last executing test programs: 17m36.211863777s ago: executing program 1 (id=4051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 17m36.048690535s ago: executing program 1 (id=4054): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 17m35.890815532s ago: executing program 1 (id=4056): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000001c0)={0x400, 0x3, 0x2}) 17m35.660727224s ago: executing program 1 (id=4059): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fb, &(0x7f0000001380)="$eJzs3E1vG8cZAOBZfUS02hoFgjaOYyAbJwcXhRWSqmUI6SEstZQ2JbnELhXYp8KopdSIlABJC7S+BEaBtgFa9NRzkR566C/on8pvULHkUt8SFduKXeR5AHOG3Hdn3v3AjEVwNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIWqv1euNKHTT/ua9+GzttTzrnbN90t5/jxRHzB96DVEIUfkv1Grh2vija68exP6ofLkZXhu/ey3UyqIWHn/vxz9879W5mXLH+SgK5yT0XFwpX/ZmQ9XRpzPjfPa3f/6Hxx8/2NnZ+uyyE3lJrSf9tMjSXms9idMii1dXVurvbnSKuJN2k+J+MUx6cTtPWsMsj2+13w8hrC7HydL9bLO/vtbqJvGt9k/ixurq3dvNen0l/mBpkLTyIuu/+8FS0d5Iu920vz6KKTffbr4Z7pY34i/TYTxMar043n60s7U8LckyqHGRoOa0oGa92Ww0ms3Gyp3VO3fr9dr4dvh387Mw/mCufkw4vsvc5d+0vHReCYcGjskY98rzGsPhae21/376htlvOxMAAADgskSj79ij0ffy10a1Tjob6kdi9qIrLyw/AAAA4NlFYfT7uqj6Yd61EHXSblI/K9xvVgAAAOD/0F/219gtnLLGLkRRKAYL0eTP/sG9d6LdVllr7VYLBE6sExh2rkdXq0ZGxcpc9a6d3IheHwe9Pon+uiq2j671mw/H84jyfD56MkrgaH8XS6CMmgt/DdfHMdcfjsuHVVy1InGxk3aTpXbWfa8RWq2rM8Pk3vB3nzz6fQh5vjf7Zb93NQrbj3a2ln796c7DUS5Pylae7Ebj5qLzc1kIBycj/HZ/3WO1uvH9o0c8P/oipjzqL/u9xXG/9cMXoFqMOHPxCxD+FN4Yx7yxOC4XJ1t+OuqzVvbZWDrl6A9n0Rjce2eh6uyCR34sixvjmBu33i6Lt29VW+bDQRbNaVk0q/P/RXn+n+pcnJFFOJTF8rQslg/fBTOjm+ykYXm2Ts8C4EXZPj4LnZj/D+bdM+ed8Zr+c8ba7XNX8o+m8OO9nPjvxW/23589or81Dn3r+tzBjHRsRK9PG9HrF5zXzxrR/xNu/vMfIWyGm5PgU+aV0Rxb9vu3I7NqtPtVucNXVb//+uPeSAjVSvNQdJvl2ytRNXPM3n60++CjrY+2Pmk2l1fqP6vX7zTD/OgwquL0qzIbzD0A32lJ/nW0OPxzlOfp4FeN1dVGa7iRxHk2nnj2vojT/jDJ2xut/noSD/JsmLWzbryXZx+ma0kRF5uDQZYP406W71Utpt0krh79UiS9Vn+YtotBN2kVSdzO+sNWexivpUU7Hmz+opsWG0le7hwXg6SddtJ2a5hm/bjINvN2shTHRZIcCkzXkv4w7aRltR8P8rTXyu/HH2bdzV4SryVFO08Hw2zc4KSvtN/J8l7Z7IlJHAC+qz4P1RPs9h9l940roTYl5kUfIwBw1PFZeuHMSM8AAAAAAAAAAAAAAACAF+Xwcr2fV4/0eeYVgZNK7Tm1M6VSO/rJ98NpwW9eehrfqBJCmHv88YPJQ3ieqcHJk5hehuN69koUQngJ0jj/HrusSm3KpZyvtj9tF+XJnR78gzLm2x6JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC6/wUAAP//nwiOjg==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 17m35.284203482s ago: executing program 1 (id=4064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 17m34.726354778s ago: executing program 1 (id=4073): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000100)) 17m34.460933141s ago: executing program 32 (id=4073): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000100)) 3.382215999s ago: executing program 2 (id=12966): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x4, {0x4, 0xfffffffd, 0x2, 0x9}}) 3.13038933s ago: executing program 0 (id=12967): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000700)=0x800001, 0x18) 3.025923424s ago: executing program 2 (id=12969): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000400)={0x6, @empty, 0x4e21, 0x0, 'rr\x00', 0x3, 0x0, 0x21}, 0x2c) 2.803295904s ago: executing program 2 (id=12970): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1398, 0xf0, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0xff000000], [0xff000000], 'ip6tnl0\x00', 'macvlan1\x00', {}, {}, 0x18}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1ff, 0x7, 0x3, 'netbios-ns\x00', {0x40}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0x0, 0xff000000], 'pimreg1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x3b, 0x0, 0x4, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe170005"], 0x0) 2.213127862s ago: executing program 4 (id=12974): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x2, 0x9, 0x8a, 0x7, 0x4, 0xff}, 0xc) 2.025351061s ago: executing program 0 (id=12976): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8916, 0x0) 1.872438867s ago: executing program 3 (id=12977): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x61, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x28) 1.866758007s ago: executing program 4 (id=12978): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', &(0x7f0000002380)=ANY=[], &(0x7f0000000080), 0x400) 1.698401315s ago: executing program 0 (id=12979): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.503219964s ago: executing program 3 (id=12980): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000940)="88", 0x1}], 0x1) 1.3529848s ago: executing program 0 (id=12981): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x1000000, 0x0, {0x1, 0x1000, 0x1010, 0x8, 0x7, 0x2, 0x2, 0x6}}) 1.211864097s ago: executing program 3 (id=12982): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000700)={0x5, &(0x7f00000000c0)=[{0x37, '\x00', @st={0x4, [{0x1, @uvalue=0x4}, {0x1, @svalue=0x200cb01}, {0x2, @uvalue=0xae58}, {0x1, @uvalue=0x7}]}, 0xfffffffa}]}) 1.173301688s ago: executing program 4 (id=12983): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0xc}, {0x0, 0x8, 0x1}, {0x0, 0xb, 0xffffffe9}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) 1.114748821s ago: executing program 0 (id=12984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15219}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 898.402651ms ago: executing program 3 (id=12985): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000180)=0x32) 852.805553ms ago: executing program 4 (id=12986): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x294, 0x4007, 0x7fffffef, 0x8, 0x101, 0x2006, 0xf5, 0x4, 0x8080ff7, 0x5, 0x0, 0x9, 0x3, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffb, 0x1ef, 0x4, 0x2000000f, 0x55, 0x2, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0x9, 0x4, 0x7fff]}) 833.616763ms ago: executing program 2 (id=12987): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 542.404656ms ago: executing program 3 (id=12988): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) 451.55425ms ago: executing program 4 (id=12989): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f000001d240)={0x2020}, 0xffffffffffffff93) 413.239462ms ago: executing program 2 (id=12990): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 4000'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 198.669521ms ago: executing program 3 (id=12991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfff5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) 188.747062ms ago: executing program 2 (id=12992): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001280)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x104}]}]}, 0x18}], 0x1}, 0x400c020) 176.242053ms ago: executing program 4 (id=12993): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) 0s ago: executing program 0 (id=12994): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000529000/0x3000)=nil, 0x2) kernel console output (not intermixed with test programs): ing:816kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:20332kB local_pcp:13968kB free_cma:0kB [ 1341.462517][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.510816][ T23] usb 5-1: Product: syz [ 1341.515540][ T23] usb 5-1: Manufacturer: syz [ 1341.520172][ T23] usb 5-1: SerialNumber: syz [ 1341.564550][ T8924] lowmem_reserve[]: 0 0 0 0 0 [ 1341.569424][ T8924] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1341.629140][ T23] usb 5-1: config 0 descriptor?? [ 1341.644802][ T8924] lowmem_reserve[]: [ 1341.648586][ T23] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1341.688803][ T8924] 0 0 0 0 0 [ 1341.692132][ T8924] Node 1 Normal free:3883104kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23772kB local_pcp:6752kB free_cma:0kB [ 1341.813791][ T8924] lowmem_reserve[]: 0 0 0 0 0 [ 1341.913345][ T8924] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1341.980170][ T8924] Node 0 DMA32: 344*4kB (UME) 640*8kB (UME) 388*16kB (UM) 519*32kB (UME) 232*64kB (UM) 62*128kB (UM) 69*256kB (UME) 67*512kB (UME) 34*1024kB (UM) 6*2048kB (UME) 305*4096kB (UM) = 1400448kB [ 1342.080140][ T8924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.148818][ T8924] Node 1 Normal: 222*4kB (UE) 53*8kB (UE) 42*16kB (UE) 133*32kB (UE) 28*64kB (UM) 8*128kB (UME) 5*256kB (UME) 2*512kB (U) 1*1024kB (E) 2*2048kB (UE) 944*4096kB (M) = 3883104kB [ 1342.243715][ T791] usb 5-1: USB disconnect, device number 22 [ 1342.255893][ T8924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.274950][ T8924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1342.313063][ T8924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.362654][ T8924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1342.392864][ T8924] 62268 total pagecache pages [ 1342.397621][ T8924] 7 pages in swap cache [ 1342.430400][ T8971] netlink: 'syz.3.11237': attribute type 9 has an invalid length. [ 1342.433185][ T8924] Free swap = 124472kB [ 1342.462426][ T8924] Total swap = 124996kB [ 1342.472088][ T8924] 2097051 pages RAM [ 1342.481584][ T8924] 0 pages HighMem/MovableOnly [ 1342.501329][ T8924] 416960 pages reserved [ 1342.506728][ T8924] 0 pages cma reserved [ 1343.206154][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1343.294310][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.303526][ T5790] buffer_io_error: 40 callbacks suppressed [ 1343.303543][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1343.435164][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.494980][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1343.552151][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1343.572813][ T9004] loop4: detected capacity change from 0 to 256 [ 1343.595996][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1343.864707][ T9011] netlink: 'syz.3.11248': attribute type 1 has an invalid length. [ 1344.060666][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1344.137003][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1344.150023][ T9016] delete_channel: no stack [ 1344.221466][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1344.295154][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1344.323287][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1344.669926][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1344.750828][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1345.491168][ T5790] blk_print_req_error: 24 callbacks suppressed [ 1345.491187][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1345.600086][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1345.625387][ T9064] loop3: detected capacity change from 0 to 2048 [ 1345.678611][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1345.727278][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1345.755384][ T9064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.805113][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1345.869379][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1345.956319][ T9064] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #12: block 2: comm syz.3.11263: lblock 0 mapped to illegal pblock 2 (length 1) [ 1346.212909][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1346.270736][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1346.282483][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11268'. [ 1346.318850][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1346.370057][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1346.413208][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.990633][ T791] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1347.201930][ T791] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1347.266865][ T791] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1347.295050][ T791] usb 5-1: Product: syz [ 1347.323327][ T791] usb 5-1: Manufacturer: syz [ 1347.331003][ T791] usb 5-1: SerialNumber: syz [ 1347.371232][ T791] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1347.802905][ T791] vp7045: USB control message 'in' went wrong. [ 1347.809153][ T791] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1347.856236][ T791] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1347.917559][ T791] usb 5-1: USB disconnect, device number 23 [ 1348.096476][ T9143] netlink: 'syz.3.11280': attribute type 1 has an invalid length. [ 1348.104371][ T9143] netlink: 'syz.3.11280': attribute type 3 has an invalid length. [ 1348.179853][ T9143] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11280'. [ 1348.661404][ T5790] buffer_io_error: 33 callbacks suppressed [ 1348.661422][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1348.756044][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1348.830427][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1348.883734][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1348.962582][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1349.092570][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1349.181911][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1349.220654][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1349.302107][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1349.363941][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11290'. [ 1349.374058][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1350.110998][ T9187] loop0: detected capacity change from 0 to 4096 [ 1350.250792][ T9203] loop4: detected capacity change from 0 to 64 [ 1350.310445][ T9203] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1350.623089][ T9187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1350.708833][ T5989] blk_print_req_error: 44 callbacks suppressed [ 1350.708852][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1350.791341][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1350.831589][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1350.890975][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1350.928194][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1350.974689][ T5782] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1351.001903][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.111993][ T9231] loop4: detected capacity change