last executing test programs: 2.829935767s ago: executing program 1 (id=9626): r0 = shmget(0x1, 0x3000, 0xd0e939a767219741, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 2.612004761s ago: executing program 1 (id=9631): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x80004000001b33, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761}) 2.359985967s ago: executing program 1 (id=9633): r0 = socket$caif_stream(0x25, 0x1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000075c0), r0) 2.102260543s ago: executing program 1 (id=9640): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a24010000000201021324060000060000"], 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @string={0x4, 0x3, '<\x00'}}, 0x0, 0x0, 0x0}, 0x0) 1.700323252s ago: executing program 3 (id=9648): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 1.32001501s ago: executing program 0 (id=9654): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x2a, [[0x8003, 0xffffffff, 0x0, 0xfffffd6e, 0x0, 0x5, 0x0, 0xfffffffd], [0x0, 0x2, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0x10], [0x91, 0x200, 0x4fffffff, 0x4, 0xa0, 0x0, 0x0, 0x9]], '\x00', [{0x4, 0xfffffff9}, {}, {0xc}, {0x3, 0x8}, {}, {0x0, 0xfffffffc}, {0x2, 0x200000}, {0x80, 0x2}, {0x40000}, {0x7fffffff, 0xd}, {0x7, 0xffffffff}, {0x0, 0xfffffffe}], '\x00', 0x0, 0x0, 0x0, 0xc00}) 1.244528492s ago: executing program 2 (id=9655): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x0) ioctl$MEMUNLOCK(r0, 0x40084d06, 0x0) 1.226130663s ago: executing program 4 (id=9656): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @pix_mp={0x38305543, 0x5, 0x31363553, 0x6, 0x3, [{0x2, 0x4}, {0x7fffffff, 0x10000}, {0x5, 0x31a0}, {0x56, 0x5}, {0x5, 0x1}, {0x800000, 0x6}, {0x7b, 0xf}, {0x40, 0x80000001}], 0x8, 0x4, 0x2, 0x1, 0x1}}) 1.161632974s ago: executing program 0 (id=9657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x14, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x14}}, 0x0) 1.161069074s ago: executing program 3 (id=9658): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x301) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) 1.021789197s ago: executing program 2 (id=9659): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7ffbd, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 975.673418ms ago: executing program 4 (id=9660): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="c474", 0x2}], 0x1) 975.119018ms ago: executing program 3 (id=9661): creat(&(0x7f0000000000)='./file0\x00', 0x70) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x5, 0xad0, &(0x7f0000000340)="$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") 887.58858ms ago: executing program 0 (id=9662): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0) ioctl$TIOCCONS(r0, 0x541d) 795.684772ms ago: executing program 2 (id=9663): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x800, 0x6}) 753.858703ms ago: executing program 4 (id=9664): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 680.029945ms ago: executing program 0 (id=9665): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)={0x14, 0x14, 0x1, 0x70bd2d, 0x25dfdbfd, {0x11, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x80d4) 616.835206ms ago: executing program 2 (id=9666): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000033c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 555.866227ms ago: executing program 4 (id=9667): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 488.991039ms ago: executing program 3 (id=9668): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 407.969061ms ago: executing program 0 (id=9669): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 407.850781ms ago: executing program 2 (id=9670): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000280)={0xa, 0xa, 0x7, @mcast2, 0x2}, 0x18, 0x0}, 0x2400cb38) 299.668703ms ago: executing program 1 (id=9671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 299.502963ms ago: executing program 4 (id=9672): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r0, 0x440002) 251.946954ms ago: executing program 3 (id=9673): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xa, {0x401, 0x1, 0x7b, 0xf7fc}}) 160.952476ms ago: executing program 0 (id=9674): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 151.009407ms ago: executing program 2 (id=9675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 117.482977ms ago: executing program 4 (id=9676): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) read(r0, 0x0, 0x0) 76.139378ms ago: executing program 3 (id=9677): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bcee2301000000a48b6a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=9678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000, 0xc574450d1af3a7ac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040091}, 0x400c040) kernel console output (not intermixed with test programs): extends beyond EOD, truncated [ 951.850065][ T5793] usb 1-1: selecting invalid altsetting 0 [ 951.864866][ T5793] usb 1-1: Could not set interface, error -22 [ 951.871887][T21510] loop3: p84 size 65536 extends beyond EOD, truncated [ 951.913974][ T5793] usb 1-1: USB disconnect, device number 37 [ 951.953178][T21510] loop3: p86 size 65536 extends beyond EOD, truncated [ 952.007051][T21510] loop3: p88 size 65536 extends beyond EOD, truncated [ 952.033755][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.050068][T21510] loop3: p90 size 65536 extends beyond EOD, truncated [ 952.085944][T21510] loop3: p92 size 65536 extends beyond EOD, truncated [ 952.126699][T21510] loop3: p94 size 65536 extends beyond EOD, truncated [ 952.167419][T21510] loop3: p96 size 65536 extends beyond EOD, truncated [ 952.229206][T21510] loop3: p98 size 65536 extends beyond EOD, truncated [ 952.318977][T21510] loop3: p100 size 65536 extends beyond EOD, truncated [ 952.341105][T21510] loop3: p102 size 65536 extends beyond EOD, truncated [ 952.408626][T21510] loop3: p104 size 65536 extends beyond EOD, truncated [ 952.423358][T21567] set_capacity_and_notify: 3 callbacks suppressed [ 952.423377][T21567] loop4: detected capacity change from 0 to 16 [ 952.475103][T21510] loop3: p106 size 65536 extends beyond EOD, truncated [ 952.489670][T21569] loop1: detected capacity change from 0 to 16 [ 952.551207][T21510] loop3: p108 size 65536 extends beyond EOD, truncated [ 952.562942][T21567] erofs: (device loop4): mounted with root inode @ nid 36. [ 952.575742][T21569] erofs: (device loop1): mounted with root inode @ nid 36. [ 952.609753][T21510] loop3: p110 size 65536 extends beyond EOD, truncated [ 952.692997][T21510] loop3: p112 size 65536 extends beyond EOD, truncated [ 952.706370][T21573] loop0: detected capacity change from 0 to 16 [ 952.737441][T21510] loop3: p114 size 65536 extends beyond EOD, truncated [ 952.755336][T21574] loop2: detected capacity change from 0 to 128 [ 952.762329][T21573] erofs: (device loop0): mounted with root inode @ nid 36. [ 952.774001][T21510] loop3: p116 size 65536 extends beyond EOD, truncated [ 952.800010][T21510] loop3: p118 size 65536 extends beyond EOD, truncated [ 952.859199][T21510] loop3: p120 size 65536 extends beyond EOD, truncated [ 952.923244][T21510] loop3: p122 size 65536 extends beyond EOD, truncated [ 952.969956][T21510] loop3: p124 size 65536 extends beyond EOD, truncated [ 953.022839][T21578] loop1: detected capacity change from 0 to 16 [ 953.035330][T21510] loop3: p126 size 65536 extends beyond EOD, truncated [ 953.080842][T21510] loop3: p128 size 65536 extends beyond EOD, truncated [ 953.094944][T21578] erofs: (device loop1): mounted with root inode @ nid 36. [ 953.111895][T21510] loop3: p130 size 65536 extends beyond EOD, truncated [ 953.153090][T21510] loop3: p132 size 65536 extends beyond EOD, truncated [ 953.196273][T21510] loop3: p134 size 65536 extends beyond EOD, truncated [ 953.231833][T21582] loop0: detected capacity change from 0 to 2048 [ 953.258539][T21510] loop3: p136 size 65536 extends beyond EOD, truncated [ 953.277419][T21510] loop3: p138 size 65536 extends beyond EOD, truncated [ 953.317858][T21510] loop3: p140 size 65536 extends beyond EOD, truncated [ 953.363144][T21510] loop3: p142 size 65536 extends beyond EOD, truncated [ 953.379538][T21510] loop3: p144 size 65536 extends beyond EOD, truncated [ 953.401028][T21510] loop3: p146 size 65536 extends beyond EOD, truncated [ 953.415562][T21582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 953.476337][T21587] loop2: detected capacity change from 0 to 512 [ 953.494442][T21510] loop3: p148 size 65536 extends beyond EOD, truncated [ 953.546072][T21587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 953.558685][T21510] loop3: p150 size 65536 extends beyond EOD, truncated [ 953.629425][T21510] loop3: p152 size 65536 extends beyond EOD, truncated [ 953.655279][ T5008] EXT4-fs (loop0): unmounting filesystem. [ 953.701276][T21510] loop3: p154 size 65536 extends beyond EOD, truncated [ 953.734314][T21510] loop3: p156 size 65536 extends beyond EOD, truncated [ 953.772565][ T5015] EXT4-fs (loop2): unmounting filesystem. [ 953.773018][T21510] loop3: p158 size 65536 extends beyond EOD, truncated [ 953.862220][T21510] loop3: p160 size 65536 extends beyond EOD, truncated [ 953.893923][T21576] loop4: detected capacity change from 0 to 32768 [ 953.910401][T21592] loop0: detected capacity change from 0 to 1024 [ 953.923146][T21594] loop2: detected capacity change from 0 to 512 [ 953.929899][T21510] loop3: p162 size 65536 extends beyond EOD, truncated [ 953.950834][T21510] loop3: p164 size 65536 extends beyond EOD, truncated [ 953.964075][T21576] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 954.006927][T21510] loop3: p166 size 65536 extends beyond EOD, truncated [ 954.038744][T21510] loop3: p168 size 65536 extends beyond EOD, truncated [ 954.061095][T21592] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 954.071495][T21576] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 954.084544][T21510] loop3: p170 size 65536 extends beyond EOD, truncated [ 954.104999][T21594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 954.114099][T21576] BTRFS info (device loop4): using free space tree [ 954.137683][T21510] loop3: p172 size 65536 extends beyond EOD, truncated [ 954.197794][T21510] loop3: p174 size 65536 extends beyond EOD, truncated [ 954.207991][ T5008] EXT4-fs (loop0): unmounting filesystem. [ 954.217537][T21510] loop3: p176 size 65536 extends beyond EOD, truncated [ 954.235914][T21510] loop3: p178 size 65536 extends beyond EOD, truncated [ 954.247099][T21510] loop3: p180 size 65536 extends beyond EOD, truncated [ 954.269794][T21510] loop3: p182 size 65536 extends beyond EOD, truncated [ 954.288340][T21510] loop3: p184 size 65536 extends beyond EOD, truncated [ 954.309097][T21510] loop3: p186 size 65536 extends beyond EOD, truncated [ 954.347434][T21510] loop3: p188 size 65536 extends beyond EOD, truncated [ 954.357710][T21510] loop3: p190 size 65536 extends beyond EOD, truncated [ 954.366912][ T5015] EXT4-fs (loop2): unmounting filesystem. [ 954.379180][T21510] loop3: p192 size 65536 extends beyond EOD, truncated [ 954.442435][T21608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 954.473242][T21510] loop3: p194 size 65536 extends beyond EOD, truncated [ 954.484562][T21510] loop3: p196 size 65536 extends beyond EOD, truncated [ 954.500101][T21510] loop3: p198 size 65536 extends beyond EOD, truncated [ 954.538665][T21510] loop3: p200 size 65536 extends beyond EOD, truncated [ 954.562882][T21576] BTRFS info (device loop4): enabling ssd optimizations [ 954.614748][T21510] loop3: p202 size 65536 extends beyond EOD, truncated [ 954.641611][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 954.663022][T21510] loop3: p204 size 65536 extends beyond EOD, truncated [ 954.696750][T21510] loop3: p206 size 65536 extends beyond EOD, truncated [ 954.718770][T21622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 954.767087][T21510] loop3: p208 size 65536 extends beyond EOD, truncated [ 954.790289][ T5007] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 954.810974][T21510] loop3: p210 size 65536 extends beyond EOD, truncated [ 954.883593][T21510] loop3: p212 size 65536 extends beyond EOD, truncated [ 954.915641][T21510] loop3: p214 size 65536 extends beyond EOD, truncated [ 954.950244][T21510] loop3: p216 size 65536 extends beyond EOD, truncated [ 955.022245][T21510] loop3: p218 size 65536 extends beyond EOD, truncated [ 955.063634][T21510] loop3: p220 size 65536 extends beyond EOD, truncated [ 955.120844][T21510] loop3: p222 size 65536 extends beyond EOD, truncated [ 955.173084][T21510] loop3: p224 size 65536 extends beyond EOD, truncated [ 955.205541][T21510] loop3: p226 size 65536 extends beyond EOD, truncated [ 955.248105][T21510] loop3: p228 size 65536 extends beyond EOD, truncated [ 955.301451][T21510] loop3: p230 size 65536 extends beyond EOD, truncated [ 955.340195][T21628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 955.348619][T21510] loop3: p232 size 65536 extends beyond EOD, truncated [ 955.359048][T21510] loop3: p234 size 65536 extends beyond EOD, truncated [ 955.369473][T21510] loop3: p236 size 65536 extends beyond EOD, truncated [ 955.396501][T21510] loop3: p238 size 65536 extends beyond EOD, truncated [ 955.423087][T21628] ext4 filesystem being mounted at /1543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.439617][T21510] loop3: p240 size 65536 extends beyond EOD, truncated [ 955.504214][T21510] loop3: p242 size 65536 extends beyond EOD, truncated [ 955.538006][T21510] loop3: p244 size 65536 extends beyond EOD, truncated [ 955.549154][ T5015] EXT4-fs (loop2): unmounting filesystem. [ 955.613206][T21510] loop3: p246 size 65536 extends beyond EOD, truncated [ 955.647274][T21510] loop3: p248 size 65536 extends beyond EOD, truncated [ 955.676548][T21510] loop3: p250 size 65536 extends beyond EOD, truncated [ 955.689882][T21510] loop3: p252 size 65536 extends beyond EOD, truncated [ 955.699244][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 955.744342][T21510] loop3: p254 size 65536 extends beyond EOD, truncated [ 955.797032][T21619] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.8283 (21619) [ 955.908264][T21619] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 955.960236][T21619] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 956.000207][T21619] BTRFS info (device loop0): using free space tree [ 956.062321][T21635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 956.133683][T21635] ext4 filesystem being mounted at /1544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.339182][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 956.369315][T21619] BTRFS info (device loop0): enabling ssd optimizations [ 956.625525][ T5008] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 957.595713][T21632] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop4 scanned by syz.4.8286 (21632) [ 957.650069][T21632] BTRFS info (device loop4): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 957.684696][T21632] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 957.694963][T21633] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop2 scanned by syz.2.8287 (21633) [ 957.713529][T21632] BTRFS info (device loop4): using free space tree [ 957.754940][T21633] BTRFS info (device loop2): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 957.794348][T21633] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 957.839893][T21633] BTRFS info (device loop2): using free space tree [ 958.049712][T21658] set_capacity_and_notify: 7 callbacks suppressed [ 958.049733][T21658] loop1: