last executing test programs: 2.680559046s ago: executing program 1 (id=2471): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000340)={0x4, [0x2, 0x8, 0x5], [{0x6, 0xffffffff, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x4, 0x3fffffa}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x93c}, {0x101}], 0x273}) 2.51198982s ago: executing program 1 (id=2475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x2a00, 0xff01, 0x105, 0x7, 0x4}}) 2.392299843s ago: executing program 2 (id=2476): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000480)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, '-]\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x50, 0x43, 0x59]}, 0x2f) 2.247911296s ago: executing program 1 (id=2479): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) 2.144164899s ago: executing program 2 (id=2481): ioperm(0x0, 0xd, 0x4000000000000020) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000780)=""/198, 0xc6) 2.07222341s ago: executing program 2 (id=2483): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 2.041852481s ago: executing program 1 (id=2484): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 1.888134755s ago: executing program 2 (id=2487): sigaltstack(&(0x7f0000001040)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000000680)={0x0, 0x80000002}, &(0x7f00000007c0)={0x0}) 1.821172397s ago: executing program 1 (id=2488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000015000100000000000100000000000000000000000000ffff6401010000000000000000000000ffff7f00000100"/64, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000001050000040a0010"], 0x5c}}, 0x0) 1.68033158s ago: executing program 3 (id=2490): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x1a9001) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x4f424752, 0x780, 0x1, 0x1, @stepwise={{0x1, 0xa}, {0x9, 0x7b2}, {0x3, 0x6}}}) 1.654760951s ago: executing program 2 (id=2491): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 1.600099011s ago: executing program 1 (id=2492): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x6}}, 0x24, 0x0) 1.450517905s ago: executing program 3 (id=2494): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2e, 0x1, 0x0, "3f2d030000000000afa1a36c5b58e86bffeaff02000000000000a1008000"}) 1.425685826s ago: executing program 2 (id=2495): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x80, &(0x7f0000000000)={[{@noquota}, {@filestreams}, {@attr2}, {@pqnoenforce}, {@noalign}, {@logbufs={'logbufs', 0x3d, 0x6}}]}, 0x1, 0x97eb, &(0x7f000001c700)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.200270481s ago: executing program 0 (id=2496): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0xfffffffd, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @remote}}}, 0x108) 1.200163051s ago: executing program 3 (id=2497): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000002c0)={0x0, 0x8}) 1.068496275s ago: executing program 0 (id=2498): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x7, [0x58, 0x1000, 0x1, 0x1, 0x2, 0x1, 0x7, 0x7, 0x10, 0x1, 0x4, 0x1, 0x28, 0x385, 0xef9a, 0xfff, 0x3, 0xb2, 0x1, 0x0, 0x7fff, 0x4, 0x1ff, 0x0, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x79, 0x5, 0x5, 0x1, 0x6, 0x6, 0x1ff, 0x8000, 0x9, 0x0, 0x2, 0x423, 0xfff, 0x86, 0xe, 0x20, 0x9], 0xe}) 935.443818ms ago: executing program 3 (id=2499): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x12) 788.297811ms ago: executing program 0 (id=2500): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 758.047762ms ago: executing program 3 (id=2501): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10}, 0x1c) 609.921465ms ago: executing program 0 (id=2502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) 552.220367ms ago: executing program 3 (id=2503): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x100c007, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="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"], 0xfd, 0xc37, &(0x7f0000000ec0)="$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") syz_usb_connect(0x3, 0x68, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000210730c08f0031d5835ba0102030109023600020702200509048f0301ff01070009050f100800f8010f0904d900", @ANYRES16], 0x0) 352.176581ms ago: executing program 0 (id=2504): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{'rdma'}]}) 0s ago: executing program 0 (id=2505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): y change from 0 to 64 [ 151.140452][ T7696] Trying to free block not in datazone [ 151.153984][ T7696] Trying to free block not in datazone [ 151.173237][ T7696] Trying to free block not in datazone [ 151.175981][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.189602][ T7696] Trying to free block not in datazone [ 151.224875][ T7696] Trying to free block not in datazone [ 151.234131][ T7696] Trying to free block not in datazone [ 151.243116][ T7696] Trying to free block not in datazone [ 151.255819][ T7696] Trying to free block not in datazone [ 151.263861][ T7693] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.279598][ T7704] netlink: 'syz.0.859': attribute type 1 has an invalid length. [ 151.290288][ T7696] Trying to free block not in datazone [ 151.317453][ T7696] Trying to free block not in datazone [ 151.332960][ T7704] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.859'. [ 151.346531][ T7693] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.855: corrupted xattr block 33: overlapping e_value [ 151.370491][ T7696] Trying to free block not in datazone [ 151.378426][ T7696] Trying to free block not in datazone [ 151.396645][ T7696] minix_free_block (loop3:6): bit already cleared [ 151.415889][ T7693] EXT4-fs (loop2): Remounting filesystem read-only [ 151.422578][ T7696] Trying to free block not in datazone [ 151.432800][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.860'. [ 151.443725][ T7696] Trying to free block not in datazone [ 151.458438][ T28] audit: type=1800 audit(1784205341.707:26): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.855" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 151.478182][ T7696] Trying to free block not in datazone [ 151.496234][ T7696] minix_free_block (loop3:7): bit already cleared [ 151.502718][ T7696] Trying to free block not in datazone [ 151.539015][ T7696] Trying to free block not in datazone [ 151.552656][ T7696] Trying to free block not in datazone [ 151.558672][ T7696] Trying to free block not in datazone [ 151.567435][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.591823][ T7696] Trying to free block not in datazone [ 151.620002][ T7696] minix_free_block (loop3:6): bit already cleared [ 151.767515][ T7713] netlink: 'syz.1.863': attribute type 3 has an invalid length. [ 151.813695][ T7713] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.863'. [ 151.857623][ T7716] ip6t_REJECT: ECHOREPLY is not supported [ 152.081729][ T7725] xt_TCPMSS: Only works on TCP SYN packets [ 152.098531][ T7724] bridge_slave_0: left allmulticast mode [ 152.114133][ T7724] bridge_slave_0: left promiscuous mode [ 152.127256][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.205245][ T7724] bridge_slave_1: left allmulticast mode [ 152.211150][ T7724] bridge_slave_1: left promiscuous mode [ 152.222961][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.306775][ T7724] bond0: (slave bond_slave_0): Releasing backup interface [ 152.399039][ T7724] team0: Port device team_slave_0 removed [ 152.471147][ T7735] loop0: detected capacity change from 0 to 64 [ 152.488722][ T7724] team0: Port device team_slave_1 removed [ 152.514982][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.528642][ T7724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.559268][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.574932][ T7735] Trying to free block not in datazone [ 152.580460][ T7735] Trying to free block not in datazone [ 152.581515][ T7724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.614169][ T7735] Trying to free block not in datazone [ 152.643714][ T7735] Trying to free block not in datazone [ 152.655468][ T7735] Trying to free block not in datazone [ 152.671259][ T7735] Trying to free block not in datazone [ 152.708280][ T7735] Trying to free block not in datazone [ 152.714016][ T7735] Trying to free block not in datazone [ 152.719616][ T7735] Trying to free block not in datazone [ 152.726357][ T7735] Trying to free block not in datazone [ 152.731864][ T7735] Trying to free block not in datazone [ 152.737575][ T7735] Trying to free block not in datazone [ 152.744196][ T7735] minix_free_block (loop0:6): bit already cleared [ 152.750738][ T7735] Trying to free block not in datazone [ 152.756360][ T7735] Trying to free block not in datazone [ 152.762241][ T7735] Trying to free block not in datazone [ 152.768551][ T7735] minix_free_block (loop0:7): bit already cleared [ 152.793432][ T7735] Trying to free block not in datazone [ 152.814110][ T7735] Trying to free block not in datazone [ 152.826950][ T7735] Trying to free block not in datazone [ 152.855149][ T7735] Trying to free block not in datazone [ 152.860665][ T7735] Trying to free block not in datazone [ 152.926038][ T7735] minix_free_block (loop0:6): bit already cleared [ 153.478165][ T7769] loop2: detected capacity change from 0 to 64 [ 153.568047][ T7769] Trying to free block not in datazone [ 153.589455][ T7773] loop0: detected capacity change from 0 to 8 [ 153.598429][ T7769] Trying to free block not in datazone [ 153.617457][ T7769] Trying to free block not in datazone [ 153.622996][ T7769] Trying to free block not in datazone [ 153.663940][ T7769] Trying to free block not in datazone [ 153.689858][ T7769] Trying to free block not in datazone [ 153.715415][ T7769] Trying to free block not in datazone [ 153.761417][ T7769] Trying to free block not in datazone [ 153.786483][ T7769] Trying to free block not in datazone [ 153.818271][ T7769] Trying to free block not in datazone [ 153.833769][ T7769] Trying to free block not in datazone [ 153.843320][ T7769] Trying to free block not in datazone [ 153.883752][ T7769] minix_free_block (loop2:6): bit already cleared [ 153.890386][ T7769] Trying to free block not in datazone [ 153.906507][ T7769] Trying to free block not in datazone [ 153.912051][ T7769] Trying to free block not in datazone [ 153.918177][ T7769] minix_free_block (loop2:7): bit already cleared [ 153.938196][ T7769] Trying to free block not in datazone [ 153.967125][ T7769] Trying to free block not in datazone [ 154.022529][ T7769] Trying to free block not in datazone [ 154.031028][ T7769] Trying to free block not in datazone [ 154.040982][ T7769] Trying to free block not in datazone [ 154.047472][ T7769] minix_free_block (loop2:6): bit already cleared [ 154.222556][ T7786] loop0: detected capacity change from 0 to 1764 [ 154.676979][ T7779] loop3: detected capacity change