from 0 to 256 [ 1351.368788][ T5782] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1351.649378][ T5782] usb 3-1: config 255 has an invalid interface number: 199 but max is 0 [ 1351.657824][ T5782] usb 3-1: config 255 has no interface number 0 [ 1351.771971][ T5782] usb 3-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 1351.790995][ T5782] usb 3-1: config 255 interface 199 has no altsetting 0 [ 1351.799905][ T9246] netlink: 'syz.0.11307': attribute type 1 has an invalid length. [ 1351.839056][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11307'. [ 1351.983068][ T5782] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e [ 1352.000556][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.052705][ T5782] usb 3-1: Product: syz [ 1352.056968][ T5782] usb 3-1: Manufacturer: syz [ 1352.072671][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1352.108139][ T5782] usb 3-1: SerialNumber: syz [ 1352.172883][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1352.206217][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1352.251592][ T9216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1352.269289][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1352.640982][ T5782] kvaser_usb 3-1:255.199: Cannot get usb endpoint(s) [ 1352.890622][ T5782] usb 3-1: USB disconnect, device number 108 [ 1353.601846][ T9310] loop0: detected capacity change from 0 to 128 [ 1353.676481][ T5790] buffer_io_error: 40 callbacks suppressed [ 1353.676498][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1353.754407][ T9310] FAT-fs (loop0): Directory bread(block 162) failed [ 1353.792089][ T9310] FAT-fs (loop0): Directory bread(block 163) failed [ 1353.820618][ T9310] FAT-fs (loop0): Directory bread(block 164) failed [ 1353.827302][ T9310] FAT-fs (loop0): Directory bread(block 165) failed [ 1353.868684][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1353.877283][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1353.909884][ T9310] FAT-fs (loop0): Directory bread(block 166) failed [ 1353.940179][ T9310] FAT-fs (loop0): Directory bread(block 167) failed [ 1353.960096][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1353.985952][ T9310] FAT-fs (loop0): Directory bread(block 168) failed [ 1354.026433][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1354.040558][ T9310] FAT-fs (loop0): Directory bread(block 169) failed [ 1354.073481][ T9310] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1354.242195][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1354.299072][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1354.328929][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1354.396933][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1354.475642][ T5790] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1354.552292][ T9336] loop4: detected capacity change from 0 to 256 [ 1354.933820][ T9336] FAT-fs (loop4): codepage cp9 not found [ 1355.354890][ T28] audit: type=1326 audit(2000000512.106:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1355.448116][ T28] audit: type=1326 audit(2000000512.106:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1355.580235][ T28] audit: type=1326 audit(2000000512.138:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1355.683921][ T5790] blk_print_req_error: 32 callbacks suppressed [ 1355.683938][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1355.702410][ T28] audit: type=1326 audit(2000000512.138:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1355.820515][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1355.864754][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1355.874084][ T28] audit: type=1326 audit(2000000512.138:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1355.925821][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1355.945708][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1355.965557][ T28] audit: type=1326 audit(2000000512.138:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1356.012140][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.096641][ T28] audit: type=1326 audit(2000000512.138:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1356.148214][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1356.192036][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.221721][ T28] audit: type=1326 audit(2000000512.138:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1356.249653][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.287682][ T5790] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1356.331003][ T28] audit: type=1326 audit(2000000512.138:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.11335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1357.082237][ T9429] netlink: 'syz.2.11355': attribute type 3 has an invalid length. [ 1357.121769][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11355'. [ 1357.304859][ T9436] loop4: detected capacity change from 0 to 2048 [ 1357.442274][ T9436] loop4: p1 < > [ 1357.728022][ T9451] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11361'. [ 1357.901797][ T9461] loop4: detected capacity change from 0 to 256 [ 1358.022163][ T9461] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1358.282371][ T28] audit: type=1800 audit(2000000515.171:545): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11362" name="file1" dev="loop4" ino=1048690 res=0 errno=0 [ 1358.318309][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1358.696160][ T9481] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11369'. [ 1358.952429][ T9488] loop4: detected capacity change from 0 to 2048 [ 1358.964051][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11372'. [ 1359.171386][ T9488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.217687][ T9488] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 1359.456940][T15076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.822241][ T9522] netlink: 'syz.4.11378': attribute type 3 has an invalid length. [ 1360.290837][ T9541] loop0: detected capacity change from 0 to 16 [ 1360.382762][ T9541] erofs: (device loop0): mounted with root inode @ nid 36. [ 1360.560808][ T9549] dlm: no locking on control device [ 1361.244554][ T9573] bridge_slave_1: left allmulticast mode [ 1361.278696][ T9573] bridge_slave_1: left promiscuous mode [ 1361.315430][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.363111][ T9573] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1362.067856][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.099343][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.129760][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.204478][ T9597] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1362.297990][ T9597] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1362.425886][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.479663][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.520003][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.559009][ T9597] wg1 speed is unknown, defaulting to 1000 [ 1362.565573][ T9611] xt_bpf: check failed: parse error [ 1363.298136][ T9583] loop4: detected capacity change from 0 to 32768 [ 1363.390062][ T9583] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1363.629085][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.667185][ T1292] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1363.773226][ T9583] XFS (loop4): Ending clean mount [ 1364.026906][ T9606] loop2: detected capacity change from 0 to 32768 [ 1364.062167][ T9647] ip6gre3: entered promiscuous mode [ 1364.067457][ T9647] ip6gre3: entered allmulticast mode [ 1364.112211][ T9606] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.11407 (9606) [ 1364.170490][T15076] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1364.220251][ T9606] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1364.320673][ T9606] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1364.372984][ T9606] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1364.452532][ T9606] BTRFS info (device loop2): turning on flush-on-commit [ 1364.459564][ T9606] BTRFS info (device loop2): using free space tree [ 1364.908075][ T9606] BTRFS info (device loop2): enabling ssd optimizations [ 1364.976150][ T9606] BTRFS info (device loop2): auto enabling async discard [ 1365.199782][ T9689] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11423'. [ 1365.261136][ T9689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1365.371785][ T9693] ±ÿ: entered promiscuous mode [ 1365.377231][ T5771] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1365.408643][ T9693] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1365.993932][ T9708] loop3: detected capacity change from 0 to 1024 [ 1366.253544][ T9708] hfsplus: extend alloc file! (16384,256,150995124) [ 1366.336639][ T9708] hfsplus: failed to extend attributes file [ 1367.068124][ T9730] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1367.822189][ T9765] netlink: 'syz.2.11444': attribute type 10 has an invalid length. [ 1367.850361][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1367.918572][ T9765] netlink: 'syz.2.11444': attribute type 10 has an invalid length. [ 1367.926544][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1368.044205][ T9771] netlink: 'syz.4.11447': attribute type 10 has an invalid length. [ 1368.082955][ T9771] geneve0: entered promiscuous mode [ 1368.164900][ T9771] geneve0: entered allmulticast mode [ 1368.204321][ T9771] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1370.590212][ T9807] loop3: detected capacity change from 0 to 32768 [ 1370.651608][ T9807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11458 (9807) [ 1370.713873][ T9807] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1370.754303][ T9807] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1370.783061][ T9807] BTRFS info (device loop3): using free space tree [ 1370.841000][ T9853] loop0: detected capacity change from 0 to 2048 [ 1370.966146][ T9853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1370.975732][ T9807] BTRFS info (device loop3): enabling ssd optimizations [ 1370.982735][ T9807] BTRFS info (device loop3): auto enabling async discard [ 1371.645899][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1372.553800][ T28] audit: type=1326 audit(2000000530.152:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1372.686341][ T28] audit: type=1326 audit(2000000530.152:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1372.709202][ T9910] loop0: detected capacity change from 0 to 8192 [ 1372.808924][ T9910] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1372.914698][ T9910] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1372.953569][ T28] audit: type=1326 audit(2000000530.194:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1373.006610][ T9910] REISERFS (device loop0): using ordered data mode [ 1373.013186][ T9910] reiserfs: using flush barriers [ 1373.112159][ T9910] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1373.167449][ T9910] REISERFS (device loop0): checking transaction log (loop0) [ 1373.184949][ T28] audit: type=1326 audit(2000000530.194:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1373.278050][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11490'. [ 1373.287964][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11490'. [ 1373.342703][ T9910] REISERFS (device loop0): Using r5 hash to sort names [ 1373.424390][ T28] audit: type=1326 audit(2000000530.194:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1373.540518][ T28] audit: type=1326 audit(2000000530.194:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1373.680949][ T28] audit: type=1326 audit(2000000530.194:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1373.794140][ T28] audit: type=1326 audit(2000000530.194:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1373.929180][ T28] audit: type=1326 audit(2000000530.194:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.2.11485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1374.103522][ T28] audit: type=1326 audit(2000000531.527:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.4.11494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1374.707873][ T9961] loop4: detected capacity change from 0 to 8192 [ 1374.763672][ T9961] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1374.846542][ T9961] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1374.929590][ T9961] REISERFS (device loop4): using ordered data mode [ 1374.966205][ T9961] reiserfs: using flush barriers [ 1375.001161][ T9961] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1375.113839][ T9961] REISERFS (device loop4): checking transaction log (loop4) [ 1375.233716][ T9961] REISERFS (device loop4): Using r5 hash to sort names [ 1375.243106][ T9961] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1375.319915][ T9989] loop0: detected capacity change from 0 to 256 [ 1375.373936][ T9988] openvswitch: netlink: EtherType 0 is less than min 600 [ 1375.823774][ T9998] CIFS: bad ip= option (::.) [ 1376.943602][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11520'. [ 1377.207673][T10042] loop4: detected capacity change from 0 to 2048 [ 1377.321295][T10052] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1377.804272][T10059] loop2: detected capacity change from 0 to 4096 [ 1377.856103][T10059] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1378.195634][T10080] tmpfs: Bad value for 'mpol' [ 1378.218945][T10059] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1378.484122][ T36] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1378.541446][ T5771] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1378.548056][ T5771] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1378.596125][ T5771] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1378.604813][ T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1378.655785][T10088] affs: No valid root block on device nbd3 [ 