detected capacity change from 0 to 32768 [ 958.068665][T21632] BTRFS info (device loop4): enabling ssd optimizations [ 958.080735][T21658] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop1 scanned by syz.1.8291 (21658) [ 958.102874][T21658] BTRFS info (device loop1): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 958.116345][T21658] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 958.132766][T21658] BTRFS info (device loop1): using free space tree [ 958.288109][ T5007] BTRFS info (device loop4): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 958.309479][T21633] BTRFS info (device loop2): enabling ssd optimizations [ 958.430033][ T5015] BTRFS info (device loop2): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 958.914570][T21658] BTRFS info (device loop1): enabling ssd optimizations [ 959.022932][T21662] loop3: detected capacity change from 0 to 32768 [ 959.053562][T21662] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop3 scanned by syz.3.8294 (21662) [ 959.101145][ T5012] BTRFS info (device loop1): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 959.128725][T21662] BTRFS info (device loop3): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 959.176825][T21662] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 959.229860][T21662] BTRFS info (device loop3): using free space tree [ 959.608305][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 959.621020][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 959.633380][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 959.644090][ T5538] udevd[5538]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory [ 959.654095][ T5537] udevd[5537]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 959.674020][ T5309] udevd[5309]: inotify_add_watch(7, /dev/loop3p18, 10) failed: No such file or directory [ 959.674386][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory [ 959.696703][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop3p21, 10) failed: No such file or directory [ 959.699174][ T6788] udevd[6788]: inotify_add_watch(7, /dev/loop3p19, 10) failed: No such file or directory [ 959.720321][ T6787] udevd[6787]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 959.809668][T21662] BTRFS info (device loop3): enabling ssd optimizations [ 959.925124][T21729] loop4: detected capacity change from 0 to 32768 [ 959.944187][ T5017] BTRFS info (device loop3): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 959.960662][T21729] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.8297 (21729) [ 960.002345][T21729] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 960.067949][T21729] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 960.109733][T21729] BTRFS info (device loop4): using free space tree [ 960.168475][T21722] loop0: detected capacity change from 0 to 32768 [ 960.239494][T21722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.8300 (21722) [ 960.344592][T21722] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 960.365488][T21722] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 960.432938][T21722] BTRFS info (device loop0): using free space tree [ 960.661487][T21729] BTRFS info (device loop4): enabling ssd optimizations [ 960.813698][T21736] loop2: detected capacity change from 0 to 32768 [ 960.835863][T21736] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.8298 (21736) [ 960.856508][T21736] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 960.875057][T21736] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 960.888305][T21736] BTRFS info (device loop2): using free space tree [ 960.910113][T21722] BTRFS info (device loop0): enabling ssd optimizations [ 960.955674][ T5007] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 961.047002][T21747] loop1: detected capacity change from 0 to 32768 [ 961.140291][T21747] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 961.189698][T21747] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 961.293054][T21747] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 961.302433][ T4995] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 961.310224][ T4995] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 961.452265][T21736] BTRFS info (device loop2): enabling ssd optimizations [ 961.614562][ T5008] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 961.659872][ T4995] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 327ms [ 961.667571][ T4995] gfs2: fsid=syz:syz.0: jid=0: Done [ 961.803326][T21747] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 962.529431][ T4265] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4265) [ 962.563671][ T5015] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 964.086673][T21807] loop0: detected capacity change from 0 to 32768 [ 964.134557][T21807] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop0 scanned by syz.0.8304 (21807) [ 964.174687][T21804] loop4: detected capacity change from 0 to 40427 [ 964.214580][T21807] BTRFS info (device loop0): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 964.237464][T21804] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 964.276755][T21804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 964.288010][T21807] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 964.329575][T21807] BTRFS info (device loop0): using free space tree [ 964.337354][T21804] F2FS-fs (loop4): invalid crc value [ 964.384513][T21804] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 964.488589][T21804] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 964.733843][T21804] F2FS-fs (loop4): recover fsync data on readonly fs [ 964.752096][T21807] BTRFS info (device loop0): enabling ssd optimizations [ 964.867059][T21804] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 964.874373][T21804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 965.014384][ T5008] BTRFS info (device loop0): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 966.057511][T21837] loop4: detected capacity change from 0 to 64 [ 966.387543][T21839] loop4: detected capacity change from 0 to 512 [ 966.463832][T21839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 966.539976][ T5007] EXT4-fs (loop4): unmounting filesystem. [ 966.641417][T21835] loop0: detected capacity change from 0 to 32768 [ 966.675278][T21835] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop0 scanned by syz.0.8308 (21835) [ 966.744917][T21835] BTRFS info (device loop0): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 966.777720][T21835] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 966.831088][T21835] BTRFS info (device loop0): using free space tree [ 967.107498][T21835] BTRFS info (device loop0): enabling ssd optimizations [ 967.326791][ T5008] BTRFS info (device loop0): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 967.883184][T21867] loop0: detected capacity change from 0 to 1024 [ 968.331152][T21843] loop4: detected capacity change from 0 to 32768 [ 968.398736][T21843] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 968.428811][T21843] dlm: no local IP address has been set [ 968.450070][T21863] loop2: detected capacity change from 0 to 32768 [ 968.454613][T21843] dlm: cannot start dlm midcomms -107 [ 968.484736][T21843] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 968.494607][T21863] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop2 scanned by syz.2.8312 (21863) [ 968.581151][T21863] BTRFS info (device loop2): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 968.590608][T21865] loop1: detected capacity change from 0 to 32768 [ 968.615077][T21863] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 968.623791][T21863] BTRFS info (device loop2): using free space tree [ 968.674137][T21865] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop1 scanned by syz.1.8313 (21865) [ 968.745298][T21865] BTRFS info (device loop1): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 968.771912][T21865] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 968.782175][T21865] BTRFS info (device loop1): using free space tree [ 968.974232][T21863] BTRFS info (device loop2): enabling ssd optimizations [ 969.093474][T21865] BTRFS info (device loop1): enabling ssd optimizations [ 969.123594][ T5015] BTRFS info (device loop2): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 969.166461][T21884] loop3: detected capacity change from 0 to 4096 [ 969.306421][T21884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 969.684560][ T5012] BTRFS info (device loop1): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 969.706429][ T5017] EXT4-fs (loop3): unmounting filesystem. [ 969.869945][T21919] set_capacity_and_notify: 1 callbacks suppressed [ 969.869964][T21919] loop4: detected capacity change from 0 to 1024 [ 970.013512][T21919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 970.048977][T21871] loop0: detected capacity change from 0 to 32768 [ 970.193196][T21871] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 970.261671][T21871] dlm: no local IP address has been set [ 970.267309][T21871] dlm: cannot start dlm midcomms -107 [ 970.315551][ T5007] EXT4-fs (loop4): unmounting filesystem. [ 970.328637][T21871] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 970.410653][T21925] loop1: detected capacity change from 0 to 2 [ 970.481550][T21925] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 970.592379][T21928] loop4: detected capacity change from 0 to 64 [ 970.658218][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 970.664628][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.681375][T21929] loop3: detected capacity change from 0 to 1024 [ 970.732530][T21929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 970.847878][T21932] loop0: detected capacity change from 0 to 1024 [ 970.867645][T21918] loop2: detected capacity change from 0 to 32768 [ 970.882668][T21918] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.8320 (21918) [ 970.950575][T21918] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 971.004264][T21918] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 971.026493][ T5017] EXT4-fs (loop3): unmounting filesystem. [ 971.062345][T21918] BTRFS info (device loop2): using free space tree [ 971.081255][T21934] loop1: detected capacity change from 0 to 64 [ 971.136379][T21937] loop4: detected capacity change from 0 to 128 [ 971.639996][T21918] BTRFS info (device loop2): enabling ssd optimizations [ 971.844221][ T5015] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 972.830807][T21950] loop0: detected capacity change from 0 to 32768 [ 972.908926][T21950] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 972.949543][T21950] dlm: no local IP address has been set [ 972.971174][T21950] dlm: cannot start dlm midcomms -107 [ 972.991906][T21950] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 973.787749][T21964] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 973.796020][T21964] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 973.914233][T21964] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 973.945131][T16068] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 973.958069][T16068] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 974.161022][T16068] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 189ms [ 974.191105][T16068] gfs2: fsid=syz:syz.0: jid=0: Done [ 974.201161][T21964] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 974.292905][T21966] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop0 scanned by syz.0.8334 (21966) [ 974.349805][T21966] BTRFS info (device loop0): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 974.401519][T21966] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 974.438843][T21966] BTRFS info (device loop0): using free space tree [ 974.700104][T21966] BTRFS info (device loop0): enabling ssd optimizations [ 974.817592][T21943] Process accounting resumed [ 974.863994][ T5008] BTRFS info (device loop0): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 975.385509][T21988] set_capacity_and_notify: 2 callbacks suppressed [ 975.385527][T21988] loop3: detected capacity change from 0 to 128 [ 975.543321][T21990] loop0: detected capacity change from 0 to 512 [ 975.748228][T21992] loop3: detected capacity change from 0 to 128 [ 975.813405][T21994] loop4: detected capacity change from 0 to 256 [ 975.965979][T21996] loop0: detected capacity change from 0 to 732 [ 976.189369][T21999] loop3: detected capacity change from 0 to 128 [ 976.315160][T22000] loop4: detected capacity change from 0 to 2048 [ 976.405994][T22000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 976.563886][T22006] loop3: detected capacity change from 0 to 512 [ 976.611148][T22008] loop1: detected capacity change from 0 to 2048 [ 976.633245][ T5007] EXT4-fs (loop4): unmounting filesystem. [ 977.017519][T22012] loop3: detected capacity change from 0 to 128 [ 977.184564][T22010] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 978.209961][T22020] ntfs: volume version 3.1. [ 979.964371][T22034] (syz.4.8357,22034,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 980.006194][T22034] (syz.4.8357,22034,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 980.273022][T22038] (syz.1.8359,22038,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 980.305034][T22038] (syz.1.8359,22038,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 980.912941][T22040] set_capacity_and_notify: 10 callbacks suppressed [ 980.912959][T22040] loop2: detected capacity change from 0 to 32768 [ 980.931311][T22044] loop1: detected capacity change from 0 to 8192 [ 980.970075][T22040] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 980.997214][T22040] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 981.005676][T22044] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 981.033474][T22048] loop0: detected capacity change from 0 to 4096 [ 981.100704][T22040] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 981.137372][T17112] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 981.144881][T17112] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 981.207195][T22048] ntfs: volume version 3.1. [ 981.518453][T17112] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 349ms [ 981.553156][T17112] gfs2: fsid=syz:syz.0: jid=0: Done [ 981.586259][T22040] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 982.465955][T22056] loop3: detected capacity change from 0 to 512 [ 982.772213][T22054] loop0: detected capacity change from 0 to 32768 [ 982.826590][T22054] (syz.0.8366,22054,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 982.913199][T22054] (syz.0.8366,22054,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 983.008209][T22058] loop3: detected capacity change from 0 to 4096 [ 983.199425][T22058] ntfs: volume version 3.1. [ 983.598957][T22064] loop2: detected capacity change from 0 to 512 [ 984.259018][T22060] loop0: detected capacity change from 0 to 32768 [ 984.293508][T22060] (syz.0.8370,22060,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 984.312706][T22060] (syz.0.8370,22060,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 984.929876][T22062] loop3: detected capacity change from 0 to 32768 [ 985.016149][T22062] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 985.052280][T22062] dlm: no local IP address has been set [ 985.059103][T22062] dlm: cannot start dlm midcomms -107 [ 985.104810][T22062] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 985.571746][T22072] loop3: detected capacity change from 0 to 8192 [ 985.638754][T22072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 985.652452][T22066] (syz.2.8372,22066,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 