from 0 to 32768 [ 154.751496][ T7779] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.756330][ T7798] loop1: detected capacity change from 0 to 4096 [ 154.848794][ T7779] XFS (loop3): Ending clean mount [ 154.949406][ T7779] XFS (loop3): Quotacheck needed: Please wait. [ 154.956948][ T7798] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 155.068437][ T7779] XFS (loop3): Quotacheck: Done. [ 155.074423][ T7798] ntfs3: loop1: Failed to load $Extend (-22). [ 155.093812][ T7798] ntfs3: loop1: Failed to initialize $Extend. [ 155.200147][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.396952][ T7793] loop2: detected capacity change from 0 to 32768 [ 155.567249][ T7793] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 155.668146][ T7793] XFS (loop2): Ending clean mount [ 155.905541][ T5779] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 156.571264][ T7853] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 157.053809][ T5783] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.279005][ T5783] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 157.288549][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.311119][ T7875] netlink: 180 bytes leftover after parsing attributes in process `syz.3.935'. [ 157.320524][ T5783] usb 3-1: Product: syz [ 157.325285][ T5783] usb 3-1: Manufacturer: syz [ 157.329963][ T5783] usb 3-1: SerialNumber: syz [ 157.359258][ T5783] usb 3-1: config 0 descriptor?? [ 157.374884][ T5783] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 157.392566][ T7859] loop1: detected capacity change from 0 to 32768 [ 157.498567][ T7859] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.615927][ T7859] XFS (loop1): Ending clean mount [ 157.683538][ T7889] netlink: 180 bytes leftover after parsing attributes in process `syz.3.938'. [ 157.734971][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 157.787615][ T5783] gspca_sunplus: reg_w_riv err -71 [ 157.793229][ T5783] sunplus: probe of 3-1:0.0 failed with error -71 [ 157.820069][ T5783] usb 3-1: USB disconnect, device number 6 [ 157.837604][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.961921][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.974421][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 157.997906][ T7893] netlink: 'syz.3.941': attribute type 6 has an invalid length. [ 158.010378][ T23] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 158.053860][ T23] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 158.077397][ T23] usb 1-1: config 249 has no interface number 0 [ 158.094206][ T23] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.113941][ T23] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.142438][ T23] usb 1-1: config 249 interface 203 has no altsetting 0 [ 158.169581][ T23] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 158.203377][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.233862][ T23] usb 1-1: Product: syz [ 158.238170][ T23] usb 1-1: Manufacturer: syz [ 158.242801][ T23] usb 1-1: SerialNumber: syz [ 158.248133][ T7897] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 158.411069][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 158.504553][ T23] rtl8150 1-1:249.203: couldn't find required endpoints [ 158.512180][ T23] rtl8150: probe of 1-1:249.203 failed with error -5 [ 158.564207][ T23] usb 1-1: USB disconnect, device number 3 [ 159.042299][ T7923] loop1: detected capacity change from 0 to 64 [ 159.081037][ T7923] Trying to free block not in datazone [ 159.101735][ T7923] minix_free_block (loop1:21): bit already cleared [ 159.275146][ T28] audit: type=1326 audit(1784205349.527:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.368229][ T28] audit: type=1326 audit(1784205349.527:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.392136][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.500165][ T28] audit: type=1326 audit(1784205349.527:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.554324][ T28] audit: type=1326 audit(1784205349.527:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.632337][ T28] audit: type=1326 audit(1784205349.527:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.742812][ T28] audit: type=1326 audit(1784205349.547:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.787260][ T28] audit: type=1326 audit(1784205349.557:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.848187][ T7947] netlink: 'syz.1.965': attribute type 2 has an invalid length. [ 159.871200][ T7947] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 159.879544][ T28] audit: type=1326 audit(1784205349.557:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 159.943723][ T28] audit: type=1326 audit(1784205349.557:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.2.956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 160.073825][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.281904][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.302241][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.327434][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.342862][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.371753][ T23] usb 3-1: SerialNumber: syz [ 160.593194][ T7973] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 160.615751][ T23] usb 3-1: 0:2 : does not exist [ 160.673261][ T23] usb 3-1: USB disconnect, device number 7 [ 160.791203][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.274049][ T7989] netlink: 'syz.0.985': attribute type 7 has an invalid length. [ 161.281754][ T7989] netlink: 'syz.0.985': attribute type 5 has an invalid length. [ 161.313726][ T7989] netlink: 17 bytes leftover after parsing attributes in process `syz.0.985'. [ 161.327502][ T7975] loop1: detected capacity change from 0 to 32768 [ 161.355654][ T7975] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.384161][ T7975] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 161.392963][ T7975] BTRFS info (device loop1): using free space tree [ 161.535597][ T7975] BTRFS info (device loop1): enabling ssd optimizations [ 161.550935][ T7975] BTRFS info (device loop1): auto enabling async discard [ 161.874077][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.235260][ T8031] loop0: detected capacity change from 0 to 512 [ 162.242793][ T8031] EXT4-fs: Ignoring removed oldalloc option [ 162.288092][ T8031] EXT4-fs: Ignoring removed orlov option [ 162.339263][ T8031] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.999: corrupted in-inode xattr: invalid ea_ino [ 162.408145][ T8031] EXT4-fs (loop0): Remounting filesystem read-only [ 162.425286][ T8031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.503407][ T8042] loop1: detected capacity change from 0 to 64 [ 162.569713][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.847414][ T8046] loop2: detected capacity change from 0 to 4096 [ 162.880172][ T8046] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 162.990052][ T8052] loop3: detected capacity change from 0 to 1024 [ 163.016865][ T8052] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 163.058635][ T8052] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.106198][ T8052] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 163.134155][ T8052] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.144494][ T8052] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1007: Inode bitmap for bg 0 marked uninitialized [ 163.197605][ T8052] EXT4-fs (loop3): Remounting filesystem read-only [ 163.207414][ T8052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.296007][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.364936][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 163.406062][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 163.492163][ T8065] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1013'. [ 164.093816][ T1717] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.293694][ T1717] usb 3-1: Using ep0 maxpacket: 8 [ 164.314976][ T1717] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.336962][ T1717] usb 3-1: config 179 has no interface number 0 [ 164.343529][ T1717] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 164.380072][ T1717] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 164.413807][ T1717] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.436057][ T1717] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 164.480464][ T8105] xt_limit: Overflow, try lower: 2147483649/3300 [ 164.492142][ T1717] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 164.519637][ T1717] usb 3-1: config 179 interface 65 has no altsetting 0 [ 164.549028][ T1717] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 164.559279][ T1717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.626731][ T1717] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 164.901862][ T5761] usb 3-1: USB disconnect, device number 8 [ 164.910688][ T5761] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 165.259929][ T8130] loop0: detected capacity change from 0 to 764 [ 165.295508][ T8132] xt_ecn: cannot match TCP bits for non-tcp packets [ 165.676530][ T8144] loop2: detected capacity change from 0 to 256 [ 166.199678][ T28] audit: type=1400 audit(1784205356.437:36): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8159 comm="syz.1.1060" [ 166.397827][ T8171] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1065'. [ 166.426630][ T8166] loop3: detected capacity change from 0 to 4096 [ 166.482469][ T8173] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.833912][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.050679][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 167.063976][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.091846][ T5828] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.119338][ T5828] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.142503][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.147697][ T8172] syz.2.1066 (8172): drop_caches: 2 [ 167.166212][ T5828] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 167.185804][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.203681][ T5828] usb 2-1: Product: syz [ 167.213640][ T5828] usb 2-1: Manufacturer: syz [ 167.223751][ T5828] usb 2-1: SerialNumber: syz [ 167.268514][ T5828] usb 2-1: config 0 descriptor?? [ 167.289416][ T5828] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 167.377030][ T8187] program syz.0.