1378.980296][T10099] xt_hashlimit: size too large, truncated to 1048576 [ 1379.026674][T10099] xt_hashlimit: max too large, truncated to 1048576 [ 1379.884090][T10141] netlink: 'syz.4.11544': attribute type 2 has an invalid length. [ 1379.910921][T10141] netlink: 'syz.4.11544': attribute type 1 has an invalid length. [ 1379.935448][T10141] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11544'. [ 1380.444840][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11546'. [ 1380.580505][T10160] CIFS: Attempting to mount //127.0.0.1/test [ 1380.626010][T10160] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1380.644800][T10160] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1382.843967][T10233] netlink: 'syz.2.11561': attribute type 4 has an invalid length. [ 1382.886471][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11561'. [ 1383.672425][T10259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11569'. [ 1383.745491][T10264] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1384.879353][T10303] xt_TCPMSS: Only works on TCP SYN packets [ 1386.147359][T10344] loop3: detected capacity change from 0 to 64 [ 1386.990713][T10372] syz.3.11599 uses old SIOCAX25GETINFO [ 1387.088298][T10317] loop0: detected capacity change from 0 to 32768 [ 1387.246483][T10317] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1387.447646][T10317] XFS (loop0): Ending clean mount [ 1387.799289][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1388.808368][T10434] vivid-001: disconnect [ 1388.846866][T10433] vivid-001: reconnect [ 1389.121556][T10442] loop2: detected capacity change from 0 to 736 [ 1391.711227][T10537] autofs4:pid:10537:autofs_fill_super: called with bogus options [ 1392.679985][T10571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.687660][T10568] netlink: 'syz.0.11648': attribute type 1 has an invalid length. [ 1392.713502][T10571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.737838][T10568] netlink: 232 bytes leftover after parsing attributes in process `syz.0.11648'. [ 1392.782959][T10571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.820228][T10571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.996760][T10578] loop2: detected capacity change from 0 to 1024 [ 1393.143867][T10578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1393.281709][T10578] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #11: comm syz.2.11651: directory missing '.' [ 1394.035561][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.188657][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1395.237604][T10648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1395.269895][T10651] loop2: detected capacity change from 0 to 128 [ 1395.286713][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1395.347871][T10648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1395.415491][T10648] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1396.661638][T10690] loop3: detected capacity change from 0 to 1024 [ 1396.737333][T10690] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1397.481429][T10664] loop2: detected capacity change from 0 to 40427 [ 1397.568229][T10664] F2FS-fs (loop2): invalid crc value [ 1397.631089][T10664] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1398.077807][T10664] F2FS-fs (loop2): Start checkpoint disabled! [ 1398.248607][T10664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1400.584629][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1400.584645][ T28] audit: type=1326 audit(2000000559.568:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1400.743205][ T28] audit: type=1326 audit(2000000559.568:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1400.857494][ T28] audit: type=1326 audit(2000000559.578:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1400.962557][ T28] audit: type=1326 audit(2000000559.620:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1400.986777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.086598][ T28] audit: type=1326 audit(2000000559.620:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1401.200417][ T28] audit: type=1326 audit(2000000559.620:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1401.267107][ T28] audit: type=1326 audit(2000000559.620:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1401.371896][ T28] audit: type=1326 audit(2000000559.620:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1401.461319][T10781] loop3: detected capacity change from 0 to 32768 [ 1401.468079][ T28] audit: type=1326 audit(2000000559.620:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.11701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1401.492258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.527759][T10781] JBD2: Ignoring recovery information on journal [ 1401.624615][T10831] loop2: detected capacity change from 0 to 8 [ 1401.660355][T10781] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1401.685995][T10831] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1402.124387][T10781] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 1402.143235][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.286744][T10781] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1402.334051][T10781] OCFS2: File system is now read-only. [ 1402.339610][T10781] (syz.3.11695,10781,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 1402.432812][T10781] (syz.3.11695,10781,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 1402.486952][T10781] (syz.3.11695,10781,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 1402.495758][T10781] (syz.3.11695,10781,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1402.585505][T10781] (syz.3.11695,10781,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1402.647865][T10781] (syz.3.11695,10781,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1402.688723][T10781] (syz.3.11695,10781,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1402.737044][T10781] (syz.3.11695,10781,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1402.838868][T10781] (syz.3.11695,10781,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1402.848569][T10781] (syz.3.11695,10781,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1402.883517][T10854] loop0: detected capacity change from 0 to 4096 [ 1402.935769][T10854] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1402.944231][T10863] netlink: 'syz.2.11719': attribute type 1 has an invalid length. [ 1402.972404][T10781] (syz.3.11695,10781,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1403.000404][T10781] (syz.3.11695,10781,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1403.026076][T10781] (syz.3.11695,10781,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 1403.058727][T10781] (syz.3.11695,10781,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 1403.063205][T10867] IPVS: Error joining to the multicast group [ 1403.080330][T10854] ntfs: volume version 3.1. [ 1403.103415][T10781] (syz.3.11695,10781,0):ocfs2_symlink:1914 ERROR: status = -30 [ 1403.132962][T10781] (syz.3.11695,10781,0):ocfs2_symlink:2068 ERROR: status = -30 [ 1403.453976][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 1403.668020][ T23] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1403.888903][ T23] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1403.909847][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.946954][ T23] usb 3-1: config 0 descriptor?? [ 1403.993653][ T23] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1404.116237][T10895] qrtr: Invalid version 15 [ 1404.363816][T10911] xt_TCPMSS: Only works on TCP SYN packets [ 1404.430553][ T23] gspca_sunplus: reg_w_riv err -71 [ 1404.437892][ T23] sunplus: probe of 3-1:0.0 failed with error -71 [ 1404.459829][ T23] usb 3-1: USB disconnect, device number 109 [ 1404.467072][T10898] bond6: Removing last ns target with arp_interval on [ 1404.668859][T10947] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1405.424218][T10973] loop3: detected capacity change from 0 to 2048 [ 1405.479518][T10973] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1405.534891][T10973] NILFS (loop3): mounting unchecked fs [ 1405.588399][T10973] NILFS (loop3): recovery complete [ 1405.602149][ T5989] udevd[5989]: incorrect nilfs2 checksum on /dev/loop3 [ 1405.627259][T10988] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1406.290223][T11003] loop2: detected capacity change from 0 to 64 [ 1406.299540][T11004] loop3: detected capacity change from 0 to 16 [ 1406.370758][T11004] erofs: (device loop3): mounted with root inode @ nid 36. [ 1407.776115][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1407.776133][ T28] audit: type=1326 audit(2000000567.137:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.3.11763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1407.925501][ T28] audit: type=1326 audit(2000000567.168:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.3.11763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1408.110859][ T28] audit: type=1326 audit(2000000567.179:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.3.11763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1408.239837][ T28] audit: type=1326 audit(2000000567.179:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.3.11763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1408.771512][T11090] x_tables: duplicate underflow at hook 2 [ 1408.806674][T11097] ipvlan1: left promiscuous mode [ 1408.851834][T11097] ipvlan1: left allmulticast mode [ 1408.856934][T11097] veth0_vlan: left allmulticast mode [ 1409.509000][T11120] netlink: 'syz.0.11782': attribute type 3 has an invalid length. [ 1409.771223][T11126] loop3: detected capacity change from 0 to 512 [ 1409.823915][T11126] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1409.904433][T11126] EXT4-fs (loop3): 1 truncate cleaned up [ 1410.013465][T11126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1410.136294][T11126] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.11784: Logical block already allocated [ 1410.312132][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.243598][T11165] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11795'. [ 1411.289631][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11795'. [ 1411.524011][T11128] loop0: detected capacity change from 0 to 32768 [ 1411.839823][T11138] loop4: detected capacity change from 0 to 40427 [ 1411.903845][T11138] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1411.935954][T11138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1412.017628][T11138] F2FS-fs (loop4): invalid crc value [ 1412.087338][T11138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1412.416449][T11138] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1412.454590][T11138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1412.757850][T11138] syz.4.11787: attempt to access beyond end of device [ 1412.757850][T11138] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1413.235520][T11211] loop2: detected capacity change from 0 to 64 [ 1413.380914][T11215] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1413.771857][T11230] netlink: 'syz.3.11812': attribute type 1 has an invalid length. [ 1414.084389][T11234] sctp: [Deprecated]: syz.2.11814 (pid 11234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.084389][T11234] Use struct sctp_sack_info instead [ 1414.224552][T11239] loop3: detected capacity change from 0 to 512 [ 1414.376934][T11239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.468182][T11239] ext4 filesystem being mounted at /2995/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.847833][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.926012][T11261] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1415.017460][T11261] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 1417.589154][T11348] loop2: detected capacity change from 0 to 64 [ 1418.607676][T11373] loop2: detected capacity change from 0 to 4096 [ 1418.683443][T11373] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1418.716511][T11373] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1418.803053][T11373] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1418.891101][T11373] ntfs: volume version 3.1. [ 1419.320351][T11393] netlink: 'syz.4.11860': attribute type 1 has an invalid length. [ 1419.367715][T11393] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.11860'. [ 1419.527622][ T11] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1419.573053][ T5771] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1419.792522][T11403] loop0: detected capacity change from 0 to 512 [ 1419.891555][T11403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1419.972218][T11403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.062567][T11403] ext4 filesystem being mounted at /2881/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.343592][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.032927][ T23] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1421.226167][T11453] loop0: detected capacity change from 0 to 512 [ 1421.241043][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.276512][T11453] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1421.302301][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1421.331388][T11453] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.11877: corrupted in-inode xattr: invalid size in ea xattr [ 1421.368987][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1421.408236][T11453] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.11877: couldn't read orphan inode 15 (err -117) [ 1421.443086][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1421.487290][T11453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1421.504218][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.583163][ T23] ttusb_dec_send_command: command bulk message failed: error -8 [ 1421.634506][ T23] ttusb-dec: probe of 4-1:1.0 failed with error -8 [ 