985.669977][T22066] (syz.2.8372,22066,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 985.702916][T22072] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 985.713386][T22072] REISERFS (device loop3): using ordered data mode [ 985.721235][T22072] reiserfs: using flush barriers [ 985.757886][T22072] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 985.901978][T22072] REISERFS (device loop3): checking transaction log (loop3) [ 986.218645][T22072] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 986.277667][T22072] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 986.310628][T22072] REISERFS (device loop3): Remounting filesystem read-only [ 986.333097][T22072] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 986.398095][T22072] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 986.529779][T22068] set_capacity_and_notify: 1 callbacks suppressed [ 986.529799][T22068] loop0: detected capacity change from 0 to 65536 [ 986.597365][T22068] (syz.0.8373,22068,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 986.628882][T22068] (syz.0.8373,22068,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 986.887241][T22077] loop2: detected capacity change from 0 to 8192 [ 987.023875][T22077] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 987.144559][T22077] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 987.153843][T22077] REISERFS (device loop2): using ordered data mode [ 987.242048][T22077] reiserfs: using flush barriers [ 987.284964][T22077] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 987.349065][T22077] REISERFS (device loop2): checking transaction log (loop2) [ 987.561607][T22070] loop4: detected capacity change from 0 to 65536 [ 987.605750][T22070] (syz.4.8374,22070,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 987.668295][T22070] (syz.4.8374,22070,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 987.733952][T22077] REISERFS (device loop2): Using tea hash to sort names [ 987.741336][T22077] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 988.237159][T22079] loop1: detected capacity change from 0 to 32768 [ 988.300994][T22079] (syz.1.8378,22079,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 988.362218][T22079] (syz.1.8378,22079,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 988.375377][T22081] loop3: detected capacity change from 0 to 32768 [ 988.413129][T22081] (syz.3.8379,22081,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 988.499880][T22081] (syz.3.8379,22081,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 990.500687][T22092] loop4: detected capacity change from 0 to 65536 [ 990.734314][T22100] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 991.292684][T22102] loop0: detected capacity change from 0 to 24 [ 991.300013][T22102] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 991.358283][T22102] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 991.659214][T22104] Can't find a SQUASHFS superblock on loop0 [ 991.983371][T22108] loop0: detected capacity change from 0 to 1 [ 992.030031][T22108] syz.0.8389: attempt to access beyond end of device [ 992.030031][T22108] loop0: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 992.086921][T22108] SQUASHFS error: Failed to read block 0x0: -5 [ 992.121266][T22108] unable to read squashfs_super_block [ 992.405297][T22111] loop0: detected capacity change from 0 to 8 [ 992.737601][T22113] loop0: detected capacity change from 0 to 8 [ 992.920209][T22115] loop2: detected capacity change from 0 to 128 [ 992.978418][T22115] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 993.048340][T22115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.399092][T22119] loop2: detected capacity change from 0 to 2048 [ 993.445129][T22117] loop0: detected capacity change from 0 to 16384 [ 993.470054][T22121] loop1: detected capacity change from 0 to 1024 [ 993.488491][T22119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.504388][T22117] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 993.534302][T22117] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 993.594649][T22121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.902207][T22130] loop2: detected capacity change from 0 to 8 [ 993.917937][T22124] loop3: detected capacity change from 0 to 4096 [ 993.936850][T22128] loop1: detected capacity change from 0 to 512 [ 994.006279][T22128] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 994.024735][T22131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 994.037264][T22128] UDF-fs: Scanning with blocksize 512 failed [ 994.090421][T22128] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 994.119648][T22128] UDF-fs: Scanning with blocksize 1024 failed [ 994.155403][T22128] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 994.201805][T22128] UDF-fs: Scanning with blocksize 2048 failed [ 994.276754][T22128] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 994.318994][T22128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 994.343084][T22135] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 994.431432][T22135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 994.795423][T22139] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 994.814223][T22139] UDF-fs: Scanning with blocksize 512 failed [ 994.857018][T22139] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 994.893095][T22139] UDF-fs: Scanning with blocksize 1024 failed [ 994.922644][T22139] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 994.970241][T22139] UDF-fs: Scanning with blocksize 2048 failed [ 994.992255][T22139] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 995.035486][T22137] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 995.044612][T22139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.057233][T22137] UDF-fs: Scanning with blocksize 512 failed [ 995.085229][T22137] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 995.110551][T22137] UDF-fs: Scanning with blocksize 1024 failed [ 995.153210][T22137] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 995.189571][T22137] UDF-fs: Scanning with blocksize 2048 failed [ 995.230012][T22137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.387593][T22143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 995.455611][T22143] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 995.495811][T22143] REISERFS (device loop2): using ordered data mode [ 995.543724][T22143] reiserfs: using flush barriers [ 995.565326][T22143] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 995.640512][T22143] REISERFS (device loop2): checking transaction log (loop2) [ 996.032007][T22143] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 996.135788][T22143] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 996.174168][T22143] REISERFS (device loop2): Remounting filesystem read-only [ 996.223342][T22133] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 996.242782][T22143] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 996.271519][T22133] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 996.280847][T22150] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 996.308562][T22150] UDF-fs: Scanning with blocksize 512 failed [ 996.317428][T22133] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 996.337702][T22143] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 996.348113][T22150] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 996.355561][T22150] UDF-fs: Scanning with blocksize 1024 failed [ 996.389348][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 996.396199][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 996.409535][T22150] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 996.438720][T22150] UDF-fs: Scanning with blocksize 2048 failed [ 996.470639][T22150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 996.608372][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 198ms [ 996.664866][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 996.678116][T22133] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 997.370011][T22164] set_capacity_and_notify: 11 callbacks suppressed [ 997.370030][T22164] loop2: detected capacity change from 0 to 256 [ 997.411984][T22168] loop4: detected capacity change from 0 to 128 [ 997.451040][T22164] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 997.505783][T22164] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 997.545835][T22167] loop1: detected capacity change from 0 to 2048 [ 997.558249][T22164] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 997.590468][T22164] UDF-fs: Scanning with blocksize 512 failed [ 997.654365][T22164] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 997.707932][T22164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 997.867224][T22170] loop4: detected capacity change from 0 to 256 [ 997.928367][T22172] loop2: detected capacity change from 0 to 128 [ 997.970531][T22170] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 998.000164][T22174] loop1: detected capacity change from 0 to 512 [ 998.018515][T22170] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 998.038078][T22170] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 998.098860][T22170] UDF-fs: Scanning with blocksize 512 failed [ 998.142080][T22170] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 998.239401][T22170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 998.407120][T22178] loop0: detected capacity change from 0 to 512 [ 998.437400][T22180] loop1: detected capacity change from 0 to 512 [ 998.893306][T22188] loop1: detected capacity change from 0 to 256 [ 998.963834][T22188] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 999.008102][T22188] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 999.038266][T22188] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 999.045988][T22188] UDF-fs: Scanning with blocksize 512 failed [ 999.098454][T22188] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 999.177313][T22188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.028166][T22190] loop1: detected capacity change from 0 to 65536 [ 1001.103995][T22190] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1002.747947][T22199] loop1: detected capacity change from 0 to 32768 [ 1002.894605][T22199] XFS (loop1): Mounting V5 Filesystem [ 1003.053177][T22199] XFS (loop1): Ending clean mount [ 1003.203136][ T5012] XFS (loop1): Unmounting Filesystem [ 1003.526266][ T4934] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1003.753529][ T4934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.792264][ T4934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.818203][ T4934] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1003.854494][ T4934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.884688][ T4934] usb 1-1: Product: syz [ 1003.889369][ T4934] usb 1-1: Manufacturer: syz [ 1003.906314][ T4934] usb 1-1: SerialNumber: syz [ 1004.165485][ T4934] usb 1-1: 0:1 : does not exist [ 1004.181425][ T4934] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 1004.226786][ T4934] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1004.255706][ T4934] usb 1-1: USB disconnect, device number 38 [ 1004.499391][ T5538] udevd[5538]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.573109][T22217] loop1: detected capacity change from 0 to 32768 [ 1004.646086][T22217] XFS (loop1): Mounting V5 Filesystem [ 1004.667229][T22219] loop3: detected capacity change from 0 to 32768 [ 1004.819880][T22217] XFS (loop1): Ending clean mount [ 1004.825434][T22219] XFS (loop3): Mounting V5 Filesystem [ 1004.981501][ T5012] XFS (loop1): Unmounting Filesystem [ 1005.050624][T22219] XFS (loop3): Ending clean mount [ 1005.272767][ T5017] XFS (loop3): Unmounting Filesystem [ 1006.371137][T22236] loop0: detected capacity change from 0 to 65536 [ 1006.516729][T22236] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1007.427762][T22239] loop1: detected capacity change from 0 to 65536 [ 1007.564888][T22239] XFS (loop1): Mounting V5 Filesystem [ 1007.717152][T22239] XFS (loop1): Ending clean mount [ 1007.871774][ T5012] XFS (loop1): Unmounting Filesystem [ 1009.473584][T22252] loop4: detected capacity change from 0 to 65536 [ 1009.585539][T22252] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 1009.620048][T22240] Process accounting paused [ 1010.149611][T22271] loop4: detected capacity change from 0 to 128 [ 1014.465960][T22277] loop0: detected capacity change from 0 to 131072 [ 1014.556434][T22277] XFS (loop0): Mounting V5 Filesystem [ 1014.651737][T22277] XFS (loop0): Ending clean mount [ 1014.774984][T22293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1014.824894][T22293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1014.842493][ T5008] XFS (loop0): Unmounting Filesystem [ 1014.871588][T22293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1015.604722][T22305] loop4: detected capacity change from 0 to 128 [ 1015.658425][T22305] zonefs (loop4) ERROR: Not a zoned block device [ 1015.939743][T22311] loop4: detected capacity change from 0 to 2048 [ 1016.010779][T22311] loop4: p1 p2 p3 [ 1016.028893][ T4934] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1016.255061][ T4934] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1016.263343][ T4934] usb 4-1: config 8 has no interface number 0 [ 1016.309283][ T4934] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1016.361376][ T4934] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1016.389960][ T4934] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1016.433097][ T4934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.482974][ T5537] udevd[5537]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1016.483518][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1016.508823][ T5538] udevd[5538]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1016.519908][T22307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1016.756128][ T4934] usb 4-1: string descriptor 0 read error: -71 [ 1016.764859][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 1016.923176][T22331] netlink: 798 bytes leftover after parsing attributes in process `syz.0.8470'. [ 1017.009965][T22335] loop4: detected capacity change from 0 to 256 [ 1017.254685][T22340] netlink: 'syz.4.8474': attribute type 3 has an invalid length. [ 1017.268582][ T1172] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1017.332706][ T4934] ir_toy 4-1:8.177: could not write reset command: -110 [ 1017.339915][ T4934] ir_toy: probe of 4-1:8.177 failed with error -110 [ 1017.368353][ T4934] usb 4-1: USB disconnect, device number 21 [ 1017.467641][T22324] loop1: detected capacity change from 0 to 32768 [ 1017.487898][ T1172] usb 3-1: Using ep0 maxpacket: 8 [ 1017.496862][ T1172] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 1017.521347][ T1172] usb 3-1: config 0 has no interface number 0 [ 1017.525973][T22324] loop1: p1 p9 p11 [ 1017.576914][ T1172] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1017.608863][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.650721][ T1172] usb 3-1: config 0 descriptor?? [ 1017.814189][ T1172] viperboard 3-1:0.143: version 0.00 found at bus 003 address 017 [ 1017.844346][ T1172] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1017.888166][ T1172] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 1017.981067][ T1172] usb 3-1: USB disconnect, device number 17 [ 1018.138667][T22360] loop4: detected capacity change from 0 to 256 [ 1018.471128][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 1018.497428][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 1018.511473][ T5538] udevd[5538]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1018.798620][T22374] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1018.877405][T22376] netlink: 'syz.3.8491': attribute type 11 has an invalid length. [ 1019.124394][ T26] audit: type=1326 audit(1785860881.014:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.219559][T22393] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1019.241192][ T26] audit: type=1326 audit(1785860881.014:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.366526][ T26] audit: type=1326 audit(1785860881.014:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.470024][ T26] audit: type=1326 audit(1785860881.014:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.531511][T22403] netlink: 'syz.1.8502': attribute type 21 has an invalid length. [ 1019.539611][T22403] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1019.540008][T22402] loop2: detected capacity change from 0 to 64 [ 1019.549400][ T26] audit: type=1326 audit(1785860881.014:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.580999][T22403] netlink: 'syz.1.8502': attribute type 5 has an invalid length. [ 1019.605306][T22402] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1019.626442][T22403] netlink: 'syz.1.8502': attribute type 6 has an invalid length. [ 1019.662420][T22403] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1019.671615][ T26] audit: type=1326 audit(1785860881.014:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.775416][ T26] audit: type=1326 audit(1785860881.014:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.872603][ T26] audit: type=1326 audit(1785860881.014:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1019.922909][ T26] audit: type=1326 audit(1785860881.042:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22387 comm="syz.4.8499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1020.317957][T22425] loop1: detected capacity change from 0 to 256 [ 1020.857846][T22446] netlink: 'syz.1.8525': attribute type 1 has an invalid length. [ 1021.118226][T22455] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8531'. [ 1021.137636][T22458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1021.382569][T16068] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1021.516173][T22470] loop2: detected capacity change from 0 to 764 [ 1021.558348][T22470] Symlink component flag not implemented [ 1021.593933][T22470] Symlink component flag not implemented [ 1021.631011][T16068] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1021.671082][T16068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.704127][T16068] usb 5-1: config 0 descriptor?? [ 1021.736335][T16068] cp210x 5-1:0.0: cp210x converter detected [ 1022.146202][T16068] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1022.162653][T16068] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1022.189216][T16068] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1022.233041][T16068] usb 5-1: USB disconnect, device number 39 [ 1022.288550][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1022.298684][T16068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1022.311816][T16068] cp210x 5-1:0.0: device disconnected [ 1022.925310][T22512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8559'. [ 1022.949778][T22512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8559'. [ 1022.989881][T22512] device vlan0 entered promiscuous mode [ 1023.645959][T22534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 1024.010531][T22545] loop3: detected capacity change from 0 to 4096 [ 1024.115361][T22556] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1024.264810][T22545] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1024.336052][T22545] Remounting filesystem read-only [ 1024.741158][T22574] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1025.123948][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8588'. [ 1025.171253][T22592] loop3: detected capacity change from 0 to 64 [ 1025.197946][ T4945] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1025.258111][T22592] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1025.407438][ T4945] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1025.427840][ T4945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.447981][ T4945] usb 2-1: Product: syz [ 1025.452228][ T4945] usb 2-1: Manufacturer: syz [ 1025.487550][ T4945] usb 2-1: SerialNumber: syz [ 1025.568061][ T4945] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1025.590837][T22602] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1025.693997][ T4934] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1025.927962][T22610] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1026.095420][T21563] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1026.177306][T10876] usb 2-1: USB disconnect, device number 34 [ 1026.254746][ T26] audit: type=1326 audit(1785860887.686:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.278851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.292971][ T26] audit: type=1326 audit(1785860887.686:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.317029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.332396][T21563] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1026.340723][T21563] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1026.378367][T21563] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.400075][T21563] usb 5-1: config 8 has no interface number 0 [ 1026.408968][T21563] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1026.427464][ T26] audit: type=1326 audit(1785860887.724:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.458378][T21563] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.479163][ T26] audit: type=1326 audit(1785860887.724:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.518352][T21563] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1026.534872][T21563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.542932][T21563] usb 5-1: Product: syz [ 1026.551019][ T26] audit: type=1326 audit(1785860887.724:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.584432][T21563] usb 5-1: Manufacturer: syz [ 1026.589692][T21563] usb 5-1: SerialNumber: syz [ 1026.596656][ T26] audit: type=1326 audit(1785860887.724:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.620725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.637984][T22628] tmpfs: Bad value for 'mpol' [ 1026.649363][ T26] audit: type=1326 audit(1785860887.724:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.673478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.690712][ T26] audit: type=1326 audit(1785860887.761:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.837040][ T26] audit: type=1326 audit(1785860887.761:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.3.8604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1026.877540][T21563] usb 5-1: USB disconnect, device number 40 [ 1026.918419][ T4934] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1026.934014][ T4934] ath9k_htc: Failed to initialize the device [ 1026.981456][T10876] usb 2-1: ath9k_htc: USB layer deinitialized [ 1026.991292][T22636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 1027.664890][T22662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 1027.733219][T22664] loop3: detected capacity change from 0 to 2048 [ 1027.778278][T16068] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1027.811973][T22664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1027.902733][T22673] netlink: 'syz.4.8628': attribute type 8 has an invalid length. [ 1027.917540][ T5017] EXT4-fs (loop3): unmounting filesystem. [ 1027.942827][T22673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1028.040999][T16068] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.050170][T16068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.071755][T16068] usb 1-1: Product: syz [ 1028.078640][T16068] usb 1-1: Manufacturer: syz [ 1028.086781][T16068] usb 1-1: SerialNumber: syz [ 1028.122334][T16068] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.217973][T16068] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.704567][ T4945] usb 1-1: USB disconnect, device number 39 [ 1029.391975][T16068] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1029.407832][T16068] ath9k_htc: Failed to initialize the device [ 1029.414495][ T4945] usb 1-1: ath9k_htc: USB layer deinitialized [ 1029.479914][T22721] delete_channel: no stack [ 1029.773512][T22707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.781430][T22707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.835454][ T27] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1030.038373][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 1030.046542][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.055104][ T27] usb 4-1: config 0 has no interface number 0 [ 1030.064410][ T27] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1030.077825][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.086434][ T27] usb 4-1: Product: syz [ 1030.090788][ T27] usb 4-1: Manufacturer: syz [ 1030.095645][ T27] usb 4-1: SerialNumber: syz [ 1030.104058][ T27] usb 4-1: config 0 descriptor?? [ 1030.118245][ T27] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1030.413471][T22707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.482325][T22707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.549251][ T27] gspca_spca1528: reg_w err -71 [ 1030.594428][ T27] spca1528: probe of 4-1:0.1 failed with error -71 [ 1030.609062][ T27] usb 4-1: USB disconnect, device number 22 [ 1030.979774][T22707] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.988704][T22707] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.997800][T22707] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.006826][T22707] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.354690][T22731] loop3: detected capacity change from 0 to 512 [ 1031.361942][T22731] EXT4-fs: Ignoring removed nobh option [ 1031.413311][T22731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1031.444639][T22731] ext4 filesystem being mounted at /1676/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.474286][T22731] Quota error (device loop3): do_check_range: Getting block 1280 out of range 0-5 [ 1031.555428][ T5017] EXT4-fs (loop3): unmounting filesystem. [ 1032.115941][T22761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1032.295584][T22767] No such timeout policy "syz1" [ 1032.382463][T22770] netlink: 'syz.1.8676': attribute type 10 has an invalid length. [ 1032.407457][T22773] netlink: 'syz.3.8677': attribute type 1 has an invalid length. [ 1032.464746][T22773] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8677'. [ 1032.477568][T22770] team0: Device veth1_vlan failed to register rx_handler [ 1033.326085][T22805] loop3: detected capacity change from 0 to 256 [ 1033.387528][T22799] loop1: detected capacity change from 0 to 4096 [ 1033.420679][T22799] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1034.612091][T22842] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1034.856421][T22824] loop4: detected capacity change from 0 to 32768 [ 1034.905249][T22824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8700 (22824) [ 1034.931612][T22853] autofs4:pid:22853:autofs_fill_super: called with bogus options [ 1034.961456][T22824] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1034.989526][T22824] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1035.023735][T22824] BTRFS info (device loop4): using free space tree [ 1035.070455][T22857] loop0: detected capacity change from 0 to 256 [ 1035.327333][T22824] BTRFS info (device loop4): enabling ssd optimizations [ 1035.375551][T22824] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 1035.415842][ T26] audit: type=1400 audit(1785860896.258:57): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=22878 comm="syz.3.8718" [ 1035.560553][ T5007] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1036.313250][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1036.319712][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1036.780386][T22915] loop0: detected capacity change from 0 to 2048 [ 1036.821114][T22915] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1036.871786][T22915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1036.941395][T22915] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 1036.954684][T22890] loop2: detected capacity change from 0 to 32768 [ 1037.121612][T22890] XFS (loop2): Mounting V5 Filesystem [ 1037.315266][T22890] XFS (loop2): Ending clean mount [ 1037.329289][T22890] XFS (loop2): Quotacheck needed: Please wait. [ 1037.460610][T22890] XFS (loop2): Quotacheck: Done. [ 1037.653880][ T5015] XFS (loop2): Unmounting Filesystem [ 1037.688416][T22936] loop1: detected capacity change from 0 to 2048 [ 1037.708465][T22938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1037.829392][T22936] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1037.966775][T22948] device bond1 entered promiscuous mode [ 1037.973395][T22948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1038.080165][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 1038.342490][T22960] loop3: detected capacity change from 0 to 4096 [ 1038.350953][T22960] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1038.362924][ T126] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1038.565887][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 1038.574934][ T126] usb 5-1: config 0 has no interfaces? [ 1038.591166][T22966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8756'. [ 1038.612551][ T126] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1038.648138][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.668416][ T126] usb 5-1: Product: syz [ 1038.673458][ T126] usb 5-1: Manufacturer: syz [ 1038.678120][ T126] usb 5-1: SerialNumber: syz [ 1038.719517][ T126] r8152-cfgselector 5-1: config 0 descriptor?? [ 1038.832240][T22974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8759'. [ 1038.950491][ T126] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1039.078216][T22980] netlink: 'syz.0.8762': attribute type 27 has an invalid length. [ 1039.180009][ T126] usb 5-1: USB disconnect, device number 41 [ 1039.338787][T22985] loop3: detected capacity change from 0 to 1024 [ 1039.569490][T22991] loop2: detected capacity change from 0 to 256 [ 1039.822268][T22996] netlink: 'syz.0.8769': attribute type 10 has an invalid length. [ 1039.910317][T22996] team0: Device veth1_vlan failed to register rx_handler [ 1039.990097][T23004] loop4: detected capacity change from 0 to 128 [ 1040.115649][T23004] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 1040.169789][T23004] FAT-fs (loop4): Filesystem has been set read-only [ 1040.256794][T23011] xt_bpf: check failed: parse error [ 1040.333627][ T5007] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 1041.715102][T23067] Process accounting resumed [ 1041.910857][T23079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8810'. [ 1042.230656][T23087] syz.2.8811 (23087): drop_caches: 0 [ 1042.854142][T23105] loop1: detected capacity change from 0 to 4096 [ 1042.893744][T23105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1042.921232][T23105] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1042.957259][T23105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1043.090112][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 1043.102142][T23118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8828'. [ 1043.108026][T16068] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1043.321071][T16068] usb 1-1: Using ep0 maxpacket: 16 [ 