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.408213][ T8187] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.425604][ T8190] autofs4:pid:8190:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375) [ 167.439983][ T8190] autofs4:pid:8190:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 167.495069][ T5828] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 167.515270][ T5828] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 167.547420][ T5828] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 167.702870][ T5828] usb 2-1: USB disconnect, device number 7 [ 167.790830][ T8203] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1081' sets config #0 [ 167.950257][ T8207] loop3: detected capacity change from 0 to 512 [ 167.984746][ T8207] EXT4-fs: Ignoring removed oldalloc option [ 167.991182][ T8207] EXT4-fs: Ignoring removed orlov option [ 168.030782][ T8207] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1084: corrupted in-inode xattr: invalid ea_ino [ 168.098141][ T8207] EXT4-fs (loop3): Remounting filesystem read-only [ 168.144398][ T8207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.490652][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.629273][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1091'. [ 168.642460][ T8209] syz.0.1082 (8209): drop_caches: 2 [ 168.948222][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 169.005288][ T8231] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 169.050733][ T8233] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 169.064687][ T8233] veth1_macvtap: left promiscuous mode [ 169.413534][ T8252] loop0: detected capacity change from 0 to 16 [ 169.442164][ T8252] erofs: (device loop0): mounted with root inode @ nid 36. [ 169.460681][ T8253] syz.1.1102 (8253): drop_caches: 2 [ 169.496331][ T8252] cifs: Unknown parameter 'cache_strategy' [ 169.913727][ T56] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 170.091578][ T8278] syz.1.1116 (8278): drop_caches: 2 [ 170.107617][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.129263][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.140807][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 170.156004][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.196753][ T56] usb 3-1: config 0 descriptor?? [ 170.217322][ T56] xbox_remote_probe: endpoint_in message size==0? [ 170.232648][ T28] audit: type=1326 audit(1784205360.477:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.309287][ T28] audit: type=1326 audit(1784205360.477:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.346078][ T28] audit: type=1326 audit(1784205360.507:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.375047][ T28] audit: type=1326 audit(1784205360.507:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.432928][ T56] usbhid 3-1:0.0: can't add hid device: -71 [ 170.453832][ T56] usbhid: probe of 3-1:0.0 failed with error -71 [ 170.476099][ T28] audit: type=1326 audit(1784205360.507:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.493387][ T56] usb 3-1: USB disconnect, device number 9 [ 170.581370][ T28] audit: type=1326 audit(1784205360.517:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.657500][ T28] audit: type=1326 audit(1784205360.517:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 170.711495][ T28] audit: type=1326 audit(1784205360.517:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 171.122226][ T8303] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 171.148763][ T8303] veth1_macvtap: left promiscuous mode [ 171.902817][ T8326] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 171.994638][ T8331] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 172.273710][ T5783] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.463768][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 172.482212][ T5783] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 172.499638][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.514556][ T5783] usb 2-1: Product: syz [ 172.522114][ T5783] usb 2-1: Manufacturer: syz [ 172.529326][ T5783] usb 2-1: SerialNumber: syz [ 172.565345][ T5783] usb 2-1: config 0 descriptor?? [ 172.580819][ T5783] gspca_main: spca508-2.14.0 probing 041e:4018 [ 172.733919][ T8353] loop0: detected capacity change from 0 to 1024 [ 172.998392][ T5783] gspca_spca508: reg_read err -71 [ 173.012083][ T5783] gspca_spca508: reg_read err -71 [ 173.024036][ T5783] gspca_spca508: reg_read err -71 [ 173.029709][ T5783] gspca_spca508: reg_read err -71 [ 173.038439][ T5783] gspca_spca508: reg write: error -71 [ 173.053805][ T5783] spca508: probe of 2-1:0.0 failed with error -71 [ 173.073961][ T5783] usb 2-1: USB disconnect, device number 8 [ 173.663222][ T8374] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 173.683980][ T8374] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1169'. [ 173.791153][ T8373] loop2: detected capacity change from 0 to 4096 [ 173.875651][ T8381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.897997][ T8382] kAFS: unable to lookup cell '/' [ 174.586564][ T8406] qrtr: Invalid version 73 [ 175.234149][ T5783] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 175.421643][ T5783] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 175.442040][ T5783] usb 4-1: config 8 has no interface number 0 [ 175.450971][ T5783] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 175.467021][ T5783] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 175.512743][ T5783] usb 4-1: config 8 interface 177 has no altsetting 0 [ 175.521220][ T5783] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 175.548359][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.599875][ T8422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.622629][ T8422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.657376][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 175.943795][ T1717] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.125855][ T1717] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 176.136122][ T1717] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 176.145238][ T1717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.159692][ T1717] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 176.173723][ T5783] ir_toy 4-1:8.177: could not write reset command: -110 [ 176.181386][ T5783] ir_toy: probe of 4-1:8.177 failed with error -110 [ 176.191670][ T5783] usb 4-1: USB disconnect, device number 8 [ 176.955830][ T8478] netlink: 'syz.3.1216': attribute type 4 has an invalid length. [ 176.964047][ T8478] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1216'. [ 177.236817][ T8488] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 177.245887][ T1717] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 177.253256][ T8488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.338468][ T8490] bridge_slave_0: left allmulticast mode [ 177.344452][ T8490] bridge_slave_0: left promiscuous mode [ 177.350524][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.371166][ T8490] bridge_slave_1: left allmulticast mode [ 177.377113][ T8490] bridge_slave_1: left promiscuous mode [ 177.386757][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.401484][ T8490] bond0: (slave bond_slave_0): Releasing backup interface [ 177.434343][ T8490] bond0: (slave bond_slave_1): Releasing backup interface [ 177.454634][ T1717] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 177.476498][ T1717] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 177.485242][ T1717] usb 3-1: USB disconnect, device number 10 [ 177.527367][ T8490] team0: Port device team_slave_0 removed [ 177.571131][ T8490] team0: Port device team_slave_1 removed [ 177.580333][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.600359][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.627951][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.639601][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.316136][ T8522] bond0: Error: CAN devices cannot be enslaved [ 178.543902][ T8530] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 178.713014][ T8538] 9pnet: Found fid 0 not clunked [ 178.916538][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1246'. [ 178.941594][ T8544] bridge1: entered promiscuous mode [ 178.952298][ T8544] bridge1: entered allmulticast mode [ 179.519022][ T8567] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 180.074074][ T8592] loop3: detected capacity change from 0 to 128 [ 180.154075][ T8592] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.185472][ T8592] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.300025][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.382137][ T8601] tmpfs: User quota inode hardlimit too large. [ 180.404252][ T8602] loop0: detected capacity change from 0 to 128 [ 180.481304][ T8602] FAT-fs (loop0): Directory bread(block 32) failed [ 180.501928][ T8602] FAT-fs (loop0): Directory bread(block 33) failed [ 180.518618][ T8602] FAT-fs (loop0): Directory bread(block 34) failed [ 180.537320][ T8606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.544367][ T8602] FAT-fs (loop0): Directory bread(block 35) failed [ 180.552128][ T8602] FAT-fs (loop0): Directory bread(block 36) failed [ 180.573747][ T8602] FAT-fs (loop0): Directory bread(block 37) failed [ 180.583093][ T8602] FAT-fs (loop0): Directory bread(block 38) failed [ 180.603930][ T8602] FAT-fs (loop0): Directory bread(block 39) failed [ 180.610645][ T8602] FAT-fs (loop0): Directory bread(block 40) failed [ 180.633811][ T8602] FAT-fs (loop0): Directory bread(block 41) failed [ 180.756454][ T8602] FAT-fs (loop0): Filesystem has been set read-only [ 181.582536][ T8639] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1293'. [ 181.603734][ T1717] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 181.760446][ T8643] netlink: 'syz.0.1295': attribute type 12 has an invalid length. [ 181.779012][ T8643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1295'. [ 181.804276][ T1717] usb 3-1: Using ep0 maxpacket: 16 [ 181.815902][ T1717] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 181.833774][ T1717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.865310][ T1717] usb 3-1: Product: syz [ 181.869559][ T1717] usb 3-1: Manufacturer: syz [ 181.893220][ T1717] usb 3-1: SerialNumber: syz [ 181.914898][ T1717] r8152-cfgselector 3-1: config 0 descriptor?? [ 181.960421][ T8652] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 182.140979][ T1717] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 182.143906][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 182.351173][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 182.356933][ T5817] usb 3-1: USB disconnect, device number 11 [ 182.375541][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 182.384794][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.392821][ T8] usb 2-1: Product: syz [ 182.397133][ T8] usb 2-1: Manufacturer: syz [ 182.401763][ T8] usb 2-1: SerialNumber: syz [ 182.410970][ T8] usb 2-1: config 0 descriptor?? [ 182.422848][ T8] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 182.626479][ T8] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 182.635055][ T8] visor: probe of 2-1:0.0 failed with error -5 [ 182.838214][ T8] usb 2-1: USB disconnect, device number 9 [ 183.160047][ T28] audit: type=1400 audit(1784205373.407:45): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=8663 