last executing test programs: 3m32.717342361s ago: executing program 4 (id=9374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x810) 3m32.703884331s ago: executing program 4 (id=9376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 3m32.633239433s ago: executing program 4 (id=9377): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000037c0)=0x4000000, 0x4) 3m32.430107688s ago: executing program 4 (id=9380): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m31.714821176s ago: executing program 4 (id=9392): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800011, &(0x7f00000004c0)={[{@fat=@errors_remount}, {@utf8}, {@rodir}, {@rodir}, {@utf8}, {@rodir}, {@rodir}, {@numtail}, {@fat=@discard}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_lower}, {@uni_xlate}, {@shortname_winnt}]}, 0x1, 0x2a6, &(0x7f0000000740)="$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") mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0) 3m30.936063865s ago: executing program 4 (id=9407): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) 3m30.696005451s ago: executing program 32 (id=9407): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) 3.62027416s ago: executing program 3 (id=12737): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x7, @string={0x7, 0x3, "ebf78bbb7a"}}}, 0x0) 3.025349995s ago: executing program 1 (id=12747): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sync() 2.888966069s ago: executing program 0 (id=12750): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x10, 0x6, 0x518, 0x0, 0x358, 0x1a0, 0x288, 0x358, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@local, @private2, [0x0, 0x0, 0x0, 0xffffffff], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'veth1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x11, 0x0, 0x7, 0x65}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x2a, "24390d4d8e6abaf968029911108a220a07a511dec200"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 2.575091746s ago: executing program 0 (id=12753): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008ca15010140000102030109022e0001010180f309040000020103200309050e7208006b06030625010667c109050b"], 0x0) 2.325561022s ago: executing program 1 (id=12756): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 2.131484208s ago: executing program 1 (id=12757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x88, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x50, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0xfffffffffffffcfe, 0x7, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0xb}]}}}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 1.844950064s ago: executing program 1 (id=12760): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89e0, 0x0) 90.774018ms ago: executing program 2 (id=12787): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14}) 0s ago: executing program 3 (id=12788): r0 = openat$mixer(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0) kernel console output (not intermixed with test programs): ith smb3 [ 1094.919830][T10180] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input89 [ 1095.194655][T29149] bond0: option xmit_hash_policy: invalid value (14) [ 1095.304444][T28605] usb 4-1: USB disconnect, device number 35 [ 1095.353708][T10180] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1095.571710][T10180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1095.594640][T10180] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1095.615633][T10180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.643766][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11154'. [ 1095.872064][T10180] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 1096.122890][T10180] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 16:c7:8e:ce:c5:50 [ 1096.163088][T10180] usb 1-1: USB disconnect, device number 33 [ 1096.181888][T10180] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 1096.281051][T29196] netlink: 'syz.2.11167': attribute type 12 has an invalid length. [ 1096.312280][T29196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11167'. [ 1096.482678][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11172'. [ 1096.696366][T29216] ieee802154 phy0 wpan0: encryption failed: -90 [ 1096.829706][T29221] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1096.870721][T29221] overlayfs: missing 'lowerdir' [ 1097.206086][ T4898] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1097.308614][T10180] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1097.413781][ T4898] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1097.442182][ T4898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.467447][ T4898] usb 6-1: config 0 descriptor?? [ 1097.489377][ T27] audit: type=1326 audit(2000002937.692:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29254 comm="syz.2.11197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1097.492305][T29255] xt_cgroup: path and classid specified [ 1097.541843][T10180] usb 2-1: Using ep0 maxpacket: 16 [ 1097.558701][T10180] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1097.567385][ T27] audit: type=1326 audit(2000002937.692:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29254 comm="syz.2.11197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1097.579440][T10180] usb 2-1: config 0 has no interface number 0 [ 1097.637500][T10180] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1097.667918][T10180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.674914][ T27] audit: type=1326 audit(2000002937.720:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29254 comm="syz.2.11197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1097.691759][T10180] usb 2-1: Product: syz [ 1097.716185][ T4898] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1097.716506][T10180] usb 2-1: Manufacturer: syz [ 1097.731758][ T4898] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1097.780117][T10180] usb 2-1: SerialNumber: syz [ 1097.786858][T10180] usb 2-1: config 0 descriptor?? [ 1097.820757][T10180] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1097.840983][ T27] audit: type=1326 audit(2000002937.720:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29254 comm="syz.2.11197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1097.905054][ T27] audit: type=1326 audit(2000002937.720:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29254 comm="syz.2.11197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1097.942956][ T4898] [drm:udl_init] *ERROR* Selecting channel failed [ 1097.969804][ T4898] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 1097.999349][ T4898] [drm] Initialized udl on minor 2 [ 1098.019325][ T4898] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1098.049442][ T4898] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1098.077135][T23108] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1098.093659][ T4898] usb 6-1: USB disconnect, device number 12 [ 1098.105453][T23108] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1098.125887][T23108] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1098.273660][T10180] gspca_spca1528: reg_w err -71 [ 1098.315857][T10180] spca1528: probe of 2-1:0.1 failed with error -71 [ 1098.358815][T10180] usb 2-1: USB disconnect, device number 23 [ 1098.366298][T29276] netlink: 'syz.3.11207': attribute type 11 has an invalid length. [ 1098.374242][T29276] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11207'. [ 1098.622755][T29282] Process accounting paused [ 1098.773479][T29290] loop5: detected capacity change from 0 to 512 [ 1098.821753][T29290] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.11215: bg 0: block 5: invalid block bitmap [ 1098.826817][T29270] loop0: detected capacity change from 0 to 32768 [ 1098.841370][T29290] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1098.863731][T29270] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1098.868328][T29290] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.11215: invalid indirect mapped block 3 (level 2) [ 1098.871906][T29270] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1098.957028][T29296] loop3: detected capacity change from 0 to 64 [ 1098.980817][T29270] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1098.998355][T23108] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1099.009020][T23108] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1099.027069][ T4266] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1099.036966][T29290] EXT4-fs (loop5): 1 orphan inode deleted [ 1099.051945][T29290] EXT4-fs (loop5): 1 truncate cleaned up [ 1099.062883][T29290] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1099.156551][T23108] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 1099.194810][T23108] gfs2: fsid=syz:syz.0: jid=0: Done [ 1099.220847][T29270] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1099.288143][T25046] EXT4-fs (loop5): unmounting filesystem. [ 1099.733549][T29270] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1099.828129][T29324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11229'. [ 1099.890141][T29270] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 1099.898285][T29328] netlink: 2120 bytes leftover after parsing attributes in process `syz.2.11231'. [ 1099.950846][T29270] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 1099.999673][T29270] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 1100.021564][T29270] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 1100.032980][T29270] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 1100.273491][ T4843] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 1100.362881][ T4843] CPU: 1 PID: 4843 Comm: syz-executor Not tainted syzkaller #0 [ 1100.370489][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.379648][T29342] Process accounting paused [ 1100.380553][ T4843] Call Trace: [ 1100.380617][ T4843] [ 1100.380625][ T4843] dump_stack_lvl+0x188/0x24e [ 1100.396054][ T4843] ? show_regs_print_info+0x12/0x12 [ 1100.401284][ T4843] ? load_image+0x410/0x410 [ 1100.405812][ T4843] ? do_raw_spin_unlock+0x11d/0x230 [ 1100.411037][ T4843] gfs2_assert_warn_i+0x187/0x2c0 [ 1100.416097][ T4843] gfs2_quota_cleanup+0x48c/0x670 [ 1100.421153][ T4843] gfs2_make_fs_ro+0x3e0/0x4c0 [ 1100.425945][ T4843] ? gfs2_dinode_out+0xb00/0xb00 [ 1100.430909][ T4843] ? do_raw_spin_lock+0x128/0x2f0 [ 1100.435952][ T4843] ? __rwlock_init+0x140/0x140 [ 1100.440736][ T4843] ? do_raw_spin_unlock+0x11d/0x230 [ 1100.445953][ T4843] gfs2_put_super+0x220/0x920 [ 1100.450661][ T4843] ? gfs2_evict_inode+0x1290/0x1290 [ 1100.455877][ T4843] generic_shutdown_super+0x130/0x340 [ 1100.461273][ T4843] kill_block_super+0x7c/0xe0 [ 1100.465973][ T4843] deactivate_locked_super+0x93/0xf0 [ 1100.471281][ T4843] cleanup_mnt+0x471/0x4f0 [ 1100.475712][ T4843] task_work_run+0x1d0/0x260 [ 1100.480433][ T4843] ? task_work_cancel+0x220/0x220 [ 1100.485485][ T4843] ? exit_to_user_mode_loop+0x3b/0x110 [ 1100.491060][ T4843] exit_to_user_mode_loop+0xe6/0x110 [ 1100.496378][ T4843] exit_to_user_mode_prepare+0xee/0x180 [ 1100.501991][ T4843] syscall_exit_to_user_mode+0x16/0x40 [ 1100.507473][ T4843] do_syscall_64+0x58/0xa0 [ 1100.511913][ T4843] ? clear_bhb_loop+0x60/0xb0 [ 1100.516608][ T4843] ? clear_bhb_loop+0x60/0xb0 [ 1100.521306][ T4843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1100.527225][ T4843] RIP: 0033:0x7f0d9c59f317 [ 1100.531670][ T4843] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1100.551299][ T4843] RSP: 002b:00007fff9bbaa3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1100.559741][ T4843] RAX: 0000000000000000 RBX: 00007f0d9c634474 RCX: 00007f0d9c59f317 [ 1100.567733][ T4843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9bbaa490 [ 1100.575719][ T4843] RBP: 00007fff9bbaa490 R08: 00007fff9bbab490 R09: 00000000ffffffff [ 1100.583711][ T4843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9bbab520 [ 1100.591713][ T4843] R13: 00007f0d9c634474 R14: 0000000000100d51 R15: 00007fff9bbab560 [ 1100.599711][ T4843] [ 1100.952272][T29371] loop2: detected capacity change from 0 to 128 [ 1101.519719][T29387] binfmt_misc: register: failed to install interpreter file ./file0 [ 1101.554765][T29363] loop5: detected capacity change from 0 to 32768 [ 1101.588731][T29363] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1101.636489][T29363] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1101.687972][T29363] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1101.714369][ T4898] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1101.721218][ T4898] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1101.862130][ T4898] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms [ 1101.904227][ T4898] gfs2: fsid=syz:syz.0: jid=0: Done [ 1101.915879][T29363] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1102.113359][T29410] sock: sock_timestamping_bind_phc: sock not bind to device [ 1102.426024][T29363] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1102.526313][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.526470][ T27] audit: type=1326 audit(2000002942.345:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1102.532627][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1102.697528][T29363] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 1102.706864][ T27] audit: type=1326 audit(2000002942.373:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1102.751708][T29363] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 1102.772486][T29363] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 1102.785108][T29363] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 1102.795360][T29363] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 1102.817122][ T27] audit: type=1326 audit(2000002942.373:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1102.872283][T29435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11284'. [ 1102.881370][T29435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11284'. [ 1102.931298][ T27] audit: type=1326 