1421.795651][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.909879][ T5782] usb 4-1: USB disconnect, device number 123 [ 1422.141230][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.635775][ T28] audit: type=1800 audit(2000000582.737:590): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.11883" name="/6057/task/6058/net/xfrm_stat" dev="proc" ino=4026533026 res=0 errno=0 [ 1422.769338][T11455] loop4: detected capacity change from 0 to 32768 [ 1422.840385][T11455] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1423.346895][T11516] kAFS: unparsable volume name [ 1423.900558][T11529] cgroup: subsys name conflicts with all [ 1424.044342][ T28] audit: type=1326 audit(2000000584.196:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1424.068553][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.270192][ T28] audit: type=1326 audit(2000000584.196:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1424.455813][ T28] audit: type=1326 audit(2000000584.206:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1424.480023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.667942][ T28] audit: type=1326 audit(2000000584.248:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1424.838278][ T28] audit: type=1326 audit(2000000584.248:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1424.862483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.904563][T11555] loop3: detected capacity change from 0 to 164 [ 1424.973178][T11555] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 1424.995460][ T28] audit: type=1326 audit(2000000584.248:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1425.019707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.162387][ T28] audit: type=1326 audit(2000000584.248:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1425.262747][ T28] audit: type=1326 audit(2000000584.248:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1425.286960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.427587][ T28] audit: type=1326 audit(2000000584.248:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.11897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1425.825316][T11576] loop0: detected capacity change from 0 to 2048 [ 1425.948598][T11583] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1426.470277][T11548] loop4: detected capacity change from 0 to 32768 [ 1426.510024][T11548] [ 1426.510024][T11548] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.510024][T11548] [ 1426.702301][T11548] [ 1426.702301][T11548] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.702301][T11548] [ 1426.847996][T11548] [ 1426.847996][T11548] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.847996][T11548] [ 1426.900896][T11548] [ 1426.900896][T11548] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.900896][T11548] [ 1426.977044][T11548] [ 1426.977044][T11548] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.977044][T11548] [ 1427.058237][ T116] [ 1427.058237][ T116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.058237][ T116] [ 1427.186923][T15076] [ 1427.186923][T15076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.186923][T15076] [ 1427.234534][T15076] [ 1427.234534][T15076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.234534][T15076] [ 1427.361550][ T28] audit: type=1326 audit(2000000587.692:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.3.11925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1427.385749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.610304][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11926'. [ 1427.672628][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11926'. [ 1427.923123][T11631] loop2: detected capacity change from 0 to 4096 [ 1428.018265][T11631] ntfs: volume version 3.1. [ 1429.092194][T11667] netlink: 'syz.0.11937': attribute type 9 has an invalid length. [ 1429.202641][T11671] loop4: detected capacity change from 0 to 512 [ 1429.350601][T11671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.446452][T11671] ext4 filesystem being mounted at /2006/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1429.616668][T11671] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.11938: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1429.701088][T11671] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.11938: directory missing '.' [ 1429.998573][T15076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.054765][T11704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.243677][T10308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.264051][T10308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.330366][T11714] autofs4:pid:11714:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 1431.098572][T11740] xt_ecn: cannot match TCP bits for non-tcp packets [ 1431.608792][T11762] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1431.618367][T11762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1433.089757][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1433.089783][ T28] audit: type=1326 audit(2000000593.707:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1433.216445][ T28] audit: type=1326 audit(2000000593.707:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1433.297492][ T28] audit: type=1326 audit(2000000593.707:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1433.437460][T11766] loop3: detected capacity change from 0 to 32768 [ 1433.472472][T11766] [ 1433.472472][T11766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1433.472472][T11766] [ 1433.486131][ T28] audit: type=1326 audit(2000000593.739:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1433.597993][T11823] netlink: 'syz.2.11985': attribute type 21 has an invalid length. [ 1433.646745][T11823] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11985'. [ 1433.671284][ T28] audit: type=1326 audit(2000000593.760:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1433.744321][T11823] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11985'. [ 1433.861789][ T28] audit: type=1326 audit(2000000593.760:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1433.892965][ T1099] read_mapping_page failed! [ 1433.897535][ T1099] ERROR: (device loop3): txCommit: [ 1433.897535][ T1099] [ 1433.929992][ T1099] jfs_write_inode: jfs_commit_inode failed! [ 1433.954347][ T5775] [ 1433.954347][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1433.954347][ T5775] [ 1433.971010][ T5775] [ 1433.971010][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1433.971010][ T5775] [ 1434.057773][ T28] audit: type=1326 audit(2000000593.760:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1434.186565][ T28] audit: type=1326 audit(2000000593.760:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1434.288288][ T28] audit: type=1326 audit(2000000593.760:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.11980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd08b9e159 code=0x7ffc0000 [ 1434.756325][T11855] loop2: detected capacity change from 0 to 512 [ 1434.835552][T11855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1434.855617][T11647] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1434.946467][T11855] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1435.038209][T11863] netlink: 'syz.0.11996': attribute type 10 has an invalid length. [ 1435.047797][T11863] syz_tun: entered promiscuous mode [ 1435.056495][T11855] EXT4-fs (loop2): 1 truncate cleaned up [ 1435.065764][T11647] usb 4-1: Using ep0 maxpacket: 8 [ 1435.085032][T11647] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1435.103682][T11855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.121307][T11647] usb 4-1: config 2 has no interface number 0 [ 1435.129198][T11863] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1435.150513][T11647] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1435.227244][T11647] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1435.262414][T11647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.321704][T11647] usb 4-1: Product: syz [ 1435.336087][T11647] usb 4-1: Manufacturer: syz [ 1435.359593][T11647] usb 4-1: SerialNumber: syz [ 1435.366527][T11866] [U] ^C [ 1435.414392][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.781141][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12000'. [ 1435.879970][T11647] ch9200: probe of 4-1:2.31 failed with error -22 [ 1435.924648][T11647] usb 4-1: USB disconnect, device number 124 [ 1436.893157][ T791] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1437.093352][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 1437.102753][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1437.121720][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1437.161170][T11920] loop4: detected capacity change from 0 to 4096 [ 1437.168156][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1437.214791][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1437.265347][ T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1437.301141][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1437.341679][ T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1437.368001][ T791] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1437.382699][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.439703][T11936] bridge4: entered promiscuous mode [ 1437.451019][ T791] usb 3-1: Product: syz [ 1437.455244][ T791] usb 3-1: Manufacturer: syz [ 1437.501964][ T791] usb 3-1: SerialNumber: syz [ 1437.544348][ T791] usb 3-1: config 0 descriptor?? [ 1437.589170][T11910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1437.640785][T11910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1437.697032][ T791] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1438.505847][ T791] usb 3-1: USB disconnect, device number 110 [ 1439.541626][ T791] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1439.741504][ T791] usb 4-1: Using ep0 maxpacket: 8 [ 1439.774977][ T791] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1439.814410][ T791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.874544][ T791] usb 4-1: config 0 has no interface number 0 [ 1439.906772][ T791] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1439.940240][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.983269][ T791] usb 4-1: Product: syz [ 1439.987502][ T791] usb 4-1: Manufacturer: syz [ 1440.028216][ T791] usb 4-1: SerialNumber: syz [ 1440.088650][ T791] usb 4-1: config 0 descriptor?? [ 1440.363188][ T791] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1440.408529][ T791] usb 4-1: No valid video chain found. [ 1440.511067][T12036] loop0: detected capacity change from 0 to 64 [ 1440.605319][T12036] syz.0.12035: attempt to access beyond end of device [ 1440.605319][T12036] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1440.640664][ T791] usb 4-1: USB disconnect, device number 125 [ 1440.705060][T12036] buffer_io_error: 30 callbacks suppressed [ 1440.705078][T12036] Buffer I/O error on dev loop0, logical block 512, async page read [ 1440.750164][T11995] loop4: detected capacity change from 0 to 32768 [ 1440.789734][T12036] syz.0.12035: attempt to access beyond end of device [ 1440.789734][T12036] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1440.813164][T11995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12024 (11995) [ 1440.873457][T12036] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1441.116670][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12038'. [ 1441.432568][T11995] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1441.498326][T11995] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1441.551196][T11995] BTRFS info (device loop4): using free space tree [ 1441.810578][T12076] __vm_enough_memory: pid: 12076, comm: syz.0.12039, not enough memory for the allocation [ 1441.824168][T11995] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1441.882706][T11995] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1441.975762][T11995] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1442.142066][T11995] BTRFS error (device loop4): open_ctree failed: -12 [ 1442.234919][ T5989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5989) [ 1442.351814][T12100] netlink: 'syz.2.12047': attribute type 6 has an invalid length. [ 1443.173655][T12124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1443.523592][T12132] openvswitch: netlink: Actions may not be safe on all matching packets [ 1443.889056][T12135] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 1443.915911][T12141] syz.3.12060: attempt to access beyond end of device [ 1443.915911][T12141] nbd3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1443.980535][T12141] F2FS-fs (nbd3): Unable to read 1th superblock [ 1444.017594][T12141] syz.3.12060: attempt to access beyond end of device [ 1444.017594][T12141] nbd3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1444.087842][T12141] F2FS-fs (nbd3): Unable to read 2th superblock [ 1444.451240][T12153] overlay: Unknown parameter '\' [ 1444.657377][T12123] loop4: detected capacity change from 0 to 32768 [ 1444.775039][T12123] JBD2: Ignoring recovery information on journal [ 1445.114255][T12123] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1445.687500][T15076] ocfs2: Unmounting device (7,4) on (node local) [ 1446.273303][T12196] loop3: detected capacity change from 0 to 1024 [ 1446.569327][T12177] loop2: detected capacity change from 0 to 32768 [ 1446.597277][T12177] XFS: ikeep mount option is deprecated. [ 1446.631186][T12177] XFS: ikeep mount option is deprecated. [ 1446.666346][T12020] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1446.792069][T12177] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1446.866445][T12020] usb 4-1: Using ep0 maxpacket: 32 [ 1446.888031][T12020] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1446.927085][T12020] usb 4-1: config 0 has no interface number 0 [ 1446.986419][T12020] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 65519, setting to 