comm="syz.2.1303" [ 183.763194][ T8691] tmpfs: Bad value for 'mpol' [ 184.164126][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 184.194175][ T8706] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1326'. [ 184.203195][ T8706] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1326'. [ 184.212464][ T8709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1328'. [ 184.330070][ T8714] loop1: detected capacity change from 0 to 4096 [ 184.453730][ T8719] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.515521][ T8723] ipip0: entered promiscuous mode [ 184.520720][ T8714] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 184.524136][ T8723] ipip0: entered allmulticast mode [ 184.567349][ T8714] Remounting filesystem read-only [ 184.914461][ T8735] cgroup: noprefix used incorrectly [ 185.098967][ T8740] loop1: detected capacity change from 0 to 1024 [ 185.128642][ T8740] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 185.153953][ T8740] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 185.189307][ T8740] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 185.201922][ T8740] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.227511][ T8748] loop3: detected capacity change from 0 to 8 [ 185.234316][ T8740] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1341: Inode bitmap for bg 0 marked uninitialized [ 185.247404][ T8740] EXT4-fs (loop1): Remounting filesystem read-only [ 185.255801][ T8740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.487419][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.697874][ T8753] loop1: detected capacity change from 0 to 256 [ 185.985204][ T8743] loop2: detected capacity change from 0 to 32768 [ 186.124821][ T8743] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.180356][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 186.194250][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 186.203401][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 186.351445][ T8743] XFS (loop2): Ending clean mount [ 186.359967][ T8743] XFS (loop2): Quotacheck needed: Please wait. [ 186.457214][ T8743] XFS (loop2): Quotacheck: Done. [ 186.638407][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 187.349508][ T8814] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 187.978680][ T28] audit: type=1326 audit(1784205378.227:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.081582][ T28] audit: type=1326 audit(1784205378.247:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.175884][ T28] audit: type=1326 audit(1784205378.257:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.199911][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.243766][ T28] audit: type=1326 audit(1784205378.257:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.313661][ T28] audit: type=1326 audit(1784205378.267:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.351855][ T8821] loop3: detected capacity change from 0 to 32768 [ 188.374688][ T28] audit: type=1326 audit(1784205378.267:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.398603][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.440582][ T28] audit: type=1326 audit(1784205378.267:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.464661][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.505937][ T8821] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.583743][ T28] audit: type=1326 audit(1784205378.267:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.618750][ T28] audit: type=1326 audit(1784205378.267:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 188.643049][ T28] audit: type=1326 audit(1784205378.687:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.0.1389" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x0 [ 188.666493][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.748570][ T8821] XFS (loop3): Ending clean mount [ 188.795979][ T8864] trusted_key: encrypted_key: keylen parameter is missing [ 188.880521][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 189.241912][ T8876] netlink: 'syz.1.1398': attribute type 2 has an invalid length. [ 189.570761][ T28] audit: type=1326 audit(1784205379.817:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.3.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 189.594760][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.629100][ T28] audit: type=1326 audit(1784205379.817:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.3.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 190.057188][ T8908] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1412'. [ 190.308661][ T8918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1417'. [ 190.353699][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 190.619969][ T8928] loop0: detected capacity change from 0 to 512 [ 191.209745][ T8945] loop3: detected capacity change from 0 to 4096 [ 191.275830][ T8945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.503343][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.513876][ T5761] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.703826][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 191.715570][ T5761] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 191.743680][ T5761] usb 3-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 191.771696][ T8953] loop0: detected capacity change from 0 to 32768 [ 191.778459][ T5761] usb 3-1: config 0 has no interface number 0 [ 191.789689][ T8953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1434 (8953) [ 191.807662][ T5761] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 191.832352][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.852714][ T5761] usb 3-1: Product: syz [ 191.852840][ T8953] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.862970][ T5761] usb 3-1: Manufacturer: syz [ 191.880381][ T5761] usb 3-1: SerialNumber: syz [ 191.897706][ T5761] usb 3-1: config 0 descriptor?? [ 191.922381][ T8953] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 191.971924][ T8953] BTRFS info (device loop0): using free space tree [ 192.087947][ T8953] BTRFS info (device loop0): enabling ssd optimizations [ 192.121184][ T8953] BTRFS info (device loop0): auto enabling async discard [ 192.167095][ T5761] usb 3-1: USB disconnect, device number 12 [ 192.181888][ T8987] žÿ: renamed from team_slave_1 [ 192.384262][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.289637][ T8993] loop3: detected capacity change from 0 to 32768 [ 193.312470][ T8993] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1446 (8993) [ 193.377829][ T8993] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.404316][ T8993] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 193.430094][ T8993] BTRFS info (device loop3): using free space tree [ 193.581219][ T8993] BTRFS info (device loop3): enabling ssd optimizations [ 193.608851][ T8993] BTRFS info (device loop3): auto enabling async discard [ 193.811543][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.851644][ T9003] loop0: detected capacity change from 0 to 32768 [ 193.916320][ T9003] JBD2: Ignoring recovery information on journal [ 193.969262][ T9003] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 193.982723][ T9003] JBD2: bad block at offset 32 [ 194.035092][ T9003] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 194.430287][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 194.454169][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.460536][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.588342][ T9058] loop2: detected capacity change from 0 to 512 [ 194.635129][ T9058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.693824][ T9058] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 194.812680][ T9058] EXT4-fs (loop2): 1 truncate cleaned up [ 194.859756][ T9058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.916568][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 194.929737][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 194.939445][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 194.968746][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.013095][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.068775][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.095544][ T9067] loop1: detected capacity change from 0 to 4096 [ 195.123630][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.144380][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.189491][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.203318][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.222255][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.231750][ T9072] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.286167][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.354419][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.363460][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.398645][ T9076] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 195.408052][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.444060][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 195.900003][ T9094] loop1: detected capacity change from 0 to 512 [ 195.970102][ T9094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.147104][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.433193][ T9111] netlink: 'syz.3.1492': attribute type 8 has an invalid length. [ 196.732795][ T9119] loop2: detected capacity change from 0 to 1024 [ 197.083885][ T56] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.292323][ T56] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 197.314078][ T56] usb 2-1: config 0 has no interface number 1 [ 197.337051][ T56] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 197.367161][ T56] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 197.400419][ T56] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 197.423654][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.432320][ T9134] loop0: detected capacity change from 0 to 512 [ 197.452059][ T56] usb 2-1: SerialNumber: syz [ 197.464618][ T56] usb 2-1: config 0 descriptor?? [ 197.486628][ T56] usb 2-1: Found UVC 0.00 device (0002:0000) [ 197.517977][ T56] usb 2-1: No valid video chain found. [ 197.562100][ T9126] loop3: detected capacity change from 0 to 32768 [ 197.592131][ T9126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1499 (9126) [ 197.652238][ T9126] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.698880][ T9126] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 197.710007][ T8] usb 2-1: USB disconnect, device number 10 [ 197.734100][ T9126] BTRFS info (device loop3): force clearing of disk cache [ 197.742170][ T9126] BTRFS info (device loop3): force zlib compression, level 3 [ 197.785565][ T9126] BTRFS info (device loop3): disabling free space tree [ 197.793443][ T9126] BTRFS info (device loop3): max_inline at 0 [ 197.801662][ T9126] BTRFS info (device loop3): enabling free space tree [ 197.812501][ T9126] BTRFS info (device loop3): using free space tree [ 197.873048][ T9137] loop2: detected capacity change from 0 to 4096 [ 197.983516][ T9126] BTRFS info (device loop3): enabling ssd optimizations [ 197.990693][ T9126] BTRFS info (device loop3): auto enabling async discard [ 198.009191][ T9137] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 198.051441][ T9137] ntfs3: loop2: Failed to load $Extend (-22). [ 198.077532][ T9137] ntfs3: loop2: Failed to initialize $Extend. [ 198.156035][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.479689][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5785) [ 198.890700][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 198.890717][ T28] audit: type=1326 audit(1784205389.137:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 198.949925][ T9180] loop1: detected capacity change from 0 to 164 [ 198.957708][ T28] audit: type=1326 audit(1784205389.137:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.003421][ T9180] Unsupported NM flag settings (240) [ 199.036294][ T28] audit: type=1326 audit(1784205389.137:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.127188][ T28] audit: type=1326 audit(1784205389.137:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.213052][ T28] audit: type=1326 audit(1784205389.137:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.263175][ T28] audit: type=1326 audit(1784205389.137:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.338401][ T28] audit: type=1326 audit(1784205389.137:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.393395][ T28] audit: type=1326 audit(1784205389.137:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.448557][ T28] audit: type=1326 audit(1784205389.137:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.473143][ T5783] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.523971][ T28] audit: type=1326 audit(1784205389.137:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.2.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ff00000 [ 199.633179][ T9168] loop0: detected capacity change from 0 to 32768 [ 199.673966][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 199.681936][ T5783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.693238][ T5783] usb 4-1: config 86 has an invalid interface number: 78 but max is 0 [ 199.724273][ T5783] usb 4-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 199.774345][ T5783] usb 4-1: config 86 has no interface number 0 [ 199.782459][ T5783] usb 4-1: config 86 interface 78 altsetting 128 endpoint 0x88 has invalid wMaxPacketSize 0 [ 199.813185][ T9189] binder: 9187:9189 ioctl c0046209 200000000000000 returned -22 [ 199.832800][ T5783] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 0 [ 199.863629][ T5783] usb 4-1: config 86 interface 78 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.888730][ T5783] usb 4-1: config 86 interface 78 has no altsetting 0 [ 199.910926][ T5783] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 199.921195][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.938302][ T5783] usb 4-1: Product: syz [ 199.971753][ T5783] usb 4-1: Manufacturer: syz [ 200.004487][ T5783] usb 4-1: SerialNumber: syz [ 200.249485][ T5783] kvaser_usb 4-1:86.78: Cannot get usb endpoint(s) [ 200.250922][ T9201] netlink: 'syz.2.1528': attribute type 8 has an invalid length. [ 200.292096][ T5783] usb 4-1: USB disconnect, device number 9 [ 200.376075][ T9203] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 200.439399][ T9203] team0: Device veth1_macvtap failed to register rx_handler [ 200.467543][ T9205] xt_CT: No such helper "netbios-ns" [ 200.884879][ T9216] loop1: detected capacity change from 0 to 256 [ 200.926063][ T9219] loop2: detected capacity change from 0 to 16 [ 200.938175][ T9219] erofs: (device loop2): mounted with root inode @ nid 36. [ 201.569065][ T9238] __nla_validate_parse: 44 callbacks suppressed [ 201.569084][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 201.996620][ T9252] autofs4:pid:9252:autofs_fill_super: called with bogus options [ 202.237168][ T9263] IPv6: sit1: Disabled Multicast RS [ 202.258836][ T9263] sit1: entered allmulticast mode [ 202.683877][ T5828] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 202.883931][ T5783] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 202.895830][ T5828] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 202.918754][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.930453][ T5828] usb 1-1: config 0 descriptor?? [ 202.951233][ T5828] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 203.083919][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 203.099936][ T5783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.118090][ T5783] usb 4-1: config 42 has an invalid interface number: 178 but max is 0 [ 203.133675][ T5783] usb 4-1: config 42 has no interface number 0 [ 203.150214][ T5783] usb 4-1: config 42 interface 178 has no altsetting 0 [ 203.172675][ T5783] usb 4-1: string descriptor 0 read error: -22 [ 203.192377][ T5783] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 203.214459][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.248666][ T5783] uvcvideo 4-1:42.178: Found multiple Units with ID 1 [ 203.266711][ T5783] usb 4-1: Found UVC 0.00 device (045e:00f8) [ 203.277708][ T5783] usb 4-1: No valid video chain found. [ 203.365826][ T5828] gp8psk: usb in 128 operation failed. [ 203.376014][ T5828] gp8psk: usb in 137 operation failed. [ 203.382161][ T5828] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 203.423787][ T5828] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 203.440487][ T5828] usb 1-1: USB disconnect, device number 4 [ 203.470835][ T9282] loop1: detected capacity change from 0 to 32768 [ 203.543971][ T9282] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.683763][ T9282] XFS (loop1): Ending clean mount [ 203.695505][ T9282] XFS (loop1): Quotacheck needed: Please wait. [ 203.738979][ T9282] XFS (loop1): Quotacheck: Done. [ 203.819600][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.991202][ T9308] loop0: detected capacity change from 0 to 128 [ 204.057558][ T5771] sysv_free_block: flc_count > flc_size [ 204.063766][ T5828] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 204.064130][ T5771] sysv_free_block: flc_count > flc_size [ 204.092697][ T5771] sysv_free_block: flc_count > flc_size [ 204.100558][ T5771] sysv_free_block: flc_count > flc_size [ 204.106251][ T5771] sysv_free_block: flc_count > flc_size [ 204.111980][ T5771] sysv_free_block: flc_count > flc_size [ 204.119179][ T5771] sysv_free_block: flc_count > flc_size [ 204.124928][ T5771] sysv_free_block: flc_count > flc_size [ 204.130502][ T5771] sysv_free_block: flc_count > flc_size [ 204.136305][ T5771] sysv_free_block: flc_count > flc_size [ 204.144129][ T5771] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 204.256227][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.268980][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.282696][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 204.296507][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.305794][ T5828] usb 3-1: SerialNumber: syz [ 204.332589][ T5828] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 204.355008][ T5828] usb-storage 3-1:1.0: USB Mass Storage device detected [ 204.381505][ T5828] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 204.392504][ T5828] scsi host1: usb-storage 3-1:1.0 [ 204.561779][ T9320] loop0: detected capacity change from 0 to 4096 [ 204.595979][ T9320] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 204.620859][ T9320] ntfs3: loop0: Failed to load $Extend (-22). [ 204.627387][ T9320] ntfs3: loop0: Failed to initialize $Extend. [ 205.125267][ T9328] loop1: detected capacity change from 0 to 16 [ 205.144139][ T9328] erofs: (device loop1): mounted with root inode @ nid 36. [ 205.178528][ T9328] erofs: (device loop1): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 205.657610][ T5783] usb 4-1: USB disconnect, device number 10 [ 205.700072][ T56] usb 3-1: USB disconnect, device number 13 [ 205.893780][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 205.910016][ T9344] loop3: detected capacity change from 0 to 4096 [ 206.023769][ T9344] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 206.066554][ T9344] ntfs3: loop3: Failed to load $Extend (-22). [ 206.072828][ T9344] ntfs3: loop3: Failed to initialize $Extend. [ 206.516786][ T9364] loop1: detected capacity change from 0 to 256 [ 206.649529][ T9364] FAT-fs (loop1): Directory bread(block 64) failed [ 206.663690][ T9364] FAT-fs (loop1): Directory bread(block 65) failed [ 206.677322][ T9364] FAT-fs (loop1): Directory bread(block 66) failed [ 206.684706][ T9364] FAT-fs (loop1): Directory bread(block 67) failed [ 206.691478][ T9364] FAT-fs (loop1): Directory bread(block 68) failed [ 206.698732][ T9364] FAT-fs (loop1): Directory bread(block 69) failed [ 206.712896][ T9364] FAT-fs (loop1): Directory bread(block 70) failed [ 206.726253][ T9364] FAT-fs (loop1): Directory bread(block 71) failed [ 206.768102][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 206.768115][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 206.774277][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 206.774344][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 206.786254][ T9364] FAT-fs (loop1): Directory bread(block 72) failed [ 206.786314][ T9364] FAT-fs (loop1): Directory bread(block 73) failed [ 206.840757][ T9370] netlink: 'syz.3.1605': attribute type 2 has an invalid length. [ 207.434172][ T5828] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.627491][ T5828] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 207.654065][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.680176][ T5828] usb 1-1: config 0 descriptor?? [ 207.699990][ T5828] gspca_main: spca505-2.14.0 probing 0733:0430 [ 208.115487][ T5828] gspca_spca505: reg write: error -71 [ 208.134042][ T5828] spca505: probe of 1-1:0.0 failed with error -5 [ 208.165483][ T5828] usb 1-1: USB disconnect, device number 5 [ 208.792889][ T9430] (null): rxe_set_mtu: Set mtu to 4096 [ 208.811319][ T9430] lo speed is unknown, defaulting to 1000 [ 208.833409][ T9430] lo speed is unknown, defaulting to 1000 [ 208.880984][ T9430] lo speed is unknown, defaulting to 1000 [ 209.113921][ T9422] loop3: detected capacity change from 0 to 32768 [ 209.181782][ T9422] JBD2: Ignoring recovery information on journal [ 209.190785][ T9422] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 209.205199][ T9422] JBD2: bad block at offset 32 [ 209.218977][ T9422] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 209.505906][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 209.574189][ T9430] infiniband syz1: set active [ 209.582589][ T9430] infiniband syz1: added lo [ 209.589551][ T1717] lo speed is unknown, defaulting to 1000 [ 209.645463][ T9430] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 209.675249][ T9430] infiniband syz1: Couldn't open port 1 [ 209.780188][ T9432] loop1: detected capacity change from 0 to 40427 [ 209.852803][ T9432] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 209.862153][ T9430] RDS/IB: syz1: added [ 209.885018][ T9430] smc: adding ib device syz1 with port count 1 [ 209.891501][ T9430] smc: ib device syz1 port 1 has pnetid [ 209.916238][ T56] lo speed is unknown, defaulting to 1000 [ 209.931635][ T9430] lo speed is unknown, defaulting to 1000 [ 210.809054][ T9430] lo speed is unknown, defaulting to 1000 [ 210.865859][ T9468] sit1: entered allmulticast mode [ 211.003740][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.207939][ T8] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 211.223689][ T8] usb 4-1: config 0 has no interface number 0 [ 211.256768][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 211.278822][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.313878][ T8] usb 4-1: Product: syz [ 211.318215][ T8] usb 4-1: Manufacturer: syz [ 211.322873][ T8] usb 4-1: SerialNumber: syz [ 211.350497][ T9478] netlink: 'syz.1.1657': attribute type 8 has an invalid length. [ 211.363920][ T8] usb 4-1: config 0 descriptor?? [ 211.386534][ T9430] lo speed is unknown, defaulting to 1000 [ 211.596068][ T8] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 211.602638][ T8] usb 4-1: No valid video chain found. [ 211.631304][ T8] usb 4-1: USB disconnect, device number 11 [ 211.878161][ T9430] lo speed is unknown, defaulting to 1000 [ 212.007022][ T9495] netlink: 'syz.2.1665': attribute type 21 has an invalid length. [ 212.190781][ T9499] loop1: detected capacity change from 0 to 1024 [ 212.292344][ T9499] hfsplus: invalid extended attribute record [ 212.441042][ T1136] hfsplus: b-tree write err: -5, ino 8 [ 212.650160][ T9512] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1671'. [ 213.559445][ T9542] loop1: detected capacity change from 0 to 512 [ 213.617390][ T9542] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 213.680290][ T9542] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.712451][ T9516] loop2: detected capacity change from 0 to 32768 [ 213.719285][ T9542] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 213.750764][ T9542] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 213.783074][ T9542] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 213.792986][ T9542] System zones: 0-2, 18-18, 34-35 [ 213.803990][ T9516] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.816650][ T9542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.032322][ T9516] XFS (loop2): Ending clean mount [ 214.070092][ T9516] XFS (loop2): Quotacheck needed: Please wait. [ 214.152489][ T9516] XFS (loop2): Quotacheck: Done. [ 214.185642][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.296202][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.330072][ T9564] gretap3: entered allmulticast mode [ 214.399861][ T28] kauditd_printk_skb: 660 callbacks suppressed [ 214.399878][ T28] audit: type=1326 audit(1784205404.647:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.499523][ T28] audit: type=1326 audit(1784205404.687:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.561729][ T9570] loop0: detected capacity change from 0 to 1024 [ 214.564170][ T9572] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 214.581676][ T28] audit: type=1326 audit(1784205404.687:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.610816][ T9572] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1699'. [ 214.654785][ T9570] hfsplus: invalid extended attribute record [ 214.661323][ T28] audit: type=1326 audit(1784205404.687:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.743742][ T28] audit: type=1326 audit(1784205404.687:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.785440][ T28] audit: type=1326 audit(1784205404.687:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.809912][ T28] audit: type=1326 audit(1784205404.687:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.814409][ T12] hfsplus: b-tree write err: -5, ino 8 [ 214.906309][ T28] audit: type=1326 audit(1784205404.697:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 214.964829][ T28] audit: type=1326 audit(1784205404.697:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a2e19de59 code=0x7ffc0000 [ 215.540046][ T9597] loop0: detected capacity change from 0 to 512 [ 215.618967][ T9597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.667716][ T9597] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.817996][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.309924][ T9619] loop1: detected capacity change from 0 to 4096 [ 216.346236][ T9619] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 217.217722][ T9650] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1735'. [ 217.244971][ T5783] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 217.264369][ T1717] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 217.439410][ T5783] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.450199][ T5783] usb 1-1: config 0 has no interface number 0 [ 217.456698][ T1717] usb 4-1: Using ep0 maxpacket: 8 [ 217.465887][ T5783] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 217.481864][ T5783] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.493624][ T1717] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 217.501696][ T1717] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 217.511263][ T5783] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.522930][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.531113][ T1717] usb 4-1: config 0 has no interface number 1 [ 217.541948][ T1717] usb 4-1: config 0 has no interface number 2 [ 217.549587][ T1717] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 217.561983][ T5783] usb 1-1: config 0 descriptor?? [ 217.587689][ T5783] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 217.598744][ T1717] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 217.615518][ T1717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.622200][ T1717] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 217.631929][ T1717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.652485][ T9655] loop1: detected capacity change from 0 to 4096 [ 217.667769][ T1717] usb 4-1: config 0 descriptor?? [ 217.696854][ T9655] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 217.730734][ T9655] ntfs: volume version 3.1. [ 217.835638][ T9644] iowarrior 1-1:0.1: Error -90 while submitting URB [ 217.866517][ T56] usb 1-1: USB disconnect, device number 6 [ 217.895785][ T1717] usb 4-1: Could not set interface, error -71 [ 217.932373][ T1717] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 217.966695][ T9660] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.984497][ T1717] usb 4-1: USB disconnect, device number 12 [ 218.498717][ T9662] loop1: detected capacity change from 0 to 32768 [ 218.570246][ T9662] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 218.883458][ T9682] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 219.234106][ T9690] loop0: detected capacity change from 0 to 2048 [ 219.298168][ T9693] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.369100][ T9690] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 219.407979][ T9690] Remounting filesystem read-only [ 219.800613][ T9707] x_tables: unsorted underflow at hook 3 [ 220.063723][ T56] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 220.159248][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 220.279702][ T56] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.310780][ T56] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 220.354498][ T56] usb 3-1: config 4 has no interface number 0 [ 220.360914][ T56] usb 3-1: config 4 interface 138 has no altsetting 0 [ 220.386765][ T56] usb 3-1: string descriptor 0 read error: -22 [ 220.393146][ T56] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 220.412716][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.675983][ T56] catc 3-1:4.138: Missing or invalid endpoints [ 220.891726][ T56] usb 3-1: USB disconnect, device number 14 [ 221.203741][ T1717] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.263860][ T8] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 221.394375][ T1717] usb 1-1: Using ep0 maxpacket: 8 [ 221.429974][ T1717] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 221.442507][ T1717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.457146][ T8] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 221.471674][ T1717] usb 1-1: Product: syz [ 221.481684][ T8] usb 4-1: config 0 has no interface number 0 [ 221.483762][ T1717] usb 1-1: Manufacturer: syz [ 221.497462][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 221.513694][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.531603][ T8] usb 4-1: Product: syz [ 221.542153][ T8] usb 4-1: Manufacturer: syz [ 221.547083][ T1717] usb 1-1: SerialNumber: syz [ 221.565997][ T1717] usb 1-1: config 0 descriptor?? [ 221.573841][ T8] usb 4-1: SerialNumber: syz [ 221.579321][ T1717] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 221.606383][ T8] usb 4-1: config 0 descriptor?? [ 221.625748][ T8] hub 4-1:0.132: bad descriptor, ignoring hub [ 221.631951][ T8] hub: probe of 4-1:0.132 failed with error -5 [ 221.643161][ T8] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input7 [ 221.985883][ T1717] gspca_sonixj: reg_r err -71 [ 221.990720][ T1717] sonixj: probe of 1-1:0.0 failed with error -71 [ 222.019532][ T1717] usb 1-1: USB disconnect, device number 7 [ 222.146105][ T27] usb 4-1: USB disconnect, device number 13 [ 222.474586][ T9795] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 223.050085][ T9817] loop1: detected capacity change from 0 to 2048 [ 223.098924][ T9817] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 223.129906][ T9817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.453684][ T5783] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.463707][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 223.658684][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.666628][ T5783] usb 2-1: config 127 has an invalid interface number: 138 but max is 0 [ 223.684328][ T5783] usb 2-1: config 127 has no interface number 0 [ 223.692270][ T27] usb 4-1: config 11 has an invalid interface number: 104 but max is 0 [ 223.701133][ T5783] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 223.720998][ T27] usb 4-1: config 11 has no interface number 0 [ 223.730637][ T27] usb 4-1: config 11 interface 104 has no altsetting 0 [ 223.752935][ T5783] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 223.773010][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.781673][ T27] usb 4-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=e9.15 [ 223.791734][ T5783] usb 2-1: Product: syz [ 