audit(2000002942.373:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1102.976123][T29441] loop3: detected capacity change from 0 to 128 [ 1103.007024][ T27] audit: type=1326 audit(2000002942.382:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1103.035293][T25046] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 1103.041380][ T27] audit: type=1326 audit(2000002942.382:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1103.076050][ T27] audit: type=1326 audit(2000002942.382:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1103.109894][T25046] CPU: 1 PID: 25046 Comm: syz-executor Not tainted syzkaller #0 [ 1103.117577][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.127645][T25046] Call Trace: [ 1103.130938][T25046] [ 1103.133879][T25046] dump_stack_lvl+0x188/0x24e [ 1103.138588][T25046] ? show_regs_print_info+0x12/0x12 [ 1103.143813][T25046] ? load_image+0x410/0x410 [ 1103.148343][T25046] ? do_raw_spin_unlock+0x11d/0x230 [ 1103.153567][T25046] gfs2_assert_warn_i+0x187/0x2c0 [ 1103.158619][T25046] gfs2_quota_cleanup+0x48c/0x670 [ 1103.163666][T25046] gfs2_make_fs_ro+0x3e0/0x4c0 [ 1103.168454][T25046] ? gfs2_dinode_out+0xb00/0xb00 [ 1103.173391][T25046] ? do_raw_spin_lock+0x128/0x2f0 [ 1103.178415][T25046] ? __rwlock_init+0x140/0x140 [ 1103.183175][T25046] ? do_raw_spin_unlock+0x11d/0x230 [ 1103.188368][T25046] gfs2_put_super+0x220/0x920 [ 1103.193046][T25046] ? gfs2_evict_inode+0x1290/0x1290 [ 1103.198242][T25046] generic_shutdown_super+0x130/0x340 [ 1103.203609][T25046] kill_block_super+0x7c/0xe0 [ 1103.208285][T25046] deactivate_locked_super+0x93/0xf0 [ 1103.213569][T25046] cleanup_mnt+0x471/0x4f0 [ 1103.217987][T25046] task_work_run+0x1d0/0x260 [ 1103.222586][T25046] ? task_work_cancel+0x220/0x220 [ 1103.227613][T25046] ? exit_to_user_mode_loop+0x3b/0x110 [ 1103.233074][T25046] exit_to_user_mode_loop+0xe6/0x110 [ 1103.238357][T25046] exit_to_user_mode_prepare+0xee/0x180 [ 1103.243901][T25046] syscall_exit_to_user_mode+0x16/0x40 [ 1103.249356][T25046] do_syscall_64+0x58/0xa0 [ 1103.253769][T25046] ? clear_bhb_loop+0x60/0xb0 [ 1103.258440][T25046] ? clear_bhb_loop+0x60/0xb0 [ 1103.263115][T25046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.269004][T25046] RIP: 0033:0x7f21d939f317 [ 1103.273413][T25046] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1103.293009][T25046] RSP: 002b:00007ffc9969cce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1103.301418][T25046] RAX: 0000000000000000 RBX: 00007f21d9434474 RCX: 00007f21d939f317 [ 1103.309383][T25046] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9969cda0 [ 1103.317344][T25046] RBP: 00007ffc9969cda0 R08: 00007ffc9969dda0 R09: 00000000ffffffff [ 1103.325308][T25046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9969de30 [ 1103.333272][T25046] R13: 00007f21d9434474 R14: 0000000000101784 R15: 00007ffc9969de70 [ 1103.341245][T25046] [ 1103.361797][ T5202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1103.367954][ T27] audit: type=1326 audit(2000002942.382:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1103.403741][ T27] audit: type=1326 audit(2000002942.382:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29424 comm="syz.3.11279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1104.260896][T28605] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1104.473189][T29489] loop1: detected capacity change from 0 to 256 [ 1104.496130][T28605] usb 4-1: Using ep0 maxpacket: 8 [ 1104.503264][T28605] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1104.537460][T28605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1104.589660][T28605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1104.637084][T28605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1104.674647][T28605] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1104.685024][T28605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1104.724162][T28605] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1104.780452][T28605] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1104.793248][T29501] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.11315'. [ 1104.806187][T28605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.829201][T29501] netlink: zone id is out of range [ 1104.834736][T28605] usb 4-1: Product: syz [ 1104.839252][T29501] netlink: get zone limit has 8 unknown bytes [ 1104.853642][T28605] usb 4-1: Manufacturer: syz [ 1104.858288][T28605] usb 4-1: SerialNumber: syz [ 1104.882509][T28605] usb 4-1: config 0 descriptor?? [ 1104.904558][T29463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1104.925583][T29463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1105.077915][T29512] loop0: detected capacity change from 0 to 512 [ 1105.141247][T29512] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1105.244257][T29512] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 1105.339648][ T4927] usb 4-1: USB disconnect, device number 36 [ 1106.075728][T29544] netlink: 'syz.3.11337': attribute type 21 has an invalid length. [ 1106.110187][T29544] netlink: 'syz.3.11337': attribute type 7 has an invalid length. [ 1106.504943][T29562] ipt_ECN: cannot use operation on non-tcp rule [ 1106.621835][T29568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11349'. [ 1107.404027][T29601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11365'. [ 1107.443037][T29601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11365'. [ 1107.452134][T29601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11365'. [ 1107.587217][T29609] device wlan0 entered promiscuous mode [ 1107.785558][T29619] loop1: detected capacity change from 0 to 128 [ 1107.962815][ T4898] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1108.181151][ T4898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1108.192319][ T4898] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1108.201462][ T4898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.456913][ T4898] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 1108.677408][ T4898] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 76:f6:6f:16:6a:80 [ 1108.717172][ T4898] usb 3-1: USB disconnect, device number 125 [ 1108.743635][ T4898] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 1108.871179][T29656] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1109.076338][T29665] loop0: detected capacity change from 0 to 16 [ 1109.137677][T29665] erofs: (device loop0): mounted with root inode @ nid 36. [ 1109.151039][T29665] syz.0.11394: attempt to access beyond end of device [ 1109.151039][T29665] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1109.163867][T29665] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1109.163898][T29665] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1109.170017][T29665] syz.0.11394: attempt to access beyond end of device [ 1109.170017][T29665] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1109.170294][T29665] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 1109.170522][ T27] audit: type=1800 audit(2000002948.475:226): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11394" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1109.417907][T29669] loop5: detected capacity change from 0 to 1024 [ 1109.424569][ T27] audit: type=1326 audit(2000002948.706:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29673 comm="syz.0.11398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1109.528493][ T27] audit: type=1326 audit(2000002948.780:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29673 comm="syz.0.11398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1109.647850][T29679] comedi comedi0: comedi_config --init_data is deprecated [ 1109.655202][ T27] audit: type=1326 audit(2000002948.798:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29673 comm="syz.0.11398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1109.761430][ T27] audit: type=1326 audit(2000002948.798:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29673 comm="syz.0.11398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1109.791837][T29686] IPv6: sit2: Disabled Multicast RS [ 1110.393152][T29716] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1110.654056][T29730] netlink: 'syz.3.11428': attribute type 2 has an invalid length. [ 1110.716930][T29730] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11428'. [ 1110.865381][T29740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11434'. [ 1110.991644][T29746] loop0: detected capacity change from 0 to 512 [ 1111.007017][ T27] audit: type=1326 audit(2000002950.164:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.1.11437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1111.054046][T29746] EXT4-fs: Ignoring removed nobh option [ 1111.069673][ T27] audit: type=1326 audit(2000002950.174:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.1.11437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1111.083172][T29746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1111.093928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1111.145676][ T27] audit: type=1326 audit(2000002950.174:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.1.11437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1111.225922][T29746] EXT4-fs (loop0): 1 truncate cleaned up [ 1111.231638][T29746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1111.303661][ T4843] EXT4-fs (loop0): unmounting filesystem. [ 1111.618292][T29771] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1111.732252][ T4927] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1111.943136][ T4927] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1111.955411][ T4927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.968846][ T4927] usb 1-1: config 0 descriptor?? [ 1112.111987][ T4898] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1112.205500][T29791] loop1: detected capacity change from 0 to 32768 [ 1112.209707][ T4927] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1112.224044][T29791] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1112.224848][ T4927] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1112.240336][T29791] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1112.251025][T29791] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1112.262002][ T4798] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1112.269157][ T4798] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1112.311728][ T4798] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 1112.320698][ T4798] gfs2: fsid=syz:syz.0: jid=0: Done [ 1112.326260][T29791] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1112.349588][ T4898] usb 3-1: Using ep0 maxpacket: 32 [ 1112.361050][ T4898] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1112.378644][ T4898] usb 3-1: config 2 has no interface number 0 [ 1112.385159][ T4898] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1112.395666][ T4898] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1112.405052][ T4898] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1112.414289][ T4898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.422763][ T4898] usb 3-1: Product: syz [ 1112.427373][ T4898] usb 3-1: Manufacturer: syz [ 1112.432103][ T4898] usb 3-1: SerialNumber: syz [ 1112.440150][T29785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1112.442575][ T4927] [drm:udl_init] *ERROR* Selecting channel failed [ 1112.482707][ T4927] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1112.501616][ T4927] [drm] Initialized udl on minor 2 [ 1112.511166][ T4927] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1112.525068][ T4927] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1112.583963][ T4927] usb 1-1: USB disconnect, device number 34 [ 1112.626909][T10180] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1112.647130][T10180] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1112.679666][T29785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1112.696903][T10180] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1112.759971][T29797] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11456'. [ 1112.771100][T29797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11456'. [ 1112.803068][T29791] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1112.887510][T29799] loop3: detected capacity change from 0 to 256 [ 1112.901539][T29799] /dev/loop3: Can't open blockdev [ 1112.938091][ T4898] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1112.967870][ T4898] asix: probe of 3-1:2.88 failed with error -71 [ 1112.972066][T29791] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 1112.999838][ T4898] usb 3-1: USB disconnect, device number 126 [ 1113.021428][T29791] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 1113.062055][T29791] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 1113.083040][T29791] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 1113.093478][T29791] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 1113.228845][ T4847] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 1113.251197][ T4847] CPU: 1 PID: 4847 Comm: syz-executor Not tainted syzkaller #0 [ 1113.258798][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.268876][ T4847] Call Trace: [ 1113.272171][ T4847] [ 1113.275116][ T4847] dump_stack_lvl+0x188/0x24e [ 1113.279838][ T4847] ? show_regs_print_info+0x12/0x12 [ 1113.285067][ T4847] ? load_image+0x410/0x410 [ 1113.289607][ T4847] ? do_raw_spin_unlock+0x11d/0x230 [ 1113.294834][ T4847] gfs2_assert_warn_i+0x187/0x2c0 [ 1113.299897][ T4847] gfs2_quota_cleanup+0x48c/0x670 [ 1113.304950][ T4847] gfs2_make_fs_ro+0x3e0/0x4c0 [ 1113.309746][ T4847] ? gfs2_dinode_out+0xb00/0xb00 [ 1113.314699][ T4847] ? do_raw_spin_lock+0x128/0x2f0 [ 1113.319739][ T4847] ? __rwlock_init+0x140/0x140 [ 1113.324524][ T4847] ? do_raw_spin_unlock+0x11d/0x230 [ 1113.329761][ T4847] gfs2_put_super+0x220/0x920 [ 1113.334468][ T4847] ? gfs2_evict_inode+0x1290/0x1290 [ 1113.339689][ T4847] generic_shutdown_super+0x130/0x340 [ 1113.345087][ T4847] kill_block_super+0x7c/0xe0 [ 1113.349795][ T4847] deactivate_locked_super+0x93/0xf0 [ 1113.355106][ T4847] cleanup_mnt+0x471/0x4f0 [ 1113.359551][ T4847] task_work_run+0x1d0/0x260 [ 1113.364169][ T4847] ? task_work_cancel+0x220/0x220 [ 1113.369217][ T4847] ? exit_to_user_mode_loop+0x3b/0x110 [ 1113.374685][ T4847] exit_to_user_mode_loop+0xe6/0x110 [ 1113.379973][ T4847] exit_to_user_mode_prepare+0xee/0x180 [ 1113.385517][ T4847] syscall_exit_to_user_mode+0x16/0x40 [ 1113.390971][ T4847] do_syscall_64+0x58/0xa0 [ 1113.395386][ T4847] ? clear_bhb_loop+0x60/0xb0 [ 1113.400061][ T4847] ? clear_bhb_loop+0x60/0xb0 [ 1113.404738][ T4847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.410635][ T4847] RIP: 0033:0x7f862319f317 [ 1113.415043][ T4847] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1113.434650][ T4847] RSP: 002b:00007ffe56c98c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1113.443061][ T4847] RAX: 0000000000000000 RBX: 00007f8623234474 RCX: 00007f862319f317 [ 1113.451030][ T4847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe56c98cc0 [ 1113.458992][ T4847] RBP: 00007ffe56c98cc0 R08: 00007ffe56c99cc0 R09: 00000000ffffffff [ 1113.466954][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe56c99d50 [ 1113.474918][ T4847] R13: 00007f8623234474 R14: 0000000000103c6a R15: 00007ffe56c99d90 [ 1113.482895][ T4847] [ 1113.485941][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.641349][T29812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1113.680092][T29812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1113.712332][T29812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1113.801166][ T4927] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1113.940203][T29828] loop0: detected capacity change from 0 to 512 [ 1113.962107][T29828] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1113.996074][T23108] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1114.006908][ T4927] usb 6-1: Using ep0 maxpacket: 8 [ 1114.014144][ T4927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1114.020170][T29828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.11470: bg 0: block 255: padding at end of block bitmap is not set [ 1114.024302][ T4927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1114.050748][ T4927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1114.076880][ T4927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1114.097002][ T4927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1114.107525][ T4927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1114.117385][ T4927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1114.129719][ T4927] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1114.139119][ T4927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.147169][ T4927] usb 6-1: Product: syz [ 1114.149230][T29828] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1114.152327][ T4927] usb 6-1: Manufacturer: syz [ 1114.176767][ T4927] usb 6-1: SerialNumber: syz [ 1114.183467][ T4927] usb 6-1: config 0 descriptor?? [ 1114.189240][T29810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1114.202928][T29828] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.11470: invalid indirect mapped block 1 (level 1) [ 1114.232745][T29810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1114.247504][T23108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1114.263414][T29828] EXT4-fs (loop0): 1 truncate cleaned up [ 1114.269480][T29828] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1114.287250][T23108] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1114.314115][T23108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.417954][ T4843] EXT4-fs (loop0): unmounting filesystem. [ 1114.618929][T23108] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 1114.642742][ T4927] usb 6-1: USB disconnect, device number 13 [ 1114.688599][T29848] netlink: 'syz.1.11481': attribute type 3 has an invalid length. [ 1114.838004][T23108] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 26:38:19:65:90:f7 [ 1114.849254][T29854] ipt_rpfilter: unknown options [ 1114.955942][T23108] usb 4-1: USB disconnect, device number 37 [ 1115.011683][T23108] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 1115.182279][T29865] device bridge3 entered promiscuous mode [ 1115.306813][ T4927] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1115.520990][T29858] loop1: detected capacity change from 0 to 32768 [ 1115.540360][ T4927] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1115.574340][ T4927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.621596][T29878] [U] [ 1115.622732][ T4927] usb 3-1: config 0 descriptor?? [ 1115.663412][ T4927] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1116.094525][ T4927] gspca_stv06xx: I2C: Read error writing address: -71 [ 1116.131100][ T4927] usb 3-1: USB disconnect, device number 127 [ 1116.646464][T29913] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1116.664601][T29913] [U] J"—e:ÀÆ" [ 1118.615862][T30003] loop3: detected capacity change from 0 to 2048 [ 1118.814743][T30007] loop5: detected capacity change from 0 to 8 [ 1118.954368][T29981] loop1: detected capacity change from 0 to 32768 [ 1118.988048][T29981] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1119.047742][T29983] loop2: detected capacity change from 0 to 32768 [ 1119.097206][T29983] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1119.137432][T29983] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1119.172266][T29983] BTRFS info (device loop2): using free space tree [ 1119.319071][ T5202] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5202) [ 1119.341343][T30015] loop5: detected capacity change from 0 to 4096 [ 1119.385988][T30015] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1119.478118][T29983] BTRFS info (device loop2): enabling ssd optimizations [ 1119.531376][ T4898] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1119.672539][ T4842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1119.734886][T30009] loop3: detected capacity change from 0 to 32768 [ 1119.749830][ T4898] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1119.774050][ T4898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.850665][ T4898] usb 2-1: config 0 descriptor?? [ 1120.079099][ T4898] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1120.114564][ T4898] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1120.201024][T30050] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1120.239586][T30050] [U] J"—e:ÀÆ" [ 1120.301106][ T4898] [drm:udl_init] *ERROR* Selecting channel failed [ 1120.325726][ T4898] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1120.359051][ T4898] [drm] Initialized udl on minor 2 [ 1120.376049][ T4898] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1120.398539][ T4898] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1120.419183][ T4898] usb 2-1: USB disconnect, device number 24 [ 1120.444438][T30052] loop2: detected capacity change from 0 to 4096 [ 1120.453623][T23108] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1120.557037][T30052] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1120.586557][T30052] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1120.674083][T30064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11564'. [ 1120.689946][T30052] ntfs: volume version 3.1. [ 1120.856808][T30052] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1120.881773][T30052] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1121.125112][ T4842] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp860. You might want to try to use the mount option nls=utf8. [ 1121.164751][ T4842] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1122.248891][T30138] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11601'. [ 1122.364766][T30145] loop3: detected capacity change from 0 to 16 [ 1122.392186][T30145] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1122.409903][T30145] /dev/loop3: Can't open blockdev [ 1122.629806][T10177] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1122.836945][T10177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1122.849377][T30167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11615'. [ 1122.865029][T10177] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1122.885458][T10177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.906543][T10177] usb 3-1: Product: syz [ 1122.931722][T10177] usb 3-1: Manufacturer: syz [ 1122.937224][T10177] usb 3-1: SerialNumber: syz [ 1122.949920][T30170] netlink: 'syz.1.11617': attribute type 1 has an invalid length. [ 1122.988435][T10177] usb 3-1: config 0 descriptor?? [ 1123.020984][T10177] hub 3-1:0.0: bad descriptor, ignoring hub [ 1123.051709][T10177] hub: probe of 3-1:0.0 failed with error -5 [ 1123.074742][T10177] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input91 [ 1123.098536][T30178] loop1: detected capacity change from 0 to 256 [ 1123.143195][T30178] FAT-fs (loop1): Directory bread(block 1285) failed [ 1123.182469][T30178] FAT-fs (loop1): Directory bread(block 1286) failed [ 1123.236041][T30178] FAT-fs (loop1): Directory bread(block 1287) failed [ 1123.243885][T30178] FAT-fs (loop1): Directory bread(block 1288) failed [ 1123.290904][T30178] FAT-fs (loop1): Directory bread(block 1285) failed [ 1123.314111][T30182] loop0: detected capacity change from 0 to 4096 [ 1123.352991][T30182] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1123.353405][T30178] FAT-fs (loop1): Directory bread(block 1286) failed [ 1123.413474][T30182] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1123.468507][T30178] FAT-fs (loop1): Directory bread(block 1287) failed [ 1123.513476][T30178] FAT-fs (loop1): Directory bread(block 1288) failed [ 1123.530087][T30182] ntfs: volume version 3.1. [ 1123.542142][T30178] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 1123.609542][T30190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11627'. [ 1123.624856][T30182] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1123.644861][T30190] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11627'. [ 1123.675955][T30190] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11627'. [ 1123.681076][ T4981] usb 3-1: USB disconnect, device number 2 [ 1123.706938][T30182] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1123.730509][T30192] netlink: 'syz.3.11628': attribute type 4 has an invalid length. [ 1123.981116][T30200] netlink: 'syz.3.11633': attribute type 30 has an invalid length. [ 1124.260535][T30209] loop3: detected capacity change from 0 to 4096 [ 1124.315577][T30209] /dev/loop3: Can't open blockdev [ 1124.316351][T30214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11640'. [ 1124.380861][ T5202] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1124.564715][T30225] netlink: 'syz.1.11645': attribute type 3 has an invalid length. [ 1124.860927][ T4898] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1124.984644][T30245] loop3: detected capacity change from 0 to 512 [ 1125.068282][ T4898] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1125.083544][ T5202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1125.113278][ T4898] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1125.167946][ T4898] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1125.196946][ T4898] usb 6-1: Manufacturer: syz [ 1125.201588][ T4898] usb 6-1: SerialNumber: syz [ 1125.470083][ T4898] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1125.497060][ T4898] usb 6-1: USB disconnect, device number 14 [ 1125.505496][T30264] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1126.095504][T30279] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1126.337756][T30259] loop2: detected capacity change from 0 to 40427 [ 1126.396584][T30259] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 1126.429878][T30259] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1126.539971][T30259] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1126.590680][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1126.590694][ T27] audit: type=1326 audit(2000002964.556:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.5.11679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x0 [ 1126.703802][T30259] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1126.723810][T30259] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1126.776003][T30259] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 1126.975199][T30314] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1127.492031][T30326] loop1: detected capacity change from 0 to 4096 [ 1127.508738][T30332] netlink: 'syz.2.11688': attribute type 16 has an invalid length. [ 1127.558429][T30332] netlink: 'syz.2.11688': attribute type 17 has an invalid length. [ 1127.578735][T30326] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1127.604911][T30332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1127.625321][T30326] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1127.666571][T30332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1127.687585][T30326] ntfs: volume version 3.1. [ 1127.734641][T30336] loop0: detected capacity change from 0 to 1024 [ 1127.752645][T30332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1127.754080][T30326] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1127.794904][T30338] netlink: 'syz.3.11698': attribute type 2 has an invalid length. [ 1127.795650][T30332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1127.866663][T30326] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1127.893484][T30336] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 1: comm syz.0.11697: lblock 1 mapped to illegal pblock 1 (length 1) [ 1127.978109][T30336] Quota error (device loop0): write_blk: dquota write failed [ 1128.018343][T30336] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1128.026253][ T4847] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp860. You might want to try to use the mount option nls=utf8. [ 1128.046463][ T4847] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1128.078420][T30336] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.11697: Failed to acquire dquot type 0 [ 