1024 [ 1447.034777][T12020] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1447.057037][T12177] XFS (loop2): Ending clean mount [ 1447.097538][T12020] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1447.146585][T12020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.207907][T12020] usb 4-1: Product: syz [ 1447.257346][T12020] usb 4-1: Manufacturer: syz [ 1447.262084][T12020] usb 4-1: SerialNumber: syz [ 1447.316698][T12020] usb 4-1: config 0 descriptor?? [ 1447.360536][T12196] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1447.407031][T12020] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1447.454503][T12234] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1447.484898][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1447.504550][T12020] em28xx 4-1:0.132: Video interface 132 found: bulk [ 1447.783066][T12020] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1447.905218][T12020] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1447.933444][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12083'. [ 1447.981155][T12020] em28xx 4-1:0.132: board has no eeprom [ 1448.068118][T12020] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1448.108200][T12020] em28xx 4-1:0.132: analog set to bulk mode. [ 1448.151349][ T2181] em28xx 4-1:0.132: Registering V4L2 extension [ 1448.200864][T12020] usb 4-1: USB disconnect, device number 126 [ 1448.271162][T12020] em28xx 4-1:0.132: Disconnecting em28xx [ 1449.204160][ T2181] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1449.253934][ T2181] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1449.296696][ T2181] em28xx 4-1:0.132: No AC97 audio processor [ 1449.382341][ T2181] usb 4-1: Decoder not found [ 1449.387051][ T2181] em28xx 4-1:0.132: failed to create media graph [ 1449.468095][ T2181] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1449.560129][ T2181] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1449.641558][T12295] loop2: detected capacity change from 0 to 1024 [ 1449.648993][T12020] em28xx 4-1:0.132: Closing input extension [ 1449.711974][T12295] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1449.845331][T12020] em28xx 4-1:0.132: Freeing device [ 1450.337640][T12311] loop4: detected capacity change from 0 to 4096 [ 1450.466736][T12311] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1450.536022][T12311] ntfs3: loop4: Failed to load $Extend (-22). [ 1450.542196][T12311] ntfs3: loop4: Failed to initialize $Extend. [ 1450.696235][T12333] (null): rxe_set_mtu: Set mtu to 1024 [ 1450.753562][ T28] audit: type=1800 audit(2000000612.257:618): pid=12311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12099" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 1451.560566][T12333] infiniband syz1: set down [ 1451.601216][ T28] audit: type=1326 audit(2000000613.128:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.3.12109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1451.650023][T12333] infiniband syz1: added team_slave_0 [ 1451.732405][ T28] audit: type=1326 audit(2000000613.128:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.3.12109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1451.914937][ T28] audit: type=1326 audit(2000000613.170:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.3.12109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1452.024088][T12323] loop2: detected capacity change from 0 to 32768 [ 1452.038112][T12333] RDS/IB: syz1: added [ 1452.062365][T12333] smc: adding ib device syz1 with port count 1 [ 1452.074229][ T28] audit: type=1326 audit(2000000613.170:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.3.12109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd69f9e159 code=0x7ffc0000 [ 1452.129351][T12333] smc: ib device syz1 port 1 has pnetid [ 1452.211824][T12323] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1452.543383][T12370] loop4: detected capacity change from 0 to 512 [ 1452.948429][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 1453.590464][T12380] loop2: detected capacity change from 0 to 4096 [ 1453.633516][T12380] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1453.997359][T12380] ntfs3: loop2: failed to convert "c46c" to iso8859-14 [ 1454.036372][T12399] loop4: detected capacity change from 0 to 24 [ 1454.088349][T12399] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1454.154538][T12399] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1454.250215][T12399] romfs: read error for inode 0x70040 [ 1456.424065][T12463] netlink: 'syz.3.12137': attribute type 1 has an invalid length. [ 1457.014998][T12487] loop4: detected capacity change from 0 to 1024 [ 1457.098443][T12487] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1457.262631][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1458.234683][T12520] xt_CONNSECMARK: invalid mode: 129 [ 1459.270348][T12499] loop2: detected capacity change from 0 to 32768 [ 1461.187097][T12599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12180'. [ 1461.241296][T12599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12180'. [ 1461.600689][T12616] xt_socket: unknown flags 0x58 [ 1462.202859][ T791] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1462.394554][ T791] usb 5-1: not running at top speed; connect to a high speed hub [ 1462.411305][ T791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.443273][ T791] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1462.497893][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.560272][ T791] uvcvideo 5-1:1.1: Unknown video format 32595559-0000-0000-0000-000000000000 [ 1462.605292][ T791] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1462.625122][ T791] uvcvideo 5-1:1.1: No supported video formats found. [ 1462.644702][ T791] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 1462.827649][ T791] usb 5-1: USB disconnect, device number 24 [ 1462.991104][T12671] gtp0: entered promiscuous mode [ 1463.001265][T12671] gtp0: entered allmulticast mode [ 1464.253149][ T791] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1464.462136][ T791] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1464.482197][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.513977][ T791] usb 5-1: config 0 has no interface number 0 [ 1464.533116][ T791] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1464.548367][ T2181] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1464.564930][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.600315][ T791] usb 5-1: Product: syz [ 1464.610249][ T791] usb 5-1: Manufacturer: syz [ 1464.616344][ T791] usb 5-1: SerialNumber: syz [ 1464.631729][T12020] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1464.651746][ T791] usb 5-1: config 0 descriptor?? [ 1464.789017][ T2181] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.803024][ T2181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.827220][T12020] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.841319][ T2181] usb 3-1: Product: syz [ 1464.845545][ T2181] usb 3-1: Manufacturer: syz [ 1464.850347][T12020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.871134][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12216'. [ 1464.881107][ T2181] usb 3-1: SerialNumber: syz [ 1464.887063][T12020] usb 4-1: Product: syz [ 1464.903052][T12020] usb 4-1: Manufacturer: syz [ 1464.960979][T12020] usb 4-1: SerialNumber: syz [ 1464.977284][ T791] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1465.034587][ T2181] usb 5-1: USB disconnect, device number 25 [ 1465.066472][T11647] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1465.700126][T12020] usb 3-1: USB disconnect, device number 111 [ 1465.784242][ T55] usb 4-1: USB disconnect, device number 127 [ 1466.064954][T12775] loop0: detected capacity change from 0 to 1024 [ 1466.099007][ T791] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1466.142566][ T791] ath9k_htc: Failed to initialize the device [ 1466.178959][T12020] usb 3-1: ath9k_htc: USB layer deinitialized [ 1466.187228][T11647] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1466.224921][T11647] ath9k_htc: Failed to initialize the device [ 1466.288987][ T55] usb 4-1: ath9k_htc: USB layer deinitialized [ 1467.199590][ T55] nvmet: connect request for invalid subsystem testsubsys! [ 1467.284531][T12824] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1467.662031][ T28] audit: type=1326 audit(2000000629.999:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1467.785169][ T28] audit: type=1326 audit(2000000630.030:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1467.909131][ T28] audit: type=1326 audit(2000000630.041:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.054984][ T28] audit: type=1326 audit(2000000630.041:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.211012][ T28] audit: type=1326 audit(2000000630.051:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.583450][ T28] audit: type=1326 audit(2000000630.051:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.648993][ T28] audit: type=1326 audit(2000000630.051:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.832429][ T28] audit: type=1326 audit(2000000630.051:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.932499][ T28] audit: type=1326 audit(2000000630.051:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.12230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1468.967082][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12241'. [ 1469.013025][T12875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12241'. [ 1469.090062][T12879] netlink: 'syz.2.12243': attribute type 7 has an invalid length. [ 1469.720946][T12902] netlink: 'syz.4.12250': attribute type 4 has an invalid length. [ 1469.780950][T12902] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.12250'. [ 1470.566929][T11647] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1470.787203][T11647] usb 3-1: Using ep0 maxpacket: 16 [ 1470.803556][T12940] loop0: detected capacity change from 0 to 1024 [ 1470.822678][T11647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.846449][T11647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.893818][T12940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.926283][T11647] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1470.961162][T11647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1471.008898][T11647] usb 3-1: SerialNumber: syz [ 1471.041332][T12944] loop3: detected capacity change from 0 to 4096 [ 1471.058578][T11647] usb 3-1: 0:2 : does not exist [ 1471.228126][T12944] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1471.272379][T12944] ntfs3: loop3: Failed to load $Extend (-22). [ 1471.288379][T12944] ntfs3: loop3: Failed to initialize $Extend. [ 1471.305087][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.514347][T11647] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1471.573878][T11647] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1471.680016][T11647] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1471.743918][T11647] usb 3-1: USB disconnect, device number 112 [ 1472.415858][T12985] loop3: detected capacity change from 0 to 16 [ 1472.416371][T12942] loop4: detected capacity change from 0 to 32768 [ 1472.470370][T12985] erofs: (device loop3): mounted with root inode @ nid 36. [ 1472.485464][T12942] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.12261 (12942) [ 1472.614081][T12942] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1472.628622][T12985] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 1472.661987][T12942] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1472.671286][T12942] BTRFS info (device loop4): force zlib compression, level 3 [ 1472.704807][T12985] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 1472.768126][T12985] erofs: (device loop3): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 1472.784312][T12942] BTRFS info (device loop4): allowing degraded mounts [ 1472.836693][T12942] BTRFS info (device loop4): setting nodatasum [ 1472.842941][T12942] BTRFS info (device loop4): allowing degraded mounts [ 1472.912493][T12942] BTRFS info (device loop4): using free space tree [ 1473.243116][T12942] BTRFS info (device loop4): auto enabling async discard [ 1473.679645][T15076] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1474.233638][T13044] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 1474.756087][T13000] loop0: detected capacity change from 0 to 32768 [ 1474.767077][ T791] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1474.875707][T13000] (syz.0.12270,13000,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1474.954055][T13000] (syz.0.12270,13000,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1475.005093][ T791] usb 3-1: Using ep0 maxpacket: 32 [ 1475.019878][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.068514][ T791] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1475.116070][T13000] JBD2: Ignoring recovery information on journal [ 1475.148456][ T791] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1475.246362][ T791] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1475.347899][ T791] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1475.381789][ T791] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1475.397666][T13000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1475.455872][ T791] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1475.476758][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.529088][ T791] usb 3-1: Product: syz [ 1475.533330][ T791] usb 3-1: Manufacturer: syz [ 1475.538255][T13075] ieee802154 phy0 wpan0: encryption failed: -90 [ 1475.570565][ T791] usb 3-1: SerialNumber: syz [ 1475.869483][ T791] usb 3-1: selecting invalid altsetting 0 [ 1475.929341][ T791] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1475.956093][ T791] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1476.083547][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 1476.100979][ T791] usb 