last executing test programs: 1.818149274s ago: executing program 0 (id=1950): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1, 0x10b000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfbf1a000], [0x8002]], '\x00', [{0x0, 0x9}, {0x0, 0xc}, {0x0, 0x1efb660a}, {}, {}, {0x0, 0x2000}, {0x0, 0x8000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.621929304s ago: executing program 0 (id=1953): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x6, @loopback, 0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x5, 0x6, 0xc6da17d1ca4f060f, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffffcc34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}]}, 0xa0}}, 0x0) 1.471046961s ago: executing program 1 (id=1955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x150}}, 0x0) 1.373237906s ago: executing program 0 (id=1956): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 1.174095905s ago: executing program 1 (id=1958): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r0, 0x300}], 0x2c, 0xffffffffffbffff8) 1.095541589s ago: executing program 2 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 1.034440782s ago: executing program 1 (id=1961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 941.031216ms ago: executing program 1 (id=1962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 777.975703ms ago: executing program 1 (id=1964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe35}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 648.277789ms ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x80, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0x4}]}, 0x40}}, 0x0) 577.092143ms ago: executing program 1 (id=1967): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000600)=ANY=[@ANYRESHEX]) 577.021623ms ago: executing program 2 (id=1968): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 475.359038ms ago: executing program 3 (id=1969): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000002c0)={0x14, 0x28, 0x1, 0x70bd2d, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) 432.3277ms ago: executing program 2 (id=1970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x11700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d010}, 0x0) 392.948622ms ago: executing program 0 (id=1971): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000080)='auth.unix.ip/channel\x00', 0x4a00, 0xb1) 391.609702ms ago: executing program 3 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) 310.870456ms ago: executing program 2 (id=1973): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x3, 0x400cf6, 0x3231564e, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2, 0x1}}) 273.436137ms ago: executing program 3 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x201}, 0x1c) 207.79355ms ago: executing program 0 (id=1975): r0 = syz_open_dev$vim2m(&(0x7f0000000840), 0x68, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) 140.366253ms ago: executing program 2 (id=1976): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x9, 0x4) 123.347845ms ago: executing program 3 (id=1977): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) 59.031927ms ago: executing program 2 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x541b, 0x0) 54.568518ms ago: executing program 0 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x4c}}, 0x20040040) 0s ago: executing program 3 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) kernel console output (not intermixed with test programs): type 4 has an invalid length. [ 97.941244][ T6368] netlink: 'syz.1.251': attribute type 5 has an invalid length. [ 97.951419][ T6368] netlink: 3 bytes leftover after parsing attributes in process `syz.1.251'. [ 98.188333][ T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 98.253483][ T6384] usb usb7: usbfs: process 6384 (syz.1.258) did not claim interface 0 before use [ 98.283809][ T5783] gspca_m5602: Failed to find a sensor [ 98.298288][ T5783] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 98.318858][ T5783] usb 3-1: USB disconnect, device number 2 [ 98.399602][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 98.411072][ T23] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 98.428503][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.458090][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.464002][ T6390] ip6tnl1: entered allmulticast mode [ 98.467665][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 98.498892][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.509752][ T3413] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.532680][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.547123][ T23] usb 4-1: Found UVC 1.00 device (046d:0825) [ 98.554265][ T3413] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.758559][ T23] usb 4-1: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 98.789423][ T23] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 98.822611][ T23] usb 4-1: No streaming interface found for terminal 2. [ 98.855112][ T23] usb 4-1: USB disconnect, device number 3 [ 98.918593][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.038495][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.224694][ T6415] netlink: 348 bytes leftover after parsing attributes in process `syz.1.274'. [ 99.234381][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 99.288859][ T789] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.481919][ T6423] delete_channel: no stack [ 99.514695][ T789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.529548][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.560275][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.584271][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.602435][ T789] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 99.612446][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.627682][ T6429] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 99.628381][ T789] usb 3-1: Product: syz [ 99.665383][ T789] usb 3-1: Manufacturer: syz [ 99.690537][ T789] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 99.696949][ T789] usb 3-1: No valid video chain found. [ 99.715568][ T6432] No such timeout policy "syz0" [ 99.795402][ T6429] team0 (unregistering): Port device team_slave_0 removed [ 99.854464][ T6429] team0 (unregistering): Port device team_slave_1 removed [ 99.961871][ T5783] usb 3-1: USB disconnect, device number 3 [ 100.180325][ T6448] syz.1.290 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.504445][ T6456] loop3: detected capacity change from 0 to 4096 [ 100.548226][ T6463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.289144][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 101.358498][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 101.383935][ T6491] bridge_slave_1: left allmulticast mode [ 101.390694][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.310'. [ 101.408546][ T6491] bridge_slave_1: left promiscuous mode [ 101.417309][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.464956][ T6491] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 101.470968][ T6472] loop3: detected capacity change from 0 to 32768 [ 101.525099][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 101.544439][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 101.580195][ T6472] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.627662][ T6495] netlink: 80 bytes leftover after parsing attributes in process `syz.0.313'. [ 101.865688][ T6503] Illegal XDP return value 4294967282 on prog (id 16) dev N/A, expect packet loss! [ 102.036158][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 102.233102][ T6515] loop2: detected capacity change from 0 to 164 [ 102.303912][ T6515] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 102.373314][ T6515] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 102.420543][ T6515] Symlink component flag not implemented [ 102.448406][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.600078][ T6525] loop1: detected capacity change from 0 to 2048 [ 102.645993][ T6525] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.795112][ T6533] netlink: 'syz.0.331': attribute type 2 has an invalid length. [ 102.985467][ T6539] netlink: 256 bytes leftover after parsing attributes in process `syz.0.335'. [ 103.366059][ T6557] cgroup: name respecified [ 103.563072][ T6564] delete_channel: no stack [ 103.608461][ T6567] loop2: detected capacity change from 0 to 1024 [ 103.630208][ T6567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.670838][ T6567] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.722966][ T6567] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.769062][ T6567] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.810097][ T6567] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.348: Invalid inode table block 0 in block_group 0 [ 103.837152][ T6567] EXT4-fs (loop2): Remounting filesystem read-only [ 103.853454][ T6567] Quota error (device loop2): write_blk: dquota write failed [ 103.882038][ T6567] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 103.892247][ T6567] EXT4-fs (loop2): 1 truncate cleaned up [ 103.910877][ T6567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.116194][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.240172][ T6590] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 104.618375][ T6606] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.366'. [ 104.966107][ T6599] loop2: detected capacity change from 0 to 32768 [ 105.068455][ T5783] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.194224][ T6620] capability: warning: `syz.1.373' uses deprecated v2 capabilities in a way that may be insecure [ 105.288237][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 105.304866][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.335962][ T6622] mmap: syz.0.375 (6622): VmData 45850624 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 105.366901][ T5783] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 105.376389][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.401404][ T5783] usb 4-1: Product: syz [ 105.413577][ T5783] usb 4-1: Manufacturer: syz [ 105.428386][ T5783] usb 4-1: SerialNumber: syz [ 105.435812][ T5783] usb 4-1: config 0 descriptor?? [ 105.451578][ T5783] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 105.474806][ T5783] usb 4-1: selecting invalid altsetting 1 [ 105.870160][ T23] usb 4-1: USB disconnect, device number 4 [ 105.978632][ T6644] xt_time: unknown flags 0x4 [ 106.183685][ T6648] loop0: detected capacity change from 0 to 4096 [ 106.200498][ T6648] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 106.269174][ T6648] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 106.615324][ T6645] loop2: detected capacity change from 0 to 32768 [ 106.668868][ T6645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.384 (6645) [ 106.758505][ T6645] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.795781][ T6645] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 106.828391][ T6645] BTRFS info (device loop2): using free space tree [ 106.969162][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 106.981339][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 107.129427][ T6645] BTRFS info (device loop2): enabling ssd optimizations [ 107.136914][ T6645] BTRFS info (device loop2): auto enabling async discard [ 107.278590][ T6695] comedi comedi0: No hardware detected at I/O base 0x294 [ 107.343257][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.714382][ T5767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5767) [ 107.747295][ T6708] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.409'. [ 108.523497][ T6738] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 108.829686][ T6751] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.924975][ T6755] warning: `syz.0.430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.270249][ T6765] loop3: detected capacity change from 0 to 1024 [ 109.284916][ T6765] EXT4-fs: Ignoring removed orlov option [ 109.291399][ T6765] EXT4-fs: Invalid want_extra_isize 5 [ 109.314532][ T6749] loop1: detected capacity change from 0 to 32768 [ 109.348588][ T2178] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.492724][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.553821][ T2178] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 109.563309][ T2178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 109.571580][ T2178] usb 3-1: Product: syz [ 109.575951][ T2178] usb 3-1: Manufacturer: syz [ 109.679727][ T23] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 109.688389][ T23] usb 1-1: config 0 has no interface number 0 [ 109.694556][ T23] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 109.707280][ T23] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 109.718799][ T23] usb 1-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 109.733725][ T23] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 109.748240][ T23] usb 1-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 109.756338][ T23] usb 1-1: Product: syz [ 109.775694][ T23] usb 1-1: Manufacturer: syz [ 109.781190][ T23] usb 1-1: SerialNumber: syz [ 109.799482][ T23] usb 1-1: config 0 descriptor?? [ 109.805992][ T6763] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 109.837991][ T2178] scsi host1: uas [ 109.843534][ T23] ni6501 1-1:0.238: driver 'ni6501' failed to auto-configure device. [ 109.938554][ T6769] loop3: detected capacity change from 0 to 1024 [ 110.034165][ T6769] syz.3.437: attempt to access beyond end of device [ 110.034165][ T6769] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 110.141034][ C0] usb 3-1: stat urb: status -71 [ 110.146747][ C0] usb 3-1: cmd cmplt err -71 [ 110.164847][ T9] usb 3-1: USB disconnect, device number 4 [ 110.185089][ T9] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 110.188544][ T23] usb 1-1: USB disconnect, device number 3 [ 110.193298][ T9] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 110.596395][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 110.606189][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 110.768354][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.354796][ T27] audit: type=1326 audit(1789665009.565:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.378621][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.406572][ T27] audit: type=1326 audit(1789665009.565:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.497493][ T27] audit: type=1326 audit(1789665009.595:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.532937][ T27] audit: type=1326 audit(1789665009.605:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.556820][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.588218][ T27] audit: type=1326 audit(1789665009.605:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.612037][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.668334][ T27] audit: type=1326 audit(1789665009.605:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.692169][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.743655][ T27] audit: type=1326 audit(1789665009.605:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.788242][ T27] audit: type=1326 audit(1789665009.605:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.812069][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.888246][ T27] audit: type=1326 audit(1789665009.605:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 111.912085][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.437362][ T6828] loop2: detected capacity change from 0 to 40427 [ 112.506133][ T6828] F2FS-fs (loop2): invalid crc value [ 112.530800][ T6828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.702855][ T6828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 113.363331][ T6895] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 113.372092][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 114.343431][ T6935] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 114.884788][ T6961] netlink: 'syz.2.523': attribute type 3 has an invalid length. [ 114.922897][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 115.088377][ T6970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.095690][ T6970] IPv6: NLM_F_CREATE should be set when creating new route [ 115.103018][ T6970] IPv6: NLM_F_CREATE should be set when creating new route [ 115.274121][ T6977] loop3: detected capacity change from 0 to 64 [ 115.426756][ T6984] loop2: detected capacity change from 0 to 512 [ 116.033795][ T7006] loop1: detected capacity change from 0 to 128 [ 116.160335][ T7006] overlay: filesystem on ./file0 not supported [ 116.997388][ T7047] trusted_key: encrypted_key: master key parameter '' is invalid [ 117.127327][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'. [ 117.158302][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'. [ 117.183039][ T7051] netlink: 56 bytes leftover after parsing attributes in process `syz.1.570'. [ 117.215916][ T7056] loop0: detected capacity change from 0 to 512 [ 117.280841][ T7056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.321362][ T7056] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.362511][ T7057] nvme nvme0: rdma_resolve_addr failed (-19). [ 117.412161][ T7056] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 117.486332][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.824095][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 117.834421][ T7081] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.582'. [ 118.038352][ T2178] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.099042][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 118.230546][ T2178] usb 4-1: not running at top speed; connect to a high speed hub [ 118.253531][ T2178] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 118.286411][ T2178] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 118.311353][ T2178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.338273][ T2178] usb 4-1: Product: syz [ 118.348436][ T2178] usb 4-1: Manufacturer: syz [ 118.359289][ T2178] usb 4-1: SerialNumber: syz [ 118.387734][ T2178] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 118.422895][ T2178] keyspan 4-1:1.0: unsupported endpoint type 0 [ 118.452225][ T2178] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 118.484234][ T2178] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 118.517101][ T2178] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 118.579349][ T2178] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 118.875621][ T7119] loop1: detected capacity change from 0 to 2048 [ 118.912671][ T7122] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.926534][ T5783] usb 4-1: USB disconnect, device number 5 [ 118.957739][ T5783] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 119.004348][ T5783] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 119.048392][ T2178] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 119.066166][ T5783] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 119.092779][ T7122] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 119.129142][ T5783] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 119.145381][ T7122] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 119.150068][ T7126] netlink: 144 bytes leftover after parsing attributes in process `syz.2.606'. [ 119.158278][ T5783] keyspan 4-1:1.0: device disconnected [ 119.175603][ T7122] Remounting filesystem read-only [ 119.182125][ T2895] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 119.190526][ T2895] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 119.200539][ T2895] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.210353][ T2895] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.221093][ T2895] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.239134][ T5775] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 119.240335][ T2178] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 119.248531][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 119.267055][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.276741][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.281574][ T2178] usb 1-1: config 0 has no interface number 0 [ 119.291624][ T5775] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 119.301657][ T2178] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 119.304950][ T5775] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 119.324311][ T2178] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 119.326610][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 119.348218][ T2178] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 119.356972][ T5775] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 119.364380][ T2178] usb 1-1: Product: syz [ 119.364400][ T2178] usb 1-1: Manufacturer: syz [ 119.364414][ T2178] usb 1-1: SerialNumber: syz [ 119.367680][ T2178] usb 1-1: config 0 descriptor?? [ 119.383142][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.408549][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.417014][ T2178] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 119.417897][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.430577][ T2178] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 119.443695][ T2178] keyspan 1-1:0.107: unsupported endpoint type 0 [ 119.446044][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 119.465921][ T2178] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 119.480859][ T2178] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 119.494672][ T5775] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 119.503817][ T2178] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 119.524936][ T2178] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 119.536263][ T2178] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 119.543325][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.546098][ T2178] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 119.563193][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.583401][ T7132] loop2: detected capacity change from 0 to 128 [ 119.590236][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.590545][ T2178] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 119.600707][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 119.613041][ T2178] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 119.666917][ T5775] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 119.680737][ T7132] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 119.694623][ T2178] usb 1-1: USB disconnect, device number 4 [ 119.711568][ T5775] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 119.727327][ T5775] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 119.750457][ T7132] hpfs: filesystem error: improperly stopped [ 119.756515][ T7132] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 119.769720][ T2178] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 119.788277][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.797853][ T2178] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 119.798219][ T7132] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 119.826072][ T2178] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 119.835829][ T7132] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 119.887792][ T2178] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 119.930251][ T2178] keyspan 1-1:0.107: device disconnected [ 120.280722][ T7148] loop1: detected capacity change from 0 to 1024 [ 120.308273][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.512913][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 105, changing to 10 [ 120.558811][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25710, setting to 1024 [ 120.573071][ T7157] loop3: detected capacity change from 0 to 128 [ 120.583921][ T9] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 120.606860][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.618530][ T7157] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.625447][ T9] usb 3-1: Product: syz [ 120.637665][ T7157] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.653949][ T9] usb 3-1: Manufacturer: syz [ 120.690010][ T9] usb 3-1: SerialNumber: syz [ 120.693112][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 120.725062][ T7162] netlink: 128 bytes leftover after parsing attributes in process `syz.0.622'. [ 120.739224][ T7132] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.785663][ T7162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.807527][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.994353][ T9] usb 3-1: usb_control_msg returned -71 [ 121.011006][ T9] usbtmc 3-1:1.0: can't read capabilities [ 121.025475][ T27] audit: type=1326 audit(1789665019.235:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.066027][ T9] usb 3-1: USB disconnect, device number 5 [ 121.088281][ T27] audit: type=1326 audit(1789665019.235:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.155646][ T27] audit: type=1326 audit(1789665019.235:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.179474][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.212081][ T27] audit: type=1326 audit(1789665019.235:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.245659][ T27] audit: type=1326 audit(1789665019.265:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.319776][ T27] audit: type=1326 audit(1789665019.265:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.343616][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.380839][ T27] audit: type=1326 audit(1789665019.265:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.444040][ T27] audit: type=1326 audit(1789665019.305:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.480087][ T27] audit: type=1326 audit(1789665019.305:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 121.669393][ T5779] Bluetooth: min 103 > max 0 [ 121.818516][ T7197] loop3: detected capacity change from 0 to 2048 [ 121.926334][ T7197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.959644][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.640'. [ 121.984905][ T7197] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 122.035710][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.455795][ T7222] netlink: 'syz.2.649': attribute type 3 has an invalid length. [ 122.468346][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 122.516439][ T7228] mmap: syz.3.652 (7228) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.694642][ T7232] loop3: detected capacity change from 0 to 512 [ 122.708077][ T7236] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 122.773968][ T7232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.863796][ T7244] loop2: detected capacity change from 0 to 512 [ 122.871419][ T7244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.881071][ T7232] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.946008][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.964485][ T7244] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.979683][ T7232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 123.026387][ T7244] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 