1128.106857][T30336] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.11697: Freeing blocks not in datazone - block = 0, count = 4096 [ 1128.143383][T30336] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.11697: Invalid inode bitmap blk 0 in block_group 0 [ 1128.169947][ T9] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1128.175026][T30342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11700'. [ 1128.226967][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1128.243333][T30336] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 1128.252670][T30342] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1128.261735][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 1128.292442][T30336] EXT4-fs (loop0): 1 orphan inode deleted [ 1128.311331][T30336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1128.503469][ T4843] EXT4-fs (loop0): unmounting filesystem. [ 1128.558483][T30354] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1128.659789][T30358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11708'. [ 1128.696353][T30358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11708'. [ 1129.252910][T30380] loop5: detected capacity change from 0 to 256 [ 1129.271257][T30380] exfat: Deprecated parameter 'utf8' [ 1129.317443][T30378] loop1: detected capacity change from 0 to 4096 [ 1129.339924][T30380] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1129.401347][T30378] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1129.448732][T30378] ntfs3: loop1: Failed to load $Extend. [ 1129.983669][T30400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1130.069810][T30405] IPv6: NLM_F_CREATE should be specified when creating new route [ 1130.483104][T23108] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1130.690706][T23108] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1130.712131][T23108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.724839][T23108] pwc: Logitech/Cisco VT Camera webcam detected. [ 1130.890565][T30444] autofs4:pid:30444:autofs_fill_super: called with bogus options [ 1130.943022][T23108] pwc: Failed to set LED on/off time (-71) [ 1130.959585][T23108] pwc: send_video_command error -71 [ 1130.981369][T23108] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1131.022704][T23108] Philips webcam: probe of 2-1:127.0 failed with error -71 [ 1131.041933][T23108] usb 2-1: USB disconnect, device number 25 [ 1131.058173][ T4798] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1131.273699][ T4798] usb 3-1: Using ep0 maxpacket: 32 [ 1131.283642][ T4798] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1131.290316][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11749'. [ 1131.294890][ T4798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.320975][ T4798] usb 3-1: Product: syz [ 1131.325572][ T4798] usb 3-1: Manufacturer: syz [ 1131.330568][ T4798] usb 3-1: SerialNumber: syz [ 1131.357614][ T4798] usb 3-1: config 0 descriptor?? [ 1131.592262][T10178] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1131.601625][ T4798] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 003 [ 1131.818129][T10178] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 1131.837812][T10178] usb 1-1: config 160 has no interface number 0 [ 1131.838556][ T4898] usb 3-1: USB disconnect, device number 3 [ 1131.844122][T10178] usb 1-1: config 160 interface 200 has no altsetting 0 [ 1131.860528][T30469] overlayfs: unrecognized mount option "\" or missing value [ 1131.886254][T10178] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1131.913729][T10178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.928736][T30439] Process accounting resumed [ 1131.933458][T10178] usb 1-1: Product: syz [ 1131.937723][T10178] usb 1-1: Manufacturer: syz [ 1131.942330][T10178] usb 1-1: SerialNumber: syz [ 1132.067768][ T4798] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1132.159268][T30477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.181816][T10178] usb 1-1: MIDIStreaming interface descriptor not found [ 1132.226868][T10178] usb 1-1: USB disconnect, device number 35 [ 1132.294629][ T4798] usb 2-1: Using ep0 maxpacket: 8 [ 1132.301510][ T4798] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1132.322044][ T4798] usb 2-1: config 179 has no interface number 0 [ 1132.336315][ T4798] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1132.365523][ T4798] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1132.384143][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.401252][ T4798] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1132.414175][ T4798] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1132.448853][ T4798] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1132.453146][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11765'. [ 1132.502202][ T4798] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1132.520053][ T4798] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1132.538381][ T4798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.580855][ T4798] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input92 [ 1132.702866][T30490] loop5: detected capacity change from 0 to 512 [ 1132.755052][T30490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1132.863147][T30490] EXT4-fs (loop5): 1 truncate cleaned up [ 1132.898425][T30490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1132.924862][T30499] Process accounting resumed [ 1132.965956][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11771'. [ 1133.032115][T30502] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1133.062129][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1133.070538][ T4798] usb 2-1: USB disconnect, device number 26 [ 1133.093043][T30490] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #15: comm syz.5.11769: bad extra_isize 62 (inode size 256) [ 1133.097974][ T4798] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1133.158446][T30490] EXT4-fs (loop5): Remounting filesystem read-only [ 1133.187305][T30490] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #15: comm syz.5.11769: bad extra_isize 62 (inode size 256) [ 1133.227840][T30490] EXT4-fs (loop5): Remounting filesystem read-only [ 1133.309821][T25046] EXT4-fs (loop5): unmounting filesystem. [ 1134.192253][T30550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.256841][T30546] nvme_fabrics: missing parameter 'traddr=%s' [ 1134.435506][T30563] loop0: detected capacity change from 0 to 64 [ 1134.609957][ T4898] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1134.636103][T30571] netlink: 'syz.3.11803': attribute type 8 has an invalid length. [ 1134.667160][T30571] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.11803'. [ 1134.844767][ T4898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1134.864936][ T4898] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1134.894260][ T4898] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.924012][ T4898] usb 3-1: config 63 has no interface number 0 [ 1134.930245][ T4898] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1134.973439][ T4898] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1135.007346][ T4898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.044593][ T4898] usb 3-1: Product: syz [ 1135.060876][ T4898] usb 3-1: Manufacturer: syz [ 1135.087526][ T4898] usb 3-1: SerialNumber: syz [ 1135.274987][T30596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11813'. [ 1135.329318][ T4898] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 1135.351213][ T4898] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1135.380517][ T4898] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1135.407353][T30599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.423735][ T4898] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1135.437830][ T4898] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1135.473230][T30601] loop0: detected capacity change from 0 to 256 [ 1135.481130][ T4898] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1135.510335][ T4898] usb 3-1: No streaming interface found for terminal 29. [ 1135.518733][ T4898] uvcvideo 3-1:63.66: Entity type for entity Output 5 was not initialized! [ 1135.596592][ T4898] usb 3-1: USB disconnect, device number 4 [ 1135.805830][T30573] loop5: detected capacity change from 0 to 40427 [ 1135.839746][T30573] F2FS-fs (loop5): invalid crc value [ 1135.866246][T30573] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1135.936759][T30615] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1136.099670][T30573] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 1136.163664][T30573] F2FS-fs (loop5): Start checkpoint disabled! [ 1136.242919][T30626] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1136.277124][T30573] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1136.452042][T30635] binder: Bad value for 'stats' [ 1136.977497][T30656] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11838'. [ 1137.371892][T30673] loop0: detected capacity change from 0 to 256 [ 1138.079659][ T27] audit: type=1326 audit(2000002975.164:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.113885][ T27] audit: type=1326 audit(2000002975.191:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.134309][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.145930][ T27] audit: type=1326 audit(2000002975.191:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.206210][ T27] audit: type=1326 audit(2000002975.191:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.248995][ T27] audit: type=1326 audit(2000002975.219:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.273728][T10178] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1138.282352][T23108] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1138.287908][ T27] audit: type=1326 audit(2000002975.219:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.347605][ T27] audit: type=1326 audit(2000002975.219:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.434803][ T27] audit: type=1326 audit(2000002975.228:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.487935][T10178] usb 1-1: Using ep0 maxpacket: 32 [ 1138.497470][T10178] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1138.515628][T23108] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.520904][T10178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.538744][T23108] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1138.539556][ T27] audit: type=1326 audit(2000002975.228:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.2.11858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0a1d9e0d9 code=0x7ffc0000 [ 1138.557984][T23108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.585891][T10178] usb 1-1: Product: syz [ 1138.590088][T10178] usb 1-1: Manufacturer: syz [ 1138.611783][T10178] usb 1-1: SerialNumber: syz [ 1138.618635][T10178] usb 1-1: config 0 descriptor?? [ 1138.628205][T23108] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1138.850393][T10178] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 036 [ 1138.910261][ T6275] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1139.051077][T10177] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1139.082014][T10178] usb 1-1: USB disconnect, device number 36 [ 1139.120709][ T6275] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1139.135679][ T6275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.146563][ T6275] usb 2-1: Product: syz [ 1139.159227][ T6275] usb 2-1: Manufacturer: syz [ 1139.176254][ T6275] usb 2-1: SerialNumber: syz [ 1139.201190][ T6275] usb 2-1: config 0 descriptor?? [ 1139.257574][T10177] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 1139.265636][T10177] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.281439][T10177] usb 4-1: config 0 has no interface number 0 [ 1139.287680][T10177] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1139.307143][T10177] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1139.334108][T10177] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1139.343199][T10177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.356462][T10177] usb 4-1: Product: syz [ 1139.360667][T10177] usb 4-1: Manufacturer: syz [ 1139.368695][T10177] usb 4-1: SerialNumber: syz [ 1139.375372][T10177] usb 4-1: config 0 descriptor?? [ 1139.383438][T30723] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1139.393974][T30723] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1139.405299][T10177] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1139.434560][ T6275] usb 2-1: ignoring: probably an ADSL modem [ 1139.631526][T10178] usb 4-1: USB disconnect, device number 38 [ 1139.659499][ T6275] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1139.698354][ T6275] usb 2-1: USB disconnect, device number 27 [ 1139.762836][T30744] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1139.776499][T30746] netlink: 'syz.0.11870': attribute type 21 has an invalid length. [ 1139.788566][T23108] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1139.978781][T30752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.007664][T23108] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1140.022618][T23108] stv0680 6-1:4.0: last error: 86, command = 0x7 [ 1140.033971][T23108] usb 6-1: USB disconnect, device number 15 [ 1140.513683][T10178] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1140.624938][T30780] loop2: detected capacity change from 0 to 256 [ 1140.641932][T30782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11887'. [ 1140.726799][T10178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1140.774047][T10178] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1140.804482][T10178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.827666][T10178] usb 1-1: Product: syz [ 1140.831875][T10178] usb 1-1: Manufacturer: syz [ 1140.858399][T10178] usb 1-1: SerialNumber: syz [ 1140.878273][T10178] usb 1-1: config 0 descriptor?? [ 1140.920488][T10178] hub 1-1:0.0: bad descriptor, ignoring hub [ 1140.941194][T10178] hub: probe of 1-1:0.0 failed with error -5 [ 