last executing test programs: 2.337792246s ago: executing program 1 (id=5551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000040) 2.18689529s ago: executing program 1 (id=5553): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) 1.958989665s ago: executing program 1 (id=5557): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) 1.854437462s ago: executing program 1 (id=5561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) inotify_add_watch(r0, 0x0, 0x48) 1.654804082s ago: executing program 1 (id=5565): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) 1.524061723s ago: executing program 3 (id=5567): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, &(0x7f0000000180), 0x4, 0x0) 1.370569317s ago: executing program 4 (id=5571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1.28416623s ago: executing program 0 (id=5572): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x13, 0x1, 0x0, 0x20000000, "", [@generic="a82d418c37d85df4c71d1ea6a2e2cd78690114539b849435bf294beaa334c962eb91bef842c0f3406bfe26432d7c087af718e2237739ff8721474239d9f56f76ecd2abec265aef90da6ba9258c1cc6eaed54306412ca6f6656f763338c21b4e6fa", @nested={0x69, 0xe3, 0x0, 0x1, [@generic="0390097c1398d04a6c01cf42987d6c61455cd4705bf481eb9a48c5a9fd859e6c1b664ecda0ee43eef5b60df003bc3d2c2280ceec37fc5029d0cf694de5956a267502fe2cd826d11ed77ecf5594cace0d2a65a132ffc846c2901dab4bbb10df37c4908aff86"]}]}, 0xe0}], 0x1}, 0x4000) 1.273023672s ago: executing program 2 (id=5573): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 1.206342712s ago: executing program 4 (id=5574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c0000200002801400020020010000000000000000000000000002050009"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 1.096386919s ago: executing program 0 (id=5575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.063742295s ago: executing program 3 (id=5576): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x4600) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000180)=0x8) 1.054042136s ago: executing program 2 (id=5577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 896.611631ms ago: executing program 4 (id=5578): r0 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x12\x9b\xf4\x01\x9f^\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xd7n\x97]||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xcdq#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3', 0x5) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 896.03248ms ago: executing program 0 (id=5579): r0 = syz_open_dev$mtd(&(0x7f0000000080), 0xa, 0x40) ioctl$MEMREAD(r0, 0xc0404d1a, &(0x7f00000013c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x9, 0x2bd, 0xc}}) 843.301719ms ago: executing program 2 (id=5580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 818.587263ms ago: executing program 3 (id=5581): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x7800, 0x1, 0xfff, 0x4, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @local}}}}) 616.751354ms ago: executing program 0 (id=5582): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) 616.601314ms ago: executing program 3 (id=5583): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x11e0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x139b) 599.168527ms ago: executing program 2 (id=5584): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x4, 0x1) 432.635763ms ago: executing program 0 (id=5585): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='==e\x00\xa7,\x96\xa2n+\xdb\xa0;bi\xaf\x1c2\\\x98\xebwisoq\xbd\xafip=\xc0\x13\xd4\xa2\xef\xfa\xd9\x947\x0e\x80\xc8X\xf82\xe5/.V\x91\xd0\x1f \x8e\x06\x9f\xf9\x81\xaew', &(0x7f0000000040)='==e\x00\xa7,\x96\xa2n+\xdb\xa0;bi\xaf\x1c2\\\x98\xebwisoq\xbd\xafip=\xc0\x13\xd4\xa2\xef\xfa\xd9\x947\x0e\x80\xc8X\xf82\xe5/.V\x91\xd0\x1f \x8e\x06\x9f\xf9\x81\xaew']}) 379.877981ms ago: executing program 4 (id=5586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) 379.354711ms ago: executing program 2 (id=5587): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7ff7}, {0xfff3, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 302.510163ms ago: executing program 3 (id=5588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6, 0xff00}, 0x20) 207.939228ms ago: executing program 1 (id=5589): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000540)={0x8, 0x1, 0x1000000, 0xffffffff, 0x8e100000, 0x1ff}) 176.906943ms ago: executing program 4 (id=5590): timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) 107.464694ms ago: executing program 0 (id=5591): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)={0x1, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}]}) 58.350162ms ago: executing program 2 (id=5592): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x8001, 0x15000001) 151.22µs ago: executing program 3 (id=5593): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x16) 0s ago: executing program 4 (id=5594): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.1.4078'. [ 503.141193][T13725] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.157133][T13741] kAFS: unable to lookup cell '@G|' [ 503.162248][T13725] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 503.193447][T13725] BTRFS info (device loop0): using free space tree [ 503.277568][T10691] usb 4-1: driver API: 1.9.9 2016-02-15 [1-1] [ 503.284193][T10691] usb 4-1: firmware API: 1.9.6 2012-07-07 [ 503.294586][T13725] BTRFS info (device loop0): enabling ssd optimizations [ 503.414399][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.421102][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.562752][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.632382][T13767] loop1: detected capacity change from 0 to 2048 [ 503.719126][T13767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.322273][T10691] usb 4-1: firmware upload failed (-110). [ 504.487936][T10691] usb 4-1: USB disconnect, device number 101 [ 504.732072][T13790] xt_addrtype: ipv6 does not support BROADCAST matching [ 505.088883][T10691] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 505.138562][T13804] xt_l2tp: v2 doesn't support IP mode [ 505.300291][T10691] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.322915][T13810] loop4: detected capacity change from 0 to 16 [ 505.332060][T10691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.355305][T10691] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 505.378909][T13810] erofs: (device loop4): mounted with root inode @ nid 36. [ 505.385198][T10691] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 505.462141][T10691] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 505.487951][T10691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.507250][T13791] loop2: detected capacity change from 0 to 32768 [ 505.517880][T10691] usb 1-1: Product: syz [ 505.534603][T10691] usb 1-1: Manufacturer: syz [ 505.544378][T10691] usb 1-1: SerialNumber: syz [ 505.757333][T10691] usb 1-1: Limiting number of CPorts to U8_MAX [ 505.775990][T10691] usb 1-1: Not enough endpoints found in device, aborting! [ 505.960918][T13826] netlink: 'syz.1.4113': attribute type 9 has an invalid length. [ 506.022185][T10694] usb 1-1: USB disconnect, device number 103 [ 506.048768][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 506.084794][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4112'. [ 506.111016][T13830] netlink: 'syz.2.4110': attribute type 3 has an invalid length. [ 506.128592][T13830] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4110'. [ 506.530404][T10833] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 506.727591][T10833] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 506.751889][T10833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.762582][T10833] usb 2-1: Product: syz [ 506.766802][T10833] usb 2-1: Manufacturer: syz [ 506.771902][T10833] usb 2-1: SerialNumber: syz [ 506.781939][T10833] r8152-cfgselector 2-1: config 0 descriptor?? [ 506.877618][T13864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 507.036791][ T26] audit: type=1326 audit(1700003675.856:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13865 comm="syz.3.4131" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdda4d9e159 code=0x0 [ 507.203590][T10833] r8152-cfgselector 2-1: Unknown version 0x0000 [ 507.231599][T10833] r8152-cfgselector 2-1: USB disconnect, device number 108 [ 507.384213][T13882] tmpfs: Bad value for 'mpol' [ 507.769037][T13898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4146'. [ 508.043559][T13915] xt_socket: unknown flags 0x50 [ 508.204598][T13922] netlink: 'syz.2.4157': attribute type 13 has an invalid length. [ 508.221754][T13922] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4157'. [ 508.227202][T13919] loop0: detected capacity change from 0 to 1024 [ 508.234830][T13922] syz_tun: refused to change device tx_queue_len [ 508.251792][T13922] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 508.255801][ T9223] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 508.298307][T13919] EXT4-fs: Ignoring removed orlov option [ 508.340779][T13919] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 508.354424][T13919] EXT4-fs (loop0): orphan cleanup on readonly fs [ 508.356198][T13925] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4158'. [ 508.363828][T13919] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.4155: Invalid inode table block 0 in block_group 0 [ 508.384362][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.392361][T13919] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 508.403629][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.413315][T13919] EXT4-fs error (device loop0): ext4_quota_write:7253: inode #3: comm syz.0.4155: mark_inode_dirty error [ 508.432014][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.439043][T13919] Quota error (device loop0): write_blk: dquota write failed [ 508.447084][T13919] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 508.458785][T13919] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.4155: Failed to acquire dquot type 0 [ 508.473320][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.480128][T13919] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.4155: Invalid inode table block 0 in block_group 0 [ 508.496786][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.506120][T13919] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 508.518636][ T9223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.530829][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.541859][T13919] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.4155: mark_inode_dirty error [ 508.556855][ T9223] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 508.567502][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.575171][ T9223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.595614][T13919] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.4155: Invalid inode table block 0 in block_group 0 [ 508.615494][ T9223] usb 5-1: Product: syz [ 508.626900][ T9223] usb 5-1: Manufacturer: syz [ 508.642089][ T9223] usb 5-1: SerialNumber: syz [ 508.647835][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.666492][T13919] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 508.691104][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.710849][T13919] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 508.731127][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.749815][T13930] loop3: detected capacity change from 0 to 24 [ 508.761421][T13919] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.4155: Invalid inode table block 0 in block_group 0 [ 508.775594][T13930] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 508.818872][T13930] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 508.833459][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.847048][T13919] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 508.885218][ T9223] snd-usb-6fire 5-1:1.0: invalid firmware version in device: 00 00 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 508.912554][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 508.938378][T13919] EXT4-fs error (device loop0): ext4_truncate:4325: inode #15: comm syz.0.4155: mark_inode_dirty error [ 508.955861][ T9223] snd-usb-6fire: probe of 5-1:1.0 failed with error -22 [ 508.995314][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 509.002177][T13919] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 509.032023][T13919] EXT4-fs (loop0): Remounting filesystem read-only [ 509.048109][T13919] EXT4-fs (loop0): 1 truncate cleaned up [ 509.064802][T13919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 509.165276][ T9223] usb 5-1: USB disconnect, device number 112 [ 509.230984][T13919] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.4155: Invalid inode table block 0 in block_group 0 [ 509.344840][T13947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.394908][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 509.528751][T13955] xt_hashlimit: max too large, truncated to 1048576 [ 509.649115][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'. [ 509.660889][ T9223] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 509.665584][T13959] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 509.865111][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4180'. [ 509.891349][ T9223] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 509.906124][T13971] loop1: detected capacity change from 0 to 256 [ 509.918397][ T9223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.956544][ T9223] usb 3-1: Product: syz [ 509.975151][ T9223] usb 3-1: Manufacturer: syz [ 509.995517][ T9223] usb 3-1: SerialNumber: syz [ 510.160752][ T9223] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 510.370722][T13985] device bridge2 entered promiscuous mode [ 510.385311][ T9223] usb 3-1: driver API: 1.9.9 2016-02-15 [1-1] [ 510.414289][ T9223] usb 3-1: firmware API: 1.9.6 2012-07-07 [ 510.610549][T13999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4196'. [ 510.885554][T14008] xt_ecn: cannot match TCP bits for non-tcp packets [ 511.160809][T14018] Driver unsupported XDP return value 0 on prog (id 264) dev N/A, expect packet loss! [ 511.301636][T14020] loop4: detected capacity change from 0 to 4096 [ 511.423658][T14027] deleting an unspecified loop device is not supported. [ 511.440732][ T9223] usb 3-1: firmware upload failed (-110). [ 511.621170][T10694] usb 3-1: USB disconnect, device number 87 [ 511.941283][T14044] netlink: 'syz.0.4216': attribute type 1 has an invalid length. [ 