123.044535][ T7244] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.660: Failed to acquire dquot type 1 [ 123.193643][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.213977][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.338905][ T7252] loop1: detected capacity change from 0 to 4096 [ 123.364003][ T7252] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 123.430534][ T7252] ntfs3: loop1: ino=19, mi_enum_attr [ 123.436133][ T7252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 123.450667][ T7252] ntfs3: loop1: ino=1a, mi_enum_attr [ 123.456242][ T7252] ntfs3: loop1: ino=1a, mi_enum_attr [ 123.486429][ T7252] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 123.658295][ T2178] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.728395][ T5779] Bluetooth: hci3: command tx timeout [ 123.864254][ T2178] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.868318][ T7269] netlink: 'syz.0.670': attribute type 21 has an invalid length. [ 123.883766][ T2178] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.908571][ T2178] usb 4-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 123.929537][ T2178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.971287][ T2178] usb-storage 4-1:1.0: USB Mass Storage device detected [ 124.192378][ T2178] scsi host1: usb-storage 4-1:1.0 [ 124.244736][ T7282] loop1: detected capacity change from 0 to 512 [ 124.255252][ T7262] loop2: detected capacity change from 0 to 32768 [ 124.300496][ T7282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.318453][ T7282] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.352982][ T7282] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.384155][ T23] usb 4-1: USB disconnect, device number 6 [ 124.416561][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.444339][ T7262] ERROR: (device loop2): duplicateIXtree: [ 124.444339][ T7262] [ 124.510128][ T7262] ERROR: (device loop2): remounting filesystem as read-only [ 124.568819][ T2178] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.615722][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 124.780568][ T2178] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.790194][ T2178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.802263][ T2178] usb 1-1: config 0 descriptor?? [ 124.811729][ T2178] cp210x 1-1:0.0: cp210x converter detected [ 125.071272][ T7300] loop3: detected capacity change from 0 to 64 [ 125.240115][ T2178] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 125.261196][ T2178] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 125.288187][ T2178] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 125.317781][ T2178] usb 1-1: cp210x converter now attached to ttyUSB0 [ 125.341543][ T2178] usb 1-1: USB disconnect, device number 5 [ 125.389789][ T2178] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.406312][ T2178] cp210x 1-1:0.0: device disconnected [ 125.408982][ T7308] openvswitch: netlink: IP tunnel dst address not specified [ 125.619852][ T7313] loop3: detected capacity change from 0 to 4096 [ 125.643158][ T7313] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 125.731663][ T7313] ntfs3: loop3: ino=19, mi_enum_attr [ 125.752568][ T7313] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 125.761662][ T7313] ntfs3: loop3: ino=1a, mi_enum_attr [ 125.767134][ T7313] ntfs3: loop3: ino=1a, mi_enum_attr [ 125.773987][ T7313] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 125.815666][ T7319] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 126.008363][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 126.141400][ T7332] loop0: detected capacity change from 0 to 128 [ 126.182105][ T7332] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 126.219483][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 126.221617][ T7332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.238738][ T9] usb 2-1: config 0 has too many interfaces: 77, using maximum allowed: 32 [ 126.247387][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 77 [ 126.270983][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 126.293272][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.317072][ T9] usb 2-1: Product: syz [ 126.341616][ T9] usb 2-1: Manufacturer: syz [ 126.346283][ T9] usb 2-1: SerialNumber: syz [ 126.366212][ T9] usb 2-1: config 0 descriptor?? [ 126.519668][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 126.594088][ T9] usb 2-1: USB disconnect, device number 2 [ 126.904254][ T7358] netlink: 'syz.0.711': attribute type 21 has an invalid length. [ 126.913371][ T7358] netlink: 'syz.0.711': attribute type 20 has an invalid length. [ 126.921453][ T7358] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.030961][ T7362] loop0: detected capacity change from 0 to 512 [ 127.038896][ T2178] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.065237][ T7362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.068277][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.081621][ T7362] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.146407][ T7362] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2974: inode #15: comm syz.0.713: corrupted xattr block 33: invalid checksum [ 127.183518][ T7362] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -74) [ 127.238292][ T2178] usb 4-1: Using ep0 maxpacket: 32 [ 127.253501][ T2178] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 127.278314][ T2178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.286374][ T2178] usb 4-1: Product: syz [ 127.302074][ T2178] usb 4-1: Manufacturer: syz [ 127.303574][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.307251][ T2178] usb 4-1: SerialNumber: syz [ 127.326374][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.339508][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.346361][ T2178] usb 4-1: config 0 descriptor?? [ 127.365858][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.388902][ T2178] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 127.398290][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.406333][ T9] usb 3-1: SerialNumber: syz [ 127.411342][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 127.566538][ T7376] loop1: detected capacity change from 0 to 1024 [ 127.664225][ T9] usb 3-1: 0:2 : does not exist [ 127.714472][ T9] usb 3-1: USB disconnect, device number 6 [ 127.787144][ T2178] gspca_topro: reg_w err -71 [ 127.825396][ T7380] netlink: 116 bytes leftover after parsing attributes in process `syz.0.729'. [ 127.843453][ T7380] IPv6: Can't replace route, no match found [ 127.848923][ T2178] gspca_topro: Sensor soi763a [ 127.862458][ T7382] netlink: 'syz.1.721': attribute type 21 has an invalid length. [ 127.871555][ T2178] usb 4-1: USB disconnect, device number 7 [ 127.887185][ T7382] netlink: 'syz.1.721': attribute type 20 has an invalid length. [ 127.950627][ T7382] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.147653][ T7389] dlm: non-version read from control device 0 [ 128.164470][ T7391] netlink: 'syz.1.725': attribute type 2 has an invalid length. [ 128.563970][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'. [ 128.618511][ T789] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 128.753093][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 128.753117][ T27] audit: type=1326 audit(1789665026.955:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 128.821606][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.842755][ T27] audit: type=1326 audit(1789665026.955:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 128.863788][ T789] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 128.903170][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.911614][ T27] audit: type=1326 audit(1789665026.995:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 128.927694][ T789] usb 3-1: Product: syz [ 128.942076][ T789] usb 3-1: Manufacturer: syz [ 128.946723][ T789] usb 3-1: SerialNumber: syz [ 128.964274][ T789] usb 3-1: config 0 descriptor?? [ 128.974768][ T789] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 128.987227][ T7424] loop3: detected capacity change from 0 to 256 [ 128.993810][ T27] audit: type=1326 audit(1789665026.995:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 129.073711][ T27] audit: type=1326 audit(1789665026.995:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 129.186888][ T27] audit: type=1326 audit(1789665026.995:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 129.260468][ T27] audit: type=1326 audit(1789665026.995:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 129.316700][ T27] audit: type=1326 audit(1789665026.995:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 129.356199][ T27] audit: type=1326 audit(1789665026.995:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 129.402076][ T789] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 129.422354][ T789] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 129.445051][ T789] usb 3-1: USB disconnect, device number 7 [ 129.698825][ T7443] netlink: 'syz.0.751': attribute type 29 has an invalid length. [ 129.751563][ T7443] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.760416][ T7443] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.766263][ T7445] libceph: resolve '400' (ret=-3): failed [ 129.769183][ T7443] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.769249][ T7443] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.208517][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 130.317218][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.764'. [ 130.327129][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 130.421655][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 130.436884][ T8] usb 4-1: config index 0 descriptor too short (expected 161, got 153) [ 130.458290][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.473181][ T8] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 130.483458][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.513685][ T8] gspca_main: spca501-2.14.0 probing 0000:0000 [ 130.538646][ T789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.616215][ T7481] loop1: detected capacity change from 0 to 64 [ 130.781161][ T789] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.787109][ T7485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.771'. [ 130.808506][ T789] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 130.819870][ T7485] vlan0: entered promiscuous mode [ 130.821344][ T789] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 130.843513][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.861942][ T789] usb 1-1: Product: syz [ 130.866194][ T789] usb 1-1: Manufacturer: syz [ 130.881120][ T789] usb 1-1: SerialNumber: syz [ 130.906501][ T7467] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.921907][ T7467] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.040868][ T8] gspca_spca501: reg write: error -110 [ 131.056641][ T8] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 131.072376][ T8] spca501: probe of 4-1:1.0 failed with error -22 [ 131.087171][ T8] usb 4-1: Found UVC 1.00 device (0000:0000) [ 131.105333][ T8] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 131.137342][ T8] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 131.151891][ T7467] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.169060][ T7495] loop2: detected capacity change from 0 to 256 [ 131.174615][ T7467] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.184220][ T8] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 131.288748][ T789] zaurus 1-1:1.0 usb0: register 'zaurus' at usb-dummy_hcd.0-1, pseudo-MDLM (BLAN) device, f2:09:03:23:08:c1 [ 131.539047][ T8] usb 1-1: USB disconnect, device number 6 [ 131.563856][ T8] zaurus 1-1:1.0 usb0: unregister 'zaurus' usb-dummy_hcd.0-1, pseudo-MDLM (BLAN) device [ 131.564446][ T7504] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 131.796312][ T9] usb 4-1: USB disconnect, device number 8 [ 131.896455][ T7518] libceph: Failed to parse secret: -22 [ 132.043478][ T7523] netlink: 'syz.2.787': attribute type 32 has an invalid length. [ 132.846365][ T7549] loop2: detected capacity change from 0 to 4096 [ 132.998678][ T7549] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 133.174185][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181650][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339609][ T7578] MTD: Couldn't look up 'mtd0/file0': -2 [ 133.705318][ T7594] loop1: detected capacity change from 0 to 64 [ 133.823593][ T7597] libceph: resolve '0.' (ret=-3): failed [ 134.047377][ T7607] loop2: detected capacity change from 0 to 64 [ 134.279282][ T7609] loop3: detected capacity change from 0 to 4096 [ 134.385041][ T7616] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.395106][ T7615] loop1: detected capacity change from 0 to 512 [ 134.594611][ T7615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.644132][ T7615] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.675796][ T7601] loop0: detected capacity change from 0 to 32768 [ 134.715088][ T7615] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz.1.822: Directory hole found for htree leaf block 0 [ 134.739971][ T7601] [ 134.739971][ T7601] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.739971][ T7601] [ 134.886522][ T5776] [ 134.886522][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.886522][ T5776] [ 134.904229][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.938324][ T5776] [ 134.938324][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.938324][ T5776] [ 135.538949][ T7650] netlink: 