1140.971156][T10178] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input93 [ 1141.211351][T30801] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1141.252403][T30803] loop5: detected capacity change from 0 to 64 [ 1141.257950][ T53] block nbd1: Attempted send on invalid socket [ 1141.264977][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1141.453348][T30788] loop3: detected capacity change from 0 to 32768 [ 1141.476062][T30809] loop1: detected capacity change from 0 to 128 [ 1141.528233][ T6404] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1141.604089][T30811] netlink: 'syz.5.11901': attribute type 21 has an invalid length. [ 1141.740001][T30815] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11903'. [ 1142.350375][T30841] lo speed is unknown, defaulting to 1000 [ 1142.358512][T30048] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1142.381681][T30841] lo speed is unknown, defaulting to 1000 [ 1142.405783][T30841] lo speed is unknown, defaulting to 1000 [ 1142.449223][T30841] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1142.575268][T30048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1142.588437][T30841] lo speed is unknown, defaulting to 1000 [ 1142.596041][T30048] usb 6-1: not running at top speed; connect to a high speed hub [ 1142.615696][T30048] usb 6-1: config 129 has an invalid interface number: 195 but max is 0 [ 1142.625243][T30841] lo speed is unknown, defaulting to 1000 [ 1142.636550][T30048] usb 6-1: config 129 has no interface number 0 [ 1142.642846][T30048] usb 6-1: config 129 interface 195 has no altsetting 0 [ 1142.653471][T30841] lo speed is unknown, defaulting to 1000 [ 1142.675470][T30841] lo speed is unknown, defaulting to 1000 [ 1142.700027][T30048] usb 6-1: New USB device found, idVendor=684d, idProduct=aa5b, bcdDevice= d.12 [ 1142.710164][T30841] lo speed is unknown, defaulting to 1000 [ 1142.720033][T30048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.739564][T30048] usb 6-1: Product: syz [ 1142.759462][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11923'. [ 1142.766562][T30048] usb 6-1: Manufacturer: syz [ 1142.774820][T30048] usb 6-1: SerialNumber: syz [ 1142.819852][T30856] netlink: set zone limit has 4 unknown bytes [ 1143.039072][T30048] usb-storage 6-1:129.195: USB Mass Storage device detected [ 1143.057386][T30865] netlink: 'syz.3.11927': attribute type 32 has an invalid length. [ 1143.089095][T30873] loop2: detected capacity change from 0 to 64 [ 1143.148669][T30048] usb 6-1: USB disconnect, device number 16 [ 1143.162389][ T5202] udevd[5202]: setting owner of /dev/bus/usb/006/016 to uid=0, gid=0 failed: No such file or directory [ 1143.439929][T10177] usb 1-1: USB disconnect, device number 37 [ 1143.540944][T30883] loop1: detected capacity change from 0 to 8192 [ 1143.567378][T30883] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1143.582823][T30883] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1143.609862][T30883] REISERFS (device loop1): using ordered data mode [ 1143.622394][T10177] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 1143.640486][T30883] reiserfs: using flush barriers [ 1143.672445][T30883] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1143.701614][T30883] REISERFS (device loop1): checking transaction log (loop1) [ 1143.712218][ T6275] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1143.735077][T30895] netlink: 'syz.2.11940': attribute type 1 has an invalid length. [ 1143.742663][T30883] REISERFS (device loop1): Using tea hash to sort names [ 1143.812639][T30898] loop2: detected capacity change from 0 to 64 [ 1143.831811][T10177] usb 1-1: No LPM exit latency info found, disabling LPM. [ 1143.888549][T10177] usb 1-1: config 0 has no interfaces? [ 1143.905105][T30898] hfs: unable to locate alternate MDB [ 1143.910644][T30898] hfs: continuing without an alternate MDB [ 1143.919451][T10177] usb 1-1: string descriptor 0 read error: -22 [ 1143.938645][T10177] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.949743][ T6275] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 1143.968411][T10177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.976713][ T6275] usb 4-1: config 0 has no interface number 0 [ 1143.989014][ T27] audit: type=1800 audit(2000002980.610:244): pid=30898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11942" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 1143.991638][ T6275] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1144.037247][T10177] usb 1-1: config 0 descriptor?? [ 1144.138419][ T6275] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1144.155477][ T6275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.174499][ T6275] usb 4-1: Product: syz [ 1144.178990][ T6275] usb 4-1: Manufacturer: syz [ 1144.183611][ T6275] usb 4-1: SerialNumber: syz [ 1144.201502][ T6275] usb 4-1: config 0 descriptor?? [ 1144.228405][T30885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1144.273819][ T6275] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 72:90:d1:34:6c:16 [ 1144.298261][T28605] usb 1-1: USB disconnect, device number 38 [ 1144.359583][T10178] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1144.564795][T10178] usb 6-1: Using ep0 maxpacket: 32 [ 1144.576711][T10178] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1144.595805][T10178] usb 6-1: config 0 has no interface number 0 [ 1144.601168][T30919] loop1: detected capacity change from 0 to 1024 [ 1144.604426][T10178] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1144.644317][T30919] hfsplus: invalid file type 0174377 for inode 21 [ 1144.644815][T10178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.676270][T10178] usb 6-1: Product: syz [ 1144.681410][T10178] usb 6-1: Manufacturer: syz [ 1144.705903][T10178] usb 6-1: SerialNumber: syz [ 1144.736341][T10178] usb 6-1: config 0 descriptor?? [ 1144.750007][T28605] usb 4-1: USB disconnect, device number 39 [ 1144.763716][T28605] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1144.776565][T10178] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1144.814024][T10178] usb 6-1: selecting invalid altsetting 1 [ 1144.839652][T10178] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1144.870324][T10178] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1144.892305][T10178] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1144.932149][T10178] usb 6-1: media controller created [ 1144.990274][T10178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1145.306997][T10178] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1145.447450][T10178] usb 6-1: USB disconnect, device number 17 [ 1145.615614][T30958] netlink: 'syz.3.11966': attribute type 1 has an invalid length. [ 1145.623732][T30958] netlink: 'syz.3.11966': attribute type 1 has an invalid length. [ 1145.869503][T30967] loop1: detected capacity change from 0 to 2048 [ 1145.937106][T30967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.943354][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11972'. [ 1146.011383][ T27] audit: type=1800 audit(2000002982.484:245): pid=30967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11969" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 1146.347356][T30990] delete_channel: no stack [ 1147.001060][T31022] loop3: detected capacity change from 0 to 256 [ 1147.138195][ T5202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.340247][T31036] netlink: 'syz.1.11997': attribute type 49 has an invalid length. [ 1147.400334][T31044] loop2: detected capacity change from 0 to 16 [ 1147.455366][T31044] erofs: (device loop2): mounted with root inode @ nid 36. [ 1148.631161][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12023'. [ 1149.316534][T31087] loop0: detected capacity change from 0 to 32768 [ 1149.357132][T31125] netlink: 'syz.3.12035': attribute type 32 has an invalid length. [ 1149.365292][T23108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1149.569266][T23108] usb 3-1: Using ep0 maxpacket: 8 [ 1149.588216][T23108] usb 3-1: config 31 has an invalid interface number: 197 but max is 0 [ 1149.623381][T23108] usb 3-1: config 31 has no interface number 0 [ 1149.640859][T23108] usb 3-1: config 31 interface 197 has no altsetting 0 [ 1149.683772][T23108] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 1149.728244][T23108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.767679][T23108] usb 3-1: Product: syz [ 1149.791633][T23108] usb 3-1: Manufacturer: syz [ 1149.807320][T23108] usb 3-1: SerialNumber: syz [ 1149.987840][T31151] loop1: detected capacity change from 0 to 1024 [ 1150.054104][T23108] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1150.134295][T23108] usb 3-1: USB disconnect, device number 5 [ 1150.462645][T31166] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12055'. [ 1150.486853][T31166] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12055'. [ 1150.505257][T31166] netlink: 'syz.5.12055': attribute type 3 has an invalid length. [ 1150.530297][T31166] netlink: 11 bytes leftover after parsing attributes in process `syz.5.12055'. [ 1150.928271][T31185] netlink: 'syz.5.12064': attribute type 1 has an invalid length. [ 1150.975960][T31185] netlink: 'syz.5.12064': attribute type 1 has an invalid length. [ 1151.170218][ T27] audit: type=1326 audit(2000002987.248:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.237768][T23108] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1151.244142][ T27] audit: type=1326 audit(2000002987.276:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.314146][ T27] audit: type=1326 audit(2000002987.276:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.423438][T31207] nftables ruleset with unbound chain [ 1151.443357][ T27] audit: type=1326 audit(2000002987.276:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.478725][T23108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1151.498397][T23108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.545344][T23108] usb 2-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.581487][ T27] audit: type=1326 audit(2000002987.276:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.602149][T23108] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1151.619420][T23108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.659882][T23108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.660150][ T27] audit: type=1326 audit(2000002987.276:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.703154][T23108] usb 2-1: Product: syz [ 1151.707401][T23108] usb 2-1: Manufacturer: syz [ 1151.745035][T23108] usb 2-1: SerialNumber: syz [ 1151.751544][ T27] audit: type=1326 audit(2000002987.276:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.839538][T31227] MTDSB: Device #1 doesn't appear to exist [ 1151.839538][T31227] [ 1151.843686][ T27] audit: type=1326 audit(2000002987.276:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.871747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.970503][ T27] audit: type=1326 audit(2000002987.276:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31198 comm="syz.5.12071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1151.970555][T31230] netlink: 'syz.0.12084': attribute type 3 has an invalid length. [ 1151.994736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.028713][T23108] usb 2-1: bad CDC descriptors [ 1152.048317][T23108] usb 2-1: USB disconnect, device number 28 [ 1152.197259][T31239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12087'. [ 1152.207094][T31230] netlink: 'syz.0.12084': attribute type 1 has an invalid length. [ 1152.994968][T31273] netlink: 'syz.3.12100': attribute type 3 has an invalid length. [ 1153.200533][T31281] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1153.248763][T31281] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1153.495971][T31295] loop1: detected capacity change from 0 to 512 [ 1153.520088][T31258] loop5: detected capacity change from 0 to 32768 [ 1153.531259][T31295] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1153.599290][T31258] ERROR: (device loop5): dbAllocAG: Corrupt dmapctl page [ 1153.599290][T31258] [ 1153.617768][T31295] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1153.630190][T31258] ERROR: (device loop5): remounting filesystem as read-only [ 1153.657052][T31295] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1153.670519][T31295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1153.725129][T31295] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1153.739828][T23108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1153.874982][ T4847] EXT4-fs (loop1): unmounting filesystem. [ 1153.951617][T23108] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1153.980020][T23108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.012515][T23108] usb 3-1: config 0 descriptor?? [ 1154.181537][T28605] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1154.401659][T31326] sctp: [Deprecated]: syz.1.12120 (pid 31326) Use of int in max_burst socket option deprecated. [ 1154.401659][T31326] Use struct sctp_assoc_value instead [ 1154.417188][T28605] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1154.447289][T28605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.459404][T23108] usb 3-1: Cannot set MAC address [ 1154.467828][T23108] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 1154.482515][T28605] usb 1-1: Product: syz [ 1154.486735][T28605] usb 1-1: Manufacturer: syz [ 1154.519718][T28605] usb 1-1: SerialNumber: syz [ 1154.531631][T23108] usb 3-1: USB disconnect, device number 6 [ 1154.591034][T28605] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1155.056196][T23108] usb 1-1: USB disconnect, device number 39 [ 1155.158166][T31324] loop3: detected capacity change from 0 to 32768 [ 1155.195409][T31324] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1155.221071][T31347] loop5: detected capacity change from 0 to 1764 [ 1155.267254][ T4852] XFS (loop3): Unmounting Filesystem [ 1155.359291][T31347] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1155.732921][T28605] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1155.739990][T28605] ath9k_htc: Failed to initialize the device [ 1155.748860][T31374] loop5: detected capacity change from 0 to 2048 [ 1155.774635][T23108] usb 1-1: ath9k_htc: USB layer deinitialized [ 1155.863284][T31377] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.930307][T31374] syz.5.12139: attempt to access beyond end of device [ 1155.930307][T31374] loop5: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 1155.948896][T31383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12142'. [ 1156.006819][T31374] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 1156.067767][T31385] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1156.078041][T31383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1156.111957][T31385] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1156.141140][ T27] audit: type=1326 audit(2000002991.836:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.1.12144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1156.165343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.263961][T31377] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1156.339375][T31377] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1156.400661][T31395] loop1: detected capacity change from 0 to 512 [ 1156.409806][T31377] Remounting filesystem read-only [ 1156.433279][T25046] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1156.519348][T31395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1156.594052][T31395] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.12147: Unimplemented hash flags: 0x0001 [ 1156.664389][T31395] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.12147: Corrupt directory, running e2fsck is recommended [ 1156.728221][ T4847] EXT4-fs (loop1): unmounting filesystem. [ 1156.843531][T31408] loop5: detected capacity change from 0 to 164 [ 1156.945205][T31408] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1157.428558][T31440] libceph: secret too big 31 [ 1157.627647][T31450] device ip6tnl0 entered promiscuous mode [ 1158.148449][T28605] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1158.329508][T31473] loop5: detected capacity change from 0 to 4096 [ 1158.358867][T31473] __ntfs_error: 3 callbacks suppressed [ 1158.358883][T31473] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1158.376055][T28605] usb 2-1: Using ep0 maxpacket: 32 [ 1158.389135][T28605] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1158.397177][T28605] usb 2-1: config 0 has no interface number 0 [ 1158.411332][T31484] netlink: 'syz.2.12191': attribute type 10 has an invalid length. [ 1158.434006][T31486] loop0: detected capacity change from 0 to 164 [ 1158.476885][T31473] ntfs: volume version 3.1. [ 1158.481707][T28605] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1158.482845][T31486] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1158.523855][T28605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.586939][T28605] usb 2-1: Product: syz [ 1158.591158][T28605] usb 2-1: Manufacturer: syz [ 1158.611220][T28605] usb 2-1: SerialNumber: syz [ 1158.633092][T28605] usb 2-1: config 0 descriptor?? [ 1158.677014][T28605] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1158.702092][T28605] usb 2-1: selecting invalid altsetting 1 [ 1158.707875][T28605] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1158.736739][T31494] misc userio: The device must be registered before sending interrupts [ 1158.811079][T28605] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1158.869828][T28605] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1158.916969][T28605] usb 2-1: media controller created [ 1158.977640][T28605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.021756][T31504] xt_TCPMSS: Only works on TCP SYN packets [ 1159.324608][T28605] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1159.420570][T28605] usb 2-1: USB disconnect, device number 29 [ 1159.445135][T31524] device gre1 entered promiscuous mode [ 1159.581020][T31528] loop3: detected capacity change from 0 to 256 [ 1159.717369][T31529] [U]  [ 1160.101252][T31548] IPv6: sit1: Disabled Multicast RS [ 1161.036331][T31588] loop1: detected capacity change from 0 to 256 [ 1161.448672][T31606] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1161.747368][T31602] loop1: detected capacity change from 0 to 32768 [ 1161.771200][T31602] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.12249 (31602) [ 1161.809178][ T27] audit: type=1326 audit(2000002997.061:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31617 comm="syz.5.12257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1161.841656][T31602] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1161.879760][ T27] audit: type=1326 audit(2000002997.117:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31617 comm="syz.5.12257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1161.889813][T31602] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1161.939542][T31615] loop3: detected capacity change from 0 to 8192 [ 1162.002414][ T27] audit: type=1326 audit(2000002997.117:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31617 comm="syz.5.12257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1162.002761][T31602] BTRFS info (device loop1): enabling ssd optimizations [ 1162.108765][ T27] audit: type=1326 audit(2000002997.117:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31617 comm="syz.5.12257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1162.127721][T31602] BTRFS info (device loop1): not using ssd optimizations [ 1162.203412][T31602] BTRFS info (device loop1): turning off barriers [ 1162.240308][T31602] BTRFS info (device loop1): use no compression [ 1162.282599][T31602] BTRFS info (device loop1): using free space tree [ 1162.435802][T31640] loop3: detected capacity change from 0 to 2048 [ 1162.851651][T31602] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 1162.883677][ T27] audit: type=1326 audit(2000002998.067:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.12272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1162.943340][ T27] audit: type=1326 audit(2000002998.067:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.12272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1162.997584][ T4847] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1163.044232][ T27] audit: type=1326 audit(2000002998.095:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.12272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1163.079097][T31671] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12273'. [ 1163.179691][ T27] audit: type=1326 audit(2000002998.095:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.12272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1163.236989][T31675] netlink: 'syz.0.12276': attribute type 10 has an invalid length. [ 1163.271386][ T27] audit: type=1326 audit(2000002998.104:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.12272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f0d9c59e0d9 code=0x7ffc0000 [ 1163.360164][T31675] team0: Device wlan1 is of different type [ 1163.405493][T31682] syz.2.12280 uses old SIOCAX25GETINFO [ 1163.532172][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1164.296901][T31716] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1164.332770][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1164.332785][ T27] audit: type=1326 audit(2000002999.397:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31717 comm="syz.3.12296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1164.386061][ T27] audit: type=1326 audit(2000002999.397:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31717 comm="syz.3.12296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1164.481080][T31718] Process accounting paused [ 1164.524871][ T27] audit: type=1326 audit(2000002999.443:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31717 comm="syz.3.12296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1164.652403][ T27] audit: type=1326 audit(2000002999.443:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31717 comm="syz.3.12296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1164.707284][ T27] audit: type=1326 audit(2000002999.443:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31717 comm="syz.3.12296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1165.314206][T31763] device gre1 entered promiscuous mode [ 1165.524125][T31760] Process accounting paused [ 1165.953053][T31787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12331'. [ 1165.968545][T31790] unsupported nlmsg_type 40 [ 1166.002432][T31787] netlink: 4260 bytes leftover after parsing attributes in process `syz.3.12331'. [ 1166.102278][T31762] loop0: detected capacity change from 0 to 32768 [ 1166.713134][T31816] device sit0 entered promiscuous mode [ 1166.755917][T31816] netlink: 'syz.3.12345': attribute type 1 has an invalid length. [ 1166.814846][T31816] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12345'. [ 1167.185649][T31834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12354'. [ 1167.234518][T31839] loop0: detected capacity change from 0 to 64 [ 1167.247722][T31834] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1167.265579][T31840] loop2: detected capacity change from 0 to 512 [ 1167.432009][T31840] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1167.540282][ T27] audit: type=1326 audit(2000003002.360:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.3.12361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1167.663886][ T27] audit: type=1326 audit(2000003002.388:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.3.12361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1167.701854][T31857] loop1: detected capacity change from 0 to 128 [ 1167.751919][ T27] audit: type=1326 audit(2000003002.388:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.3.12361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1167.789829][ T4842] EXT4-fs (loop2): unmounting filesystem. [ 1167.875974][ T27] audit: type=1326 audit(2000003002.388:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.3.12361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1167.900158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1167.952171][ T27] audit: type=1326 audit(2000003002.388:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.3.12361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63deb9e0d9 code=0x7ffc0000 [ 1168.369953][T31877] loop0: detected capacity change from 0 to 4096 [ 1168.455886][T31877] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1168.775106][T10178] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1169.015253][T10178] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1169.046587][T10178] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 1169.080858][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1169.080923][T10178] usb 4-1: config 4 has no interface number 0 [ 1169.087188][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1169.132956][T10178] usb 4-1: config 4 interface 138 has no altsetting 0 [ 1169.172167][T10178] usb 4-1: string descriptor 0 read error: -22 [ 1169.208693][T10178] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1169.239651][T10178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.430927][T31928] loop0: detected capacity change from 0 to 512 [ 1169.491950][T10178] catc 4-1:4.138: Missing or invalid endpoints [ 1169.540500][T31928] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1169.577860][T31928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1169.585948][T31928] System zones: 0-1, 15-15, 18-18, 34-34 [ 1169.662353][T31928] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1169.669173][T31928] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1169.717347][T31928] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1169.720022][T28605] usb 4-1: USB disconnect, device number 40 [ 1169.741545][T31928] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12409: bg 0: block 40: padding at end of block bitmap is not set [ 1169.766566][T31928] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1169.795712][T31928] EXT4-fs (loop0): 1 truncate cleaned up [ 1169.835421][T31928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1169.882919][T31928] EXT4-fs (loop0): unmounting filesystem. [ 1170.089401][T31955] loop1: detected capacity change from 0 to 4096 [ 1170.097664][T31955] __ntfs_warning: 2 callbacks suppressed [ 1170.097680][T31955] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1170.142023][T31955] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1170.181215][T31955] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1170.204846][T31955] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1170.274177][T31955] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1170.323988][T31955] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1170.331821][T31963] loop0: detected capacity change from 0 to 1024 [ 1170.399929][T31955] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1170.408683][T31955] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1170.461346][T31963] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1170.498815][T31965] nvme_fabrics: unknown parameter or missing value '0x00000000000000ff' in ctrl creation request [ 1170.531654][T31963] hfsplus: filesystem is marked journaled, leaving read-only. [ 1170.532066][T31955] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1170.628811][T31955] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1170.690051][T31955] ntfs: volume version 3.1. [ 1170.797744][T31973] loop0: detected capacity change from 0 to 512 [ 1170.951697][T31957] loop2: detected capacity change from 0 to 32768 [ 1170.975915][T31973] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1171.049077][T31973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1171.058753][T31957] ea_get: invalid extended attribute [ 1171.102045][T31973] System zones: 0-1, 15-15, 18-18, 34-34 [ 1171.108922][T31973] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1171.115572][T31957] ffff888047c4c3f0: 