3-1: USB disconnect, device number 113 [ 1476.264139][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1477.279775][T13143] loop3: detected capacity change from 0 to 64 [ 1477.373752][T13143] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1477.702413][T13156] netlink: 'syz.0.12302': attribute type 3 has an invalid length. [ 1477.738978][T13156] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12302'. [ 1478.855249][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12316'. [ 1479.558570][T11647] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1479.771057][T11647] usb 4-1: config 1 has an invalid interface number: 209 but max is 0 [ 1479.784790][T11647] usb 4-1: config 1 has no interface number 0 [ 1479.808416][T11647] usb 4-1: config 1 interface 209 has no altsetting 0 [ 1479.857810][T11647] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=3d.41 [ 1479.910464][T11647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.980612][T11647] cytherm 4-1:1.209: Cypress thermometer device now attached [ 1480.294419][T11647] usb 4-1: USB disconnect, device number 2 [ 1480.310380][T11647] cytherm 4-1:1.209: Cypress thermometer now disconnected [ 1480.631536][T13263] loop2: detected capacity change from 0 to 8 [ 1480.670502][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1480.778556][T13263] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1480.800825][T13263] SQUASHFS error: Failed to read block 0x13e: -5 [ 1480.851024][T13263] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1480.882817][T13263] SQUASHFS error: Unable to read directory block [13c:26] [ 1481.071523][T13224] loop0: detected capacity change from 0 to 32768 [ 1481.161812][T13224] XFS: ikeep mount option is deprecated. [ 1481.253684][T13279] libceph: resolve '400' (ret=-3): failed [ 1481.288221][T13224] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1481.364210][T13224] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1481.413019][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12336'. [ 1481.703482][T13224] XFS (loop0): Ending clean mount [ 1481.847728][T13224] XFS (loop0): Quotacheck needed: Please wait. [ 1482.041745][T13224] XFS (loop0): Quotacheck: Done. [ 1482.333498][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1482.623973][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12348'. [ 1482.673042][T13329] loop3: detected capacity change from 0 to 256 [ 1483.361483][T13342] loop3: detected capacity change from 0 to 256 [ 1483.766389][T13358] loop0: detected capacity change from 0 to 512 [ 1483.837033][T13358] EXT4-fs: Ignoring removed bh option [ 1484.010426][T13367] netlink: 'syz.2.12356': attribute type 24 has an invalid length. [ 1484.036201][T13358] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.12354: inode #13: comm syz.0.12354: iget: illegal inode # [ 1484.071726][T13370] loop4: detected capacity change from 0 to 256 [ 1484.110342][T13358] EXT4-fs (loop0): Remounting filesystem read-only [ 1484.120010][T13370] exfat: Deprecated parameter 'utf8' [ 1484.162560][T13358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1484.181865][T13370] exfat: Deprecated parameter 'namecase' [ 1484.230293][T13370] exfat: Deprecated parameter 'namecase' [ 1484.265423][T13370] exfat: Deprecated parameter 'namecase' [ 1484.368158][T13370] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1484.492640][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.255357][T13407] netlink: 'syz.2.12367': attribute type 4 has an invalid length. [ 1485.342558][T13412] xt_limit: Overflow, try lower: 0/0 [ 1486.062023][T13432] loop2: detected capacity change from 0 to 1024 [ 1486.105786][T13432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1486.117081][T13433] loop4: detected capacity change from 0 to 1024 [ 1486.166079][T13433] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1486.311148][T13433] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 1: comm syz.4.12376: lblock 1 mapped to illegal pblock 1 (length 1) [ 1486.355860][T13432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1486.391783][T13433] Quota error (device loop4): write_blk: dquota write failed [ 1486.444773][T13432] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.12374: missing EA_INODE flag [ 1486.458383][T13433] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1486.479210][T13432] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.12374: error while reading EA inode 11 err=-117 [ 1486.530192][T13433] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.12376: Failed to acquire dquot type 0 [ 1486.626662][T13433] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.12376: Freeing blocks not in datazone - block = 0, count = 4096 [ 1486.675759][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.713623][T13433] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.12376: Invalid inode bitmap blk 0 in block_group 0 [ 1486.774793][T13433] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 1486.786288][ T12] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1486.840924][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1486.859536][T13433] EXT4-fs (loop4): 1 orphan inode deleted [ 1486.893767][T13433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.906538][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 1487.315540][T15076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1487.759085][T13489] x_tables: duplicate underflow at hook 2 [ 1488.041818][T13504] netlink: 'syz.0.12390': attribute type 7 has an invalid length. [ 1488.255333][ T55] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1488.606233][T13521] loop4: detected capacity change from 0 to 164 [ 1488.670471][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 1488.922993][ T55] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1488.959377][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.058206][ T55] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1489.447257][T13546] netlink: 'syz.0.12400': attribute type 10 has an invalid length. [ 1489.712990][ T55] gspca_nw80x: reg_r err -71 [ 1489.717779][ T55] nw80x: probe of 3-1:3.0 failed with error -71 [ 1489.743281][ T55] usb 3-1: USB disconnect, device number 114 [ 1489.931726][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12404'. [ 1489.998851][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12404'. [ 1490.062480][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12404'. [ 1490.736979][T13599] loop4: detected capacity change from 0 to 256 [ 1491.415983][T13622] loop4: detected capacity change from 0 to 16 [ 1491.514665][T13622] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1493.875270][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1493.993700][T13712] dlm: non-version read from control device 169 [ 1494.427664][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 1494.494355][ T55] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1494.502532][ T55] usb 4-1: config 0 has no interface number 0 [ 1494.513399][ T55] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1494.571620][ T55] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1494.637514][ T28] audit: type=1326 audit(2000000658.270:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1494.763428][ T28] audit: type=1326 audit(2000000658.270:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1494.890326][ T28] audit: type=1326 audit(2000000658.301:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1494.957585][T13743] netlink: zone id is out of range [ 1495.037263][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.038661][ T28] audit: type=1326 audit(2000000658.312:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1495.045310][ T55] usb 4-1: Product: syz [ 1495.045329][ T55] usb 4-1: Manufacturer: syz [ 1495.045346][ T55] usb 4-1: SerialNumber: syz [ 1495.218505][ T28] audit: type=1326 audit(2000000658.312:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1495.334020][ T55] usb 4-1: config 0 descriptor?? [ 1495.373283][ T55] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1495.380971][ T28] audit: type=1326 audit(2000000658.312:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1495.511126][ T28] audit: type=1326 audit(2000000658.312:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1495.570759][ T55] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 1495.657208][ T28] audit: type=1326 audit(2000000658.312:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1495.695470][T13763] loop0: detected capacity change from 0 to 2048 [ 1495.735134][T13763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1495.761277][ T55] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1495.809513][ T28] audit: type=1326 audit(2000000658.312:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.12447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcfb739e159 code=0x7ffc0000 [ 1496.132858][ T55] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 1496.256609][ T55] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1496.300918][ T55] usb 4-1: USB disconnect, device number 3 [ 1496.451406][T13787] netlink: 'syz.2.12461': attribute type 3 has an invalid length. [ 1496.498270][T13787] netlink: 'syz.2.12461': attribute type 1 has an invalid length. [ 1496.524660][T13787] netlink: 216 bytes leftover after parsing attributes in process `syz.2.12461'. [ 1496.549308][T13787] NCSI netlink: No device for ifindex 33022 [ 1496.592887][ T55] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1496.771225][ T791] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1496.894744][T13804] loop2: detected capacity change from 0 to 256 [ 1497.001501][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 1497.035580][ T791] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1497.083215][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.116456][ T791] usb 5-1: Product: syz [ 1497.125793][ T791] usb 5-1: Manufacturer: syz [ 1497.130451][ T791] usb 5-1: SerialNumber: syz [ 1497.413626][ T791] usb 5-1: 1:1 : no cluster descriptor [ 1497.492518][ T791] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 1497.566894][ T791] usb 5-1: USB disconnect, device number 26 [ 1497.712602][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1497.992676][T13844] overlay: Unknown parameter 'subj_role' [ 1498.316340][T13849] netlink: 'syz.2.12469': attribute type 3 has an invalid length. [ 1498.339411][T13806] loop3: detected capacity change from 0 to 32768 [ 1498.351706][T13849] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12469'. [ 1498.673512][T13806] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1498.818805][T13806] XFS (loop3): Ending clean mount [ 1498.828449][T13806] XFS (loop3): Quotacheck needed: Please wait. [ 1498.990940][T13806] XFS (loop3): Quotacheck: Done. [ 1499.422435][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1499.914023][T13899] netlink: 'syz.0.12481': attribute type 21 has an invalid length. [ 1499.962827][T13899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1502.063971][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12500'. [ 1502.345572][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12503'. [ 1502.372892][T13972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12503'. [ 1502.394863][T13976] loop4: detected capacity change from 0 to 512 [ 1502.506060][T13976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1502.581957][T13976] ext4 filesystem being mounted at /2155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.926655][T15076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.138977][T14001] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1503.780005][T14028] libceph: resolve '0' (ret=-3): failed [ 1504.181998][ T5782] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1504.440093][ T5782] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 1504.448353][ T5782] usb 5-1: config 0 has no interface number 0 [ 1504.477966][ T5782] usb 5-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1504.524802][ T5782] usb 5-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1504.534713][ T5782] usb 5-1: config 0 interface 216 has no altsetting 0 [ 1504.584779][ T5782] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1504.620032][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.673452][ T5782] usb 5-1: config 0 descriptor?? [ 1504.706769][T14027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1504.726167][ T5782] usb 5-1: NFC: intf ffff888030ef3000 id ffffffff8da5b2c0 [ 1505.092955][ T5782] usb 5-1: USB disconnect, device number 27 [ 1507.020996][T14158] netlink: 'syz.2.12554': attribute type 7 has an invalid length. [ 1507.039670][T14158] netlink: 'syz.2.12554': attribute type 8 has an invalid length. [ 1507.047566][T14158] netlink: 'syz.2.12554': attribute type 15 has an invalid length. [ 1507.704352][T14187] bad cache= option: no%e [ 1507.704352][T14187] [ 1507.745011][T14187] CIFS: VFS: bad cache= option: no%e [ 1507.806069][T14185] bond7: Unable to set down delay as MII monitoring is disabled [ 1507.940243][T14185] bond7 (unregistering): Released all slaves [ 1510.603812][T14345] overlayfs: missing 'lowerdir' [ 1511.431609][T14378] netlink: 'syz.4.12597': attribute type 2 has an invalid length. [ 1511.470445][T14378] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.12597'. [ 1511.767200][T14387] loop2: detected capacity change from 0 to 2048 [ 1511.810949][T14387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1512.063214][T14399] sock: sock_timestamping_bind_phc: sock not bind to device [ 1512.372877][T14414] loop0: detected capacity change from 0 to 512 [ 1513.056216][ T28] audit: type=1326 audit(2000000677.649:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1513.089412][ T791] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1513.189644][ T28] audit: type=1326 audit(2000000677.649:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1513.317246][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 