'syz.0.837': attribute type 21 has an invalid length. [ 135.575272][ T7653] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 136.160731][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 136.198215][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 136.207976][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 136.297805][ T7682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 136.629577][ T7695] loop1: detected capacity change from 0 to 512 [ 136.733876][ T7695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.763745][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 136.778662][ T7695] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.005507][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.078055][ T7716] loop0: detected capacity change from 0 to 1024 [ 137.086034][ T7714] netlink: 56 bytes leftover after parsing attributes in process `syz.2.868'. [ 137.429533][ T789] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.632377][ T789] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 137.655101][ T789] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 137.674569][ T789] usb 4-1: Product: syz [ 137.692706][ T789] usb 4-1: SerialNumber: syz [ 137.713635][ T789] usb 4-1: config 0 descriptor?? [ 137.948513][ T789] hso 4-1:0.0: Failed to find INT IN ep [ 138.167310][ T789] usb 4-1: USB disconnect, device number 9 [ 138.377993][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.891'. [ 138.418404][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'. [ 139.534064][ T7808] --map-set only usable from mangle table [ 139.938638][ T7823] loop0: detected capacity change from 0 to 64 [ 139.995887][ T7823] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 140.083806][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 140.478523][ T5816] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.628919][ T789] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.683794][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 140.691914][ T5816] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 140.701764][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.712103][ T5816] usb 1-1: config 1 has no interface number 0 [ 140.718266][ T5816] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 140.728291][ T5816] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.743133][ T5816] usb 1-1: config 1 interface 105 has no altsetting 0 [ 140.752484][ T5816] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 140.761711][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 140.778583][ T5816] usb 1-1: Product: syz [ 140.785013][ T5816] usb 1-1: Manufacturer: syz [ 140.798024][ T5816] usb 1-1: SerialNumber: syz [ 140.824390][ T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.844472][ T789] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.873248][ T789] usb 2-1: New USB device found, idVendor=04dd, idProduct=0105, bcdDevice= 0.00 [ 140.883193][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.891575][ T789] usb 2-1: Product: syz [ 140.895854][ T789] usb 2-1: Manufacturer: syz [ 140.898759][ T5783] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 140.901531][ T789] usb 2-1: SerialNumber: syz [ 140.930639][ T789] usb 2-1: bad CDC descriptors [ 141.023757][ T5816] aqc111: probe of 1-1:1.105 failed with error -22 [ 141.100738][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 141.120260][ T5783] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 141.133501][ T789] usb 2-1: USB disconnect, device number 3 [ 141.134909][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.150271][ T5783] usb 4-1: Product: syz [ 141.155119][ T5783] usb 4-1: Manufacturer: syz [ 141.165535][ T5783] usb 4-1: SerialNumber: syz [ 141.184440][ T5783] usb 4-1: config 0 descriptor?? [ 141.194803][ T5783] hub 4-1:0.0: bad descriptor, ignoring hub [ 141.205665][ T5783] hub: probe of 4-1:0.0 failed with error -5 [ 141.224624][ T5783] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 141.257491][ T23] usb 1-1: USB disconnect, device number 7 [ 141.379622][ T7867] loop2: detected capacity change from 0 to 256 [ 142.377284][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 142.566631][ T7910] netlink: 'syz.3.960': attribute type 22 has an invalid length. [ 142.665957][ T7916] loop0: detected capacity change from 0 to 512 [ 142.752817][ T7916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.785131][ T7921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.965'. [ 142.802908][ T7923] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 142.889193][ T7916] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.043393][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.273156][ T7937] netlink: 224 bytes leftover after parsing attributes in process `syz.0.972'. [ 143.296612][ T7939] loop2: detected capacity change from 0 to 128 [ 143.796997][ T7933] loop1: detected capacity change from 0 to 32768 [ 143.830993][ T7933] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.971 (7933) [ 143.881203][ T7933] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 143.920721][ T7933] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 143.942459][ T7933] BTRFS info (device loop1): force zlib compression, level 3 [ 143.969928][ T7933] BTRFS info (device loop1): turning on flush-on-commit [ 143.998218][ T7933] BTRFS info (device loop1): max_inline at 4096 [ 144.012307][ T7933] BTRFS info (device loop1): using free space tree [ 144.138479][ T27] audit: type=1326 audit(1789665042.355:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.192041][ T7963] netlink: 'syz.2.983': attribute type 49 has an invalid length. [ 144.233946][ T7933] BTRFS info (device loop1): enabling ssd optimizations [ 144.258254][ T7933] BTRFS info (device loop1): auto enabling async discard [ 144.308854][ T27] audit: type=1326 audit(1789665042.355:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.388811][ T27] audit: type=1326 audit(1789665042.355:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.412829][ T27] audit: type=1326 audit(1789665042.355:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.514212][ T27] audit: type=1326 audit(1789665042.355:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.616285][ T27] audit: type=1326 audit(1789665042.355:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.642875][ T7992] loop2: detected capacity change from 0 to 128 [ 144.705950][ T27] audit: type=1326 audit(1789665042.355:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.787163][ T5775] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 144.839881][ T27] audit: type=1326 audit(1789665042.355:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 144.888276][ T27] audit: type=1326 audit(1789665042.355:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.0.985" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2d039e159 code=0x7ffc0000 [ 145.081556][ T5767] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (5767) [ 145.179947][ T8002] loop3: detected capacity change from 0 to 1024 [ 145.197571][ T8002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.205326][ T8002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.262136][ T8002] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.310857][ T8002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.351649][ T8002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.515260][ T8012] netlink: 'syz.1.999': attribute type 2 has an invalid length. [ 145.865445][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.248583][ T789] usb 4-1: USB disconnect, device number 10 [ 146.483882][ T8031] loop2: detected capacity change from 0 to 4096 [ 146.985288][ T8039] loop0: detected capacity change from 0 to 8192 [ 147.060721][ T8039] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.101509][ T8027] loop1: detected capacity change from 0 to 32768 [ 147.129903][ T8039] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 147.150146][ T8039] REISERFS (device loop0): using ordered data mode [ 147.156750][ T8039] reiserfs: using flush barriers [ 147.165166][ T8039] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.221782][ T8027] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.251362][ T8039] REISERFS (device loop0): checking transaction log (loop0) [ 147.467090][ T8027] XFS (loop1): Ending clean mount [ 147.478293][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.546672][ T8039] REISERFS (device loop0): Using rupasov hash to sort names [ 147.566968][ T8039] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 147.711179][ T5816] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 147.728586][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.740758][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.752989][ T8060] loop3: detected capacity change from 0 to 2048 [ 147.768240][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.777216][ T5816] usb 3-1: config 1 has no interface number 0 [ 147.803948][ T5816] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 147.821192][ T5816] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 147.837768][ T5816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.854629][ T8060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.858501][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.889600][ T5816] usb 3-1: Product: syz [ 147.915989][ T5816] usb 3-1: Manufacturer: syz [ 147.961182][ T5816] usb 3-1: SerialNumber: syz [ 148.432315][ T8070] loop0: detected capacity change from 0 to 256 [ 148.480897][ T8068] bond1: entered promiscuous mode [ 148.486417][ T8068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.546500][ T789] usb 3-1: USB disconnect, device number 8 [ 148.572162][ T8070] FAT-fs (loop0): Directory bread(block 64) failed [ 148.622763][ T8070] FAT-fs (loop0): Directory bread(block 65) failed [ 148.640250][ T8070] FAT-fs (loop0): Directory bread(block 66) failed [ 148.655848][ T8070] FAT-fs (loop0): Directory bread(block 67) failed [ 148.676864][ T8070] FAT-fs (loop0): Directory bread(block 68) failed [ 148.704351][ T8070] FAT-fs (loop0): Directory bread(block 69) failed [ 148.722429][ T8070] FAT-fs (loop0): Directory bread(block 70) failed [ 148.736334][ T8070] FAT-fs (loop0): Directory bread(block 71) failed [ 148.756709][ T8070] FAT-fs (loop0): Directory bread(block 72) failed [ 148.776041][ T8070] FAT-fs (loop0): Directory bread(block 73) failed [ 149.934896][ T8113] ip6t_rpfilter: unknown options [ 150.205920][ T8121] overlayfs: cannot append lower layer [ 150.242077][ T8124] loop3: detected capacity change from 0 to 256 [ 150.622814][ T8134] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1054'. [ 150.638775][ T27] audit: type=1400 audit(1789665048.845:47): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8133 comm="syz.1.1052" [ 150.784473][ T8141] sctp: [Deprecated]: syz.2.1055 (pid 8141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.784473][ T8141] Use struct sctp_sack_info instead [ 150.827706][ T8142] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 150.879182][ T8146] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 150.889806][ T8146] bridge1: entered promiscuous mode [ 150.895069][ T8146] bridge1: entered allmulticast mode [ 151.001029][ T8148] loop2: detected capacity change from 0 to 1024 [ 151.060395][ T8148] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.132596][ T8148] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.1059: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.230037][ T8148] Quota error (device loop2): write_blk: dquota write failed [ 151.273983][ T8148] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 151.287986][ T8148] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1059: Failed to acquire dquot type 0 [ 151.313263][ T8148] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.1059: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.352402][ T8148] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1059: Invalid inode bitmap blk 0 in block_group 0 [ 151.381049][ T3430] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.411959][ T8148] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 151.422460][ T3430] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 151.440726][ T3430] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 151.467009][ T8148] EXT4-fs (loop2): 1 orphan inode deleted [ 151.515957][ T8148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.691619][ T8148] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 151.806480][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.880997][ T8178] loop0: detected capacity change from 0 to 1024 [ 151.922849][ T8178] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.944886][ T8178] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.956786][ T8181] xt_NFQUEUE: number of total queues is 0 [ 151.969356][ T8178] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 151.978571][ T8178] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.985535][ T8178] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.1072: Freeing blocks not in datazone - block = 0, count = 4096 [ 152.002648][ T8178] EXT4-fs (loop0): 1 orphan inode deleted [ 152.009763][ T8178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.052919][ T8178] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 152.209878][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.723925][ T27] audit: type=1326 audit(1789665050.935:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 152.793624][ T8209] netlink: 'syz.2.1085': attribute type 2 has an invalid length. [ 