04 00 00 00 .... [ 1171.124283][T31973] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1171.124315][T31973] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1171.124643][T31973] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.12421: bad orphan inode 16 [ 1171.169204][T31973] ext4_test_bit(bit=15, block=18) = 1 [ 1171.174627][T31973] is_bad_inode(inode)=0 [ 1171.178875][T31973] NEXT_ORPHAN(inode)=0 [ 1171.183602][T31973] max_ino=32 [ 1171.200820][T31973] i_nlink=2 [ 1171.218103][T31973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1171.285123][T31973] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1171.309956][T31989] MTD: Couldn't look up './bus': -15 [ 1171.433316][ T4843] EXT4-fs (loop0): unmounting filesystem. [ 1171.652222][T31995] loop3: detected capacity change from 0 to 4096 [ 1171.701136][T31995] /dev/loop3: Can't open blockdev [ 1171.780927][T32004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12435'. [ 1172.187095][T32020] netlink: 'syz.5.12443': attribute type 4 has an invalid length. [ 1172.616572][T32039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12451'. [ 1172.754378][T32048] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12456'. [ 1172.977894][ T6271] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1173.184979][ T6271] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1173.185015][ T6271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.185038][ T6271] usb 2-1: Product: syz [ 1173.185054][ T6271] usb 2-1: Manufacturer: syz [ 1173.185071][ T6271] usb 2-1: SerialNumber: syz [ 1173.186862][ T6271] usb 2-1: config 0 descriptor?? [ 1173.189497][ T6271] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 1173.233898][T32070] x_tables: duplicate underflow at hook 1 [ 1173.444082][T10178] usb 2-1: USB disconnect, device number 30 [ 1173.444415][T10178] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 1173.644755][T32085] loop0: detected capacity change from 0 to 512 [ 1173.662583][T32085] EXT4-fs: Ignoring removed oldalloc option [ 1173.766216][T32085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1173.825800][T32085] ext4 filesystem being mounted at /2394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.975223][T32085] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.12475: inode #327680: comm syz.0.12475: iget: illegal inode # [ 1174.071886][T32085] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.12475: error while reading EA inode 327680 err=-117 [ 1174.221294][ T4843] EXT4-fs (loop0): unmounting filesystem. [ 1174.232655][ T4812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1174.358184][T32108] loop0: detected capacity change from 0 to 2048 [ 1174.371937][T32098] loop3: detected capacity change from 0 to 32768 [ 1174.423359][T32111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1174.441941][ T4812] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1174.451009][ T4812] usb 3-1: config 0 has no interface number 0 [ 1174.462458][ T4812] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1174.477054][T32108] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 1174.510812][ T4812] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1174.526196][ T4812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.526473][ T6404] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1174.534623][T32108] Remounting filesystem read-only [ 1174.591810][ T4812] usb 3-1: Product: syz [ 1174.596048][ T4812] usb 3-1: Manufacturer: syz [ 1174.600655][ T4812] usb 3-1: SerialNumber: syz [ 1174.654442][ T4812] usb 3-1: config 0 descriptor?? [ 1174.710337][ T4812] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1174.813197][T32113] loop1: detected capacity change from 0 to 4096 [ 1174.870506][T32113] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1174.942264][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1174.986251][T32113] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1175.083874][T32113] ntfs3: loop1: no free space to extend mft [ 1175.220493][ T4798] usb 3-1: USB disconnect, device number 7 [ 1175.265694][ T4798] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1175.268531][T32119] loop3: detected capacity change from 0 to 2048 [ 1175.339192][ T5202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1175.577586][T32127] binder: 32126:32127 ioctl c00c620f 0 returned -14 [ 1175.596493][T32129] loop3: detected capacity change from 0 to 1024 [ 1175.641495][T32129] EXT4-fs: Ignoring removed oldalloc option [ 1175.675073][T32129] EXT4-fs: Ignoring removed oldalloc option [ 1175.707867][T32129] /dev/loop3: Can't open blockdev [ 1175.922847][T32141] loop2: detected capacity change from 0 to 64 [ 1175.985373][T32141] syz.2.12501: attempt to access beyond end of device [ 1175.985373][T32141] loop2: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 1176.292645][ T4798] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1176.315847][T32155] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12508'. [ 1176.348749][T32155] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12508'. [ 1176.523838][ T4798] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1176.537462][ T4798] usb 2-1: not running at top speed; connect to a high speed hub [ 1176.546275][T32167] netlink: 'syz.3.12514': attribute type 21 has an invalid length. [ 1176.576876][ T4798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.598141][ T4798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1176.638932][ T4798] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1176.675572][ T4798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.704114][ T4798] usb 2-1: Product: syz [ 1176.715749][ T4798] usb 2-1: Manufacturer: syz [ 1176.726261][ T4798] usb 2-1: SerialNumber: syz [ 1176.778046][T32174] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1176.989989][ T4798] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1177.029959][ T4798] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 1177.079967][ T4798] usb 2-1: USB disconnect, device number 31 [ 1177.415491][T32206] device bridge_slave_1 left promiscuous mode [ 1177.464878][T32206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.486115][T32206] bond0: (slave bond_slave_0): Releasing backup interface [ 1177.551193][T32206] bond0: (slave bond_slave_1): Releasing backup interface [ 1177.638472][T32214] loop0: detected capacity change from 0 to 64 [ 1177.688447][T32214] syz.0.12536: attempt to access beyond end of device [ 1177.688447][T32214] loop0: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 1177.743851][T32206] team0: Port device team_slave_0 removed [ 1177.777555][T32218] CIFS: Attempting to mount \\127.0.0.1\test [ 1177.818531][T32218] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1177.827313][T32206] team0: Port device team_slave_1 removed [ 1177.839036][T32206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.848226][T32218] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1177.855947][T32206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.865562][T32206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.873364][T32206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.499795][T32250] loop0: detected capacity change from 0 to 64 [ 1178.675766][T28605] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1178.812429][T32265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12560'. [ 1178.859208][T32266] loop5: detected capacity change from 0 to 512 [ 1178.884968][T28605] usb 3-1: config 5 has an invalid interface number: 211 but max is 0 [ 1178.905095][T28605] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.927041][T28605] usb 3-1: config 5 has no interface number 0 [ 1178.947725][T28605] usb 3-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 1178.972884][T28605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.000608][T28605] usb 3-1: Product: syz [ 1179.009656][T32266] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.12561: bg 0: block 393: padding at end of block bitmap is not set [ 1179.046517][T28605] usb 3-1: Manufacturer: syz [ 1179.051192][T28605] usb 3-1: SerialNumber: syz [ 1179.092207][T32266] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1179.109971][T28605] usb 3-1: bad CDC descriptors [ 1179.127080][T28605] usb 3-1: bad CDC descriptors [ 1179.147774][T32266] EXT4-fs (loop5): 2 truncates cleaned up [ 1179.189532][T32266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1179.336047][T28605] usb 3-1: USB disconnect, device number 8 [ 1179.348023][T25046] EXT4-fs (loop5): unmounting filesystem. [ 1179.595426][T32276] loop3: detected capacity change from 0 to 32768 [ 1179.713132][T32295] netlink: 'syz.5.12574': attribute type 1 has an invalid length. [ 1179.736064][T32295] netlink: 'syz.5.12574': attribute type 2 has an invalid length. [ 1180.017324][T32308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.034224][T32310] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1180.620423][T32332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12592'. [ 1180.653054][T32332] netlink: 'syz.5.12592': attribute type 1 has an invalid length. [ 1180.764660][T32304] loop1: detected capacity change from 0 to 32768 [ 1181.120291][T32351] loop0: detected capacity change from 0 to 8 [ 1181.158578][T32351] SQUASHFS error: Failed to read block 0x26067d: -5 [ 1181.200259][T32351] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 1181.224410][T32351] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1181.345077][T32360] CIFS: Attempting to mount \\127.0.0.1\test [ 1181.426167][T32363] loop0: detected capacity change from 0 to 64 [ 1181.930437][T32354] loop3: detected capacity change from 0 to 32768 [ 1182.001890][ T5202] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1182.083991][T32386] loop2: detected capacity change from 0 to 256 [ 1182.177868][T32386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc0f8f355, utbl_chksum : 0xe619d30d) [ 1182.261157][T32360] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1182.268957][T32360] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1182.304440][T28605] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1182.336762][T32392] loop1: detected capacity change from 0 to 512 [ 1182.363304][T32392] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1182.377575][T32386] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1182.406438][T32386] exFAT-fs (loop2): Filesystem has been set read-only [ 1182.470956][T32392] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.12619: bad orphan inode 13 [ 1182.497226][T32392] ext4_test_bit(bit=12, block=18) = 1 [ 1182.503074][T32392] is_bad_inode(inode)=0 [ 1182.507382][T32392] NEXT_ORPHAN(inode)=0 [ 1182.518418][T32392] max_ino=32 [ 1182.524042][T28605] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1182.532695][T28605] usb 1-1: not running at top speed; connect to a high speed hub [ 1182.542785][T32392] i_nlink=1 [ 1182.550849][T32392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1182.556724][T28605] usb 1-1: config 0 has an invalid interface number: 102 but max is 0 [ 1182.569906][T28605] usb 1-1: config 0 has no interface number 0 [ 1182.588883][T28605] usb 1-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=45.70 [ 1182.607667][T28605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.626699][T28605] usb 1-1: Product: syz [ 1182.631143][T28605] usb 1-1: Manufacturer: syz [ 1182.635794][T28605] usb 1-1: SerialNumber: syz [ 1182.642222][T28605] usb 1-1: config 0 descriptor?? [ 1182.692904][T32392] __quota_error: 11 callbacks suppressed [ 1182.692923][T32392] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 2 [ 1182.781195][T32392] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1182.798945][T32392] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.12619: Failed to acquire dquot type 1 [ 1182.876439][T28605] rtsx_usb: probe of 1-1:0.102 failed with error -22 [ 1182.905409][T28605] usb 1-1: USB disconnect, device number 40 [ 1182.936767][ T27] audit: type=1326 audit(2000003016.577:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32409 comm="syz.5.12628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1182.960959][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.998649][ T4847] EXT4-fs (loop1): unmounting filesystem. [ 1183.081077][ T27] audit: type=1326 audit(2000003016.632:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32409 comm="syz.5.12628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1183.105259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.197532][ T27] audit: type=1326 audit(2000003016.632:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32409 comm="syz.5.12628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1183.198532][T32419] device macsec0 entered promiscuous mode [ 1183.293544][ T27] audit: type=1326 audit(2000003016.632:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32409 comm="syz.5.12628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d939e0d9 code=0x7ffc0000 [ 1183.783392][T32438] loop0: detected capacity change from 0 to 164 [ 1183.828457][T32438] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1184.455231][T32465] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1184.492305][T32465] overlayfs: missing 'lowerdir' [ 1184.560376][T32467] loop3: detected capacity change from 0 to 1024 [ 1184.562899][T32469] dns_resolver: Unsupported content type (254) [ 1184.587212][T32471] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.600563][T32467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1184.644258][T32467] /dev/loop3: Can't open blockdev [ 1184.694144][T32443] loop1: detected capacity change from 0 to 32768 [ 1184.785132][T32443] JBD2: Ignoring recovery information on journal [ 1184.793919][T32476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12662'. [ 1184.945196][T32443] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1185.180330][ T4847] ocfs2: Unmounting device (7,1) on (node local) [ 1185.539552][T32507] loop0: detected capacity change from 0 to 8 [ 