1043.337422][T16068] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1043.368637][T16068] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1043.404419][T16068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.445548][T16068] usb 1-1: Product: syz [ 1043.479931][T16068] usb 1-1: Manufacturer: syz [ 1043.498711][T16068] usb 1-1: SerialNumber: syz [ 1043.509784][T16068] r8152-cfgselector 1-1: config 0 descriptor?? [ 1043.739729][T16068] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1043.960251][T16068] usb 1-1: USB disconnect, device number 40 [ 1044.918132][ T26] audit: type=1326 audit(1785860905.148:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.2.8844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d899de99 code=0x7ffc0000 [ 1045.047537][ T26] audit: type=1326 audit(1785860905.186:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.2.8844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d899de99 code=0x7ffc0000 [ 1045.132238][ T26] audit: type=1326 audit(1785860905.204:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.2.8844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f80d899de99 code=0x7ffc0000 [ 1045.200161][ T26] audit: type=1326 audit(1785860905.204:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.2.8844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d899de99 code=0x7ffc0000 [ 1045.247117][T23156] device ip6gre1 entered promiscuous mode [ 1045.262873][ T26] audit: type=1326 audit(1785860905.204:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23145 comm="syz.2.8844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d899de99 code=0x7ffc0000 [ 1045.323695][ T22] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1045.532965][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 1045.542310][ T22] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1045.603885][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.621442][ T22] usb 4-1: Product: syz [ 1045.647395][ T22] usb 4-1: Manufacturer: syz [ 1045.668984][ T22] usb 4-1: SerialNumber: syz [ 1046.038421][T23186] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8862'. [ 1046.129091][ T22] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1046.155910][ T22] mxuport: probe of 4-1:254.0 failed with error -5 [ 1046.191072][ T22] usb 4-1: USB disconnect, device number 23 [ 1046.219198][ T126] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1046.266721][T23190] device bond1 entered promiscuous mode [ 1046.273411][T23190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1046.439483][ T126] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1046.459852][ T126] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1046.494218][ T126] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1046.545830][ T126] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1046.577371][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1046.617699][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1046.669428][ T126] usb 3-1: string descriptor 0 read error: -22 [ 1046.675785][ T126] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1046.710425][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.745103][ T126] usb 3-1: config 0 descriptor?? [ 1046.750889][T23183] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1046.775624][ T126] hub 3-1:0.0: bad descriptor, ignoring hub [ 1046.799705][ T126] hub: probe of 3-1:0.0 failed with error -5 [ 1046.823726][ T126] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input86 [ 1046.836945][T13175] Bluetooth: hci3: command 0x0405 tx timeout [ 1047.122740][ T126] usb 3-1: USB disconnect, device number 18 [ 1047.214065][T23221] netlink: 'syz.3.8880': attribute type 3 has an invalid length. [ 1047.232157][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1047.270160][T23221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1047.651074][T23235] libceph: resolve '.‹R¯HÖe'ėģË /Īâĩüë1ũC¸ Ŗ~—1W–띑ë¨eūxEAŽÁūeSb{~Rđ' (ret=-3): failed [ 1048.555023][T23276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8906'. [ 1048.573230][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1048.867377][ T4936] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1049.070207][ T4936] usb 2-1: Using ep0 maxpacket: 16 [ 1049.078480][ T4936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1049.098448][ T4936] usb 2-1: config 251 has an invalid interface number: 33 but max is 0 [ 1049.118450][ T4936] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.144931][ T22] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1049.166492][ T4936] usb 2-1: config 251 has no interface number 0 [ 1049.185368][ T4936] usb 2-1: config 251 interface 33 has no altsetting 0 [ 1049.197049][ T4936] usb 2-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 1049.207142][ T4936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.215606][ T4936] usb 2-1: Product: syz [ 1049.230343][ T4936] usb 2-1: Manufacturer: syz [ 1049.241545][ T4936] usb 2-1: SerialNumber: syz [ 1049.350169][ T22] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1049.361828][ T22] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1049.372974][ T22] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1049.382578][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.408810][T23288] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1049.483007][ T4936] qmi_wwan: probe of 2-1:251.33 failed with error -22 [ 1049.546783][ T4936] usb 2-1: USB disconnect, device number 35 [ 1049.669734][T23282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.678980][T23282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.840244][T16076] usb 1-1: USB disconnect, device number 41 [ 1050.382290][T23282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.501710][T23282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.735292][T23317] loop0: detected capacity change from 0 to 64 [ 1050.983192][T23319] Illegal XDP return value 3374926365 on prog (id 592) dev N/A, expect packet loss! [ 1051.222492][T23282] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.236359][T23282] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.246197][T23282] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.257271][T23282] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.403210][T23292] netlink: 'syz.2.8914': attribute type 10 has an invalid length. [ 1051.422535][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1051.446227][T23282] syz.3.8909 (23282) used greatest stack depth: 20752 bytes left [ 1051.485279][ T4995] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1051.645191][T23329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8932'. [ 1051.700475][ T4995] usb 1-1: Using ep0 maxpacket: 16 [ 1051.708852][ T4995] usb 1-1: config 0 has no interfaces? [ 1051.732116][ T4995] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1051.743977][ T4995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.752051][ T4995] usb 1-1: Product: syz [ 1051.767562][ T4995] usb 1-1: Manufacturer: syz [ 1051.772252][ T4995] usb 1-1: SerialNumber: syz [ 1051.784878][ T4995] r8152-cfgselector 1-1: config 0 descriptor?? [ 1052.013315][ T4995] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1052.251287][ T4995] usb 1-1: USB disconnect, device number 42 [ 1053.613924][T23345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.621252][T23345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.693571][T23399] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1054.770277][T23345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.860332][T23345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.515270][T23345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.525220][T23345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.534157][T23345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.543627][T23345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.710510][T23410] loop4: detected capacity change from 0 to 32768 [ 1055.781027][T23410] loop4: p1 p3 < > [ 1055.866451][T16075] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1055.996435][T23417] netlink: 'syz.0.8975': attribute type 1 has an invalid length. [ 1056.023207][T23417] netlink: 'syz.0.8975': attribute type 2 has an invalid length. [ 1056.040082][T23417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8975'. [ 1056.072122][T16075] usb 5-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 1056.088805][T16075] usb 5-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1056.105462][T16075] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1056.141735][T16075] usb 5-1: string descriptor 0 read error: -22 [ 1056.170119][T16075] usb 5-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 1056.196618][T16075] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1056.257338][T16075] usbhid 5-1:1.0: fixing wrong optional hid class descriptors count [ 1056.287164][T16075] usbhid 5-1:1.0: can't add hid device: -22 [ 1056.293270][T16075] usbhid: probe of 5-1:1.0 failed with error -22 [ 1056.471622][T23427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1056.491937][T16075] usb 5-1: USB disconnect, device number 42 [ 1056.531687][T23425] loop0: detected capacity change from 0 to 1024 [ 1056.610088][T23425] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 1056.667935][T23425] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1056.717551][T23425] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.8978: Failed to acquire dquot type 0 [ 1056.800742][T23425] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1056.848057][T23425] EXT4-fs (loop0): 1 truncate cleaned up [ 1056.859790][T23425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1056.877456][T23438] netlink: 'syz.1.8984': attribute type 1 has an invalid length. [ 1056.889840][T23425] EXT4-fs (loop0): unmounting filesystem. [ 1057.017393][T23444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1057.474795][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8994'. [ 1057.481903][T23455] netlink: 'syz.3.8993': attribute type 3 has an invalid length. [ 1057.535955][T23455] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8993'. [ 1057.565178][T23458] loop0: detected capacity change from 0 to 256 [ 1057.592104][T23458] exfat: Deprecated parameter 'utf8' [ 1057.643767][T23458] exfat: Deprecated parameter 'namecase' [ 1057.661941][T23458] exfat: Deprecated parameter 'namecase' [ 1057.667712][T23458] exfat: Deprecated parameter 'namecase' [ 1057.716608][T23462] tc_dump_action: action bad kind [ 1057.732874][T23458] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1058.104206][T23476] tmpfs: Bad value for 'mpol' [ 1058.406697][T23488] netlink: 'syz.0.9009': attribute type 3 has an invalid length. [ 1058.469887][T23488] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1058.743659][T23502] loop0: detected capacity change from 0 to 512 [ 1058.785259][T23504] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1058.831668][T23502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1058.845533][T23504] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1058.902947][T23504] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1058.953835][T23502] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.9015: Directory block failed checksum [ 1058.976293][T21494] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1059.099862][ T5008] EXT4-fs (loop0): unmounting filesystem. [ 1059.209024][T21494] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1059.253153][T21494] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1059.284275][T21494] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.329306][T21494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.378451][T23498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1059.497170][T23527] loop1: detected capacity change from 0 to 512 [ 1059.576490][ T26] audit: type=1326 audit(1785860918.876:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.4.9028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1059.605069][T23527] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1059.661456][T23533] netlink: 'syz.0.9029': attribute type 1 has an invalid length. [ 1059.720974][T23527] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.9025: corrupted inode contents [ 1059.769594][T23527] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #11: comm syz.1.9025: mark_inode_dirty error [ 1059.788349][ T26] audit: type=1326 audit(1785860918.923:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.4.9028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1059.867398][ T26] audit: type=1326 audit(1785860918.923:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.4.9028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1059.879414][T16075] usb 4-1: USB disconnect, device number 24 [ 1059.925240][T23527] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.9025: invalid indirect mapped block 1 (level 1) [ 1059.948461][ T26] audit: type=1326 audit(1785860918.923:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.4.9028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1059.982329][T23527] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.9025: corrupted inode contents [ 1060.002471][T23527] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1060.013582][T23527] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.9025: corrupted inode contents [ 1060.032861][T23527] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.9025: mark_inode_dirty error [ 1060.034696][T16074] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1060.046682][T23527] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1060.052305][T23538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9032'. [ 1060.077273][T23527] EXT4-fs (loop1): 1 truncate cleaned up [ 1060.116860][T23527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1060.172125][T23527] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.9025: iget: bogus i_mode (3355) [ 1060.216500][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 1060.290462][T16074] usb 1-1: Using ep0 maxpacket: 16 [ 1060.298152][T16074] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1060.335925][T16074] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1060.363401][T16074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.381300][T16074] usb 1-1: Product: syz [ 1060.396417][T16074] usb 1-1: Manufacturer: syz [ 1060.417560][T16074] usb 1-1: SerialNumber: syz [ 1060.434119][T16074] r8152-cfgselector 1-1: config 0 descriptor?? [ 1060.700336][T16074] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1060.710123][T16074] r8152-cfgselector 1-1: bad CDC descriptors [ 1060.752425][T16074] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1060.780815][T16074] r8152-cfgselector 1-1: USB disconnect, device number 43 [ 1061.925367][ T4995] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1062.133673][ T4995] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1062.162649][ T4995] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1062.178122][T23610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1062.205287][ T4995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1062.224621][ T4995] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1062.257477][ T4995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1062.290350][ T4995] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1062.328560][ T4995] usb 5-1: string descriptor 0 read error: -22 [ 1062.356746][ T4995] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1062.396868][ T4995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.425114][ T4995] usb 5-1: config 0 descriptor?? [ 