512.209261][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 512.250237][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 512.282123][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0734 instead [ 512.302210][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8de6 instead [ 512.323796][T14060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4224'. [ 512.344178][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 512.372150][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 512.391673][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 512.431587][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 512.460857][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 512.502870][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 512.540600][T14054] jffs2: Further such events for this erase block will not be printed [ 512.546994][T14068] xt_TCPMSS: Only works on TCP SYN packets [ 512.550825][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 512.616194][T14064] loop4: detected capacity change from 0 to 4096 [ 512.635375][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 512.670355][T14064] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 512.711473][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0734 instead [ 512.726079][T14064] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 512.757643][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8de6 instead [ 512.778680][T14064] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 512.807816][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 512.818731][T14064] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 512.855475][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 512.872930][T14064] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 512.911942][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 512.939168][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 512.951126][T14064] ntfs: volume version 3.1. [ 512.962857][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 512.981326][T14064] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 512.995085][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 513.011644][T14064] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 513.032448][T14054] jffs2: Further such events for this erase block will not be printed [ 513.044462][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 513.048805][T14064] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 513.059425][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 513.076470][T14064] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 513.100591][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x0734 instead [ 513.101657][T14064] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 513.128107][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8de6 instead [ 513.164951][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 513.183615][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 513.201952][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0734 instead [ 513.222508][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8de6 instead [ 513.241279][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 513.252207][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 513.280360][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x0734 instead [ 513.308830][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8de6 instead [ 513.352990][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 513.403600][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 513.438296][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0734 instead [ 513.479653][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8de6 instead [ 513.517321][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 513.560299][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 513.562603][T14090] netlink: 'syz.0.4239': attribute type 13 has an invalid length. [ 513.575463][T14092] loop2: detected capacity change from 0 to 256 [ 513.587219][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x0734 instead [ 513.598597][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8de6 instead [ 513.608302][T14090] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4239'. [ 513.644452][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 513.676432][T14090] syz_tun: refused to change device tx_queue_len [ 513.678230][ T9223] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 513.697370][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 513.704917][T14090] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 513.732726][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0734 instead [ 513.764605][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8de6 instead [ 513.807714][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 513.836465][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 513.865982][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x0734 instead [ 513.893860][ T9223] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 513.904292][ T9223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.923381][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8de6 instead [ 513.934915][ T9223] usb 5-1: Product: syz [ 513.939479][ T9223] usb 5-1: Manufacturer: syz [ 513.955874][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 513.968558][ T9223] usb 5-1: SerialNumber: syz [ 513.990304][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 514.011250][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x0734 instead [ 514.022329][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8de6 instead [ 514.055240][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 514.067550][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 514.091802][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0734 instead [ 514.107425][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8de6 instead [ 514.137541][T14106] xt_hashlimit: size too large, truncated to 1048576 [ 514.143047][ T9223] usb 5-1: reset high-speed USB device number 113 using dummy_hcd [ 514.153628][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 514.178671][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 514.190359][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x0734 instead [ 514.201927][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8de6 instead [ 514.212801][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 514.225441][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 514.244835][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x0734 instead [ 514.259800][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8de6 instead [ 514.278770][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 514.291207][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 514.302483][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0734 instead [ 514.314162][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8de6 instead [ 514.328026][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 514.342053][ T4769] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 514.350283][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 514.371275][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x0734 instead [ 514.383023][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8de6 instead [ 514.421991][ T9223] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 514.431942][T14112] netlink: 340 bytes leftover after parsing attributes in process `syz.0.4250'. [ 514.446402][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 514.457825][ T9223] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 514.465468][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4250'. [ 514.473775][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 514.495901][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0734 instead [ 514.516124][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8de6 instead [ 514.536044][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 514.536135][ T4769] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 514.550139][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 514.571452][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x0734 instead [ 514.582864][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8de6 instead [ 514.596132][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 514.603521][ T4769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.612856][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 514.633639][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x0734 instead [ 514.646077][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8de6 instead [ 514.657850][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 514.669483][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 514.670124][ T4769] usb 4-1: Product: syz [ 514.713120][ T4769] usb 4-1: Manufacturer: syz [ 514.723626][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x0734 instead [ 514.729132][ T4769] usb 4-1: SerialNumber: syz [ 514.755075][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8de6 instead [ 514.778181][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 514.816369][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 514.851389][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x0734 instead [ 514.891223][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8de6 instead [ 514.939521][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 514.950452][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 514.961539][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x0734 instead [ 514.972285][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8de6 instead [ 514.983308][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 514.994441][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 515.005261][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x0734 instead [ 515.024926][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8de6 instead [ 515.040501][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 515.067307][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 515.095089][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0734 instead [ 515.108858][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8de6 instead [ 515.120788][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 515.144263][T14121] loop0: detected capacity change from 0 to 512 [ 515.152129][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 515.169847][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x0734 instead [ 515.183032][T14121] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 515.194660][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8de6 instead [ 515.214921][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 515.255519][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 515.296300][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x0734 instead [ 515.353061][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8de6 instead [ 515.393363][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 515.432416][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 515.461051][ T9223] usb 5-1: firmware upload failed (-110). [ 515.489234][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0734 instead [ 515.527315][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8de6 instead [ 515.564617][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 515.584457][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 515.602590][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x0734 instead [ 515.629264][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8de6 instead [ 515.657717][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 515.686093][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 515.708768][ T4273] usb 5-1: USB disconnect, device number 113 [ 515.716917][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x0734 instead [ 515.755507][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8de6 instead [ 515.770781][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 515.783070][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 515.799753][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0734 instead [ 515.811323][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8de6 instead [ 515.832590][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 515.845396][ T4769] ath6kl: Failed to submit usb control message: -110 [ 515.859093][ T4769] ath6kl: unable to send the bmi data to the device: -110 [ 515.867519][ T4769] ath6kl: Unable to send get target info: -110 [ 515.874870][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 515.887721][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x0734 instead [ 515.903889][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8de6 instead [ 515.925978][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 515.941029][ T4769] ath6kl: Failed to init ath6kl core: -110 [ 515.965890][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 515.989829][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x0734 instead [ 516.017178][ T4769] ath6kl_usb: probe of 4-1:1.0 failed with error -110 [ 516.046812][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8de6 instead [ 516.060414][ T4769] usb 4-1: USB disconnect, device number 102 [ 516.072307][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 516.094284][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 516.111801][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x0734 instead [ 516.126699][T14054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8de6 instead [ 516.150492][T14054] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 516.164931][T14136] loop2: detected capacity change from 0 to 1024 [ 516.171503][T14054] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 516.916041][T14166] SET target dimension over the limit! [ 517.205883][T10691] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 517.215571][ T4769] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 517.327546][T14192] ERROR: device name not specified. [ 517.396133][T10691] usb 3-1: Using ep0 maxpacket: 16 [ 517.409122][T10691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.421932][ T4769] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 517.452970][ T4769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.458192][T14195] netlink: 'syz.3.4291': attribute type 49 has an invalid length. [ 517.461025][ T4769] usb 2-1: Product: syz [ 517.481132][T10691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.503137][ T4769] usb 2-1: Manufacturer: syz [ 517.508230][ T4769] usb 2-1: SerialNumber: syz [ 517.516036][T10691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.541070][T10691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.550468][T10691] usb 3-1: Product: syz [ 517.554709][T10691] usb 3-1: Manufacturer: syz [ 517.560191][T10691] usb 3-1: SerialNumber: syz [ 517.699168][ T4769] usb 2-1: reset high-speed USB device number 109 using dummy_hcd [ 517.764030][T14207] netlink: 'syz.3.4296': attribute type 2 has an invalid length. [ 517.782205][T10691] usb 3-1: 0:2 : does not exist [ 517.797600][T10691] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 517.845400][T10691] usb 3-1: USB disconnect, device number 88 [ 517.919754][ T4769] usb 2-1: driver API: 1.9.9 2016-02-15 [1-1] [ 517.946167][ T4769] usb 2-1: firmware API: 1.9.6 2012-07-07 [ 518.107679][ T4756] udevd[4756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.505443][T10691] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 518.718295][T10691] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 518.733147][T10691] usb 4-1: config 0 has no interface number 0 [ 518.741156][T10691] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 518.762112][T10691] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 518.791801][T10691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.821701][T10691] usb 4-1: config 0 descriptor?? [ 518.871289][T10691] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input38 [ 518.961102][ T4769] usb 2-1: firmware upload failed (-110). [ 519.156821][ T9223] usb 4-1: USB disconnect, device number 103 [ 519.182799][T10691] usb 2-1: USB disconnect, device number 109 [ 519.377612][T14250] netlink: 'syz.0.4316': attribute type 12 has an invalid length. [ 519.410433][T14250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4316'. [ 519.577433][T14256] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.102465][T14278] netlink: 'syz.0.4330': attribute type 10 has an invalid length. [ 520.626408][T14268] loop3: detected capacity change from 0 to 32768 [ 520.884033][T14278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.946616][T14278] team0: Port device bond0 added [ 520.972738][T14287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.368675][T14299] loop3: detected capacity change from 0 to 64 [ 521.882086][T14321] xt_connbytes: Forcing CT accounting to be enabled [ 523.002972][ T9223] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 523.172971][T14372] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 523.192620][ T9223] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 523.211743][ T9223] usb 1-1: config 0 has no interface number 0 [ 523.236307][ T9223] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.262484][ T9223] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 523.289002][ T9223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.334146][ T9223] usb 1-1: config 0 descriptor?? [ 523.360658][ T9223] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input39 [ 523.442524][T14381] loop1: detected capacity change from 0 to 256 [ 523.629668][ T9223] usb 1-1: USB disconnect, device number 104 [ 523.685178][T14387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.805923][T14391] loop1: detected capacity change from 0 to 256 [ 524.081951][T10691] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 524.279446][T10691] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.322490][T10691] usb 4-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 524.372675][T10691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.399284][T10691] usb 4-1: Product: syz [ 524.404238][T10691] usb 4-1: Manufacturer: syz [ 524.426328][T10691] usb 4-1: SerialNumber: syz [ 524.454033][T10691] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 524.644292][T10691] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 524.670422][T10691] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 524.684244][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 524.684261][ T26] audit: type=1326 audit(1700003694.467:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 524.740426][T10691] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 524.767476][T10691] usb 4-1: media controller created [ 524.792409][ T26] audit: type=1326 audit(1700003694.520:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 524.829065][T14385] Process accounting resumed [ 524.853729][T10691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.901367][ T26] audit: type=1326 audit(1700003694.520:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 524.947146][ T26] audit: type=1326 audit(1700003694.520:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 524.981032][T10691] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 525.032819][ T26] audit: type=1326 audit(1700003694.520:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 525.100574][T10691] usb 4-1: USB disconnect, device number 104 [ 525.135961][ T26] audit: type=1326 audit(1700003694.520:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 525.241671][ T26] audit: type=1326 audit(1700003694.520:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 525.287572][ T26] audit: type=1326 audit(1700003694.520:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.0.4394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 525.396172][T14425] Process accounting resumed [ 525.478836][T14407] loop2: detected capacity change from 0 to 32768 [ 525.592046][T14407] XFS (loop2): Mounting V5 Filesystem [ 525.641272][T14439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'. [ 525.748919][T14407] XFS (loop2): Ending clean mount [ 525.834995][T14415] comedi comedi1: reset error (fatal) [ 526.037382][ T4281] XFS (loop2): Unmounting Filesystem [ 526.895171][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4428'. [ 527.109550][T14495] loop2: detected capacity change from 0 to 512 [ 527.140096][T14497] netlink: 'syz.4.4433': attribute type 21 has an invalid length. [ 527.171431][T14495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.184200][T14497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4433'. [ 527.211445][T14495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 527.232166][T14495] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 527.309622][T14495] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.4431: Allocating blocks 41-42 which overlap fs metadata [ 527.329125][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.338028][T14495] Quota error (device loop2): write_blk: dquota write failed [ 527.366274][T14495] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 527.377039][T14495] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.4431: Allocating blocks 41-42 which overlap fs metadata [ 527.398043][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.405355][T14495] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4431: Failed to acquire dquot type 1 [ 527.410282][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'. [ 527.429262][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.437949][T14495] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 527.454562][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.463021][T14495] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4431: corrupted inode contents [ 527.492049][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.499039][T14495] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.4431: mark_inode_dirty error [ 527.540129][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.547553][T14495] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4431: corrupted inode contents [ 527.592557][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.618806][T14495] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.4431: mark_inode_dirty error [ 527.651321][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.675965][T14495] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4431: corrupted inode contents [ 527.732297][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.752555][T14495] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 527.780946][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.782942][T14516] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 527.795531][T14495] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4431: corrupted inode contents [ 527.844891][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.870288][T14495] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.4431: mark_inode_dirty error [ 527.881463][ T4273] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 527.918776][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 527.944852][T14495] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 527.987507][T14495] EXT4-fs (loop2): Remounting filesystem read-only [ 528.009276][T14495] EXT4-fs (loop2): 1 truncate cleaned up [ 528.029694][T14495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 528.084308][ T4273] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 528.107468][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 528.124954][ T4273] usb 4-1: Product: syz [ 528.160653][ T4273] usb 4-1: config 0 descriptor?? [ 528.196887][ T4273] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 528.230047][ T4273] usb 4-1: Detected FT232H [ 528.263952][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 528.378193][ T4273] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 528.393382][ T4273] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 528.413015][ T4273] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 528.449462][ T4273] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 528.490036][ T4273] usb 4-1: USB disconnect, device number 105 [ 528.520916][ T4273] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 528.542084][ T4273] ftdi_sio 4-1:0.0: device disconnected [ 528.554398][T10833] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 528.566987][T14538] loop2: detected capacity change from 0 to 164 [ 528.756143][T10833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.786698][T10833] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 528.839544][T10833] usb 2-1: string descriptor 0 read error: -22 [ 528.868373][T10833] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 528.886895][T10833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.122262][T10833] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 529.275036][T14555] netlink: 'syz.4.4460': attribute type 21 has an invalid length. [ 529.295128][T14555] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4460'. [ 529.325789][T10833] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 529.337279][T14555] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4460'. [ 529.396705][T10833] usb 2-1: USB disconnect, device number 110 [ 529.563876][T10699] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 529.769825][T10699] usb 1-1: Using ep0 maxpacket: 8 [ 529.786797][T10699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 529.814361][T10699] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 529.834983][T10699] usb 1-1: config 0 has no interface number 0 [ 529.850451][T10699] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 529.904608][T10699] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 529.942498][T10699] usb 1-1: config 0 interface 88 has no altsetting 0 [ 529.976278][T10699] usb 1-1: string descriptor 0 read error: -22 [ 529.996991][T14579] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 530.001543][T10699] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 530.047114][T10699] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 530.072697][T10699] usb 1-1: config 0 descriptor?? [ 530.125575][T10699] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input40 [ 530.196976][T14585] Cannot find add_set index 65532 as target [ 530.322606][ T4756] udevd[4756]: Error opening device "/dev/input/event4": Input/output error [ 530.342849][T14591] loop3: detected capacity change from 0 to 128 [ 530.386996][ T4756] udevd[4756]: Unable to EVIOCGABS device "/dev/input/event4" [ 530.395603][ T4756] udevd[4756]: Unable to EVIOCGABS device "/dev/input/event4" [ 530.424875][T14591] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 530.443662][T10699] usb 1-1: USB disconnect, device number 105 [ 530.451527][ T4756] udevd[4756]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 530.462607][T14591] hpfs: filesystem error: improperly stopped [ 530.520439][T14591] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 530.533135][ T3639] udevd[3639]: worker [4756] terminated by signal 6 (Aborted) [ 530.542408][ T3639] udevd[3639]: worker [4756] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input40/event4' [ 530.547480][T14591] hpfs: You really don't want any checks? You are crazy... [ 530.600412][T14591] hpfs: Code page index out of array [ 530.608533][T14591] hpfs: code page support is disabled [ 530.633355][T14591] hpfs: hpfs_map_4sectors(): unaligned read [ 530.647372][T14591] hpfs: hpfs_map_4sectors(): unaligned read [ 530.663616][T14591] hpfs: filesystem error: unable to find root dir [ 530.892733][T14607] netlink: 'syz.2.4486': attribute type 10 has an invalid length. [ 530.990103][T14607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.038035][T14607] team0: Port device bond0 added [ 531.133853][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4490'. [ 531.181130][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4490'. [ 531.570386][T14629] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 531.618252][T14629] overlayfs: missing 'lowerdir' [ 531.658874][T14633] x_tables: duplicate underflow at hook 3 [ 532.290249][T14655] loop1: detected capacity change from 0 to 8 [ 532.355435][T14657] autofs4:pid:14657:autofs_fill_super: called with bogus options [ 532.843402][T14641] loop4: detected capacity change from 0 to 32768 [ 532.891732][T14641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4503 (14641) [ 532.962308][T14641] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.006786][T14641] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 533.015753][T14641] BTRFS info (device loop4): setting nodatasum [ 533.064614][T14641] BTRFS info (device loop4): force zlib compression, level 3 [ 533.072086][T14641] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 533.120942][T14641] BTRFS info (device loop4): use lzo compression, level 0 [ 533.129123][T14641] BTRFS info (device loop4): turning on flush-on-commit [ 533.168743][T14641] BTRFS info (device loop4): enabling auto defrag [ 533.175456][T14641] BTRFS