1185.679754][T32511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12677'. [ 1186.063428][ T4798] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1186.181058][T32531] loop0: detected capacity change from 0 to 256 [ 1186.270599][ T4798] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1186.292247][T32533] loop5: detected capacity change from 0 to 1764 [ 1186.312306][ T4798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.333833][ T4798] usb 2-1: config 0 descriptor?? [ 1186.354235][ T4798] cp210x 2-1:0.0: cp210x converter detected [ 1186.654960][T32521] loop3: detected capacity change from 0 to 32768 [ 1186.733234][ T5202] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1186.745665][T28605] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1186.793313][ T4798] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1186.811821][ T4798] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1186.833515][ T4798] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1186.843483][T10178] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1186.863531][ T4798] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1186.880166][ T4798] usb 2-1: USB disconnect, device number 32 [ 1186.915891][ T4798] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1186.961152][ T4798] cp210x 2-1:0.0: device disconnected [ 1186.985735][T28605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.007636][T28605] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1187.038083][T28605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.049086][T10178] usb 1-1: Using ep0 maxpacket: 32 [ 1187.056002][T10178] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1187.068634][T28605] usb 3-1: config 0 descriptor?? [ 1187.100919][T10178] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1187.121028][T10178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.130537][T10178] usb 1-1: Product: syz [ 1187.157482][T10178] usb 1-1: Manufacturer: syz [ 1187.162137][T10178] usb 1-1: SerialNumber: syz [ 1187.174763][T10178] usb 1-1: config 0 descriptor?? [ 1187.180482][T32542] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1187.188692][T10178] hub 1-1:0.0: bad descriptor, ignoring hub [ 1187.237489][T10178] hub: probe of 1-1:0.0 failed with error -5 [ 1187.268985][T10178] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input94 [ 1187.514326][ T6271] usb 1-1: USB disconnect, device number 41 [ 1187.514487][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1187.531060][T28605] ath6kl: Failed to read usb control message: -71 [ 1187.546132][T28605] ath6kl: Unable to read the bmi data from the device: -71 [ 1187.556290][T28605] ath6kl: Unable to recv target info: -71 [ 1187.568138][T28605] ath6kl: Failed to init ath6kl core: -71 [ 1187.640391][T28605] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1187.659679][T28605] usb 3-1: USB disconnect, device number 9 [ 1187.718495][T32571] [U] [ 1187.721252][T32571] [U] [ 1187.723964][T32571] [U] [ 1187.726669][T32571] [U] [ 1187.751911][T32571] [U] [ 1187.754677][T32571] [U] [ 1187.757472][T32571] [U] [ 1187.760177][T32571] [U] [ 1187.772814][T32571] [U] [ 1187.775563][T32571] [U] [ 1187.778281][T32571] [U] [ 1187.800494][T32568] [U] [ 1187.959284][T32561] loop5: detected capacity change from 0 to 32768 [ 1188.026524][T32561] JBD2: Ignoring recovery information on journal [ 1188.047041][T32561] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 1188.078099][T32561] JBD2: bad block at offset 32 [ 1188.161512][T32561] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1188.434396][T32599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12718'. [ 1188.455339][T25046] ocfs2: Unmounting device (7,5) on (node local) [ 1188.473763][T32602] loop1: detected capacity change from 0 to 1024 [ 1188.532963][T28605] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1188.746144][T28605] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1188.782248][T28605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.811039][T32613] loop5: detected capacity change from 0 to 512 [ 1188.862141][T28605] usb 3-1: config 0 descriptor?? [ 1188.878272][T28605] cp210x 3-1:0.0: cp210x converter detected [ 1189.118538][T32613] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.12726: bg 0: block 313: padding at end of block bitmap is not set [ 1189.178912][T32613] EXT4-fs (loop5): Remounting filesystem read-only [ 1189.204636][T32613] EXT4-fs (loop5): 1 truncate cleaned up [ 1189.226256][T32613] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1189.318849][T28605] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1189.346681][T28605] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1189.350900][T32634] netlink: 'syz.1.12735': attribute type 12 has an invalid length. [ 1189.354302][T28605] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1189.394070][T25046] EXT4-fs (loop5): unmounting filesystem. [ 1189.419501][T28605] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1189.485694][T28605] usb 3-1: USB disconnect, device number 10 [ 1189.565906][T28605] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1189.594886][T28605] cp210x 3-1:0.0: device disconnected [ 1189.728484][ T6271] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1189.762765][T32651] netlink: 'syz.1.12742': attribute type 32 has an invalid length. [ 1189.791523][T32651] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1189.845935][T32655] xt_TCPMSS: Only works on TCP SYN packets [ 1189.946524][T32657] netlink: 'syz.0.12746': attribute type 13 has an invalid length. [ 1189.956658][ T6271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.967780][ T27] audit: type=1326 audit(2000003023.067:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1189.970733][ T6271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.002469][ T27] audit: type=1326 audit(2000003023.067:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1190.081013][ T27] audit: type=1326 audit(2000003023.094:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1190.107996][ T6271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1190.128081][ T6271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1190.141332][ T6271] usb 4-1: SerialNumber: syz [ 1190.180991][ T6271] usb 4-1: 0:2 : does not exist [ 1190.184667][ T27] audit: type=1326 audit(2000003023.094:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1190.216888][ T27] audit: type=1326 audit(2000003023.094:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1190.252507][ T27] audit: type=1326 audit(2000003023.141:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862319e0d9 code=0x7ffc0000 [ 1190.281026][ T27] audit: type=1326 audit(2000003023.141:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f862315e90e code=0x7ffc0000 [ 1190.305179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1190.385295][ T27] audit: type=1326 audit(2000003023.141:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f862315e90e code=0x7ffc0000 [ 1190.460781][ T27] audit: type=1326 audit(2000003023.141:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f862315e90e code=0x7ffc0000 [ 1190.489553][T32673] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1190.515411][ T27] audit: type=1326 audit(2000003023.141:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32659 comm="syz.1.12747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f862315e90e code=0x7ffc0000 [ 1190.649966][ T6271] usb 4-1: USB disconnect, device number 41 [ 1190.737544][T32675] loop2: detected capacity change from 0 to 4096 [ 1190.739389][T32677] x_tables: duplicate underflow at hook 4 [ 1190.751885][T10178] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1190.784891][T32667] loop5: detected capacity change from 0 to 32768 [ 1190.825900][T32675] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1190.860015][T32667] JBD2: Ignoring recovery information on journal [ 1190.915032][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12757'. [ 1190.926595][T32667] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 1190.970247][T10178] usb 1-1: Using ep0 maxpacket: 8 [ 1190.976992][T10178] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.998352][T10178] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1191.020179][T10178] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1191.044117][T10178] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1191.063490][T10178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.071670][T10178] usb 1-1: Product: syz [ 1191.075849][T10178] usb 1-1: Manufacturer: syz [ 1191.081494][T10178] usb 1-1: SerialNumber: syz [ 1191.107152][T32671] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1191.132243][T25046] ocfs2: Unmounting device (7,5) on (node local) [ 1191.250542][T32687] CIFS: VFS: Unable to allocate memory for devname [ 1191.347796][T10178] usb 1-1: MIDIStreaming interface descriptor not found [ 1191.417598][T10178] usb 1-1: USB disconnect, device number 42 [ 1191.718844][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.201347][T32693] loop1: detected capacity change from 0 to 32768 [ 1192.285581][T32693] XFS (loop1): Mounting V5 Filesystem [ 1192.335626][T32693] XFS (loop1): Ending clean mount [ 1192.362357][T32693] XFS (loop1): Quotacheck needed: Please wait. [ 1192.527660][T32693] XFS (loop1): Quotacheck: Done. [ 1192.561095][T32709] loop3: detected capacity change from 0 to 32768 [ 1192.630915][T32740] qrtr: Invalid version 0 [ 1192.636000][T32709] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1192.680561][T32743] program syz.5.12783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1192.719770][T32709] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 1192.756852][ T4847] XFS (loop1): Unmounting Filesystem [ 1192.933137][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12785'. [ 1192.948693][ T4852] INFO: trying to register non-static key. [ 1192.954532][ T4852] The code is fine but needs lockdep annotation, or maybe [ 1192.961641][ T4852] you didn't initialize this object before use? [ 1192.967876][ T4852] turning off the locking correctness validator. [ 1192.974205][ T4852] CPU: 0 PID: 4852 Comm: syz-executor Not tainted syzkaller #0 [ 1192.981755][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.991821][ T4852] Call Trace: [ 1192.995114][ T4852] [ 1192.998051][ T4852] dump_stack_lvl+0x188/0x24e [ 1193.002743][ T4852] ? show_regs_print_info+0x12/0x12 [ 1193.007933][ T4852] ? load_image+0x410/0x410 [ 1193.012431][ T4852] ? _find_next_bit+0x11e/0x130 [ 1193.017362][ T4852] ? __is_module_percpu_address+0x279/0x3b0 [ 1193.023236][ T4852] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1193.029013][ T4852] assign_lock_key+0x201/0x230 [ 1193.033767][ T4852] ? SOFTIRQ_verbose+0x10/0x10 [ 1193.038519][ T4852] register_lock_class+0x21d/0x870 [ 1193.043615][ T4852] ? mark_lock+0x94/0x320 [ 1193.047932][ T4852] ? is_dynamic_key+0x260/0x260 [ 1193.052769][ T4852] ? __lock_acquire+0x1465/0x7c40 [ 1193.057784][ T4852] __lock_acquire+0x172/0x7c40 [ 1193.062536][ T4852] ? kernel_text_address+0x9c/0xd0 [ 1193.067634][ T4852] ? __kernel_text_address+0x9/0x30 [ 1193.072816][ T4852] ? verify_lock_unused+0x140/0x140 [ 1193.078005][ T4852] ? verify_lock_unused+0x140/0x140 [ 1193.083211][ T4852] ? stack_trace_save+0xa6/0xf0 [ 1193.088047][ T4852] ? __stack_depot_save+0x35/0x480 [ 1193.093222][ T4852] lock_acquire+0x1bb/0x4a0 [ 1193.097713][ T4852] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1193.103663][ T4852] ? memset+0x1e/0x40 [ 1193.107674][ T4852] ? read_lock_is_recursive+0x10/0x10 [ 1193.113039][ T4852] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1193.119321][ T4852] ? lockdep_hardirqs_on+0x94/0x140 [ 1193.124511][ T4852] _raw_spin_lock_irqsave+0xb0/0x100 [ 1193.129789][ T4852] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1193.135674][ T4852] ? _raw_spin_lock+0x40/0x40 [ 1193.140341][ T4852] ? ktime_get+0x247/0x270 [ 1193.144748][ T4852] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1193.150460][ T4852] ? ocfs2_dlm_shutdown+0x230/0x230 [ 1193.155644][ T4852] ? slab_free_freelist_hook+0x133/0x1b0 [ 1193.161272][ T4852] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 1193.166815][ T4852] ? ocfs2_journal_init+0xd40/0xd40 [ 1193.172005][ T4852] ocfs2_dlm_shutdown+0x33/0x230 [ 1193.176934][ T4852] ocfs2_dismount_volume+0x479/0x940 [ 1193.182304][ T4852] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 1193.187601][ T4852] ? clear_inode+0x150/0x150 [ 1193.192194][ T4852] ? dput+0x37/0x1d0 [ 1193.196099][ T4852] ? ocfs2_free_inode+0x20/0x20 [ 1193.200951][ T4852] generic_shutdown_super+0x130/0x340 [ 1193.206319][ T4852] kill_block_super+0x7c/0xe0 [ 1193.210988][ T4852] deactivate_locked_super+0x93/0xf0 [ 1193.216265][ T4852] cleanup_mnt+0x471/0x4f0 [ 1193.220677][ T4852] task_work_run+0x1d0/0x260 [ 1193.225259][ T4852] ? task_work_cancel+0x220/0x220 [ 1193.230276][ T4852] ? exit_to_user_mode_loop+0x3b/0x110 [ 1193.235728][ T4852] exit_to_user_mode_loop+0xe6/0x110 [ 1193.241005][ T4852] exit_to_user_mode_prepare+0xee/0x180 [ 1193.246549][ T4852] syscall_exit_to_user_mode+0x16/0x40 [ 1193.252002][ T4852] do_syscall_64+0x58/0xa0 [ 1193.256415][ T4852] ? clear_bhb_loop+0x60/0xb0 [ 1193.261087][ T4852] ? clear_bhb_loop+0x60/0xb0 [ 1193.265757][ T4852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.271648][ T4852] RIP: 0033:0x7f63deb9f317 [ 1193.276051][ T4852] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1193.295651][ T4852] RSP: 002b:00007ffd0be43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1193.304054][ T4852] RAX: 0000000000000000 RBX: 00007f63dec34474 RCX: 00007f63deb9f317 [ 1193.312013][ T4852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0be430f0 [ 1193.319970][ T4852] RBP: 00007ffd0be430f0 R08: 00007ffd0be440f0 R09: 00000000ffffffff [ 1193.327931][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0be44180 [ 1193.335888][ T4852] R13: 00007f63dec34474 R14: 0000000000115c01 R15: 00007ffd0be441c0 [ 1193.343853][ T4852] [ 1193.365973][ T4852] ocfs2: Unmounting device (7,3) on (node local)