152.803014][ T27] audit: type=1326 audit(1789665050.935:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 152.897712][ T27] audit: type=1326 audit(1789665050.935:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 152.994731][ T27] audit: type=1326 audit(1789665050.935:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 153.065262][ T8214] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 153.080383][ T27] audit: type=1326 audit(1789665050.935:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 153.112718][ T27] audit: type=1326 audit(1789665050.935:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 153.188009][ T8221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1091'. [ 153.379105][ T5816] IPVS: starting estimator thread 0... [ 153.479119][ T8229] IPVS: using max 19 ests per chain, 45600 per kthread [ 153.766283][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 154.257991][ T8264] loop2: detected capacity change from 0 to 764 [ 154.316869][ T8264] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 154.801540][ T8286] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 154.831469][ T8286] overlayfs: overlapping lowerdir path [ 154.961114][ T8293] netlink: 'syz.1.1126': attribute type 12 has an invalid length. [ 155.824726][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 156.008505][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.221194][ T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.241745][ T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.267767][ T789] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 156.278018][ T789] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.316507][ T8351] loop2: detected capacity change from 0 to 512 [ 156.321468][ T789] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 156.336563][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.358978][ T789] usb 2-1: Product: syz [ 156.364155][ T789] usb 2-1: Manufacturer: syz [ 156.381483][ T789] usb 2-1: SerialNumber: syz [ 156.412945][ T8351] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 156.480172][ T8351] EXT4-fs (loop2): 1 truncate cleaned up [ 156.538206][ T8351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.635589][ T789] usb 2-1: Limiting number of CPorts to U8_MAX [ 156.646406][ T8351] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 156.668104][ T789] usb 2-1: Not enough endpoints found in device, aborting! [ 156.743475][ T8355] loop0: detected capacity change from 0 to 32768 [ 156.749247][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.866507][ T8365] loop2: detected capacity change from 0 to 2048 [ 156.888430][ T5816] usb 2-1: USB disconnect, device number 4 [ 156.898712][ T8355] JBD2: Ignoring recovery information on journal [ 156.921400][ T2178] kernel write not supported for file /input/mice (pid: 2178 comm: kworker/1:3) [ 156.976911][ T8365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.046250][ T8355] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.048727][ T8365] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz.2.1159: bad inode number: 12 [ 157.098084][ T8365] EXT4-fs (loop2): Remounting filesystem read-only [ 157.154743][ T8355] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 157.197583][ T8355] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 157.217958][ T8355] OCFS2: File system is now read-only. [ 157.223366][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 157.245218][ T8355] (syz.0.1156,8355,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 157.264142][ T8355] (syz.0.1156,8355,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 157.276327][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.297362][ T8355] (syz.0.1156,8355,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 157.314859][ T8355] (syz.0.1156,8355,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 157.358275][ T8355] (syz.0.1156,8355,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 157.366520][ T8355] (syz.0.1156,8355,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 157.442082][ T8355] (syz.0.1156,8355,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 157.458280][ T8355] (syz.0.1156,8355,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 157.474422][ T8355] (syz.0.1156,8355,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 157.484117][ T8355] (syz.0.1156,8355,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 157.495321][ T8355] (syz.0.1156,8355,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 157.510523][ T8355] (syz.0.1156,8355,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 157.522903][ T8355] (syz.0.1156,8355,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 157.551612][ T8355] (syz.0.1156,8355,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 157.574849][ T8355] (syz.0.1156,8355,1):ocfs2_symlink:1921 ERROR: status = -30 [ 157.598609][ T8355] (syz.0.1156,8355,1):ocfs2_symlink:2075 ERROR: status = -30 [ 157.722697][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 158.162964][ T8401] loop3: detected capacity change from 0 to 764 [ 158.223551][ T8401] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 158.277453][ T8403] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 158.300916][ T8406] loop1: detected capacity change from 0 to 512 [ 158.358083][ T8403] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 158.556050][ T2178] IPVS: starting estimator thread 0... [ 158.648235][ T8412] IPVS: using max 22 ests per chain, 52800 per kthread [ 158.730328][ T8420] netlink: 'syz.3.1185': attribute type 10 has an invalid length. [ 158.760401][ T8420] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1185'. [ 158.827544][ T8424] loop1: detected capacity change from 0 to 512 [ 158.882514][ T8424] EXT4-fs error (device loop1): __ext4_iget:5091: inode #11: block 1: comm syz.1.1187: invalid block [ 158.924238][ T8424] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1187: couldn't read orphan inode 11 (err -117) [ 158.961291][ T8424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.047956][ T8426] loop0: detected capacity change from 0 to 4096 [ 159.056097][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.228582][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.252433][ T8437] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1193'. [ 159.408392][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.449111][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 159.475614][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 159.495975][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.513545][ T8] usb 3-1: Product: syz [ 159.531634][ T8] usb 3-1: Manufacturer: syz [ 159.536307][ T8] usb 3-1: SerialNumber: syz [ 159.556149][ T8446] netlink: 'syz.0.1198': attribute type 3 has an invalid length. [ 159.567476][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 159.580576][ T8446] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 159.593893][ T8446] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1198'. [ 160.034827][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 160.053145][ T8] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 160.088465][ T8447] loop1: detected capacity change from 0 to 32768 [ 160.127955][ T8447] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.294526][ T8447] XFS (loop1): Ending clean mount [ 160.399944][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.693473][ T8480] loop0: detected capacity change from 0 to 256 [ 160.793557][ T8480] FAT-fs (loop0): Directory bread(block 64) failed [ 160.812749][ T8485] netlink: 'syz.3.1213': attribute type 11 has an invalid length. [ 160.817722][ T8480] FAT-fs (loop0): Directory bread(block 65) failed [ 160.850755][ T8480] FAT-fs (loop0): Directory bread(block 66) failed [ 160.857366][ T8480] FAT-fs (loop0): Directory bread(block 67) failed [ 160.867570][ T8485] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1213'. [ 160.890938][ T8480] FAT-fs (loop0): Directory bread(block 68) failed [ 160.897579][ T8480] FAT-fs (loop0): Directory bread(block 69) failed [ 160.919190][ T8480] FAT-fs (loop0): Directory bread(block 70) failed [ 160.934461][ T8480] FAT-fs (loop0): Directory bread(block 71) failed [ 160.949325][ T8480] FAT-fs (loop0): Directory bread(block 72) failed [ 160.955912][ T8480] FAT-fs (loop0): Directory bread(block 73) failed [ 161.084270][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 161.084285][ T27] audit: type=1800 audit(1789665059.295:57): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1211" name="bus" dev="loop0" ino=1048602 res=0 errno=0 [ 161.586271][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1226'. [ 161.617935][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1226'. [ 161.645630][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1226'. [ 161.651506][ T8516] loop2: detected capacity change from 0 to 512 [ 161.668574][ T8518] loop3: detected capacity change from 0 to 512 [ 161.679319][ T8516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.696557][ T8516] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.723953][ T8518] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 161.737843][ T8516] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 161.772324][ T8516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 161.793085][ T8518] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 161.805915][ T8516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.808302][ T8518] EXT4-fs (loop3): group descriptors corrupted! [ 161.908655][ T8516] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.1227: bad symlink. [ 162.002941][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.200577][ T8506] loop1: detected capacity change from 0 to 32768 [ 162.250010][ T8506] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.323871][ T8506] XFS (loop1): Ending clean mount [ 162.522619][ T8506] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 162.543196][ T8547] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.1237'. [ 162.655837][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.581528][ T8587] loop1: detected capacity change from 0 to 64 [ 163.832066][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 164.163116][ T8613] Unsupported ieee802154 address type: 0 [ 164.253645][ T8619] loop2: detected capacity change from 0 to 64 [ 164.418321][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.623972][ T23] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 164.638485][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.643676][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.691534][ T23] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 011 [ 164.840010][ T9] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 164.872873][ T9] usb 2-1: config 0 has no interface number 0 [ 164.887509][ T9] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 164.907950][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.921779][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 164.962107][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.978240][ T9] usb 2-1: Product: syz [ 164.982502][ T9] usb 2-1: Manufacturer: syz [ 164.987248][ T9] usb 2-1: SerialNumber: syz [ 165.010614][ T9] usb 2-1: config 0 descriptor?? [ 165.016507][ T8623] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.037622][ T9] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 165.068991][ T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 165.123320][ T23] (null): failure reading functionality [ 165.153687][ T23] i2c i2c-1: failure reading functionality [ 165.193665][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 165.226874][ T23] usb 4-1: USB disconnect, device number 11 [ 165.331458][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 165.534981][ T8] usb 2-1: USB disconnect, device number 5 [ 165.559830][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 165.589060][ T8] cyberjack 2-1:0.69: device disconnected [ 166.362792][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 166.411905][ T8678] loop0: detected capacity change from 0 to 512 [ 166.469364][ T8678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.476032][ T8678] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.581487][ T8678] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 166.628585][ T8678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 166.725266][ T8678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 166.770727][ T8678] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1298: bad symlink. [ 166.938461][ T8698] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1310'. [ 166.959386][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 166.981873][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.123691][ T8700] loop2: detected capacity change from 0 to 64 [ 167.566052][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 168.337614][ T8747] loop3: detected capacity change from 0 to 512 [ 168.636403][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 168.669896][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1339'. [ 169.345734][ T8755] loop2: detected capacity change from 0 to 32768 [ 169.436343][ T8755] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.588866][ T8755] XFS (loop2): Ending clean mount [ 169.716936][ T8755] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 169.948703][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.316052][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1363'. [ 170.604870][ T8825] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1368'. [ 