info (device loop4): max_inline at 4096 [ 533.206238][T14641] BTRFS info (device loop4): using free space tree [ 533.481545][T14641] BTRFS info (device loop4): enabling ssd optimizations [ 533.592902][T14717] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 533.692712][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.760114][ T4273] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 533.963167][ T4273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.000000][ T4273] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 534.032455][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.055219][ T4273] usb 1-1: Product: syz [ 534.061412][ T4273] usb 1-1: Manufacturer: syz [ 534.086836][ T4273] usb 1-1: SerialNumber: syz [ 534.111515][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4538'. [ 534.161442][ T4273] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 534.307635][T10699] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 534.376096][ T4273] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 534.413716][ T4273] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 534.430289][ T4273] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 534.439534][ T4273] usb 1-1: media controller created [ 534.477407][ T4273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.499419][T10699] usb 3-1: not running at top speed; connect to a high speed hub [ 534.518595][T10699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.548904][T10699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.580658][T10699] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 534.583178][ T4273] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 534.617404][T10699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.664512][T10699] usb 3-1: Found UVC 1.00 device (046d:0825) [ 534.685928][ T4273] usb 1-1: USB disconnect, device number 106 [ 534.856769][T10699] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1). [ 534.977266][T14754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.068254][T10699] usb 3-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 535.093347][T10699] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 535.110874][T10699] usb 3-1: No streaming interface found for terminal 2. [ 535.122884][T10699] usb 3-1: USB disconnect, device number 89 [ 535.444683][T14765] xt_CT: No such helper "syz0" [ 535.544465][T14777] xt_time: unknown flags 0xc [ 535.689548][T14784] netlink: 'syz.0.4563': attribute type 9 has an invalid length. [ 535.894034][T10699] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 536.022486][T14800] loop4: detected capacity change from 0 to 64 [ 536.086779][T14800] Bad inode number on dev loop4: 2 is out of range [ 536.104059][T10699] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 536.133284][T10699] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 536.156165][T14803] netlink: 'syz.0.4570': attribute type 21 has an invalid length. [ 536.161073][T10699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 536.213682][T10699] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 536.263819][T10699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 536.319087][T10699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 536.392276][T10699] usb 2-1: string descriptor 0 read error: -22 [ 536.406848][T10699] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 536.434651][T10699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.475368][T10699] usb 2-1: config 0 descriptor?? [ 536.502814][T14782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.566258][T10699] hub 2-1:0.0: bad descriptor, ignoring hub [ 536.583492][T10699] hub: probe of 2-1:0.0 failed with error -5 [ 536.605551][T10699] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 536.785309][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 536.862211][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 536.882574][T10691] usb 2-1: USB disconnect, device number 111 [ 537.189579][T14835] loop0: detected capacity change from 0 to 512 [ 537.218118][T14835] EXT4-fs: Ignoring removed oldalloc option [ 537.261747][T14835] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 537.364912][T14835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 537.677630][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 538.462561][T14864] loop3: detected capacity change from 0 to 32768 [ 538.481142][T14864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4597 (14864) [ 538.539441][T14864] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 538.556013][T14864] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 538.581130][T14864] BTRFS info (device loop3): setting nodatasum [ 538.587568][T14864] BTRFS info (device loop3): force zlib compression, level 3 [ 538.623534][T14864] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 538.638222][T10740] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 538.646053][T14864] BTRFS info (device loop3): use lzo compression, level 0 [ 538.687531][T14864] BTRFS info (device loop3): turning on flush-on-commit [ 538.710371][T14864] BTRFS info (device loop3): enabling auto defrag [ 538.718377][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 538.736462][T14864] BTRFS info (device loop3): max_inline at 4096 [ 538.751827][T14864] BTRFS info (device loop3): using free space tree [ 538.829960][T10740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.866034][T10740] usb 2-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 538.913704][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 538.913721][ T26] audit: type=1326 audit(1700003709.456:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14903 comm="syz.0.4611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 538.921288][T10740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.950057][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.997027][T10740] usb 2-1: Product: syz [ 539.001638][T10740] usb 2-1: Manufacturer: syz [ 539.006937][T10740] usb 2-1: SerialNumber: syz [ 539.021047][T10740] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 539.039596][T14864] BTRFS info (device loop3): enabling ssd optimizations [ 539.066013][ T26] audit: type=1326 audit(1700003709.519:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14903 comm="syz.0.4611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 539.092409][ T26] audit: type=1326 audit(1700003709.519:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14903 comm="syz.0.4611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 539.118406][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.126370][ T26] audit: type=1326 audit(1700003709.519:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14903 comm="syz.0.4611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5459e159 code=0x7ffc0000 [ 539.152738][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.226810][T10740] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 539.273137][T10740] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 539.305650][T10740] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 539.329367][T10740] usb 2-1: media controller created [ 539.393614][T10740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.434006][ T4282] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.509000][T10740] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 539.663762][T10740] usb 2-1: USB disconnect, device number 112 [ 539.685709][T14931] loop2: detected capacity change from 0 to 64 [ 540.137110][ T4266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4266) [ 540.481632][T14941] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnek_siœÕsyz ] [ 540.528312][T14941] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes¬»)YJyptfs_ke [ 540.566059][T14941] Error parsing options; rc = [-22] [ 541.073991][T14930] loop0: detected capacity change from 0 to 32768 [ 541.235496][T14930] XFS (loop0): Mounting V5 Filesystem [ 541.290891][T14969] MTD: Couldn't look up '': -22 [ 541.304480][T14975] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4638'. [ 541.313991][T14930] XFS (loop0): Ending clean mount [ 541.576508][T14979] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4641'. [ 541.641195][ T4277] XFS (loop0): Unmounting Filesystem [ 541.778581][T14984] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 542.149063][T14955] loop1: detected capacity change from 0 to 32768 [ 542.200436][T14955] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 542.242618][T14997] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4649'. [ 542.642918][ T4266] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 542.778840][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4658'. [ 542.831412][T15018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4658'. [ 543.407092][T15043] CIFS: VFS: Malformed UNC in devname [ 543.695553][T15059] loop4: detected capacity change from 0 to 256 [ 543.725096][T15059] exfat: Deprecated parameter 'utf8' [ 543.758273][T15059] exfat: Deprecated parameter 'namecase' [ 543.786216][T15059] exfat: Deprecated parameter 'namecase' [ 543.824305][T10739] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 543.853602][T15059] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 544.015429][T10739] usb 2-1: not running at top speed; connect to a high speed hub [ 544.047440][T10739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.077384][T10739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.097522][T10739] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 544.125451][T10739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.163252][T10739] usb 2-1: Found UVC 1.00 device (046d:0825) [ 544.363367][T10739] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1). [ 544.565798][T10739] usb 2-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 544.600078][T10739] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 544.628315][T10739] usb 2-1: No streaming interface found for terminal 2. [ 544.650525][T10739] usb 2-1: USB disconnect, device number 113 [ 545.115162][T15109] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4702'. [ 545.154644][T15109] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 545.885234][T15147] x_tables: duplicate entry at hook 2 [ 546.026856][T15155] tmpfs: Bad value for 'mpol' [ 546.445612][T15180] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 547.202389][T15217] nft_compat: unsupported protocol 5 [ 547.300172][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'. [ 548.093883][T15214] loop0: detected capacity change from 0 to 32768 [ 548.387196][T15258] netlink: 'syz.1.4775': attribute type 21 has an invalid length. [ 548.744495][T15273] loop0: detected capacity change from 0 to 64 [ 548.950643][T15269] loop4: detected capacity change from 0 to 4096 [ 548.989569][T15269] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 549.665989][T15298] loop4: detected capacity change from 0 to 256 [ 550.301793][T15314] kAFS: unable to lookup cell '(,c¾û/' [ 550.443151][T15292] loop2: detected capacity change from 0 to 32768 [ 550.531632][T15292] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 550.543842][T15292] JBD2: Ignoring recovery information on journal [ 550.754724][T15292] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 550.905458][T15292] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has invalid next free chain record 0, but only 19 total [ 550.928409][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.968439][T10690] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 551.000971][T15292] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 551.021140][T15292] OCFS2: File system is now read-only. [ 551.038534][T15292] (syz.2.4790,15292,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 551.070083][T15292] (syz.2.4790,15292,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 551.097443][T15292] (syz.2.4790,15292,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 551.121044][T15292] (syz.2.4790,15292,1):ocfs2_mknod_locked:646 ERROR: status = -30 [ 551.139139][T15292] (syz.2.4790,15292,1):ocfs2_mknod:390 ERROR: status = -30 [ 551.172250][T10690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 551.185789][T15292] (syz.2.4790,15292,1):ocfs2_mknod:509 ERROR: status = -30 [ 551.197884][ T26] audit: type=1326 audit(1700003722.382:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.4.4816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 551.198975][T15292] (syz.2.4790,15292,1):ocfs2_create:683 ERROR: status = -30 [ 551.236751][T10690] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 551.254937][T10690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.268459][ T26] audit: type=1326 audit(1700003722.424:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.4.4816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 551.282631][T10690] usb 2-1: Product: syz [ 551.351366][T10690] usb 2-1: Manufacturer: syz [ 551.356531][T10690] usb 2-1: SerialNumber: syz [ 551.360798][ T26] audit: type=1326 audit(1700003722.424:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.4.4816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 551.419466][T15353] netlink: 'syz.4.4819': attribute type 3 has an invalid length. [ 551.433050][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 551.437434][ T26] audit: type=1326 audit(1700003722.424:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15346 comm="syz.4.4816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 551.481916][T15353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4819'. [ 551.571587][T10690] usb 2-1: Unknown endpoint type found, address 0x03 [ 551.593586][T10690] usb 2-1: Not enough endpoints found in device, aborting! [ 551.695056][T15359] CIFS mount error: No usable UNC path provided in device string! [ 551.695056][T15359] [ 551.744231][T15359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 551.830126][T10699] usb 2-1: USB disconnect, device number 114 [ 551.873069][T15365] SET target dimension over the limit! [ 552.056921][T15375] xt_cgroup: path and classid specified [ 552.458781][ T26] audit: type=1326 audit(1700003723.708:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.3.4840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4d9e159 code=0x7ffc0000 [ 552.501456][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4838'. [ 552.525444][ T26] audit: type=1326 audit(1700003723.761:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.3.4840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4d9e159 code=0x7ffc0000 [ 552.555975][ T26] audit: type=1326 audit(1700003723.761:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.3.4840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4d9e159 code=0x7ffc0000 [ 552.585431][ T26] audit: type=1326 audit(1700003723.761:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.3.4840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fdda4d9e159 code=0x7ffc0000 [ 552.648143][ T26] audit: type=1326 audit(1700003723.813:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.3.4840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdda4d5e98e code=0x7ffc0000 [ 552.685022][ T26] audit: type=1326 audit(1700003723.845:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.3.4840" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdda4d5e98e code=0x7ffc0000 [ 552.721564][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4844'. [ 552.746082][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4844'. [ 553.195593][T15423] xt_connbytes: Forcing CT accounting to be enabled [ 553.401107][T15431] loop4: detected capacity change from 0 to 64 [ 553.507475][T15423] xt_CT: No such helper "netbios-ns" [ 553.632138][T15431] Process accounting paused [ 553.999528][T15446] Process accounting paused [ 554.210537][T15459] IPVS: length: 127 != 8 [ 554.492590][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 554.525522][T15475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4878'. [ 554.547246][T15475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4878'. [ 555.302103][T15510] netlink: 'syz.1.4896': attribute type 10 has an invalid length. [ 555.333721][T15510] team0: Port device virt_wifi0 added [ 555.350945][T15513] netlink: 503 bytes leftover after parsing attributes in process `syz.0.4897'. [ 555.506992][T15518] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.139491][T15553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4917'. [ 556.521433][T15572] netlink: 'syz.3.4927': attribute type 1 has an invalid length. [ 556.545195][T15572] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4927'. [ 556.564828][T15572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4927'. [ 556.953041][T15592] 9pnet: Found fid 0 not clunked [ 557.294176][T15610] xt_nat: multiple ranges no longer supported [ 557.587138][T15625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4950'. [ 557.603053][T10739] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 557.705757][T15629] loop2: detected capacity change from 0 to 64 [ 557.756936][T15631] netlink: 'syz.0.4952': attribute type 10 has an invalid length. [ 557.794524][T10739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 557.813238][T10739] usb 4-1: not running at top speed; connect to a high speed hub [ 557.827825][T15631] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4952'. [ 557.842364][T10739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.870259][T10739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.890411][T10739] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 557.917595][T10739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.936473][T10739] usb 4-1: Product: syz [ 557.946697][T10739] usb 4-1: Manufacturer: syz [ 557.951561][T10739] usb 4-1: SerialNumber: syz [ 558.063629][T15633] device geneve2 entered promiscuous mode [ 558.110382][T15635] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4954'. [ 558.174215][T10739] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 558.217815][T10739] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 558.261139][T10739] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 558.304176][T10739] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 558.323868][T10739] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3) [ 558.352342][T10739] usb 4-1: USB disconnect, device number 106 [ 558.426486][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4959'. [ 558.582385][T15617] udevd[15617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.858441][T15666] loop4: detected capacity change from 0 to 1764 [ 558.878664][T10691] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 558.906938][T15666] syz.4.4968: attempt to access beyond end of device [ 558.906938][T15666] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 558.943818][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4970'. [ 558.945031][T15666] Buffer I/O error on dev loop4, logical block 1795162143, async page read [ 558.991939][T15666] syz.4.4968: attempt to access beyond end of device [ 558.991939][T15666] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 559.016966][T15666] Buffer I/O error on dev loop4, logical block 1795162143, async page read [ 559.030225][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 559.030242][ T26] audit: type=1800 audit(1700003730.632:130): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4968" name="file0" dev="loop4" ino=1923 res=0 errno=0 [ 559.072171][T10691] usb 1-1: Using ep0 maxpacket: 32 [ 559.081407][T10691] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 559.100148][T15673] netlink: 'syz.2.4972': attribute type 21 has an invalid length. [ 559.109271][T10691] usb 1-1: config 0 has no interface number 0 [ 559.116099][T10691] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.127119][T10691] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 559.170400][T10691] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 559.208656][T10691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.237618][T10691] usb 1-1: Product: syz [ 559.242227][T10691] usb 1-1: Manufacturer: syz [ 559.276152][T10691] usb 1-1: SerialNumber: syz [ 559.283705][T10691] usb 1-1: config 0 descriptor?? [ 559.329956][T10691] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 559.521344][T10691] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 559.539449][T10691] quatech2: probe of 1-1:0.51 failed with error -90 [ 559.767841][ T4273] usb 1-1: USB disconnect, device number 107 [ 559.816275][T15699] netlink: 'syz.1.4985': attribute type 21 has an invalid length. [ 559.864661][T15699] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4985'. [ 559.925022][T15699] netlink: 'syz.1.4985': attribute type 1 has an invalid length. [ 559.945050][T15699] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4985'. [ 560.260670][T15719] SET target dimension over the limit! [ 560.578338][T15729] loop3: detected capacity change from 0 to 64 [ 560.847034][T15731] loop1: detected capacity change from 0 to 764 [ 560.903930][T15731] Symlink component flag not implemented [ 560.972432][T15731] Symlink component flag not implemented [ 560.987667][T15731] Symlink component flag not implemented (129) [ 561.013474][T15731] Symlink component flag not implemented (6) [ 561.458616][T15752] 9pnet: Found fid 0 not clunked [ 561.730259][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.736659][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.378877][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5028'. [ 562.959569][T15814] device geneve2 entered promiscuous mode [ 563.230583][T15821] Cannot find add_set index 1536 as target [ 563.477512][T15802] loop4: detected capacity change from 0 to 32768 [ 563.529162][T15802] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 563.568809][T15802] JBD2: Ignoring recovery information on journal [ 563.628373][T15802] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 563.644852][T15835] loop0: detected capacity change from 0 to 512 [ 563.705032][T15802] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has invalid next free chain record 0, but only 19 total [ 563.733236][T10739] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 563.756297][T15835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 563.819074][T15802] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 563.844148][T15835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 563.872883][T15802] OCFS2: File system is now read-only. [ 563.873903][T15835] ext4 filesystem being mounted at /1029/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.907015][T15835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5051: bg 0: block 288: padding at end of block bitmap is not set [ 563.931072][T15802] (syz.4.5035,15802,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 563.940278][T15802] (syz.4.5035,15802,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 563.943864][T15835] Quota error (device loop0): write_blk: dquota write failed [ 563.948878][T15802] (syz.4.5035,15802,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 563.965727][T15802] (syz.4.5035,15802,0):ocfs2_mknod_locked:646 ERROR: status = -30 [ 563.974111][T15802] (syz.4.5035,15802,0):ocfs2_mknod:390 ERROR: status = -30 [ 563.982802][T10739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.009473][T15802] (syz.4.5035,15802,0):ocfs2_mknod:509 ERROR: status = -30 [ 564.017782][T10739] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 564.030970][T15802] (syz.4.5035,15802,0):ocfs2_create:683 ERROR: status = -30 [ 564.044464][T15835] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 564.047231][T10739] usb 4-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 564.095709][T15835] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 564.109890][T10739] usb 4-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 564.138989][T15835] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.5051: Failed to acquire dquot type 1 [ 564.145776][T10739] usb 4-1: Product: syz [ 564.169933][T10739] usb 4-1: Manufacturer: syz [ 564.175029][T10739] usb 4-1: SerialNumber: syz [ 564.186837][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 564.195417][T10739] usb 4-1: config 0 descriptor?? [ 564.210160][T10739] cdc_acm 4-1:0.0: skipping garbage [ 564.298185][T15852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5057'. [ 564.387797][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 564.453987][T10690] usb 4-1: USB disconnect, device number 107 [ 564.785266][T15871] netlink: 'syz.1.5066': attribute type 1 has an invalid length. [ 564.817280][T15871] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5066'. [ 564.827406][T15871] NCSI netlink: No device for ifindex 0 [ 565.149956][T15888] loop1: detected capacity change from 0 to 64 [ 565.248649][T15891] device ip6tnl0 left promiscuous mode [ 565.404015][T15898] netlink: 'syz.1.5078': attribute type 1 has an invalid length. [ 565.518202][T15901] openvswitch: netlink: Key type 316 is out of range max 32 [ 565.654182][T15909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5082'. [ 565.654254][T15909] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5082'. [ 565.654270][T15909] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5082'. [ 565.660808][T15907] loop1: detected capacity change from 0 to 512 [ 565.730996][T15907] EXT4-fs: Ignoring removed oldalloc option [ 565.750544][T15907] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 565.761375][T15907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 565.762581][T15907] EXT4-fs (loop1): orphan cleanup on readonly fs [ 565.762601][T15907] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.5084: bad orphan inode 267 [ 565.763141][T15907] EXT4-fs (loop1): Remounting filesystem read-only [ 565.763171][T15907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 565.777785][T15907] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.5084: dx entry: limit 0 != root limit 125 [ 565.777856][T15907] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5084: Corrupt directory, running e2fsck is recommended [ 565.988379][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 566.391589][T15933] loop1: detected capacity change from 0 to 128 [ 566.463145][T15933] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 566.736158][T15939] loop2: detected capacity change from 0 to 1024 [ 567.086236][T15953] loop4: detected capacity change from 0 to 512 [ 567.110878][T15953] EXT4-fs: Ignoring removed oldalloc option [ 567.144583][T15953] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 567.185847][T15953] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 567.200728][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5101'. [ 567.247426][T15953] EXT4-fs (loop4): orphan cleanup on readonly fs [ 567.321755][T15953] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.5098: bad orphan inode 267 [ 567.364112][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5101'. [ 567.400553][T15953] EXT4-fs (loop4): Remounting filesystem read-only [ 567.451227][T15953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 567.556628][T15953] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.5098: dx entry: limit 0 != root limit 125 [ 567.632316][T15953] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5098: Corrupt directory, running e2fsck is recommended [ 567.803165][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 567.863940][T15975] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 567.978613][T15982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5111'. [ 568.603306][T16011] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5123'. [ 568.649106][T16011] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5123'. [ 569.289547][T16040] netlink: 'syz.2.5136': attribute type 13 has an invalid length. [ 569.341812][T16040] netlink: 'syz.2.5136': attribute type 12 has an invalid length. [ 569.476037][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5140'. [ 569.518245][T16049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5140'. [ 569.811128][T16059] loop0: detected capacity change from 0 to 256 [ 570.240890][T16075] loop0: detected capacity change from 0 to 128 [ 570.314923][T16075] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 570.400822][T16079] vcan0 speed is unknown, defaulting to 1000 [ 570.463995][T16079] vcan0 speed is unknown, defaulting to 1000 [ 570.501438][T16079] vcan0 speed is unknown, defaulting to 1000 [ 570.632456][T16084] netlink: 'syz.1.5152': attribute type 10 has an invalid length. [ 570.645765][T16084] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5152'. [ 570.693149][T16084] openvswitch: netlink: Flow key attr not present in new flow. [ 570.982097][T10739] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 571.022284][T16079] infiniband syz1: set active [ 571.033407][T10699] vcan0 speed is unknown, defaulting to 1000 [ 571.071560][T16079] infiniband syz1: added vcan0 [ 571.081185][T16072] loop3: detected capacity change from 0 to 32768 [ 571.149776][T10691] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 