1513.327797][ T791] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1513.367638][ T28] audit: type=1326 audit(2000000677.649:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1513.395367][ T791] usb 5-1: config 179 has no interface number 0 [ 1513.401697][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1513.489326][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1513.517796][ T28] audit: type=1326 audit(2000000677.702:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1513.583370][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1513.661032][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1513.701243][ T28] audit: type=1326 audit(2000000677.702:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1513.755703][ T791] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1513.811903][ T791] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1513.851259][ T28] audit: type=1326 audit(2000000677.702:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1513.896764][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.953033][T14427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1514.031659][ T28] audit: type=1326 audit(2000000677.712:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1514.305955][ T28] audit: type=1326 audit(2000000677.712:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1514.393908][T14466] TCP: TCP_TX_DELAY enabled [ 1514.512617][ T28] audit: type=1326 audit(2000000677.712:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.2.12614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8e4f79e159 code=0x7ffc0000 [ 1515.309131][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12625'. [ 1515.654713][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1515.663117][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1515.672048][ T791] usb 5-1: USB disconnect, device number 28 [ 1516.024799][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12630'. [ 1516.058405][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12630'. [ 1516.085088][T14453] loop0: detected capacity change from 0 to 32768 [ 1516.164956][T14453] JBD2: Ignoring recovery information on journal [ 1516.407934][T14453] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1516.776279][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 1517.288309][T14535] ip6gre2: entered promiscuous mode [ 1517.660409][T14554] loop2: detected capacity change from 0 to 64 [ 1518.299071][ T55] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1518.359699][T14577] loop0: detected capacity change from 0 to 4096 [ 1518.558394][ T55] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1518.575989][T14577] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1518.584594][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.602384][ T55] usb 4-1: Product: syz [ 1518.621942][ T55] usb 4-1: Manufacturer: syz [ 1518.636365][ T55] usb 4-1: SerialNumber: syz [ 1518.802194][T14594] loop4: detected capacity change from 0 to 512 [ 1518.822025][T14594] EXT4-fs: inline encryption not supported [ 1518.886492][T14594] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1518.956430][ T55] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1518.994960][T14594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1519.085618][T14594] EXT4-fs (loop4): 1 truncate cleaned up [ 1519.116098][T14594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.300058][ T55] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1519.337562][ T55] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1519.365790][ T55] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1519.394865][ T55] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1519.445588][T15076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.479568][ T55] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1519.539026][T14617] loop0: detected capacity change from 0 to 136 [ 1519.565807][ T55] usb 4-1: USB disconnect, device number 4 [ 1520.357111][T14654] loop0: detected capacity change from 0 to 64 [ 1520.868621][T14670] loop0: detected capacity change from 0 to 2048 [ 1520.947506][T14670] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1521.018072][T14678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1521.305844][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12676'. [ 1521.363979][T14682] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1521.746287][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12678'. [ 1522.105383][T14702] netlink: 'syz.3.12682': attribute type 1 has an invalid length. [ 1522.451878][T14711] loop2: detected capacity change from 0 to 512 [ 1522.535437][T14711] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1522.589063][T14711] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1522.641129][T14711] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1522.787786][T14711] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1522.820194][T14711] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 1522.919829][T14711] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1522.955573][T14711] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.12685: bg 0: block 34: padding at end of block bitmap is not set [ 1523.030235][T14711] Quota error (device loop2): write_blk: dquota write failed [ 1523.072777][T14711] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1523.119005][T14711] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.12685: Failed to acquire dquot type 1 [ 1523.185768][T14711] EXT4-fs (loop2): 1 truncate cleaned up [ 1523.202522][T14736] netlink: 'syz.3.12692': attribute type 6 has an invalid length. [ 1523.219425][T14711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1523.420911][T14711] ext4: Unknown parameter 'fd' [ 1523.591540][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.265884][T14763] loop0: detected capacity change from 0 to 1764 [ 1524.374077][T14763] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1525.073653][T14819] loop3: detected capacity change from 0 to 16 [ 1525.115473][T14819] erofs: (device loop3): mounted with root inode @ nid 36. [ 1525.165734][T14797] bond5: entered promiscuous mode [ 1525.197939][T14797] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1525.222063][T14819] syz.3.12711: attempt to access beyond end of device [ 1525.222063][T14819] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1526.089441][T14863] netlink: 'syz.4.12720': attribute type 7 has an invalid length. [ 1526.129184][T14863] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12720'. [ 1526.516327][T14877] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1526.590992][T14877] overlayfs: missing 'lowerdir' [ 1526.920919][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12729'. [ 1526.972009][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12729'. [ 1527.333171][T14906] loop4: detected capacity change from 0 to 8 [ 1527.472273][T14906] SQUASHFS error: Corrupted symlink [ 1528.372159][T14945] loop0: detected capacity change from 0 to 256 [ 1528.501846][T14945] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1528.567647][T14945] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1528.663570][T14945] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1529.285397][T14972] loop3: detected capacity change from 0 to 2048 [ 1529.569885][T14972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1529.952706][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.409734][T15017] loop4: detected capacity change from 0 to 128 [ 1531.083873][T15041] loop4: detected capacity change from 0 to 256 [ 1531.316178][T15049] loop2: detected capacity change from 0 to 16 [ 1531.664294][T15062] genirq: Flags mismatch irq 8. 00000000 (comedi_parport) vs. 00000000 (rtc0) [ 1532.406714][ T55] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1532.478868][T15090] loop0: detected capacity change from 0 to 4096 [ 1532.596856][T15090] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1532.627581][ T55] usb 4-1: config 230 has an invalid interface number: 217 but max is 0 [ 1532.645793][ T55] usb 4-1: config 230 has an invalid interface number: 236 but max is 0 [ 1532.663899][T15090] ntfs3: loop0: Failed to load $Extend (-22). [ 1532.680095][T15090] ntfs3: loop0: Failed to initialize $Extend. [ 1532.686855][ T55] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 1532.711113][ T55] usb 4-1: config 230 has no interface number 0 [ 1532.727736][ T55] usb 4-1: config 230 has no interface number 1 [ 1533.120762][ T55] usb 4-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1533.216910][T15096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1533.252873][T15096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1533.301689][ T55] usb 4-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 1533.406480][ T55] usb 4-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1533.425827][ T55] usb 4-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 1533.463653][ T55] usb 4-1: config 230 interface 217 has no altsetting 0 [ 1533.470695][ T55] usb 4-1: config 230 interface 236 has no altsetting 0 [ 1533.572820][T15122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12793'. [ 1533.591437][ T55] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 1533.625564][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.631655][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12793'. [ 1533.633618][ T55] usb 4-1: Product: syz [ 1533.633641][ T55] usb 4-1: Manufacturer: syz [ 1533.683813][ T55] usb 4-1: SerialNumber: syz [ 1533.715694][T15125] loop4: detected capacity change from 0 to 2048 [ 1533.774114][T15125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1534.108643][ T55] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1534.360039][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1534.368324][ T55] dib0700: firmware download failed at 7 with -8 [ 1534.406759][ T55] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1534.454525][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1534.703365][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1534.711522][ T55] dib0700: firmware download failed at 7 with -8 [ 1534.760084][ T55] usb 4-1: USB disconnect, device number 5 [ 1534.852344][T15158] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1535.135509][T15180] loop4: detected capacity change from 0 to 256 [ 1535.330762][ T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1535.640499][T15195] loop4: detected capacity change from 0 to 16 [ 1535.683911][T15195] erofs: (device loop4): mounted with root inode @ nid 36. [ 1535.702370][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 1535.714697][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1535.750281][ T55] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.866970][ T55] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1535.949811][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.958220][ T55] usb 4-1: Product: syz [ 1535.978402][ T55] usb 4-1: Manufacturer: syz [ 1535.983440][ T55] usb 4-1: SerialNumber: syz [ 1536.332157][ T55] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1536.339227][ T55] usb 4-1: MIDIStreaming interface descriptor not found [ 1536.436249][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1536.445215][ T55] usb 4-1: USB disconnect, device number 6 [ 1537.224282][T15261] loop2: detected capacity change from 0 to 8 [ 1537.377679][T15266] openvswitch: netlink: Actions may not be safe on all matching packets [ 1537.742765][T15200] loop0: detected capacity change from 0 to 32768 [ 1537.979575][T15200] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1538.154351][T15200] XFS (loop0): Ending clean mount [ 1538.200261][T15200] XFS (loop0): Quotacheck needed: Please wait. [ 1538.453053][T15200] XFS (loop0): Quotacheck: Done. [ 1538.740187][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1538.751139][T13755] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1539.144049][T13755] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1539.198082][T13755] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1539.203435][T15262] loop3: detected capacity change from 0 to 32768 [ 1539.206306][T13755] usb 5-1: Product: syz [ 1539.213560][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1539.322628][T13755] usb 5-1: Manufacturer: syz [ 1539.327326][T13755] usb 5-1: SerialNumber: syz [ 1539.344025][T13755] usb 5-1: config 0 descriptor?? [ 1539.662102][T13755] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1539.759772][T15332] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1539.781586][T13755] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1539.873063][T15339] binder: BC_ATTEMPT_ACQUIRE not supported [ 1539.904280][T15339] binder: 15337:15339 ioctl c0306201 200000004a40 returned -22 [ 1540.064901][T13755] peak_usb 5-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1540.469261][T13755] peak_usb: probe of 5-1:0.0 failed with error -71 [ 1540.542954][T13755] usb 5-1: USB disconnect, device number 29 [ 1540.660606][T15365] loop2: detected capacity change from 0 to 512 [ 1540.758435][T15365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1540.818798][T15365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 1540.860996][T15365] System zones: 0-2, 18-18, 34-34 [ 1540.878418][T15365] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1540.894242][T15365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.12841: bg 0: block 248: padding at end of block bitmap is not set [ 1540.910058][T15373] netlink: 'syz.4.12843': attribute type 1 has an invalid length. [ 1540.963423][T15365] Quota error (device loop2): write_blk: dquota write failed [ 1541.040256][T15365] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1541.091275][T15365] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.12841: Failed to acquire dquot type 1 [ 1541.181010][T15365] EXT4-fs (loop2): 1 truncate cleaned up [ 