [ 336.563591][T20301] ? bpf_lsm_sb_remount+0x9/0x10 [ 336.568537][T20301] reconfigure_super+0x229/0x8e0 [ 336.573476][T20301] path_mount+0xcfe/0xfa0 [ 336.577815][T20301] __se_sys_mount+0x2e7/0x3d0 [ 336.582492][T20301] ? __x64_sys_mount+0xc0/0xc0 [ 336.587266][T20301] ? lockdep_hardirqs_on+0x98/0x150 [ 336.592462][T20301] ? __x64_sys_mount+0x20/0xc0 [ 336.597224][T20301] do_syscall_64+0x55/0xb0 [ 336.601632][T20301] ? clear_bhb_loop+0x40/0x90 [ 336.606301][T20301] ? clear_bhb_loop+0x40/0x90 [ 336.610972][T20301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.616871][T20301] RIP: 0033:0x7fd7e9b9f7ca [ 336.621282][T20301] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.640892][T20301] RSP: 002b:00007fd7eab1ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.649309][T20301] RAX: ffffffffffffffda RBX: 00007fd7eab1cee0 RCX: 00007fd7e9b9f7ca [ 336.657286][T20301] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 336.665281][T20301] RBP: 0000200000000f40 R08: 00007fd7eab1cee0 R09: 0000000001a6a038 [ 336.673249][T20301] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 336.681215][T20301] R13: 00007fd7eab1cea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 336.689222][T20301] [ 336.692510][T20301] Kernel Offset: disabled [ 336.696933][T20301] Rebooting in 86400 seconds..