571.157916][T16072] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 571.174464][T10739] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 571.191337][T10739] usb 1-1: config 0 interface 0 has no altsetting 0 [ 571.203324][T10739] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 571.203685][T16072] JBD2: Ignoring recovery information on journal [ 571.214754][T10739] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 571.240082][T10739] usb 1-1: Product: syz [ 571.244528][T10739] usb 1-1: Manufacturer: syz [ 571.251799][T10739] usb 1-1: SerialNumber: syz [ 571.266614][T10739] usb 1-1: config 0 descriptor?? [ 571.282306][T10739] usb 1-1: selecting invalid altsetting 0 [ 571.383239][T16072] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 571.394322][T10691] usb 2-1: not running at top speed; connect to a high speed hub [ 571.426453][T10691] usb 2-1: config index 0 descriptor too short (expected 4257, got 161) [ 571.440006][T16079] RDS/IB: syz1: added [ 571.494563][T10691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 571.513927][T16079] smc: adding ib device syz1 with port count 1 [ 571.544206][T10691] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 571.559481][T16079] smc: ib device syz1 port 1 has pnetid [ 571.571706][T11100] vcan0 speed is unknown, defaulting to 1000 [ 571.577626][T10691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.600342][T16072] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has invalid next free chain record 0, but only 19 total [ 571.635175][T10690] usb 1-1: USB disconnect, device number 108 [ 571.639442][T16079] vcan0 speed is unknown, defaulting to 1000 [ 571.691294][T16072] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 571.741135][T16072] OCFS2: File system is now read-only. [ 571.765212][T16072] (syz.3.5149,16072,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 571.786496][T16072] (syz.3.5149,16072,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 571.816043][T16072] (syz.3.5149,16072,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 571.827232][T16072] (syz.3.5149,16072,1):ocfs2_mknod_locked:646 ERROR: status = -30 [ 571.848960][T10691] usb 2-1: string descriptor 0 read error: -71 [ 571.856071][T16072] (syz.3.5149,16072,0):ocfs2_mknod:390 ERROR: status = -30 [ 571.871969][T10691] uvcvideo 2-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 571.885054][T16072] (syz.3.5149,16072,0):ocfs2_mknod:509 ERROR: status = -30 [ 571.891557][T10691] usb 2-1: Found UVC 1.00 device (046d:0825) [ 571.901355][T10691] uvcvideo 2-1:1.1: No supported video formats found. [ 571.904322][T16072] (syz.3.5149,16072,0):ocfs2_create:683 ERROR: status = -30 [ 571.908985][T10691] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 571.992773][T10691] usb 2-1: USB disconnect, device number 115 [ 572.056131][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 572.133889][T16079] vcan0 speed is unknown, defaulting to 1000 [ 572.438404][T16079] vcan0 speed is unknown, defaulting to 1000 [ 572.811404][T16079] vcan0 speed is unknown, defaulting to 1000 [ 572.864264][T16131] loop4: detected capacity change from 0 to 256 [ 572.948201][T16131] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 573.092756][T16137] netlink: 'syz.0.5172': attribute type 1 has an invalid length. [ 573.254550][T16079] vcan0 speed is unknown, defaulting to 1000 [ 573.268515][T16139] loop3: detected capacity change from 0 to 512 [ 573.573509][T16145] loop4: detected capacity change from 0 to 2048 [ 573.595101][T16148] trusted_key: encrypted_key: master key parameter is missing [ 573.651412][T16145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 573.865063][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 574.465076][T16186] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 574.696163][T16194] netlink: 316 bytes leftover after parsing attributes in process `syz.4.5199'. [ 574.762329][T16196] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5202'. [ 574.810659][T16196] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5202'. [ 575.288008][T16225] netlink: 'syz.2.5214': attribute type 10 has an invalid length. [ 575.300932][T16226] UBIFS error (pid: 16226): cannot open "usb0", error -22 [ 575.320392][T16225] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5214'. [ 575.467616][T16230] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5217'. [ 575.985906][T16216] loop1: detected capacity change from 0 to 32768 [ 576.080529][T16216] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 576.112238][T16216] JBD2: Ignoring recovery information on journal [ 576.305773][T16216] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 576.360313][T16257] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 576.427333][T16257] UBIFS error (pid: 16257): cannot open "ubi0_0", error -19 [ 576.515825][T16216] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has invalid next free chain record 0, but only 19 total [ 576.722511][T16216] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 576.762466][T16216] OCFS2: File system is now read-only. [ 576.768032][T16216] (syz.1.5208,16216,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 576.778352][T16267] netlink: 'syz.4.5233': attribute type 2 has an invalid length. [ 576.826995][T16216] (syz.1.5208,16216,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 576.836762][T16267] netlink: 504 bytes leftover after parsing attributes in process `syz.4.5233'. [ 576.860098][T16216] (syz.1.5208,16216,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 576.898891][T16216] (syz.1.5208,16216,1):ocfs2_mknod_locked:646 ERROR: status = -30 [ 576.939564][T16216] (syz.1.5208,16216,1):ocfs2_mknod:390 ERROR: status = -30 [ 576.969576][T16216] (syz.1.5208,16216,1):ocfs2_mknod:509 ERROR: status = -30 [ 576.985816][T16216] (syz.1.5208,16216,1):ocfs2_create:683 ERROR: status = -30 [ 577.111745][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 577.204785][T16253] loop3: detected capacity change from 0 to 32768 [ 577.521447][ T4273] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 577.716970][ T4273] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 577.740123][ T4273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.796788][ T4273] usb 1-1: config 0 descriptor?? [ 578.187377][T10739] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 578.206818][ T4273] ath6kl: Failed to submit usb control message: -71 [ 578.213656][ T4273] ath6kl: unable to send the bmi data to the device: -71 [ 578.229222][ T4273] ath6kl: Unable to send get target info: -71 [ 578.267606][ T4273] ath6kl: Failed to init ath6kl core: -71 [ 578.319917][T10690] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 578.329397][T16314] netlink: 'syz.1.5256': attribute type 6 has an invalid length. [ 578.337687][ T4273] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 578.362081][ T4273] usb 1-1: USB disconnect, device number 109 [ 578.375951][T10739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.415496][T10739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.440389][T10739] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 578.450785][T10739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 578.459668][T10739] usb 4-1: Product: syz [ 578.469500][T10739] usb 4-1: Manufacturer: syz [ 578.486236][T10739] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 578.548065][T10690] usb 3-1: Using ep0 maxpacket: 16 [ 578.555909][T10690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 578.594291][T10690] usb 3-1: config 1 has an invalid interface number: 151 but max is 0 [ 578.621368][T10690] usb 3-1: config 1 has no interface number 0 [ 578.636519][T10690] usb 3-1: config 1 interface 151 has no altsetting 0 [ 578.655667][T10690] usb 3-1: string descriptor 0 read error: -22 [ 578.667844][T10690] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 578.683721][T10739] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 578.694924][T10690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.707424][T10739] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 578.731721][T10690] gspca_main: pac7311-2.14.0 probing 093a:260e [ 578.753702][T10739] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 578.804404][T10739] usb 4-1: USB disconnect, device number 108 [ 578.989677][T16334] netlink: 'syz.1.5266': attribute type 10 has an invalid length. [ 578.998192][T16334] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5266'. [ 579.117812][T10690] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 579.131963][T10690] pac7311: probe of 3-1:1.151 failed with error -71 [ 579.167795][T10690] usb 3-1: USB disconnect, device number 90 [ 579.258307][T16334] team0: Port device virt_wifi0 removed [ 579.296151][T16336] loop4: detected capacity change from 0 to 8192 [ 579.323934][T16336] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 579.338206][T16336] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 579.349252][T16336] REISERFS (device loop4): using ordered data mode [ 579.355998][T16336] reiserfs: using flush barriers [ 579.367836][T16336] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 579.386677][T16336] REISERFS (device loop4): checking transaction log (loop4) [ 579.518003][T16336] REISERFS (device loop4): Using tea hash to sort names [ 579.551126][T16336] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 579.611531][T16336] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 579.986601][T10690] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 580.113435][T16361] loop3: detected capacity change from 0 to 64 [ 580.141874][T16363] loop2: detected capacity change from 0 to 64 [ 580.191318][T10690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 580.232835][T10690] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 580.275690][T10690] usb 1-1: string descriptor 0 read error: -22 [ 580.307664][T10690] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 580.316969][T10690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.372353][T10690] usb 1-1: selecting invalid altsetting 1 [ 580.422325][T10690] usb 1-1: unit 3 not found! [ 580.564590][T10690] usb 1-1: unit 84 not found! [ 580.569402][T10690] usb 1-1: unit 89 not found! [ 580.593851][T10690] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 580.627627][T10690] usb 1-1: selecting invalid altsetting 1 [ 580.655159][T10690] usb 1-1: unit 3 not found! [ 580.767630][T10690] usb 1-1: cannot request logical cluster ID: 35217 (err: -71) [ 580.818691][T10690] usb 1-1: invalid MIXER UNIT descriptor 6 [ 580.836846][T10690] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 580.881365][T10690] usb 1-1: selecting invalid altsetting 1 [ 580.912555][T10690] usb 1-1: unit 3 not found! [ 580.948762][T10690] usb 1-1: cannot request logical cluster ID: 35217 (err: -71) [ 580.965743][T10690] usb 1-1: invalid MIXER UNIT descriptor 6 [ 580.993366][T10690] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 581.008370][T10690] usb 1-1: USB disconnect, device number 110 [ 581.082379][T16391] loop3: detected capacity change from 0 to 128 [ 581.097478][T16393] ip_tables: iptables: counters copy to user failed while replacing table [ 581.164896][T16391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 581.220984][T16391] ext4 filesystem being mounted at /1036/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.252411][T15617] udevd[15617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.315778][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 581.596170][T16388] loop2: detected capacity change from 0 to 32768 [ 581.628003][T16388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.5292 (16388) [ 581.700458][T16388] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 581.728774][T16388] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 581.788313][T16388] BTRFS info (device loop2): setting nodatacow, compression disabled [ 581.814270][T16388] BTRFS info (device loop2): setting datasum, datacow enabled [ 581.848872][T16388] BTRFS info (device loop2): force clearing of disk cache [ 581.857016][T16388] BTRFS info (device loop2): enabling ssd optimizations [ 581.906064][T16388] BTRFS info (device loop2): using spread ssd allocation scheme [ 581.925454][T16388] BTRFS info (device loop2): turning on sync discard [ 581.951772][T16388] BTRFS info (device loop2): not using ssd optimizations [ 581.976983][T16388] BTRFS info (device loop2): not using spread ssd allocation scheme [ 582.010375][T16388] BTRFS info (device loop2): using free space tree [ 582.288716][T16432] Process accounting resumed [ 582.333901][T16388] BTRFS info (device loop2): rebuilding free space tree [ 582.482907][T16453] loop4: detected capacity change from 0 to 512 [ 582.520345][T16453] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 582.611450][T16453] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 582.650655][ T4281] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 582.705537][T16453] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5314: inode #15: comm syz.4.5314: iget: illegal inode # [ 582.729714][T16458] Process accounting resumed [ 582.826478][T16453] EXT4-fs (loop4): Remounting filesystem read-only [ 582.839817][T16453] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.5314: couldn't read orphan inode 15 (err -117) [ 582.901125][T16453] EXT4-fs (loop4): Remounting filesystem read-only [ 582.937025][T16453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 583.027979][T16453] EXT4-fs error (device loop4): ext4_empty_dir:3147: inode #12: block 13: comm syz.4.5314: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=32769, size=4096 fake=0 [ 583.051812][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.066677][T16468] ceph: Unknown parameter 'port' [ 583.146373][T16470] loop1: detected capacity change from 0 to 512 [ 583.160514][T16453] EXT4-fs (loop4): Remounting filesystem read-only [ 583.179985][T16453] EXT4-fs warning (device loop4): ext4_empty_dir:3149: inode #12: comm syz.4.5314: directory missing '.' [ 583.312278][T16470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 583.312899][T15617] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (15617) [ 583.341604][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 583.405198][T16470] ext4 filesystem being mounted at /1050/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.598821][T10694] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 583.668508][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 583.801167][T10694] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 583.844495][T10694] usb 4-1: config 0 interface 0 has no altsetting 0 [ 583.861152][T10694] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.893997][T10694] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 583.902419][T10694] usb 4-1: Product: syz [ 583.917968][T10694] usb 4-1: Manufacturer: syz [ 583.927815][T10694] usb 4-1: SerialNumber: syz [ 583.978013][T10694] usb 4-1: config 0 descriptor?? [ 584.003118][T10694] usb 4-1: selecting invalid altsetting 0 [ 584.245076][T10691] usb 4-1: USB disconnect, device number 109 [ 584.350619][T10694] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 584.448189][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 584.458996][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5340'. [ 584.552172][T10694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.572172][T10694] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.597435][T10694] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 584.626072][T10694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.853142][T10694] usb 5-1: USB disconnect, device number 114 [ 585.215594][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5357'. [ 585.243609][T16534] loop2: detected capacity change from 0 to 8192 [ 585.319263][T16534] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 585.425405][T16534] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 585.445374][T16534] REISERFS (device loop2): using ordered data mode [ 585.464322][T16534] reiserfs: using flush barriers [ 585.511073][T16534] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 585.573991][T16534] REISERFS (device loop2): checking transaction log (loop2) [ 585.706196][T16558] loop0: detected capacity change from 0 to 512 [ 585.768370][T16558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 585.822378][T16534] REISERFS (device loop2): Using tea hash to sort names [ 585.837403][T16534] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 585.851833][T16534] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 585.854913][T16558] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=7 [ 585.900796][T16558] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 585.901336][ T4273] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 585.917376][T10691] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 585.996216][T16558] EXT4-fs (loop0): mount failed [ 586.138534][T11098] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 586.173415][T10691] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 586.202375][T10691] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.235351][T10691] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 586.245927][T10739] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 586.260645][T10691] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 586.277818][T10691] usb 5-1: Product: syz [ 586.289779][T10691] usb 5-1: Manufacturer: syz [ 586.298382][T10691] usb 5-1: SerialNumber: syz [ 586.312582][T10691] usb 5-1: config 0 descriptor?? [ 586.326131][T10691] usb 5-1: selecting invalid altsetting 0 [ 586.630271][T10691] usb 5-1: USB disconnect, device number 115 [ 586.860734][ T26] audit: type=1326 audit(1700003759.887:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 586.920480][T16587] netlink: 'syz.1.5377': attribute type 30 has an invalid length. [ 586.931022][ T26] audit: type=1326 audit(1700003759.887:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 586.969485][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5377'. [ 586.983415][T16587] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 587.002263][ T26] audit: type=1326 audit(1700003759.887:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.029546][T16587] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 587.040027][ T26] audit: type=1326 audit(1700003759.887:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.115706][ T26] audit: type=1326 audit(1700003759.929:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.142202][T11098] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 587.156643][T11098] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 587.201924][ T26] audit: type=1326 audit(1700003759.929:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.278316][ T26] audit: type=1326 audit(1700003759.929:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.322773][ T26] audit: type=1326 audit(1700003759.929:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.361193][ T26] audit: type=1326 audit(1700003759.929:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.2.5376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a8cf9e159 code=0x7ffc0000 [ 587.398174][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5381'. [ 587.431750][T16579] loop3: detected capacity change from 0 to 32768 [ 587.459715][T16579] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 587.546523][T11098] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 587.696204][T16606] x_tables: unsorted entry at hook 3 [ 587.755855][T11098] usb 2-1: Using ep0 maxpacket: 32 [ 587.763180][T11098] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.818313][T11098] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 587.829159][T15617] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 587.857711][T11098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.869816][T11098] usb 2-1: Product: syz [ 587.876154][T11098] usb 2-1: Manufacturer: syz [ 587.891926][T11098] usb 2-1: SerialNumber: syz [ 587.942143][T11098] usb 2-1: config 0 descriptor?? [ 587.966423][T11098] usb 2-1: bad CDC descriptors [ 587.985441][T11098] usb 2-1: unsupported MDLM descriptors [ 588.030355][T16616] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 588.051746][T11098] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 588.206151][T11098] usb 2-1: USB disconnect, device number 116 [ 588.555531][T16639] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 588.593445][T16639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 588.704634][T16645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 588.711410][T16645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 588.744928][T16645] vhci_hcd vhci_hcd.0: Device attached [ 588.761377][T16643] loop0: detected capacity change from 0 to 4096 [ 588.801994][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5403'. [ 588.839525][T16654] loop4: detected capacity change from 0 to 64 [ 588.849096][T16643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 588.941366][T16654] syz.4.5405: attempt to access beyond end of device [ 588.941366][T16654] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 588.983514][T16654] Buffer I/O error on dev loop4, logical block 512, async page read [ 589.012521][T16654] syz.4.5405: attempt to access beyond end of device [ 589.012521][T16654] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 589.030786][T10694] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 589.047024][T16654] Buffer I/O error on dev loop4, logical block 56576, async page read [ 589.058981][T10691] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 589.158865][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 589.289707][T10691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.328725][T10691] usb 4-1: config 0 has no interfaces? [ 589.351188][T10691] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 589.392077][T10691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.400507][T10691] usb 4-1: Product: syz [ 589.418089][T16669] loop4: detected capacity change from 0 to 512 [ 589.422303][T10691] usb 4-1: Manufacturer: syz [ 589.431103][T10691] usb 4-1: SerialNumber: syz [ 589.438832][T10691] usb 4-1: config 0 descriptor?? [ 589.513143][T16669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 589.531203][T16669] ext4 filesystem being mounted at /1086/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.628292][T16680] xt_limit: Overflow, try lower: 0/0 [ 589.709611][ T4769] usb 4-1: USB disconnect, device number 110 [ 589.737950][T16646] vhci_hcd: connection reset by peer [ 589.751777][ T5490] vhci_hcd: stop threads [ 589.759083][ T5490] vhci_hcd: release socket [ 589.795099][ T5490] vhci_hcd: disconnect device [ 589.807249][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 590.013826][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5420'. [ 590.088747][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5422'. [ 590.128241][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5422'. [ 590.710922][T16721] loop4: detected capacity change from 0 to 256 [ 590.743067][T10690] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 590.791000][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 590.929827][T16728] loop1: detected capacity change from 0 to 512 [ 590.946507][T10690] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 590.976374][T10690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 591.007434][T10690] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 591.046526][T10690] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 591.084903][T16728] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 591.085896][T10690] usb 3-1: Product: syz [ 591.104230][T16728] ext4 filesystem being mounted at /1078/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.159358][T10690] usb 3-1: Manufacturer: syz [ 591.179196][T10690] usb 3-1: SerialNumber: syz [ 591.197127][T10690] usb 3-1: config 0 descriptor?? [ 591.264579][T10690] usb 3-1: selecting invalid altsetting 0 [ 591.322721][T16740] usb usb1: usbfs: process 16740 (syz.4.5445) did not claim interface 0 before use [ 591.338642][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 591.551888][T10690] usb 3-1: USB disconnect, device number 91 [ 591.926547][T16738] loop0: detected capacity change from 0 to 32768 [ 591.972141][T16738] [ 591.972141][T16738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 591.972141][T16738] [ 592.033418][T16738] [ 592.033418][T16738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.033418][T16738] [ 592.078601][T16738] [ 592.078601][T16738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.078601][T16738] [ 592.101819][T16738] [ 592.101819][T16738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.101819][T16738] [ 592.140196][T16738] [ 592.140196][T16738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.140196][T16738] [ 592.170057][T16738] [ 592.170057][T16738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.170057][T16738] [ 592.192735][T16766] misc userio: No port type given on /dev/userio [ 592.272952][ T107] [ 592.272952][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.272952][ T107] [ 592.368208][ T57] [ 592.368208][ T57] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.368208][ T57] [ 592.394414][ T57] [ 592.394414][ T57] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.394414][ T57] [ 592.422007][T16775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5462'. [ 592.435758][ T4277] [ 592.435758][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.435758][ T4277] [ 592.461582][T16775] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5462'. [ 592.485306][ T107] [ 592.485306][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.485306][ T107] [ 592.492066][T16775] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5462'. [ 592.528455][ T4277] [ 592.528455][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.528455][ T4277] [ 592.940914][T11098] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 593.030809][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 593.030827][ T26] audit: type=1326 audit(1700003766.373:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.123764][T11098] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 593.142164][T11098] usb 4-1: config 0 has no interface number 0 [ 593.149754][ T26] audit: type=1326 audit(1700003766.425:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.186564][T11098] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 593.211197][T11098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.227157][T11098] usb 4-1: Product: syz [ 593.231875][T11098] usb 4-1: Manufacturer: syz [ 593.243056][T11098] usb 4-1: SerialNumber: syz [ 593.245590][ T26] audit: type=1326 audit(1700003766.436:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.292243][T11098] usb 4-1: config 0 descriptor?? [ 593.340047][ T26] audit: type=1326 audit(1700003766.436:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.425996][ T26] audit: type=1326 audit(1700003766.436:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.450374][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.499628][T16812] loop0: detected capacity change from 0 to 256 [ 593.539071][ T26] audit: type=1326 audit(1700003766.436:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.563663][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.642350][ T26] audit: type=1326 audit(1700003766.436:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.715592][T11098] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 593.738952][ T26] audit: type=1326 audit(1700003766.436:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.747231][T11098] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 593.835374][T11098] asix: probe of 4-1:0.251 failed with error -5 [ 593.851815][ T26] audit: type=1326 audit(1700003766.436:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16797 comm="syz.4.5475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 593.869075][T11098] usb 4-1: USB disconnect, device number 111 [ 593.878715][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.920688][T10694] vhci_hcd: vhci_device speed not set [ 593.959132][ T26] audit: type=1326 audit(1700003767.340:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16818 comm="syz.4.5485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbeb9e159 code=0x7ffc0000 [ 594.057734][T16794] loop2: detected capacity change from 0 to 32768 [ 594.160036][T16794] XFS (loop2): Mounting V5 Filesystem [ 594.233691][T16794] XFS (loop2): Ending clean mount [ 594.294674][T16840] loop0: detected capacity change from 0 to 64 [ 594.398477][T16840] syz.0.5489: attempt to access beyond end of device [ 594.398477][T16840] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 594.491401][T16840] Buffer I/O error on dev loop0, logical block 512, async page read [ 594.566054][T16840] syz.0.5489: attempt to access beyond end of device [ 594.566054][T16840] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 594.624210][ T4281] XFS (loop2): Unmounting Filesystem [ 594.700691][T16840] Buffer I/O error on dev