1062.447588][T23586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1062.465123][ T4995] hub 5-1:0.0: bad descriptor, ignoring hub [ 1062.483929][ T4995] hub: probe of 5-1:0.0 failed with error -5 [ 1062.510716][ T4995] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 1062.809424][ T4995] usb 5-1: USB disconnect, device number 43 [ 1062.953984][T23630] xt_bpf: check failed: parse error [ 1063.330704][T23644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9083'. [ 1063.756599][T23656] loop0: detected capacity change from 0 to 736 [ 1064.027773][T23666] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1064.267622][T23642] loop1: detected capacity change from 0 to 32768 [ 1064.327270][T23674] libceph: resolve '0' (ret=-3): failed [ 1064.453541][T23642] XFS (loop1): Mounting V5 Filesystem [ 1064.567290][T23642] XFS (loop1): Ending clean mount [ 1064.607831][ T5798] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 1064.716233][ T5012] XFS (loop1): Unmounting Filesystem [ 1064.812928][ T5798] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1064.830037][ T5798] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1064.849607][ T5798] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1064.871620][ T5798] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1064.906993][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1064.949554][ T5798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1065.001672][ T5798] usb 1-1: string descriptor 0 read error: -22 [ 1065.013866][ T5798] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1065.045628][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.098130][ T5798] usb 1-1: config 0 descriptor?? [ 1065.122224][T23675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1065.130756][ T5798] hub 1-1:0.0: bad descriptor, ignoring hub [ 1065.137110][ T5798] hub: probe of 1-1:0.0 failed with error -5 [ 1065.167159][ T5798] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input90 [ 1065.682943][T21494] usb 1-1: USB disconnect, device number 44 [ 1066.114571][T23715] x_tables: unsorted underflow at hook 3 [ 1066.115228][T23697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.127545][T23697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.950353][T23697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.014719][T23697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.508430][T23697] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.517602][T23697] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.527246][T23697] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.536443][T23697] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.891684][T23740] gfs2: not a GFS2 filesystem [ 1068.130823][T23753] loop4: detected capacity change from 0 to 256 [ 1068.195090][T23753] FAT-fs (loop4): Directory bread(block 64) failed [ 1068.237669][T23753] FAT-fs (loop4): Directory bread(block 65) failed [ 1068.256151][T23753] FAT-fs (loop4): Directory bread(block 66) failed [ 1068.288281][T23753] FAT-fs (loop4): Directory bread(block 67) failed [ 1068.320532][T23753] FAT-fs (loop4): Directory bread(block 68) failed [ 1068.337675][T23753] FAT-fs (loop4): Directory bread(block 69) failed [ 1068.347265][T23757] netlink: 'syz.0.9135': attribute type 3 has an invalid length. [ 1068.355727][T23753] FAT-fs (loop4): Directory bread(block 70) failed [ 1068.363623][T23757] netlink: 'syz.0.9135': attribute type 3 has an invalid length. [ 1068.371824][T23753] FAT-fs (loop4): Directory bread(block 71) failed [ 1068.423576][T23753] FAT-fs (loop4): Directory bread(block 72) failed [ 1068.430197][T23753] FAT-fs (loop4): Directory bread(block 73) failed [ 1068.973033][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9144'. [ 1069.063872][T21494] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1069.074825][ T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1069.166209][T23783] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1069.191496][T23783] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1069.238233][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1069.277623][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 1069.289052][T21494] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1069.299251][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1069.329186][T21494] usb 2-1: config 1 has no interface number 0 [ 1069.336822][ T27] usb 4-1: config 179 has no interface number 0 [ 1069.343565][T21494] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1069.359368][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1069.371208][T21494] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 1069.381323][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1069.394591][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1069.407577][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1069.420841][T21494] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1069.430257][ T27] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1069.448368][T21494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.448397][T21494] usb 2-1: Product: syz [ 1069.448413][T21494] usb 2-1: Manufacturer: syz [ 1069.448431][T21494] usb 2-1: SerialNumber: syz [ 1069.461304][T23769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1069.461450][T23769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1069.463499][ T27] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1069.463539][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1069.463601][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.489216][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input91 [ 1069.681781][T23769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1069.681938][T23769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1069.684598][T21494] usb 2-1: No status endpoint found [ 1069.836007][ T4995] usb 4-1: USB disconnect, device number 25 [ 1069.836275][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1069.871530][ T4995] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1069.915509][T21494] usb 2-1: USB disconnect, device number 36 [ 1069.966832][T23802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.431657][T16074] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1070.648871][T16074] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1070.668206][T16074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.676317][T16074] usb 1-1: Product: syz [ 1070.688143][T16074] usb 1-1: Manufacturer: syz [ 1070.692848][T16074] usb 1-1: SerialNumber: syz [ 1070.712578][T16074] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1070.772167][ T4990] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1070.869721][ T4995] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1071.072783][ T4995] usb 5-1: Using ep0 maxpacket: 8 [ 1071.080725][ T4995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.107715][ T4995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.139003][ T4995] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1071.201524][ T4995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.209071][T21494] usb 1-1: USB disconnect, device number 45 [ 1071.232108][ T4995] usb 5-1: Product: syz [ 1071.238668][ T4995] usb 5-1: Manufacturer: syz [ 1071.261045][ T4995] usb 5-1: SerialNumber: syz [ 1071.278993][ T4995] usb 5-1: config 0 descriptor?? [ 1071.293215][T23847] xt_hashlimit: size too large, truncated to 1048576 [ 1071.308802][ T4995] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1071.321559][T23847] xt_hashlimit: max too large, truncated to 1048576 [ 1071.530196][ T4995] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1071.546596][ T4995] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1071.558159][T23851] loop1: detected capacity change from 0 to 4096 [ 1071.565881][ T4995] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1071.674326][T23851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1071.688635][T23851] EXT4-fs: Cannot change quota options when quota turned on [ 1071.737543][T23859] loop3: detected capacity change from 0 to 256 [ 1071.765941][T16074] usb 5-1: USB disconnect, device number 44 [ 1071.835224][T23859] FAT-fs (loop3): Directory bread(block 64) failed [ 1071.878890][T23859] FAT-fs (loop3): Directory bread(block 65) failed [ 1071.906673][T23859] FAT-fs (loop3): Directory bread(block 66) failed [ 1071.934011][ T5012] EXT4-fs (loop1): unmounting filesystem. [ 1071.943911][T23859] FAT-fs (loop3): Directory bread(block 67) failed [ 1071.969277][T23859] FAT-fs (loop3): Directory bread(block 68) failed [ 1072.003196][T23859] FAT-fs (loop3): Directory bread(block 69) failed [ 1072.009910][T23859] FAT-fs (loop3): Directory bread(block 70) failed [ 1072.053514][T23859] FAT-fs (loop3): Directory bread(block 71) failed [ 1072.074993][T23859] FAT-fs (loop3): Directory bread(block 72) failed [ 1072.085263][T23865] xt_cgroup: path and classid specified [ 1072.107583][T23859] FAT-fs (loop3): Directory bread(block 73) failed [ 1072.130688][ T4990] usb 1-1: Service connection timeout for: 256 [ 1072.136976][ T4990] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1072.174176][ T4990] ath9k_htc: Failed to initialize the device [ 1072.180573][T21494] usb 1-1: ath9k_htc: USB layer deinitialized [ 1072.557119][T23879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9193'. [ 1072.579311][T21494] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1072.802275][T21494] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1072.823483][T21494] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1072.848420][T21494] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 145, changing to 11 [ 1072.878360][T23891] loop2: detected capacity change from 0 to 8 [ 1072.893204][T21494] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1072.933486][T21494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.963324][T21494] usb 1-1: Product: syz [ 1072.968564][T21494] usb 1-1: Manufacturer: syz [ 1072.973963][T21494] usb 1-1: SerialNumber: syz [ 1072.979975][T23891] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1073.005167][T23891] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1073.014319][T23891] SQUASHFS error: Unable to read directory block [631:26] [ 1073.156929][ T27] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1073.229365][T21494] cdc_ncm 1-1:1.0: bind() failure [ 1073.246913][T21494] usbtest 1-1:1.0: Linux gadget zero [ 1073.257010][T21494] usbtest 1-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1073.281484][T21494] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1073.316751][T21494] cdc_ncm 1-1:1.1: bind() failure [ 1073.339422][T21494] usbtest 1-1:1.1: couldn't get endpoints, -71 [ 1073.354029][T21494] usbtest: probe of 1-1:1.1 failed with error -71 [ 1073.370087][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 1073.377282][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.394815][T21494] usb 1-1: USB disconnect, device number 46 [ 1073.405671][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9205'. [ 1073.414952][ T27] usb 5-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 1073.432482][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.458679][ T27] usb 5-1: config 0 descriptor?? [ 1073.728951][ T4995] usb 5-1: USB disconnect, device number 45 [ 1073.868216][T23919] Process accounting paused [ 1074.025602][T23926] device sit0 entered promiscuous mode [ 1074.055188][T23926] syz.2.9215 (23926) used greatest stack depth: 20720 bytes left [ 1074.596381][T23948] netlink: 'syz.1.9226': attribute type 2 has an invalid length. [ 1075.166904][T23969] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1075.502589][T23943] loop4: detected capacity change from 0 to 32768 [ 1075.581693][T23985] netlink: 'syz.0.9241': attribute type 13 has an invalid length. [ 1075.602748][T23985] netlink: 'syz.0.9241': attribute type 12 has an invalid length. [ 1075.622472][T23943] XFS (loop4): Mounting V5 Filesystem [ 1075.769612][T23943] XFS (loop4): Ending clean mount [ 1075.851264][T23943] XFS (loop4): Quotacheck needed: Please wait. [ 1075.898711][T23943] XFS (loop4): Quotacheck: Done. [ 1076.067238][T21494] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1076.078758][ T5007] XFS (loop4): Unmounting Filesystem [ 1076.184612][T24008] xt_TCPMSS: Only works on TCP SYN packets [ 1076.276686][T21494] usb 3-1: Using ep0 maxpacket: 16 [ 1076.286568][T21494] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 1076.326377][T21494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.344523][T21494] usb 3-1: Product: syz [ 1076.348752][T21494] usb 3-1: Manufacturer: syz [ 1076.372225][T21494] usb 3-1: SerialNumber: syz [ 1076.629731][T21494] usb 3-1: Can't get UAC3 power state for id 10 [ 1076.647580][T21494] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1076.673539][T21494] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1076.687189][T21494] usb 3-1: USB disconnect, device number 19 [ 1076.982803][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.069027][T24016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.076271][T24016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.099540][ T4995] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1077.307577][ T4995] usb 4-1: Using ep0 maxpacket: 32 [ 1077.322152][ T4995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.335187][T24026] fuse: blksize only supported for fuseblk [ 1077.349394][ T4995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.363878][ T4995] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1077.374393][ T4995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.409159][ T4995] usb 4-1: config 0 descriptor?? [ 1077.453452][ T4995] hub 4-1:0.0: USB hub found [ 1077.663573][ T4995] hub 4-1:0.0: 3 ports detected [ 1077.885361][ T4995] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1077.896345][ T4995] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1077.921615][ T4995] usbhid 4-1:0.0: can't add hid device: -71 [ 1077.929558][ T4995] usbhid: probe of 4-1:0.0 failed with error -71 [ 1077.965893][ T4995] usb 4-1: USB disconnect, device number 26 [ 1078.127747][T24016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.181666][T24016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.793459][T24016] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.804071][T24016] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.818891][T24016] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.829062][T24016] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.903471][T24046] libceph: resolve '0' (ret=-3): failed [ 1079.074605][T24018] netlink: 9060 bytes leftover after parsing attributes in process `syz.1.9256'. [ 1079.308084][T24056] xt_connbytes: Forcing CT accounting to be enabled [ 1079.339706][T24060] loop3: detected capacity change from 0 to 8 [ 1079.415971][T24060] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1079.459295][T24060] SQUASHFS error: Failed to read block 0x9b: -5 [ 1079.477573][T24060] SQUASHFS error: Unable to read metadata cache entry [99] [ 1079.504996][T24060] SQUASHFS error: Unable to read inode 0x127 [ 1079.572549][ T26] audit: type=1326 audit(1785860937.583:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.0.9278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1079.667804][ T26] audit: type=1326 audit(1785860937.583:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.0.9278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1079.793483][ T26] audit: type=1326 audit(1785860937.611:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.0.9278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1079.899413][ T26] audit: type=1326 audit(1785860937.611:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.0.9278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1080.023842][ T26] audit: type=1326 audit(1785860937.611:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.0.9278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1081.358077][T24097] loop0: detected capacity change from 0 to 32768 [ 1081.957529][T24151] libceph: resolve 'cΐœ†ņ' (ret=-3): failed [ 1082.200738][T24162] loop3: detected capacity change from 0 to 256 [ 1082.292592][T24162] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1082.741732][T16074] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1082.955645][T16074] usb 2-1: Using ep0 maxpacket: 8 [ 1082.964162][T16074] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.982514][T16074] usb 2-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 1083.013978][T16074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.037623][T16074] usb 2-1: config 0 descriptor?? [ 1083.253884][ T26] audit: type=1326 audit(1785860941.027:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.0.9344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1083.286289][T16074] usb 2-1: USB disconnect, device number 37 [ 1083.348652][ T26] audit: type=1326 audit(1785860941.055:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.0.9344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1083.421272][ T26] audit: type=1326 audit(1785860941.064:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.0.9344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1083.500249][ T26] audit: type=1326 audit(1785860941.073:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.0.9344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1083.582222][ T26] audit: type=1326 audit(1785860941.073:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.0.9344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfbf9de99 code=0x7ffc0000 [ 1083.599823][T24208] loop2: detected capacity change from 0 to 1024 [ 1083.723212][T24208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1083.833031][T24188] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1083.969666][ T5015] EXT4-fs (loop2): unmounting filesystem. [ 1084.056284][T21494] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1084.270078][T21494] usb 1-1: Using ep0 maxpacket: 8 [ 1084.277254][T21494] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1084.296327][T21494] usb 1-1: config 179 has no interface number 0 [ 1084.310092][T21494] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1084.372380][T21494] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1084.401926][T21494] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1084.460536][T21494] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1084.497817][T21494] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1084.540694][T21494] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1084.549954][T24241] loop4: detected capacity change from 0 to 256 [ 1084.560831][T21494] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1084.579992][T21494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.634963][T24241] FAT-fs (loop4): Directory bread(block 64) failed [ 1084.641730][T24241] FAT-fs (loop4): Directory bread(block 65) failed [ 1084.666330][T21494] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input95 [ 1084.721149][T24241] FAT-fs (loop4): Directory bread(block 66) failed [ 1084.727801][T24241] FAT-fs (loop4): Directory bread(block 67) failed [ 1084.804391][T24241] FAT-fs (loop4): Directory bread(block 68) failed [ 1084.811074][T24241] FAT-fs (loop4): Directory bread(block 69) failed [ 1084.897781][T24241] FAT-fs (loop4): Directory bread(block 70) failed [ 1084.949823][T24241] FAT-fs (loop4): Directory bread(block 71) failed [ 1084.983677][ T27] usb 1-1: USB disconnect, device number 47 [ 1084.989997][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1084.998440][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1085.014957][ T27] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1085.039232][T24241] FAT-fs (loop4): Directory bread(block 72) failed [ 1085.045862][T24241] FAT-fs (loop4): Directory bread(block 73) failed [ 1085.141366][T24253] loop2: detected capacity change from 0 to 64 [ 1086.020991][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1086.168897][T24255] loop3: detected capacity change from 0 to 32768 [ 1086.242046][T24290] netlink: 'syz.2.9386': attribute type 10 has an invalid length. [ 1086.250052][T24290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9386'. [ 1086.315338][T24255] XFS (loop3): Mounting V5 Filesystem [ 1086.433766][T24255] XFS (loop3): Ending clean mount [ 1086.478832][T24255] XFS (loop3): Quotacheck needed: Please wait. [ 1086.589004][T24255] XFS (loop3): Quotacheck: Done. [ 1086.635784][ T4990] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1086.677418][T24310] netlink: 'syz.2.9391': attribute type 10 has an invalid length. [ 1086.712150][T24310] team0: Device hsr_slave_0 failed to register rx_handler [ 1086.800458][ T5017] XFS (loop3): Unmounting Filesystem [ 1086.859757][ T4990] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1086.879587][ T4990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.911855][ T4990] usb 2-1: Product: syz [ 1086.938400][ T4990] usb 2-1: Manufacturer: syz [ 1086.972167][ T4990] usb 2-1: SerialNumber: syz [ 1087.015825][ T4990] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1087.142088][ T4990] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1087.395841][T24325] ip6t_REJECT: ECHOREPLY is not supported [ 1087.581920][ T27] usb 2-1: USB disconnect, device number 38 [ 1087.611393][T24332] loop0: detected capacity change from 0 to 256 [ 1087.672565][T24332] FAT-fs (loop0): Directory bread(block 64) failed [ 1087.708943][T24332] FAT-fs (loop0): Directory bread(block 65) failed [ 1087.726998][T24332] FAT-fs (loop0): Directory bread(block 66) failed [ 1087.741411][T24332] FAT-fs (loop0): Directory bread(block 67) failed [ 1087.762555][T24332] FAT-fs (loop0): Directory bread(block 68) failed [ 1087.770286][ T26] audit: type=1326 audit(1785860945.257:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.3.9406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1087.797825][T24332] FAT-fs (loop0): Directory bread(block 69) failed [ 1087.804556][T24332] FAT-fs (loop0): Directory bread(block 70) failed [ 1087.827376][ T26] audit: type=1326 audit(1785860945.275:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.3.9406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1087.850184][T24332] FAT-fs (loop0): Directory bread(block 71) failed [ 1087.858285][T24332] FAT-fs (loop0): Directory bread(block 72) failed [ 1087.881427][T24334] loop2: detected capacity change from 0 to 4096 [ 1087.888276][T24332] FAT-fs (loop0): Directory bread(block 73) failed [ 1087.895497][ T26] audit: type=1326 audit(1785860945.285:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.3.9406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1087.936499][ T26] audit: type=1326 audit(1785860945.285:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.3.9406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1087.970293][T24334] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1088.026772][ T26] audit: type=1326 audit(1785860945.285:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.3.9406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1088.116571][T24334] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1088.191846][ T26] audit: type=1326 audit(1785860945.547:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24340 comm="syz.3.9408" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1088.288245][ T4990] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1088.299843][ T26] audit: type=1326 audit(1785860945.565:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24340 comm="syz.3.9408" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1088.320830][ T4990] ath9k_htc: Failed to initialize the device [ 1088.357112][ T27] usb 2-1: ath9k_htc: USB layer deinitialized [ 1088.397211][ T26] audit: type=1326 audit(1785860945.565:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24340 comm="syz.3.9408" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1088.463636][ T11] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1088.478545][ T5015] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1088.486168][ T5015] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1088.500592][ T26] audit: type=1326 audit(1785860945.565:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24340 comm="syz.3.9408" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7068b9de99 code=0x7ffc0000 [ 1088.547707][ T5015] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1088.576793][ T1075] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1088.600058][ T5015] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1088.607000][ T5015] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1088.999840][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9420'. [ 1089.554890][T24392] loop0: detected capacity change from 0 to 8 [ 1089.561547][T24390] loop3: detected capacity change from 0 to 1024 [ 1089.890768][T24400] netlink: 'syz.3.9437': attribute type 2 has an invalid length. [ 1089.898582][T24400] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1089.963445][ T26] audit: type=1326 audit(1785860947.306:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.4.9439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b5d9de99 code=0x7ffc0000 [ 1090.602005][T24428] loop3: detected capacity change from 0 to 256 [ 1090.627386][T24434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9451'. [ 1090.679721][T24428] FAT-fs (loop3): Directory bread(block 64) failed [ 1090.700884][T24428] FAT-fs (loop3): Directory bread(block 65) failed [ 1090.729998][T24428] FAT-fs (loop3): Directory bread(block 66) failed [ 1090.766250][T24428] FAT-fs (loop3): Directory bread(block 67) failed [ 1090.800194][T24428] FAT-fs (loop3): Directory bread(block 68) failed [ 1090.839350][T24428] FAT-fs (loop3): Directory bread(block 69) failed [ 1090.879060][T24428] FAT-fs (loop3): Directory bread(block 70) failed [ 1090.887639][T24428] FAT-fs (loop3): Directory bread(block 71) failed [ 1090.905234][T24428] FAT-fs (loop3): Directory bread(block 72) failed [ 1090.937491][T24428] FAT-fs (loop3): Directory bread(block 73) failed [ 1091.646202][T24466] netlink: 'syz.4.9470': attribute type 3 has an invalid length. [ 1091.695452][T24468] loop2: detected capacity change from 0 to 1024 [ 1091.848741][T24474] loop1: detected capacity change from 0 to 256 [ 1091.930109][T24474] FAT-fs (loop1): Directory bread(block 64) failed [ 1091.968783][T24474] FAT-fs (loop1): Directory bread(block 65) failed [ 1092.011028][T24474] FAT-fs (loop1): Directory bread(block 66) failed [ 1092.038389][T24474] FAT-fs (loop1): Directory bread(block 67) failed [ 1092.046256][T24474] FAT-fs (loop1): Directory bread(block 68) failed [ 1092.060050][T24474] FAT-fs (loop1): Directory bread(block 69) failed [ 1092.070913][ T4990] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1092.078374][T24474] FAT-fs (loop1): Directory bread(block 70) failed [ 1092.136144][T24474] FAT-fs (loop1): Directory bread(block 71) failed [ 1092.146636][T24474] FAT-fs (loop1): Directory bread(block 72) failed [ 1092.153242][T24474] FAT-fs (loop1): Directory bread(block 73) failed [ 1092.280076][ T4990] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1092.299511][ T4990] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1092.321115][ T4990] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.357586][ T4990] usb 4-1: config 220 has no interface number 2 [ 1092.380604][ T4990] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1092.417761][ T4990] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1092.424781][ T4990] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1092.432233][ T4990] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1092.465179][ T4990] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1092.477704][ T4990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.485776][ T4990] usb 4-1: Product: syz [ 1092.501161][ T4990] usb 4-1: Manufacturer: syz [ 1092.506219][ T4990] usb 4-1: SerialNumber: syz [ 1092.616832][T16074] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1092.738455][ T4990] usb 4-1: selecting invalid altsetting 0 [ 1092.756406][ T4990] usb 4-1: selecting invalid altsetting 0 [ 1092.762807][ T4990] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1092.798507][ T4990] usb 4-1: No valid video chain found. [ 1092.820980][T24501] loop2: detected capacity change from 0 to 64 [ 1092.855551][T16074] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1092.866627][ T4990] usb 4-1: selecting invalid altsetting 0 [ 1092.877428][T16074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1092.890366][ T4990] usbtest: probe of 4-1:220.1 failed with error -22 [ 1092.905666][T16074] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice=f5.01 [ 1092.928101][ T4990] usb 4-1: USB disconnect, device number 27 [ 1092.934170][T16074] usb 5-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 1092.947146][T21494] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1092.959593][T16074] usb 5-1: Manufacturer: syz [ 1092.990046][T16074] usb 5-1: config 0 descriptor?? [ 1093.003018][T16074] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1093.102840][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9490'. [ 1093.171346][T21494] usb 2-1: Using ep0 maxpacket: 8 [ 1093.178824][T21494] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1093.214485][T21494] usb 2-1: config 179 has no interface number 0 [ 1093.223601][T21494] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1093.241184][T21494] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1093.253642][T21494] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1093.270249][ T4990] usb 5-1: USB disconnect, device number 46 [ 1093.272510][T21494] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1093.353307][T21494] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1093.390576][T21494] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1093.411974][T21494] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1093.439057][T21494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.475829][T21494] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input98 [ 1093.745988][ T4990] usb 2-1: USB disconnect, device number 39 [ 1093.746166][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1093.760338][ T4990] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1093.996597][T24531] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1094.219042][T24538] loop4: detected capacity change from 0 to 512 [ 1094.283792][T24538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1094.489995][T24538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1094.529533][T24538] ext4 filesystem being mounted at /1791/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.575894][T24554] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9511'. [ 1094.732640][ T5007] EXT4-fs (loop4): unmounting filesystem. [ 1095.433121][T24588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.479508][T24588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.488330][T24588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.581808][T24588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.630717][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9553'. [ 