170.627611][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'. [ 170.660561][ T8819] loop3: detected capacity change from 0 to 4096 [ 170.683535][ T8819] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 170.725089][ T8819] ntfs3: loop3: ino=19, mi_enum_attr [ 170.748390][ T8819] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 170.787903][ T8819] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 170.825907][ T8829] loop2: detected capacity change from 0 to 16 [ 170.869595][ T8829] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 170.887473][ T8819] ntfs3: loop3: failed to convert "c46c" to cp869 [ 170.919398][ T8819] ntfs3: loop3: ino=20, mi_enum_attr [ 171.397519][ T27] audit: type=1326 audit(1789665069.605:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.488220][ T27] audit: type=1326 audit(1789665069.605:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.599216][ T27] audit: type=1326 audit(1789665069.605:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.656424][ T27] audit: type=1326 audit(1789665069.605:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.725460][ T27] audit: type=1326 audit(1789665069.605:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.805173][ T27] audit: type=1326 audit(1789665069.605:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.870710][ T8865] loop2: detected capacity change from 0 to 16 [ 171.882695][ T8860] loop1: detected capacity change from 0 to 256 [ 171.889969][ T8865] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 171.897141][ T27] audit: type=1326 audit(1789665069.605:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 171.942872][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop2 [ 171.998321][ T27] audit: type=1326 audit(1789665069.605:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 172.087435][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop2 [ 172.107162][ T27] audit: type=1326 audit(1789665069.605:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.1.1376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f393839e159 code=0x7ffc0000 [ 172.173850][ T8872] loop2: detected capacity change from 0 to 64 [ 172.330619][ T8878] loop1: detected capacity change from 0 to 64 [ 172.788527][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 172.965733][ T8903] loop0: detected capacity change from 0 to 8 [ 173.076566][ T8903] SQUASHFS error: Unable to read inode 0xa7 [ 173.307560][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'. [ 173.486890][ T8923] devpts: called with bogus options [ 173.598367][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.637185][ T8931] Unsupported ieee802154 address type: 0 [ 173.802993][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.830571][ T5816] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 173.858612][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.877063][ T5816] usb 3-1: Product: syz [ 173.882628][ T5816] usb 3-1: Manufacturer: syz [ 173.887617][ T5816] usb 3-1: SerialNumber: syz [ 174.107216][ T5816] snd-usb-6fire 3-1:1.0: unknown device firmware state received from device: [ 174.137240][ T5816] eb aa 55 00 00 00 00 00 [ 174.153882][ T5816] snd-usb-6fire: probe of 3-1:1.0 failed with error -5 [ 174.196378][ T8955] xt_ipcomp: unknown flags 12 [ 174.316885][ T2178] usb 3-1: USB disconnect, device number 10 [ 174.538476][ T8967] vivid-007: ================= START STATUS ================= [ 174.565106][ T8967] vivid-007: Generate PTS: true [ 174.578356][ T8967] vivid-007: Generate SCR: true [ 174.583387][ T8967] tpg source WxH: 640x360 (Y'CbCr) [ 174.599684][ T8967] tpg field: 1 [ 174.603169][ T8967] tpg crop: 640x360@0x0 [ 174.607362][ T8967] tpg compose: 640x360@0x0 [ 174.616942][ T8967] tpg colorspace: 8 [ 174.621866][ T8967] tpg transfer function: 0/0 [ 174.629265][ T8967] tpg Y'CbCr encoding: 0/0 [ 174.646597][ T8967] tpg quantization: 0/0 [ 174.651828][ T8967] tpg RGB range: 0/2 [ 174.655837][ T8967] vivid-007: ================== END STATUS ================== [ 174.837898][ T8979] loop0: detected capacity change from 0 to 164 [ 174.971891][ T8983] loop1: detected capacity change from 0 to 256 [ 175.319259][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 175.355943][ T8996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1446'. [ 175.371934][ T8997] loop1: detected capacity change from 0 to 2048 [ 175.446219][ T8997] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 175.519329][ T8997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.103017][ T9027] loop0: detected capacity change from 0 to 1024 [ 176.241066][ T9037] openvswitch: netlink: Actions may not be safe on all matching packets [ 176.267850][ T9027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.290352][ T9039] loop2: detected capacity change from 0 to 8 [ 176.401596][ T9027] EXT4-fs error (device loop0): ext4_empty_dir:3168: inode #11: block 623: comm syz.0.1460: Attempting to read directory block (623) that is past i_size (638464) [ 176.451821][ T9027] EXT4-fs (loop0): Remounting filesystem read-only [ 176.563916][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.610458][ T9049] program syz.2.1469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.104987][ T9063] ip6gre1: entered allmulticast mode [ 177.141258][ T3413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.182190][ T9047] loop3: detected capacity change from 0 to 32768 [ 177.255291][ T9047] jfs_rename did not expect dtDelete to return rc = -2 [ 177.270313][ T9047] ERROR: (device loop3): jfs_rename: [ 177.270313][ T9047] [ 177.292168][ T9047] ERROR: (device loop3): remounting filesystem as read-only [ 177.404423][ T9073] process 'syz.2.1479' launched './file0' with NULL argv: empty string added [ 177.857683][ T9092] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 177.888395][ T9092] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1486'. [ 177.897582][ T9092] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1486'. [ 178.048333][ T2178] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.254817][ T2178] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 178.286675][ T2178] usb 3-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.328600][ T2178] usb 3-1: config 1 interface 0 has no altsetting 0 [ 178.338357][ T2178] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40 [ 178.347454][ T2178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.374084][ T2178] usb 3-1: Product: syz [ 178.388459][ T2178] usb 3-1: Manufacturer: syz [ 178.396019][ T2178] usb 3-1: SerialNumber: syz [ 178.670529][ T2178] usbhid 3-1:1.0: can't add hid device: -71 [ 178.685471][ T2178] usbhid: probe of 3-1:1.0 failed with error -71 [ 178.695007][ T2178] usb 3-1: USB disconnect, device number 11 [ 179.403523][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 179.584863][ T9164] trusted_key: encrypted_key: keylen parameter is missing [ 180.135807][ T9185] autofs4:pid:9185:autofs_fill_super: called with bogus options [ 180.218235][ T5849] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 180.336275][ T9194] loop2: detected capacity change from 0 to 128 [ 180.373583][ T9194] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 180.388029][ T9195] loop1: detected capacity change from 0 to 1024 [ 180.392090][ T9194] FAT-fs (loop2): Filesystem has been set read-only [ 180.430786][ T5849] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.443432][ T5849] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.466971][ T9195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.490939][ T5849] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.511175][ T5849] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 180.534352][ T5849] usb 4-1: Product: syz [ 180.546144][ T9195] EXT4-fs error (device loop1): ext4_lookup:1860: comm syz.1.1536: inode #12: comm syz.1.1536: iget: illegal inode # [ 180.559563][ T5849] usb 4-1: Manufacturer: syz [ 180.572135][ T5849] hub 4-1:4.0: USB hub found [ 180.590428][ T9202] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 180.608387][ T9195] EXT4-fs (loop1): Remounting filesystem read-only [ 180.625846][ T9202] bond1 (unregistering): Released all slaves [ 180.687202][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.838312][ T5849] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 181.088463][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.178481][ T2178] usb 4-1: USB disconnect, device number 12 [ 181.419859][ T789] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.618592][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 181.623991][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 181.660936][ T789] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 181.696312][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.707239][ T789] usb 1-1: Product: syz [ 181.724535][ T789] usb 1-1: Manufacturer: syz [ 181.737687][ T789] usb 1-1: SerialNumber: syz [ 181.855055][ T9247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.969105][ T789] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 182.014825][ T789] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 182.059431][ T789] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 182.073089][ T9253] loop2: detected capacity change from 0 to 1024 [ 182.131202][ T9253] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.162740][ T9253] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #13: comm syz.2.1564: iget: bad i_size value: -360287970189638630 [ 182.254972][ T9253] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1564: couldn't read orphan inode 13 (err -117) [ 182.293034][ T9] usb 1-1: USB disconnect, device number 8 [ 182.328914][ T9253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.337915][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 182.398988][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 182.429260][ T9] visor 1-1:1.0: device disconnected [ 182.513051][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.534774][ T9314] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 183.541751][ T9312] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 183.849188][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 183.884943][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 184.085401][ T9336] netlink: 'syz.3.1604': attribute type 46 has an invalid length. [ 184.108373][ T9336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1604'. [ 184.124362][ T9330] loop2: detected capacity change from 0 to 8192 [ 184.195225][ T9330] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.706336][ T9358] loop3: detected capacity change from 0 to 512 [ 184.743668][ T9358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.761487][ T9358] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.875515][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.016236][ T9372] loop2: detected capacity change from 0 to 1024 [ 185.048861][ T9372] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 185.102895][ T9372] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 185.170624][ T9372] EXT4-fs (loop2): journal inode is deleted [ 185.188272][ T27] audit: type=1400 audit(1789665083.395:67): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9379 comm="syz.3.1623" [ 185.568461][ T789] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 185.578248][ T2178] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 185.800282][ T2178] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 185.811882][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.826105][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.834161][ T2178] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 185.846270][ T2178] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.854269][ T789] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 185.864227][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.872916][ T789] usb 2-1: SerialNumber: syz [ 185.880915][ T2178] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 185.898289][ T2178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.906342][ T2178] usb 3-1: Product: syz [ 185.911285][ T2178] usb 3-1: Manufacturer: syz [ 185.915932][ T2178] usb 3-1: SerialNumber: syz [ 185.923535][ T789] usb 2-1: config 0 descriptor?? [ 185.935187][ T2178] usb 3-1: config 0 descriptor?? [ 185.943983][ T2178] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 185.952316][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 185.962382][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 185.998328][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 186.026504][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 186.038824][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 186.056083][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 186.066232][ T2178] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 186.081156][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 186.108318][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 186.124987][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 186.154086][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 186.176420][ T2178] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 186.188097][ T2178] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 186.205657][ T2178] usb 3-1: USB disconnect, device number 12 [ 186.220925][ T2178] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 186.239999][ T2178] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 186.250964][ T2178] keyspan 3-1:0.0: device disconnected [ 186.391767][ T8] usb 2-1: USB