loop0, logical block 56576, async page read [ 595.123134][T16861] loop2: detected capacity change from 0 to 256 [ 595.158728][T16861] exfat: Deprecated parameter 'utf8' [ 595.164440][T16861] exfat: Deprecated parameter 'utf8' [ 595.195818][T16861] exfat: Deprecated parameter 'namecase' [ 595.247060][T16857] loop0: detected capacity change from 0 to 8192 [ 595.273807][T16861] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 595.301459][T16857] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 595.348122][T16857] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 595.370877][T16857] REISERFS (device loop0): using ordered data mode [ 595.391273][T16857] reiserfs: using flush barriers [ 595.463285][T16857] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 595.538490][T10694] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 595.548244][T16857] REISERFS (device loop0): checking transaction log (loop0) [ 595.757029][T10694] usb 2-1: Using ep0 maxpacket: 16 [ 595.772824][T10694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.817541][T10694] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 595.868242][T10694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.891793][T16857] REISERFS (device loop0): Using tea hash to sort names [ 595.900869][T10694] usb 2-1: config 0 descriptor?? [ 595.928389][T10694] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 595.940454][T16857] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 596.024123][T16857] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 596.107362][ T3624] bcm5974 2-1:0.0: could not read from device [ 596.137780][T10694] usb 2-1: USB disconnect, device number 117 [ 596.173935][T16885] libceph: secret too big 31 [ 596.633052][T16894] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.787999][T16874] loop4: detected capacity change from 0 to 40427 [ 596.811118][T16900] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 596.835071][T16874] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 596.847526][T16874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 596.857532][T16874] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 596.857709][T16904] loop2: detected capacity change from 0 to 256 [ 596.883243][T16874] F2FS-fs (loop4): invalid crc value [ 596.952151][T16874] F2FS-fs (loop4): Found nat_bits in checkpoint [ 597.060376][T10694] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 597.143444][T16874] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 597.154769][T16874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 597.253168][T10694] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.253202][T10694] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 597.253229][T10694] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.270602][T10694] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 597.270637][T10694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.270660][T10694] usb 2-1: Product: syz [ 597.270676][T10694] usb 2-1: Manufacturer: syz [ 597.270692][T10694] usb 2-1: SerialNumber: syz [ 597.275034][T10694] usblp0: Disabling reads from problematic bidirectional printer [ 597.429785][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.521895][T10694] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 597.562065][T10694] usb 2-1: USB disconnect, device number 118 [ 597.584195][T10694] usblp0: removed [ 597.641036][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 597.873080][T16929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5534'. [ 598.078458][T11098] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 598.259333][T11098] usb 1-1: Using ep0 maxpacket: 32 [ 598.267006][T11098] usb 1-1: unable to get BOS descriptor or descriptor too short [ 598.286631][T11098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.307310][T11098] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.338551][T11098] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 598.363953][T11098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.392356][T11098] usb 1-1: Product: syz [ 598.396681][T11098] usb 1-1: Manufacturer: syz [ 598.421192][T11098] usb 1-1: SerialNumber: syz [ 598.447121][T11098] usb 1-1: selecting invalid altsetting 1 [ 598.542776][T16959] loop4: detected capacity change from 0 to 128 [ 598.582576][T16959] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 598.644653][T16959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.851233][T11098] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 598.879950][T11098] usb 1-1: unit 0 not found! [ 598.920884][T11098] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 598.955284][T11098] usb 1-1: USB disconnect, device number 111 [ 599.174379][T15617] udevd[15617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.857845][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'. [ 600.208350][T16995] loop1: detected capacity change from 0 to 32768 [ 600.270174][T16995] [ 600.270174][T16995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.270174][T16995] [ 600.318484][T16995] [ 600.318484][T16995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.318484][T16995] [ 600.377671][T16995] [ 600.377671][T16995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.377671][T16995] [ 600.442386][T16995] [ 600.442386][T16995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.442386][T16995] [ 600.486046][T17032] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 600.486789][T16995] [ 600.486789][T16995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.486789][T16995] [ 600.577893][T16995] [ 600.577893][T16995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.577893][T16995] [ 600.656298][ T107] [ 600.656298][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.656298][ T107] [ 600.745878][ T32] [ 600.745878][ T32] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.745878][ T32] [ 600.760541][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5587'. [ 600.797749][ T32] [ 600.797749][ T32] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.797749][ T32] [ 600.845871][ T4272] [ 600.845871][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.845871][ T4272] [ 600.878872][ T4272] [ 600.878872][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.878872][ T4272] [ 600.924250][ T108] [ 600.924250][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 600.924250][ T108] [ 600.981315][ T108] ================================================================== [ 600.990687][ T108] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 601.000998][ T108] Write of size 8 at addr ffff88802f7d2840 by task jfsCommit/108 [ 601.010596][ T108] [ 601.013179][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 601.021576][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 601.033516][ T108] Call Trace: [ 601.036883][ T108] [ 601.040033][ T108] dump_stack_lvl+0x188/0x24e [ 601.045467][ T108] ? read_lock_is_recursive+0x10/0x10 [ 601.051172][ T108] ? show_regs_print_info+0x12/0x12 [ 601.056773][ T108] ? load_image+0x410/0x410 [ 601.062065][ T108] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 601.067730][ T108] ? __virt_addr_valid+0x188/0x540 [ 601.074211][ T108] ? __virt_addr_valid+0x467/0x540 [ 601.080342][ T108] ? txEnd+0x329/0x520 [ 601.084760][ T108] print_report+0xa8/0x210 [ 601.090183][ T108] kasan_report+0x10b/0x140 [ 601.095341][ T108] ? mutex_unlock+0x10/0x10 [ 601.099914][ T108] ? txEnd+0x329/0x520 [ 601.104565][ T108] kasan_check_range+0x235/0x290 [ 601.110185][ T108] txEnd+0x329/0x520 [ 601.115356][ T108] jfs_lazycommit+0x5bf/0xa90 [ 601.121695][ T108] ? txFreelock+0x5a0/0x5a0 [ 601.126956][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 601.133795][ T108] ? do_task_dead+0xd0/0xd0 [ 601.139545][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 601.148046][ T108] ? __kthread_parkme+0x71/0x1c0 [ 601.156140][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 601.161730][ T108] kthread+0x29d/0x330 [ 601.166650][ T108] ? txFreelock+0x5a0/0x5a0 [ 601.171655][ T108] ? kthread_blkcg+0xd0/0xd0 [ 601.177295][ T108] ret_from_fork+0x1f/0x30 [ 601.181941][ T108] [ 601.185262][ T108] [ 601.188553][ T108] Allocated by task 16995: [ 601.193244][ T108] kasan_set_track+0x4b/0x70 [ 601.198321][ T108] __kasan_kmalloc+0x8e/0xa0 [ 601.202647][T17056] syz.0.5595 uses obsolete (PF_INET,SOCK_PACKET) [ 601.202951][ T108] lmLogOpen+0x2c0/0xf90 [ 601.202981][ T108] jfs_mount_rw+0xfb/0x5a0 [ 601.202996][ T108] jfs_fill_super+0x57d/0xab0 [ 601.227037][ T108] mount_bdev+0x28a/0x3c0 [ 601.232027][ T108] legacy_get_tree+0xe6/0x180 [ 601.236916][ T108] vfs_get_tree+0x88/0x270 [ 601.241464][ T108] do_new_mount+0x247/0xa40 [ 601.246232][ T108] __se_sys_mount+0x2e3/0x3d0 [ 601.251507][ T108] do_syscall_64+0x4c/0xa0 [ 601.256287][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.263626][ T108] [ 601.266847][ T108] Freed by task 4272: [ 601.272160][ T108] kasan_set_track+0x4b/0x70 [ 601.277906][ T108] kasan_save_free_info+0x27/0x40 [ 601.283167][ T108] ____kasan_slab_free+0x126/0x1f0 [ 601.289065][ T108] slab_free_freelist_hook+0x133/0x1b0 [ 601.295641][ T108] __kmem_cache_free+0xb6/0x200 [ 601.301240][ T108] lmLogClose+0x292/0x530 [ 601.305619][ T108] jfs_umount+0x288/0x360 [ 601.310006][ T108] jfs_put_super+0x88/0x190 [ 601.314720][ T108] generic_shutdown_super+0x130/0x340 [ 601.320197][ T108] kill_block_super+0x7c/0xe0 [ 601.325246][ T108] deactivate_locked_super+0x93/0xf0 [ 601.330719][ T108] cleanup_mnt+0x471/0x4f0 [ 601.335748][ T108] task_work_run+0x1d0/0x260 [ 601.340384][ T108] exit_to_user_mode_loop+0xe6/0x110 [ 601.345882][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 601.351826][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 601.357302][ T108] do_syscall_64+0x58/0xa0 [ 601.361776][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.369799][ T108] [ 601.372507][ T108] Last potentially related work creation: [ 601.378660][ T108] kasan_save_stack+0x3a/0x60 [ 601.383458][ T108] __kasan_record_aux_stack+0xb2/0xc0 [ 601.389583][ T108] kvfree_call_rcu+0x103/0x890 [ 601.395874][ T108] ops_init+0x2e5/0x5e0 [ 601.400390][ T108] register_pernet_operations+0x2a3/0x610 [ 601.406166][ T108] register_pernet_device+0x26/0x70 [ 601.411511][ T108] vti6_tunnel_init+0x15/0x1de [ 601.416784][ T108] do_one_initcall+0x257/0x800 [ 601.421773][ T108] do_initcall_level+0x13d/0x1ed [ 601.427033][ T108] do_initcalls+0x4b/0x8a [ 601.431845][ T108] kernel_init_freeable+0x401/0x5ab [ 601.437549][ T108] kernel_init+0x19/0x1b0 [ 601.441944][ T108] ret_from_fork+0x1f/0x30 [ 601.446422][ T108] [ 601.448756][ T108] The buggy address belongs to the object at ffff88802f7d2800 [ 601.448756][ T108] which belongs to the cache kmalloc-1k of size 1024 [ 601.462980][ T108] The buggy address is located 64 bytes inside of [ 601.462980][ T108] 1024-byte region [ffff88802f7d2800, ffff88802f7d2c00) [ 601.477152][ T108] [ 601.479487][ T108] The buggy address belongs to the physical page: [ 601.486295][ T108] page:ffffea0000bdf400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7d0 [ 601.498378][ T108] head:ffffea0000bdf400 order:3 compound_mapcount:0 compound_pincount:0 [ 601.509532][ T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 601.518399][ T108] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0 [ 601.527802][ T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 601.536608][ T108] page dumped because: kasan: bad access detected [ 601.543481][ T108] page_owner tracks the page as allocated [ 601.549809][ T108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3135, tgid 3135 (cryptomgr_probe), ts 23772016082, free_ts 0 [ 601.573992][ T108] post_alloc_hook+0x173/0x1a0 [ 601.579580][ T108] get_page_from_freelist+0x206b/0x2180 [ 601.585695][ T108] __alloc_pages+0x1ec/0x4f0 [ 601.590806][ T108] alloc_slab_page+0x5d/0x180 [ 601.596173][ T108] new_slab+0x87/0x2d0 [ 601.600669][ T108] ___slab_alloc+0xbc5/0x1240 [ 601.605876][ T108] __kmem_cache_alloc_node+0x126/0x270 [ 601.612068][ T108] kmalloc_trace+0x26/0xe0 [ 601.616783][ T108] hmac_create+0xe6/0x750 [ 601.623256][ T108] cryptomgr_probe+0x62/0x1a0 [ 601.629118][ T108] kthread+0x29d/0x330 [ 601.634693][ T108] ret_from_fork+0x1f/0x30 [ 601.639722][ T108] page_owner free stack trace missing [ 601.645721][ T108] [ 601.649298][ T108] Memory state around the buggy address: [ 601.655990][ T108] ffff88802f7d2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 601.664958][ T108] ffff88802f7d2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 601.673600][ T108] >ffff88802f7d2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 601.683001][ T108] ^ [ 601.690827][ T108] ffff88802f7d2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 601.701047][ T108] ffff88802f7d2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 601.711259][ T108] ================================================================== [ 601.821766][ T108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 601.829704][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 601.837478][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 601.847581][ T108] Call Trace: [ 601.851342][ T108] [ 601.854682][ T108] dump_stack_lvl+0x188/0x24e [ 601.859419][ T108] ? memcpy+0x3c/0x60 [ 601.863977][ T108] ? show_regs_print_info+0x12/0x12 [ 601.870886][ T108] ? load_image+0x410/0x410 [ 601.876144][ T108] panic+0x2d3/0x710 [ 601.880539][ T108] ? bpf_jit_dump+0xd0/0xd0 [ 601.885822][ T108] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 601.894445][ T108] ? _raw_spin_unlock+0x40/0x40 [ 601.901001][ T108] check_panic_on_warn+0x80/0xa0 [ 601.909018][ T108] ? txEnd+0x329/0x520 [ 601.914765][ T108] end_report+0x66/0x110 [ 601.919222][ T108] kasan_report+0x118/0x140 [ 601.926997][ T108] ? mutex_unlock+0x10/0x10 [ 601.934256][ T108] ? txEnd+0x329/0x520 [ 601.939162][ T108] kasan_check_range+0x235/0x290 [ 601.945289][ T108] txEnd+0x329/0x520 [ 601.950028][ T108] jfs_lazycommit+0x5bf/0xa90 [ 601.955658][ T108] ? txFreelock+0x5a0/0x5a0 [ 601.960998][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 601.967642][ T108] ? do_task_dead+0xd0/0xd0 [ 601.974842][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 601.983122][ T108] ? __kthread_parkme+0x71/0x1c0 [ 601.988476][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 601.993919][ T108] kthread+0x29d/0x330 [ 601.998467][ T108] ? txFreelock+0x5a0/0x5a0 [ 602.003120][ T108] ? kthread_blkcg+0xd0/0xd0 [ 602.008037][ T108] ret_from_fork+0x1f/0x30 [ 602.013012][ T108] [ 602.016457][ T108] Kernel Offset: disabled [ 602.021654][ T108] Rebooting in 86400 seconds..