1096.664892][T24641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9553'. [ 1097.089956][T24657] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1097.259966][T24664] loop0: detected capacity change from 0 to 512 [ 1097.318984][T24664] EXT4-fs (loop0): 1 truncate cleaned up [ 1097.332748][T24664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1097.433652][ T5008] EXT4-fs (loop0): unmounting filesystem. [ 1097.477943][ T4990] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1097.623684][T24674] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1097.691517][ T4990] usb 2-1: Using ep0 maxpacket: 32 [ 1097.708866][ T4990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1097.735583][ T4990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.777119][ T4990] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1097.808011][ T4990] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.852443][ T4990] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1097.873632][T24686] netlink: 'syz.3.9574': attribute type 10 has an invalid length. [ 1097.883539][ T4990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.903235][T24686] team0: Device hsr_slave_0 failed to register rx_handler [ 1097.926618][ T4990] usb 2-1: Product: syz [ 1097.930974][ T4990] usb 2-1: Manufacturer: syz [ 1097.944594][ T4990] usb 2-1: SerialNumber: syz [ 1098.229248][ T4990] usb 2-1: USB disconnect, device number 40 [ 1098.587833][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.820363][T24713] loop3: detected capacity change from 0 to 4096 [ 1098.993940][T24723] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 1099.050192][T24723] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 1099.233739][T24731] delete_channel: no stack [ 1099.497269][T24742] netlink: 'syz.0.9602': attribute type 3 has an invalid length. [ 1099.790139][T24748] loop2: detected capacity change from 0 to 2048 [ 1099.826950][T24748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1100.056643][T24760] loop4: detected capacity change from 0 to 16 [ 1100.104886][T24760] erofs: (device loop4): mounted with root inode @ nid 36. [ 1100.465502][T24776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1100.911419][T24792] loop0: detected capacity change from 0 to 128 [ 1100.980369][T24792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1100.999747][T24796] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1101.046444][T24792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1101.144164][T24802] xt_SECMARK: invalid mode: 4 [ 1101.546707][T24814] Cannot find del_set index 2 as target [ 1101.854275][ T4990] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1101.968394][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1101.974888][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1102.055347][ T4990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.086991][ T4990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.110661][ T4990] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1102.129545][ T4990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.146765][ T4990] usb 2-1: Product: syz [ 1102.160704][ T4990] usb 2-1: Manufacturer: syz [ 1102.181809][ T4990] usb 2-1: SerialNumber: syz [ 1102.645669][ T4990] usb 2-1: 0:2 : does not exist [ 1102.680556][ T4990] usb 2-1: USB disconnect, device number 41 [ 1102.792344][T24860] loop3: detected capacity change from 0 to 2048 [ 1102.912296][T24867] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1102.944708][ T5538] udevd[5538]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1103.237849][T24877] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5008] was attempted by ""[24877] [ 1103.511128][T24887] loop0: detected capacity change from 0 to 512 [ 1103.618363][T24887] [ 1103.620768][T24887] ====================================================== [ 1103.627823][T24887] WARNING: possible circular locking dependency detected [ 1103.634889][T24887] syzkaller #0 Not tainted [ 1103.639408][T24887] ------------------------------------------------------ [ 1103.646466][T24887] syz.0.9674/24887 is trying to acquire lock: [ 1103.652573][T24887] ffff888050942c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 1103.662915][T24887] [ 1103.662915][T24887] but task is already holding lock: [ 1103.670323][T24887] ffff888071686f20 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 1103.680330][T24887] [ 1103.680330][T24887] which lock already depends on the new lock. [ 1103.680330][T24887] [ 1103.690780][T24887] [ 1103.690780][T24887] the existing dependency chain (in reverse order) is: [ 1103.699865][T24887] [ 1103.699865][T24887] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 1103.707572][T24887] down_read+0x42/0x2d0 [ 1103.712300][T24887] ext4_setattr+0x93c/0x1bc0 [ 1103.717454][T24887] notify_change+0xca0/0xf90 [ 1103.722631][T24887] chown_common+0x489/0x640 [ 1103.727751][T24887] do_fchownat+0x147/0x240 [ 1103.732721][T24887] __x64_sys_chown+0x7e/0x90 [ 1103.737865][T24887] do_syscall_64+0x4c/0xa0 [ 1103.742840][T24887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.749370][T24887] [ 1103.749370][T24887] -> #1 (jbd2_handle){++++}-{0:0}: [ 1103.756733][T24887] wait_transaction_locked+0x1bf/0x270 [ 1103.762841][T24887] start_this_handle+0x7e7/0x2240 [ 1103.768445][T24887] jbd2__journal_start+0x2b7/0x5a0 [ 1103.774119][T24887] __ext4_journal_start_sb+0x187/0x3d0 [ 1103.780132][T24887] ext4_writepages+0xda9/0x2e70 [ 1103.785535][T24887] do_writepages+0x3c6/0x640 [ 1103.790777][T24887] __writeback_single_inode+0x153/0x1170 [ 1103.797016][T24887] writeback_sb_inodes+0xad5/0x17f0 [ 1103.802762][T24887] __writeback_inodes_wb+0x12a/0x3f0 [ 1103.808600][T24887] wb_writeback+0x484/0xd40 [ 1103.813654][T24887] wb_workfn+0xc1c/0xee0 [ 1103.818441][T24887] process_one_work+0x8ab/0x1160 [ 1103.823985][T24887] worker_thread+0xaf5/0x12a0 [ 1103.829211][T24887] kthread+0x29d/0x330 [ 1103.833899][T24887] ret_from_fork+0x1f/0x30 [ 1103.838914][T24887] [ 1103.838914][T24887] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 1103.847389][T24887] __lock_acquire+0x2d18/0x7c40 [ 1103.852828][T24887] lock_acquire+0x1bb/0x4a0 [ 1103.857966][T24887] percpu_down_read+0x44/0x1a0 [ 1103.863325][T24887] ext4_writepages+0x213/0x2e70 [ 1103.868721][T24887] do_writepages+0x3c6/0x640 [ 1103.873859][T24887] __writeback_single_inode+0x153/0x1170 [ 1103.880042][T24887] writeback_single_inode+0x3d2/0x8e0 [ 1103.885964][T24887] write_inode_now+0x17f/0x210 [ 1103.891281][T24887] iput+0x643/0x9c0 [ 1103.895637][T24887] ext4_xattr_block_set+0x2487/0x2fe0 [ 1103.901641][T24887] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 1103.907999][T24887] __ext4_expand_extra_isize+0x301/0x3e0 [ 1103.914174][T24887] __ext4_mark_inode_dirty+0x478/0x760 [ 1103.920276][T24887] ext4_evict_inode+0xa67/0x10e0 [ 1103.925876][T24887] evict+0x4b6/0x8b0 [ 1103.930348][T24887] ext4_orphan_cleanup+0xc32/0x1470 [ 1103.936102][T24887] ext4_fill_super+0x6f0c/0x78f0 [ 1103.941583][T24887] get_tree_bdev+0x3e6/0x610 [ 1103.946781][T24887] vfs_get_tree+0x88/0x270 [ 1103.951772][T24887] do_new_mount+0x247/0xa40 [ 1103.956844][T24887] __se_sys_mount+0x2e3/0x3d0 [ 1103.962154][T24887] do_syscall_64+0x4c/0xa0 [ 1103.967136][T24887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.973661][T24887] [ 1103.973661][T24887] other info that might help us debug this: [ 1103.973661][T24887] [ 1103.983913][T24887] Chain exists of: [ 1103.983913][T24887] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 1103.983913][T24887] [ 1103.997340][T24887] Possible unsafe locking scenario: [ 1103.997340][T24887] [ 1104.004805][T24887] CPU0 CPU1 [ 1104.010209][T24887] ---- ---- [ 1104.015592][T24887] lock(&ei->xattr_sem); [ 1104.019947][T24887] lock(jbd2_handle); [ 1104.026557][T24887] lock(&ei->xattr_sem); [ 1104.033425][T24887] lock(&sbi->s_writepages_rwsem); [ 1104.038645][T24887] [ 1104.038645][T24887] *** DEADLOCK *** [ 1104.038645][T24887] [ 1104.046810][T24887] 3 locks held by syz.0.9674/24887: [ 1104.052037][T24887] #0: ffff8880777520e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 1104.062179][T24887] #1: ffff888077752650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x431/0x10e0 [ 1104.071797][T24887] #2: ffff888071686f20 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 1104.082185][T24887] [ 1104.082185][T24887] stack backtrace: [ 1104.088135][T24887] CPU: 1 PID: 24887 Comm: syz.0.9674 Not tainted syzkaller #0 [ 1104.095637][T24887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 1104.105734][T24887] Call Trace: [ 1104.109108][T24887] [ 1104.112133][T24887] dump_stack_lvl+0x188/0x24e [ 1104.116974][T24887] ? load_image+0x410/0x410 [ 1104.121526][T24887] ? show_regs_print_info+0x12/0x12 [ 1104.126759][T24887] ? print_circular_bug+0x12b/0x1a0 [ 1104.131996][T24887] check_noncircular+0x296/0x330 [ 1104.136970][T24887] ? look_up_lock_class+0x75/0x140 [ 1104.142179][T24887] ? add_chain_block+0x9b0/0x9b0 [ 1104.147142][T24887] ? lockdep_lock+0xf1/0x1f0 [ 1104.151767][T24887] ? _find_first_zero_bit+0xd2/0x100 [ 1104.157110][T24887] __lock_acquire+0x2d18/0x7c40 [ 1104.162025][T24887] ? verify_lock_unused+0x140/0x140 [ 1104.167273][T24887] ? mark_lock+0x94/0x320 [ 1104.171647][T24887] ? __lock_acquire+0x1465/0x7c40 [ 1104.176712][T24887] lock_acquire+0x1bb/0x4a0 [ 1104.181248][T24887] ? ext4_writepages+0x213/0x2e70 [ 1104.186307][T24887] ? __lock_acquire+0x138a/0x7c40 [ 1104.191364][T24887] ? __might_sleep+0xd0/0xd0 [ 1104.196040][T24887] ? read_lock_is_recursive+0x10/0x10 [ 1104.201451][T24887] ? mark_lock+0x94/0x320 [ 1104.205810][T24887] percpu_down_read+0x44/0x1a0 [ 1104.210601][T24887] ? ext4_writepages+0x213/0x2e70 [ 1104.215668][T24887] ext4_writepages+0x213/0x2e70 [ 1104.220547][T24887] ? verify_lock_unused+0x140/0x140 [ 1104.225779][T24887] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1104.231789][T24887] ? verify_lock_unused+0x140/0x140 [ 1104.237024][T24887] ? ext4_read_folio+0x370/0x370 [ 1104.241984][T24887] ? mark_lock+0x94/0x320 [ 1104.246341][T24887] ? __lock_acquire+0x1465/0x7c40 [ 1104.251410][T24887] ? __lock_acquire+0x7c40/0x7c40 [ 1104.256461][T24887] ? do_raw_spin_lock+0x128/0x2f0 [ 1104.261509][T24887] ? do_raw_spin_unlock+0x11d/0x230 [ 1104.266730][T24887] ? ext4_read_folio+0x370/0x370 [ 1104.271699][T24887] do_writepages+0x3c6/0x640 [ 1104.276320][T24887] ? __writepage+0x130/0x130 [ 1104.280958][T24887] ? writeback_single_inode+0x3c7/0x8e0 [ 1104.286534][T24887] ? __lock_acquire+0x7c40/0x7c40 [ 1104.291604][T24887] ? do_raw_spin_lock+0x128/0x2f0 [ 1104.296669][T24887] __writeback_single_inode+0x153/0x1170 [ 1104.302348][T24887] writeback_single_inode+0x3d2/0x8e0 [ 1104.307754][T24887] ? write_inode_now+0x210/0x210 [ 1104.312731][T24887] write_inode_now+0x17f/0x210 [ 1104.317523][T24887] ? bdi_split_work_to_wbs+0x8f0/0x8f0 [ 1104.323015][T24887] ? rcu_is_watching+0x11/0xa0 [ 1104.327913][T24887] ? do_raw_spin_unlock+0x11d/0x230 [ 1104.333134][T24887] iput+0x643/0x9c0 [ 1104.336973][T24887] ext4_xattr_block_set+0x2487/0x2fe0 [ 1104.342376][T24887] ? __might_sleep+0xd0/0xd0 [ 1104.346998][T24887] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 1104.352484][T24887] ? ext4_xattr_block_find+0x24a/0x2c0 [ 1104.357974][T24887] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 1104.363826][T24887] __ext4_expand_extra_isize+0x301/0x3e0 [ 1104.369487][T24887] __ext4_mark_inode_dirty+0x478/0x760 [ 1104.374985][T24887] ext4_evict_inode+0xa67/0x10e0 [ 1104.379955][T24887] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1104.385884][T24887] ? do_raw_spin_unlock+0x11d/0x230 [ 1104.391113][T24887] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1104.397043][T24887] evict+0x4b6/0x8b0 [ 1104.400975][T24887] ? proc_nr_inodes+0x2f0/0x2f0 [ 1104.405945][T24887] ? do_raw_spin_unlock+0x11d/0x230 [ 1104.411170][T24887] ? _raw_spin_unlock+0x24/0x40 [ 1104.416054][T24887] ? iput+0x79f/0x9c0 [ 1104.420069][T24887] ext4_orphan_cleanup+0xc32/0x1470 [ 1104.425304][T24887] ? ext4_orphan_del+0xc90/0xc90 [ 1104.430278][T24887] ? ext4_register_sysfs+0x27e/0x2c0 [ 1104.435590][T24887] ? errseq_check_and_advance+0x62/0x120 [ 1104.441326][T24887] ext4_fill_super+0x6f0c/0x78f0 [ 1104.446310][T24887] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1104.452600][T24887] ? set_blocksize+0x1d0/0x470 [ 1104.457471][T24887] ? sb_set_blocksize+0xa5/0xe0 [ 1104.462356][T24887] get_tree_bdev+0x3e6/0x610 [ 1104.466984][T24887] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1104.473282][T24887] vfs_get_tree+0x88/0x270 [ 1104.477738][T24887] do_new_mount+0x247/0xa40 [ 1104.482270][T24887] __se_sys_mount+0x2e3/0x3d0 [ 1104.486970][T24887] ? __x64_sys_mount+0xc0/0xc0 [ 1104.491764][T24887] ? lockdep_hardirqs_on+0x94/0x140 [ 1104.496991][T24887] ? __x64_sys_mount+0x1c/0xc0 [ 1104.501775][T24887] do_syscall_64+0x4c/0xa0 [ 1104.506221][T24887] ? clear_bhb_loop+0x60/0xb0 [ 1104.511188][T24887] ? clear_bhb_loop+0x60/0xb0 [ 1104.515893][T24887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.521822][T24887] RIP: 0033:0x7fadfbf9f10a [ 1104.526383][T24887] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.546059][T24887] RSP: 002b:00007fadfcf36e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1104.554571][T24887] RAX: ffffffffffffffda RBX: 00007fadfcf36ee0 RCX: 00007fadfbf9f10a [ 1104.562570][T24887] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007fadfcf36ea0 [ 1104.570565][T24887] RBP: 0000200000000240 R08: 00007fadfcf36ee0 R09: 0000000000000000 [ 1104.578557][T24887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1104.586573][T24887] R13: 00007fadfcf36ea0 R14: 000000000000047a R15: 000000000000002c [ 1104.594577][T24887] [ 1104.608794][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.9674: iget: bad extra_isize 90 (inode size 256) [ 1104.633781][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.685722][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.9674: error while reading EA inode 11 err=-117 [ 1104.706960][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.719140][T24887] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1104.737413][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.9674: iget: bad extra_isize 90 (inode size 256) [ 1104.758192][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.764820][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.9674: error while reading EA inode 11 err=-117 [ 1104.779497][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.786126][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.9674: iget: bad extra_isize 90 (inode size 256) [ 1104.801943][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.808751][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.9674: error while reading EA inode 18 err=-117 [ 1104.821515][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.828113][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.9674: iget: bad extra_isize 90 (inode size 256) [ 1104.842284][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.848900][T24887] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.9674: error while reading EA inode 18 err=-117 [ 1104.861637][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.868331][T24887] EXT4-fs (loop0): 1 orphan inode deleted [ 1104.874135][T24887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1104.913702][T24887] EXT4-fs error (device loop0): __ext4_iget:5102: inode #14: block 1886221359: comm syz.0.9674: invalid block [ 1104.925915][T24887] EXT4-fs (loop0): Remounting filesystem read-only [ 1104.946073][ T5008] EXT4-fs (loop0): unmounting filesystem.