disconnect, device number 6 [ 186.678368][ T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.741602][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.871945][ T789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.887538][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.899066][ T789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.910737][ T789] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 186.948184][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.953709][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 186.956218][ T789] usb 4-1: Product: syz [ 186.988487][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.998221][ T789] usb 4-1: Manufacturer: syz [ 187.002879][ T789] usb 4-1: SerialNumber: syz [ 187.014512][ T9] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 187.035958][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.056241][ T9] usb 1-1: Product: syz [ 187.072262][ T9] usb 1-1: Manufacturer: syz [ 187.086628][ T9] usb 1-1: SerialNumber: syz [ 187.250447][ T9441] vcan1: entered allmulticast mode [ 187.255054][ T789] snd-usb-hiface: probe of 4-1:1.0 failed with error -22 [ 187.341170][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 187.350166][ T9] usb 1-1: unit 0 not found! [ 187.378700][ T9] usb 1-1: USB disconnect, device number 9 [ 187.431310][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.448255][ T5849] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 187.533278][ T789] usb 4-1: USB disconnect, device number 13 [ 187.658613][ T5849] usb 2-1: config 230 has an invalid interface number: 217 but max is 0 [ 187.672114][ T5849] usb 2-1: config 230 has an invalid interface number: 236 but max is 0 [ 187.681303][ T5849] usb 2-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 187.698264][ T5849] usb 2-1: config 230 has no interface number 0 [ 187.704898][ T5849] usb 2-1: config 230 has no interface number 1 [ 187.716128][ T5849] usb 2-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.738054][ T5849] usb 2-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 187.753154][ T5849] usb 2-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.776802][ T5849] usb 2-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 187.791683][ T5849] usb 2-1: config 230 interface 217 has no altsetting 0 [ 187.799032][ T5849] usb 2-1: config 230 interface 236 has no altsetting 0 [ 187.811113][ T5849] usb 2-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 187.820516][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.829054][ T5849] usb 2-1: Product: syz [ 187.833491][ T5849] usb 2-1: Manufacturer: syz [ 187.839154][ T5849] usb 2-1: SerialNumber: syz [ 188.097416][ T5849] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 188.218999][ T5849] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 188.227181][ T5849] dib0700: firmware download failed at 7 with -8 [ 188.247641][ T9467] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1664'. [ 188.258736][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 188.288481][ T5849] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 188.301095][ T5849] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 188.311510][ T5849] dib0700: firmware download failed at 7 with -8 [ 188.334005][ T5849] usb 2-1: USB disconnect, device number 7 [ 188.472203][ T9] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 188.491230][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.511594][ T9] usb 3-1: Product: syz [ 188.521151][ T9] usb 3-1: Manufacturer: syz [ 188.525812][ T9] usb 3-1: SerialNumber: syz [ 188.541823][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 188.576667][ T9] usb 3-1: config 0 descriptor?? [ 188.601127][ T9] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached [ 188.612275][ T9477] SET target dimension over the limit! [ 188.849917][ T9] usb 3-1: USB disconnect, device number 13 [ 188.869769][ T9] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected [ 188.922920][ T9485] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 189.036018][ T9491] loop0: detected capacity change from 0 to 1024 [ 189.107426][ T9491] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 189.131458][ T9491] syz.0.1677: attempt to access beyond end of device [ 189.131458][ T9491] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 189.154250][ T9491] Buffer I/O error on dev loop0, logical block 458752, async page read [ 189.168009][ T9491] syz.0.1677: attempt to access beyond end of device [ 189.168009][ T9491] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 189.189891][ T9491] Buffer I/O error on dev loop0, logical block 458752, async page read [ 189.489470][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.568599][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 189.761667][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 189.777447][ T9] usb 4-1: config index 0 descriptor too short (expected 161, got 153) [ 189.796760][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.822786][ T9522] dlm: no locking on control device [ 189.830483][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.875580][ T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 189.912219][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.968792][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 190.168626][ T9533] overlay: Unknown parameter '\' [ 190.386074][ T9] gspca_spca501: reg write: error -71 [ 190.396676][ T9] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 190.425982][ T9] spca501: probe of 4-1:1.0 failed with error -22 [ 190.455660][ T9] usb 4-1: USB disconnect, device number 14 [ 190.612909][ T9551] loop2: detected capacity change from 0 to 64 [ 190.637038][ T9549] loop1: detected capacity change from 0 to 2048 [ 190.714228][ T9553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.781939][ T9549] NILFS (loop1): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 190.842227][ T9549] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=13) [ 190.872577][ T9549] Remounting filesystem read-only [ 190.883043][ T9549] NILFS (loop1): error -5 truncating bmap (ino=13) [ 190.953512][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 190.968500][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 190.981103][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 190.993920][ T5775] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 191.002847][ T5775] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 191.028449][ T5775] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 191.286584][ T9570] bond1: entered promiscuous mode [ 191.292197][ T9570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.064453][ T9605] loop0: detected capacity change from 0 to 64 [ 192.343773][ T9591] loop3: detected capacity change from 0 to 32768 [ 192.376841][ T9591] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 192.381585][ T9603] loop1: detected capacity change from 0 to 8192 [ 192.442482][ T9603] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 192.516743][ T5768] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 192.790266][ T9620] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1739'. [ 194.333077][ T9686] openvswitch: netlink: EtherType 0 is less than min 600 [ 194.618991][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.626476][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.923231][ T9714] loop0: detected capacity change from 0 to 256 [ 194.939441][ T9714] exfat: Deprecated parameter 'utf8' [ 194.944947][ T9714] exfat: Deprecated parameter 'namecase' [ 194.968706][ T9714] exfat: Deprecated parameter 'namecase' [ 195.006073][ T9714] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 195.118548][ T9720] loop2: detected capacity change from 0 to 8 [ 195.685220][ T9741] sock: sock_timestamping_bind_phc: sock not bind to device [ 195.865044][ T9750] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.139548][ T9761] netlink: 'syz.3.1809': attribute type 21 has an invalid length. [ 196.172110][ T9761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1809'. [ 196.276911][ T9766] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 196.523889][ T9778] netlink: 'syz.3.1817': attribute type 2 has an invalid length. [ 196.563092][ T9778] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 196.588875][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 196.639073][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1819'. [ 196.657542][ T9784] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1819'. [ 196.698319][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1819'. [ 197.025113][ T9803] loop0: detected capacity change from 0 to 16 [ 197.097429][ T9803] erofs: (device loop0): mounted with root inode @ nid 36. [ 197.169445][ T9803] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 197.217196][ T9803] syz.0.1829: attempt to access beyond end of device [ 197.217196][ T9803] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 197.267840][ T9803] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 197.292043][ T9803] syz.0.1829: attempt to access beyond end of device [ 197.292043][ T9803] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 197.331910][ T9803] syz.0.1829: attempt to access beyond end of device [ 197.331910][ T9803] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 197.374648][ T27] audit: type=1800 audit(1789665095.585:68): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1829" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 197.517459][ T9803] syz.0.1829 (9803) used greatest stack depth: 20008 bytes left [ 197.683701][ T9823] netlink: 'syz.3.1840': attribute type 32 has an invalid length. [ 197.693011][ T9825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1841'. [ 197.750266][ T9821] loop2: detected capacity change from 0 to 4096 [ 197.808189][ T9821] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 197.869895][ T9821] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 197.922391][ T9821] ntfs: volume version 3.1. [ 197.933597][ T9821] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 197.966946][ T9821] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 197.983629][ T9833] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 197.995300][ T9821] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 198.023027][ T9833] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1845'. [ 198.048529][ T9833] NCSI netlink: No device for ifindex 0 [ 198.512030][ T9851] loop0: detected capacity change from 0 to 256 [ 198.632880][ T9854] loop1: detected capacity change from 0 to 512 [ 198.652372][ T9855] loop2: detected capacity change from 0 to 164 [ 198.714930][ T9855] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 198.774185][ T9854] EXT4-fs (loop1): mounted filesystem 007f0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.808463][ T9854] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.899062][ T9854] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #15: comm syz.1.1855: corrupted xattr block 33: e_value out of bounds [ 198.952156][ T9854] EXT4-fs (loop1): Remounting filesystem read-only [ 199.112600][ T5775] EXT4-fs (loop1): unmounting filesystem 007f0000-0000-0000-0000-000000000000. [ 199.179526][ T9848] loop3: detected capacity change from 0 to 32768 [ 199.227788][ T9848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1853 (9848) [ 199.308842][ T9848] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.326972][ T9873] loop1: detected capacity change from 0 to 512 [ 199.343333][ T9848] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 199.353942][ T9873] EXT4-fs: Ignoring removed oldalloc option [ 199.381575][ T9848] BTRFS info (device loop3): setting nodatasum [ 199.387810][ T9848] BTRFS info (device loop3): force zlib compression, level 3 [ 199.418278][ T9848] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 199.428416][ T9873] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 199.444304][ T9873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 199.470057][ T9848] BTRFS info (device loop3): use lzo compression, level 0 [ 199.477249][ T9848] BTRFS info (device loop3): turning on flush-on-commit [ 199.488477][ T9873] EXT4-fs (loop1): orphan cleanup on readonly fs [ 199.509545][ T9848] BTRFS info (device loop3): enabling auto defrag [ 199.516424][ T9848] BTRFS info (device loop3): max_inline at 4096 [ 199.518239][ T9873] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1862: bad orphan inode 267 [ 199.522803][ T9848] BTRFS info (device loop3): using free space tree [ 199.594212][ T9873] EXT4-fs (loop1): Remounting filesystem read-only [ 199.614883][ T9873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 199.823659][ T9873] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1862: dx entry: limit 0 != root limit 125 [ 199.862151][ T9848] BTRFS info (device loop3): enabling ssd optimizations [ 199.880337][ T9873] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1862: Corrupt directory, running e2fsck is recommended [ 199.986172][ T9905] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 199.987457][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.052574][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 200.668353][ T9929] openvswitch: netlink: Actions may not be safe on all matching packets [ 200.716249][ T9930] loop3: detected capacity change from 0 to 512 [ 200.739769][ T9930] EXT4-fs: Ignoring removed oldalloc option [ 200.766599][ T9930] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.797163][ T9930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 