1541.252428][T15365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1541.469003][T15365] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1541.497946][T15365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 1541.609907][T15365] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.12841: Abort forced by user [ 1541.675752][T15365] EXT4-fs (loop2): Remounting filesystem read-only [ 1541.682338][T15365] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1541.747749][T15365] ext4 filesystem being remounted at /3263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.990765][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.106212][T15405] netlink: 'syz.4.12852': attribute type 12 has an invalid length. [ 1542.170773][T15405] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.12852'. [ 1542.563735][T15419] netlink: 'syz.4.12856': attribute type 6 has an invalid length. [ 1543.105408][T15435] bond0: (slave bond_slave_1): Releasing backup interface [ 1543.161682][T15435] bond_slave_1: left promiscuous mode [ 1543.167325][T15435] bond_slave_1: left allmulticast mode [ 1543.712538][T15457] loop2: detected capacity change from 0 to 512 [ 1543.771499][T15457] ext2: Unknown parameter 'smackfsroot' [ 1543.841985][T15462] loop0: detected capacity change from 0 to 256 [ 1543.874913][T15462] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0x174015ec, utbl_chksum : 0xe619d30d) [ 1544.199205][ T791] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1544.395180][ T791] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1544.420213][ T791] usb 3-1: config 0 has an invalid descriptor of length 87, skipping remainder of the config [ 1544.483294][ T791] usb 3-1: config 0 has no interface number 0 [ 1544.537214][ T791] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has an invalid bInterval 238, changing to 11 [ 1544.598932][ T791] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid maxpacket 59255, setting to 1024 [ 1544.630498][ T791] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 1544.652335][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.701212][ T791] usb 3-1: config 0 descriptor?? [ 1544.735115][T15457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1545.036228][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1545.234208][ T791] usb 3-1: USB disconnect, device number 115 [ 1545.543767][ T28] audit: type=1326 audit(2000000711.768:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1545.668194][ T28] audit: type=1326 audit(2000000711.789:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1545.747272][ T28] audit: type=1326 audit(2000000711.799:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1545.842246][ T28] audit: type=1326 audit(2000000711.799:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1545.998672][ T28] audit: type=1326 audit(2000000711.799:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.121374][T15534] loop2: detected capacity change from 0 to 1024 [ 1546.126505][ T28] audit: type=1326 audit(2000000711.799:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.229498][ T28] audit: type=1326 audit(2000000711.799:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.373773][ T28] audit: type=1326 audit(2000000711.799:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.494707][ T28] audit: type=1326 audit(2000000711.799:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.639666][ T28] audit: type=1326 audit(2000000711.799:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.720809][T15545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12887'. [ 1546.761417][ T28] audit: type=1326 audit(2000000711.799:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.828628][ T28] audit: type=1326 audit(2000000711.799:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.4.12882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb739e159 code=0x7fc00000 [ 1546.873318][T15510] loop3: detected capacity change from 0 to 32768 [ 1547.000654][T15510] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1547.357417][T15510] XFS (loop3): Ending clean mount [ 1547.518339][T15510] syz.3.12878: attempt to access beyond end of device [ 1547.518339][T15510] loop3: rw=4096, sector=262147, nr_sectors = 1 limit=32768 [ 1547.707623][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1548.429526][T15541] loop0: detected capacity change from 0 to 32768 [ 1548.640844][T15541] XFS (loop0): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1548.921942][T15541] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x1803 dinode [ 1549.000394][T15541] XFS (loop0): Unmount and run xfs_repair [ 1549.057279][T15541] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1549.097498][T15541] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1549.174301][T15541] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1549.223421][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.223422][T15541] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1549.223507][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.251670][T15541] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1549.276891][T15541] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1549.302388][T15541] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1549.311684][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.329505][T15541] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1549.352350][T15541] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1549.357106][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.419875][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.427857][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.485883][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.499382][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.562307][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1549.571152][T15596] netlink: 'syz.4.12896': attribute type 3 has an invalid length. [ 1550.086532][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1551.034449][T15639] program syz.4.12909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1551.746834][T15664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12916'. [ 1552.371551][T15686] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1552.620136][T15693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1552.635750][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12925'. [ 1552.713809][T15699] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 1554.044934][T15752] loop0: detected capacity change from 0 to 256 [ 1554.718602][T15768] delete_channel: no stack [ 1555.162083][T15722] loop4: detected capacity change from 0 to 32768 [ 1555.341840][T15722] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1555.549642][T15722] XFS (loop4): Ending clean mount [ 1556.068527][T15076] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1557.087507][T15836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12958'. [ 1558.030462][ T791] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1558.240038][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 1558.292606][ T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.374288][ T791] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1558.412836][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.456539][ T791] usb 3-1: Product: syz [ 1558.478346][ T791] usb 3-1: Manufacturer: syz [ 1558.511410][ T791] usb 3-1: SerialNumber: syz [ 1558.539881][ T791] usb 3-1: config 0 descriptor?? [ 1558.598562][ T791] cdc_phonet 3-1:0.0: skipping garbage [ 1558.637789][ T791] cdc_phonet 3-1:0.0: invalid descriptor buffer length [ 1558.662481][ T791] cdc_phonet: probe of 3-1:0.0 failed with error -22 [ 1558.963757][ T55] usb 3-1: USB disconnect, device number 116 [ 1559.736101][T15909] bond6: option xmit_hash_policy: invalid value (8) [ 1559.838580][T15909] bond6 (unregistering): Released all slaves [ 1560.521102][T11647] ------------[ cut here ]------------ [ 1560.527523][T11647] WARNING: CPU: 1 PID: 11647 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1560.538517][T11647] Modules linked in: [ 1560.542441][T11647] CPU: 1 PID: 11647 Comm: kworker/1:1 Not tainted syzkaller #0 [ 1560.550114][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1560.560268][T11647] Workqueue: events nf_tables_trans_destroy_work [ 1560.566799][T11647] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1560.572650][T11647] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 66 ab f8 e9 d3 f9 ff ff e8 7f 66 ab f8 e9 6c fe ff ff e8 75 66 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1560.592785][T11647] RSP: 0018:ffffc90010e879d8 EFLAGS: 00010293 [ 1560.598904][T11647] RAX: ffffffff88dc1bfb RBX: ffff88802c4a1cf0 RCX: ffff88807cd68000 [ 1560.607217][T11647] RDX: 0000000000000000 RSI: ffff88802c4a1c00 RDI: ffff88802e2fa528 [ 1560.615617][T11647] RBP: ffffc90010e87bb0 R08: ffff88807cd68000 R09: 000000000000000f [ 1560.623978][T11647] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88802c4a1cc0 [ 1560.632318][T11647] R13: dffffc0000000000 R14: ffff88802c4a1d10 R15: dffffc0000000000 [ 1560.641226][T11647] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1560.650497][T11647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1560.657123][T11647] CR2: 0000001b2dc1fff8 CR3: 000000002deb5000 CR4: 00000000003506e0 [ 1560.665242][T11647] Call Trace: [ 1560.668551][T11647] [ 1560.671601][T11647] ? lockdep_hardirqs_on+0x98/0x150 [ 1560.677015][T11647] nft_set_destroy+0x489/0xa20 [ 1560.681896][T11647] ? __kmem_cache_free+0xba/0x1f0 [ 1560.686978][T11647] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1560.693066][T11647] ? __lock_acquire+0x7d80/0x7d80 [ 1560.698222][T11647] ? nft_object_dump+0x1e0/0x1e0 [ 1560.703208][T11647] ? _raw_spin_unlock_irq+0x23/0x50 [ 1560.708602][T11647] ? process_scheduled_works+0x975/0x1600 [ 1560.714362][T11647] ? process_scheduled_works+0x975/0x1600 [ 1560.720180][T11647] process_scheduled_works+0xa60/0x1600 [ 1560.725796][T11647] ? worker_attach_to_pool+0x370/0x370 [ 1560.731445][T11647] ? assign_work+0x3cc/0x5d0 [ 1560.736130][T11647] worker_thread+0xa5e/0xfe0 [ 1560.740778][T11647] ? _raw_spin_unlock+0x40/0x40 [ 1560.745961][T11647] ? __kthread_parkme+0x71/0x1c0 [ 1560.750943][T11647] kthread+0x2fa/0x390 [ 1560.755206][T11647] ? pr_cont_work+0x550/0x550 [ 1560.759923][T11647] ? kthread_blkcg+0xd0/0xd0 [ 1560.764600][T11647] ret_from_fork+0x48/0x80 [ 1560.769074][T11647] ? kthread_blkcg+0xd0/0xd0 [ 1560.773916][T11647] ret_from_fork_asm+0x11/0x20 [ 1560.778761][T11647] [ 1560.781813][T11647] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1560.789103][T11647] CPU: 1 PID: 11647 Comm: kworker/1:1 Not tainted syzkaller #0 [ 1560.796654][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1560.806718][T11647] Workqueue: events nf_tables_trans_destroy_work [ 1560.813069][T11647] Call Trace: [ 1560.816358][T11647] [ 1560.819334][T11647] dump_stack_lvl+0x18c/0x250 [ 1560.824070][T11647] ? show_regs_print_info+0x20/0x20 [ 1560.829302][T11647] ? load_image+0x420/0x420 [ 1560.833839][T11647] panic+0x2ca/0x720 [ 1560.837793][T11647] ? bpf_jit_dump+0xd0/0xd0 [ 1560.842437][T11647] ? ret_from_fork_asm+0x11/0x20 [ 1560.847412][T11647] __warn+0x2e0/0x470 [ 1560.851416][T11647] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1560.856637][T11647] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1560.861853][T11647] report_bug+0x2be/0x4f0 [ 1560.866225][T11647] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1560.871437][T11647] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1560.876651][T11647] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1560.881888][T11647] handle_bug+0xcf/0x120 [ 1560.886147][T11647] exc_invalid_op+0x1a/0x50 [ 1560.890664][T11647] asm_exc_invalid_op+0x1a/0x20 [ 1560.895529][T11647] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1560.901350][T11647] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 66 ab f8 e9 d3 f9 ff ff e8 7f 66 ab f8 e9 6c fe ff ff e8 75 66 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1560.921092][T11647] RSP: 0018:ffffc90010e879d8 EFLAGS: 00010293 [ 1560.927179][T11647] RAX: ffffffff88dc1bfb RBX: ffff88802c4a1cf0 RCX: ffff88807cd68000 [ 1560.935162][T11647] RDX: 0000000000000000 RSI: ffff88802c4a1c00 RDI: ffff88802e2fa528 [ 1560.943144][T11647] RBP: ffffc90010e87bb0 R08: ffff88807cd68000 R09: 000000000000000f [ 1560.951126][T11647] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88802c4a1cc0 [ 1560.959107][T11647] R13: dffffc0000000000 R14: ffff88802c4a1d10 R15: dffffc0000000000 [ 1560.967100][T11647] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1560.972326][T11647] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1560.977539][T11647] ? lockdep_hardirqs_on+0x98/0x150 [ 1560.982763][T11647] nft_set_destroy+0x489/0xa20 [ 1560.987546][T11647] ? __kmem_cache_free+0xba/0x1f0 [ 1560.992594][T11647] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1560.998593][T11647] ? __lock_acquire+0x7d80/0x7d80 [ 1561.003652][T11647] ? nft_object_dump+0x1e0/0x1e0 [ 1561.008628][T11647] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.013863][T11647] ? process_scheduled_works+0x975/0x1600 [ 1561.019619][T11647] ? process_scheduled_works+0x975/0x1600 [ 1561.025379][T11647] process_scheduled_works+0xa60/0x1600 [ 1561.030967][T11647] ? worker_attach_to_pool+0x370/0x370 [ 1561.036540][T11647] ? assign_work+0x3cc/0x5d0 [ 1561.041149][T11647] worker_thread+0xa5e/0xfe0 [ 1561.045763][T11647] ? _raw_spin_unlock+0x40/0x40 [ 1561.050621][T11647] ? __kthread_parkme+0x71/0x1c0 [ 1561.055574][T11647] kthread+0x2fa/0x390 [ 1561.059651][T11647] ? pr_cont_work+0x550/0x550 [ 1561.064339][T11647] ? kthread_blkcg+0xd0/0xd0 [ 1561.068937][T11647] ret_from_fork+0x48/0x80 [ 1561.073366][T11647] ? kthread_blkcg+0xd0/0xd0 [ 1561.077965][T11647] ret_from_fork_asm+0x11/0x20 [ 1561.082761][T11647] [ 1561.086043][T11647] Kernel Offset: disabled [ 1561.090520][T11647] Rebooting in 86400 seconds..