200.827725][ T9930] EXT4-fs (loop3): orphan cleanup on readonly fs [ 200.841364][ T9930] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1883: bad orphan inode 267 [ 200.910062][ T9930] EXT4-fs (loop3): Remounting filesystem read-only [ 200.929532][ T9930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 200.958675][ T9930] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1883: dx entry: limit 0 != root limit 125 [ 200.970740][ T9930] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1883: Corrupt directory, running e2fsck is recommended [ 201.016188][ T9939] netlink: 'syz.2.1887': attribute type 10 has an invalid length. [ 201.054095][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 201.105678][ T9939] hsr0: entered promiscuous mode [ 201.145900][ T9939] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.180709][ T9939] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 201.195734][ T9939] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 201.213793][ T9939] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 201.788249][ T5783] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.811168][ T9944] loop3: detected capacity change from 0 to 32768 [ 201.823426][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 201.831198][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 201.837329][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.837351][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 201.926277][ T9944] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.970562][ T5783] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 202.009769][ T5783] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 202.068230][ T5783] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 202.082186][ T9944] XFS (loop3): Ending clean mount [ 202.094411][ T5783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.105710][ T5783] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.115820][ T5783] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 202.131835][ T9951] loop0: detected capacity change from 0 to 32768 [ 202.138231][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.177434][ T9951] [ 202.177434][ T9951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.177434][ T9951] [ 202.183552][ T9955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.218880][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.234308][ T9955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.258373][ T9955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.270373][ T5783] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 202.288716][ T9951] [ 202.288716][ T9951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.288716][ T9951] [ 202.341941][ T9951] [ 202.341941][ T9951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.341941][ T9951] [ 202.429481][ T9951] [ 202.429481][ T9951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.429481][ T9951] [ 202.479190][ T9951] [ 202.479190][ T9951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.479190][ T9951] [ 202.568330][ T112] [ 202.568330][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.568330][ T112] [ 202.633824][ T5776] [ 202.633824][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.633824][ T5776] [ 202.657110][ T5776] [ 202.657110][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.657110][ T5776] [ 202.740329][ T5783] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 202.787824][ T5783] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 202.839067][ T5783] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 202.897420][ T5783] usb 3-1: USB disconnect, device number 14 [ 202.903505][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 202.954068][ T5783] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 202.999057][ T5783] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 203.031353][ T5783] mos7720 3-1:1.0: device disconnected [ 203.552899][ T9980] loop3: detected capacity change from 0 to 32768 [ 203.603904][T10001] autofs4:pid:10001:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 203.659023][T10001] autofs4:pid:10001:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 203.690496][ T9980] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 203.821191][ T9980] XFS (loop3): Ending clean mount [ 203.960367][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 204.099161][T10026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.288848][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1922'. [ 204.305030][T10033] loop2: detected capacity change from 0 to 16 [ 204.337686][T10033] erofs: (device loop2): mounted with root inode @ nid 36. [ 204.810618][T10051] binfmt_misc: register: failed to install interpreter file ./file0 [ 204.836508][T10053] UBIFS error (pid: 10053): cannot open "ubi0_0", error -19 [ 204.873870][T10055] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1934'. [ 205.116855][T10064] loop1: detected capacity change from 0 to 64 [ 205.336772][T10071] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 205.368416][T10071] netlink: 'syz.1.1942': attribute type 2 has an invalid length. [ 205.488363][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.570222][T10057] loop2: detected capacity change from 0 to 32768 [ 205.622599][T10057] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.702631][T10088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1947'. [ 205.823970][ T27] audit: type=1326 audit(1789665104.035:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 205.848008][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.917846][ T27] audit: type=1326 audit(1789665104.065:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 205.993070][ T27] audit: type=1326 audit(1789665104.065:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.047281][ T27] audit: type=1326 audit(1789665104.065:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.085531][T10057] XFS (loop2): Ending clean mount [ 206.123244][ T27] audit: type=1326 audit(1789665104.075:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.130159][T10057] XFS (loop2): Quotacheck needed: Please wait. [ 206.227494][ T27] audit: type=1326 audit(1789665104.075:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.273512][ T27] audit: type=1326 audit(1789665104.075:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.299113][ T27] audit: type=1326 audit(1789665104.075:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.327861][T10057] XFS (loop2): Quotacheck: Done. [ 206.401551][ T27] audit: type=1326 audit(1789665104.075:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.3.1949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4a5f9e159 code=0x7ffc0000 [ 206.427001][T10110] netlink: 'syz.3.1957': attribute type 21 has an invalid length. [ 206.442107][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 206.551608][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.830136][T10121] sctp: [Deprecated]: syz.3.1963 (pid 10121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.830136][T10121] Use struct sctp_sack_info instead [ 207.107337][T10131] program syz.2.1968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.126190][T10131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 207.388308][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 207.446591][T10145] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 207.590429][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 207.608257][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 207.639123][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 207.681233][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.699802][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.711505][ T8] ------------[ cut here ]------------ [ 207.717210][T10156] ip6erspan0: entered allmulticast mode [ 207.717364][ T8] WARNING: CPU: 0 PID: 8 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 207.727552][ T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 207.733848][ T8] Modules linked in: [ 207.746835][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 207.754180][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.764545][ T8] Workqueue: events nf_tables_trans_destroy_work [ 207.765041][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.770998][ T8] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 207.771037][ T8] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 45 aa f8 e9 d3 f9 ff ff e8 1f 45 aa f8 e9 6c fe ff ff e8 15 45 aa f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 207.771053][ T8] RSP: 0018:ffffc900000d79d8 EFLAGS: 00010293 [ 207.771072][ T8] RAX: ffffffff88dd463b RBX: ffff88802ffefcf0 RCX: ffff88801b275a00 [ 207.771087][ T8] RDX: 0000000000000000 RSI: ffff88802ffefc00 RDI: ffff88802fbf4e28 [ 207.771099][ T8] RBP: ffffc900000d7bb0 R08: ffff88801b275a00 R09: 000000000000000f [ 207.771112][ T8] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88802ffefcc0 [ 207.771124][ T8] R13: dffffc0000000000 R14: ffff88802ffefd10 R15: dffffc0000000000 [ 207.771139][ T8] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 207.771162][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.771176][ T8] CR2: 000000110c2f542a CR3: 0000000075c09000 CR4: 00000000003506f0 [ 207.829749][T10133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.836051][ T8] Call Trace: [ 207.848450][T10133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.851819][ T8] [ 207.877840][T10133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.882606][ T8] ? lockdep_hardirqs_on+0x98/0x150 [ 207.890285][ T23] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 207.893209][ T8] nft_set_destroy+0x489/0xa20 [ 207.920961][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 207.926030][ T8] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 207.932121][ T8] ? nft_object_dump+0x1e0/0x1e0 [ 207.937098][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.942411][ T8] ? process_scheduled_works+0x975/0x1600 [ 207.948217][ T8] ? process_scheduled_works+0x975/0x1600 [ 207.953980][ T8] process_scheduled_works+0xa60/0x1600 [ 207.959633][ T8] ? worker_attach_to_pool+0x370/0x370 [ 207.965140][ T8] ? assign_work+0x3cc/0x5d0 [ 207.969841][ T8] worker_thread+0xa5e/0xfe0 [ 207.974492][ T8] kthread+0x2fa/0x390 [ 207.978664][ T8] ? pr_cont_work+0x550/0x550 [ 207.983375][ T8] ? kthread_blkcg+0xd0/0xd0 [ 207.988000][ T8] ret_from_fork+0x48/0x80 [ 207.992537][ T8] ? kthread_blkcg+0xd0/0xd0 [ 207.997157][ T8] ret_from_fork_asm+0x11/0x20 [ 208.002015][ T8] [ 208.005051][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.012352][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 208.019573][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.029647][ T8] Workqueue: events nf_tables_trans_destroy_work [ 208.036010][ T8] Call Trace: [ 208.039306][ T8] [ 208.042256][ T8] dump_stack_lvl+0x18c/0x250 [ 208.046964][ T8] ? show_regs_print_info+0x20/0x20 [ 208.052201][ T8] ? load_image+0x420/0x420 [ 208.056760][ T8] panic+0x2ca/0x720 [ 208.060703][ T8] ? bpf_jit_dump+0xd0/0xd0 [ 208.065230][ T8] ? ret_from_fork_asm+0x11/0x20 [ 208.070193][ T8] __warn+0x2e0/0x470 [ 208.074186][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 208.079394][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 208.084604][ T8] report_bug+0x2be/0x4f0 [ 208.088955][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 208.094178][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 208.099385][ T8] ? nft_pipapo_destroy+0x84d/0x8b0 [ 208.104691][ T8] handle_bug+0xcf/0x120 [ 208.108952][ T8] exc_invalid_op+0x1a/0x50 [ 208.113472][ T8] asm_exc_invalid_op+0x1a/0x20 [ 208.118335][ T8] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 208.124143][ T8] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 45 aa f8 e9 d3 f9 ff ff e8 1f 45 aa f8 e9 6c fe ff ff e8 15 45 aa f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 208.143823][ T8] RSP: 0018:ffffc900000d79d8 EFLAGS: 00010293 [ 208.149901][ T8] RAX: ffffffff88dd463b RBX: ffff88802ffefcf0 RCX: ffff88801b275a00 [ 208.157955][ T8] RDX: 0000000000000000 RSI: ffff88802ffefc00 RDI: ffff88802fbf4e28 [ 208.165923][ T8] RBP: ffffc900000d7bb0 R08: ffff88801b275a00 R09: 000000000000000f [ 208.173884][ T8] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88802ffefcc0 [ 208.181937][ T8] R13: dffffc0000000000 R14: ffff88802ffefd10 R15: dffffc0000000000 [ 208.189923][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 208.195140][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 208.200337][ T8] ? lockdep_hardirqs_on+0x98/0x150 [ 208.205538][ T8] nft_set_destroy+0x489/0xa20 [ 208.210301][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 208.215334][ T8] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 208.221321][ T8] ? nft_object_dump+0x1e0/0x1e0 [ 208.226261][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.231463][ T8] ? process_scheduled_works+0x975/0x1600 [ 208.237184][ T8] ? process_scheduled_works+0x975/0x1600 [ 208.242929][ T8] process_scheduled_works+0xa60/0x1600 [ 208.248495][ T8] ? worker_attach_to_pool+0x370/0x370 [ 208.253954][ T8] ? assign_work+0x3cc/0x5d0 [ 208.258547][ T8] worker_thread+0xa5e/0xfe0 [ 208.263182][ T8] kthread+0x2fa/0x390 [ 208.267245][ T8] ? pr_cont_work+0x550/0x550 [ 208.271925][ T8] ? kthread_blkcg+0xd0/0xd0 [ 208.276516][ T8] ret_from_fork+0x48/0x80 [ 208.280933][ T8] ? kthread_blkcg+0xd0/0xd0 [ 208.285524][ T8] ret_from_fork_asm+0x11/0x20 [ 208.290301][ T8] [ 208.293560][ T8] Kernel Offset: disabled [ 208.297966][ T8] Rebooting in 86400 seconds..