223.796479][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.804769][ T5783] usb 2-1: Manufacturer: syz [ 223.809416][ T5783] usb 2-1: SerialNumber: syz [ 223.814191][ T27] usb 4-1: Product: syz [ 223.821868][ T27] usb 4-1: Manufacturer: syz [ 223.827381][ T9817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.843787][ T27] usb 4-1: SerialNumber: syz [ 224.061172][ T5783] usb 2-1: probing VID:PID(0424:012C) [ 224.084944][ T27] rndis_wlan 4-1:11.104: invalid descriptor buffer length [ 224.093478][ T5783] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 224.112281][ T27] usb 4-1: bad CDC descriptors [ 224.117354][ T5783] usb 2-1: vub300 testing BULK OUT EndPoint(1) 09 [ 224.135139][ T27] rndis_host 4-1:11.104: invalid descriptor buffer length [ 224.151120][ T5783] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 224.165999][ T27] usb 4-1: bad CDC descriptors [ 224.196847][ T27] cdc_acm 4-1:11.104: invalid descriptor buffer length [ 224.207895][ T5783] vub300: probe of 2-1:127.138 failed with error -22 [ 224.271691][ T5783] usb 2-1: USB disconnect, device number 11 [ 224.287189][ T27] usb 4-1: USB disconnect, device number 14 [ 225.402691][ T9878] loop0: detected capacity change from 0 to 4096 [ 225.436376][ T9878] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 225.508453][ T9878] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 225.525693][ T9878] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 225.703825][ T9888] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 225.711642][ T9888] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1850'. [ 226.551705][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 226.551721][ T28] audit: type=1326 audit(1784205416.777:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 226.620648][ T28] audit: type=1326 audit(1784205416.777:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 226.686068][ T28] audit: type=1326 audit(1784205416.797:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 226.785853][ T28] audit: type=1326 audit(1784205416.797:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 226.877643][ T28] audit: type=1326 audit(1784205416.797:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 226.973793][ T28] audit: type=1326 audit(1784205416.797:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 227.001954][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'. [ 227.030249][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'. [ 227.077867][ T28] audit: type=1326 audit(1784205416.797:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 227.158746][ T28] audit: type=1326 audit(1784205416.807:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 227.254132][ T28] audit: type=1326 audit(1784205416.807:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 227.867242][ T28] audit: type=1326 audit(1784205418.117:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm=162E44A480DB682108B49543019E91 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05d7b9de59 code=0x0 [ 228.061941][ T9979] loop3: detected capacity change from 0 to 16 [ 228.079125][ T9979] erofs: (device loop3): mounted with root inode @ nid 36. [ 228.283702][ T5828] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 228.483726][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 228.493519][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 228.517019][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.543268][ T5828] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.564555][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 228.590372][ T5828] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.623801][ T5828] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 228.642433][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.660653][ T5828] usb 2-1: config 0 descriptor?? [ 228.669486][ T9977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.950733][ C0] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 228.961046][ T51] Bluetooth: hci4: unexpected event 0x10 length: 71 > 1 [ 229.165224][ T5828] usb 2-1: USB disconnect, device number 12 [ 229.180381][ T5780] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 229.188801][ T5780] Bluetooth: hci4: hardware error 0x51 [ 229.204175][ T27] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 229.275280][T10005] loop0: detected capacity change from 0 to 4096 [ 229.303353][T10005] ntfs: volume version 3.1. [ 229.350474][T10007] loop2: detected capacity change from 0 to 1024 [ 229.450433][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 229.468427][ T27] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 229.490338][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.563341][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 230.031923][ T27] gspca_nw80x: reg_r err -71 [ 230.042328][ T27] nw80x: probe of 4-1:3.0 failed with error -71 [ 230.063959][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 230.081352][ T27] usb 4-1: USB disconnect, device number 15 [ 230.219428][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1922'. [ 230.560033][T10041] loop2: detected capacity change from 0 to 512 [ 230.639031][T10041] EXT4-fs (loop2): 1 truncate cleaned up [ 230.671751][T10041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.705241][T10045] loop1: detected capacity change from 0 to 4096 [ 230.733662][T10045] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 230.813230][T10045] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 230.838625][T10045] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 230.959911][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.793630][ T5828] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.933045][T10052] loop1: detected capacity change from 0 to 32768 [ 231.967213][T10052] (syz.1.1933,10052,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.983691][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 231.991460][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.998671][T10052] (syz.1.1933,10052,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.010196][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.040578][T10052] JBD2: Ignoring recovery information on journal [ 232.055510][ T5828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.105847][ T5828] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 232.125372][T10052] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 232.144610][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.152681][ T5828] usb 3-1: Product: syz [ 232.193853][ T5828] usb 3-1: Manufacturer: syz [ 232.208708][ T5828] usb 3-1: SerialNumber: syz [ 232.501068][ T5828] usb 3-1: unit 255 not found! [ 232.550472][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 232.618931][ T5828] usb 3-1: USB disconnect, device number 15 [ 232.759813][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.253368][T10106] (unnamed net_device) (uninitialized): option ad_select: invalid value (4) [ 233.331593][T10091] loop0: detected capacity change from 0 to 32768 [ 233.429855][T10091] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.588847][T10091] XFS (loop0): Ending clean mount [ 233.655247][T10091] XFS (loop0): Quotacheck needed: Please wait. [ 233.766431][T10091] XFS (loop0): Quotacheck: Done. [ 233.877298][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.053749][ T27] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 234.266008][ T27] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 234.287894][ T27] usb 2-1: config 0 has no interface number 0 [ 234.308575][ T27] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 234.341810][T10146] overlayfs: conflicting options: nfs_export=on,index=off [ 234.358261][ T27] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.379467][ T27] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 234.421506][ T27] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 234.456972][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 234.494016][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 234.504733][ T27] usb 2-1: Product: syz [ 234.508974][ T27] usb 2-1: Manufacturer: syz [ 234.540565][ T27] usb 2-1: SerialNumber: syz [ 234.559524][ T27] usb 2-1: config 0 descriptor?? [ 234.574417][ T27] xpad: probe of 2-1:0.237 failed with error -5 [ 234.711909][T10154] loop3: detected capacity change from 0 to 512 [ 234.735779][T10154] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 234.798662][T10154] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1975: casefold flag without casefold feature [ 234.808047][ T27] usb 2-1: USB disconnect, device number 13 [ 234.837890][T10154] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1975: couldn't read orphan inode 15 (err -117) [ 234.869208][T10154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.936158][T10154] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 4: comm syz.3.1975: lblock 0 mapped to illegal pblock 4 (length 1) [ 235.096056][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.494520][ T5828] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 235.554452][T10184] (null): rxe_set_mtu: Set mtu to 1024 [ 235.695649][ T5828] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 235.724479][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.763244][ T5828] usb 1-1: config 0 has no interface number 0 [ 235.769912][ T5828] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 235.793608][ T5828] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.809074][T10191] loop2: detected capacity change from 0 to 512 [ 235.825742][ T5828] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 235.835938][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.854296][ T5828] usb 1-1: Product: syz [ 235.865565][T10191] EXT4-fs (loop2): filesystem is read-only [ 235.871996][T10191] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 235.892574][ T5828] usb 1-1: Manufacturer: syz [ 235.899410][ T5828] usb 1-1: SerialNumber: syz [ 235.907891][T10191] EXT4-fs (loop2): filesystem is read-only [ 235.925730][ T5828] usb 1-1: config 0 descriptor?? [ 235.938192][T10191] EXT4-fs (loop2): orphan cleanup on readonly fs [ 235.986184][T10191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1992: bg 0: block 64: padding at end of block bitmap is not set [ 236.024023][T10191] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 236.038306][T10191] EXT4-fs (loop2): 1 orphan inode deleted [ 236.050944][T10191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 236.109907][T10184] infiniband syz2: set active [ 236.120824][T10184] infiniband syz2: added bridge_slave_0 [ 236.194912][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.325769][T10184] RDS/IB: syz2: added [ 236.333911][T10184] smc: adding ib device syz2 with port count 1 [ 236.355750][T10184] smc: ib device syz2 port 1 has pnetid [ 236.374557][ T27] usb 1-1: USB disconnect, device number 8 [ 237.110804][ T8] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 237.307053][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 237.324516][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.342618][ T8] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 237.374887][ T8] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 237.397541][ T8] usb 2-1: Manufacturer: syz [ 237.402210][ T8] usb 2-1: SerialNumber: syz [ 237.489187][T10231] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2011'. [ 237.500532][T10231] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2011'. [ 237.647047][ T8] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 237.677406][ T8] usb 2-1: USB disconnect, device number 14 [ 238.116820][T10243] loop0: detected capacity change from 0 to 8192 [ 238.175574][T10243] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.309111][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 239.341061][T10287] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.427013][T10285] loop2: detected capacity change from 0 to 4096 [ 239.814034][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 239.952711][T10305] loop2: detected capacity change from 0 to 4096 [ 240.008578][T10305] ntfs: volume version 3.1. [ 240.045295][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 240.075589][ T8] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 240.092604][T10311] loop1: detected capacity change from 0 to 64 [ 240.103936][ T8] usb 4-1: Product: syz [ 240.108166][ T8] usb 4-1: SerialNumber: syz [ 240.134808][ T8] usb 4-1: config 0 descriptor?? [ 240.586973][ T5828] usb 4-1: USB disconnect, device number 16 [ 240.643200][T10326] SET target dimension over the limit! [ 240.731471][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 240.731500][ T28] audit: type=1326 audit(1784205430.977:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 240.783889][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 240.844316][ T28] audit: type=1326 audit(1784205430.977:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 240.875424][ T28] audit: type=1326 audit(1784205430.977:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 240.901673][ T28] audit: type=1326 audit(1784205430.977:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 240.956323][ T28] audit: type=1326 audit(1784205430.977:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 241.022801][ T28] audit: type=1326 audit(1784205430.977:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 241.072196][ T28] audit: type=1326 audit(1784205430.977:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 241.113759][ T28] audit: type=1326 audit(1784205430.977:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 241.198206][ T28] audit: type=1326 audit(1784205430.977:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.0.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f05d7b9de59 code=0x7ffc0000 [ 241.583625][T10352] mmap: syz.3.2070 (10352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 241.859160][T10332] loop1: detected capacity change from 0 to 32768 [ 241.947950][T10332] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.129163][T10332] XFS (loop1): Ending clean mount [ 242.155423][T10332] XFS (loop1): Quotacheck needed: Please wait. [ 242.251324][T10332] XFS (loop1): Quotacheck: Done. [ 242.321557][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.540178][T10356] loop0: detected capacity change from 0 to 32768 [ 242.582113][T10356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2072 (10356) [ 242.618718][T10356] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.633688][T10356] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 242.642457][T10356] BTRFS info (device loop0): setting nodatasum [ 242.703628][T10356] BTRFS info (device loop0): force zlib compression, level 3 [ 242.728175][T10356] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 242.753655][T10356] BTRFS info (device loop0): use lzo compression, level 0 [ 242.771066][T10356] BTRFS info (device loop0): turning on flush-on-commit [ 242.791219][T10356] BTRFS info (device loop0): enabling auto defrag [ 242.832155][T10356] BTRFS info (device loop0): max_inline at 4096 [ 242.846794][T10356] BTRFS info (device loop0): using free space tree [ 243.035461][T10356] BTRFS info (device loop0): enabling ssd optimizations [ 243.272059][T10415] netlink: 'syz.3.2090': attribute type 15 has an invalid length. [ 243.517220][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.047549][T10434] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2098'. [ 244.286594][T10438] loop3: detected capacity change from 0 to 64 [ 244.378762][T10440] loop0: detected capacity change from 0 to 2048 [ 244.458375][T10436] loop1: detected capacity change from 0 to 4096 [ 244.472983][T10417] loop2: detected capacity change from 0 to 32768 [ 244.485957][T10441] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.557856][T10436] ntfs: volume version 3.1. [ 244.583983][T10440] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 244.603938][T10417] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.616773][T10440] Remounting filesystem read-only [ 244.775211][T10417] XFS (loop2): Ending clean mount [ 244.835873][T10417] XFS (loop2): Quotacheck needed: Please wait. [ 244.992833][T10417] XFS (loop2): Quotacheck: Done. [ 245.238904][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.669127][T10516] loop0: detected capacity change from 0 to 16 [ 246.698155][T10516] erofs: (device loop0): mounted with root inode @ nid 36. [ 246.764367][T10516] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 246.797375][T10516] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 246.818540][T10516] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 246.955779][T10524] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 246.971475][T10524] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2136'. [ 246.981683][T10524] openvswitch: netlink: Flow key attr not present in new flow. [ 247.161920][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 247.434245][T10528] team0 (unregistering): Port device team_slave_0 removed [ 247.481511][T10528] team0 (unregistering): Port device team_slave_1 removed [ 247.943493][T10532] loop2: detected capacity change from 0 to 32768 [ 248.001785][T10532] (syz.2.2141,10532,1):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 248.084138][T10532] (syz.2.2141,10532,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 248.618778][T10575] tipc: Can't bind to reserved service type 1 [ 248.809067][T10581] loop2: detected capacity change from 0 to 2048 [ 248.840712][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2171'. [ 248.882899][T10585] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.966792][T10581] NILFS error (device loop2): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 249.013208][T10581] Remounting filesystem read-only [ 249.336556][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.442519][T10603] binder: 10602:10603 ioctl 400c620e ffffffffffffffff returned -14 [ 249.528228][T10609] loop2: detected capacity change from 0 to 256 [ 249.544177][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 249.545874][T10609] exfat: Deprecated parameter 'namecase' [ 249.554954][ T27] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.555006][ T27] usb 1-1: config 0 has no interface number 0 [ 249.555053][ T27] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 249.555082][ T27] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 249.560624][ T27] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.614518][T10609] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 249.694980][ T27] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.703235][ T27] usb 1-1: Product: syz [ 249.735261][ T27] usb 1-1: SerialNumber: syz [ 249.751924][ T27] usb 1-1: config 0 descriptor?? [ 249.772126][ T27] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 249.795915][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 250.202188][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 250.210965][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.218251][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.225549][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.232731][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.239927][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.247328][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.254532][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.261784][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.268974][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.276265][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.283670][ T27] usb 1-1: USB disconnect, device number 9 [ 250.289545][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 250.342225][ T27] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 250.774683][ T56] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.962870][T10654] loop0: detected capacity change from 0 to 512 [ 250.964555][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 250.995799][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.007847][T10654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.013739][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.035556][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.063059][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.078450][T10654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 251.090409][ T56] usb 2-1: config 0 descriptor?? [ 251.094980][T10654] System zones: 1-12 [ 251.107645][ T56] hub 2-1:0.0: USB hub found [ 251.122787][T10654] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2193: invalid indirect mapped block 8 (level 2) [ 251.169514][T10654] EXT4-fs (loop0): 1 truncate cleaned up [ 251.183264][T10654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.304321][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.347064][ T56] hub 2-1:0.0: 3 ports detected [ 251.364096][ T28] audit: type=1326 audit(1784205441.617:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 251.408652][ T28] audit: type=1326 audit(1784205441.617:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 251.444854][ T28] audit: type=1326 audit(1784205441.647:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 251.470057][ T28] audit: type=1326 audit(1784205441.647:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 251.501639][ T28] audit: type=1326 audit(1784205441.647:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 251.532632][ T28] audit: type=1326 audit(1784205441.717:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c0ff5e68e code=0x7ffc0000 [ 251.557354][ T56] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 251.574399][ T56] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 251.583812][ T28] audit: type=1326 audit(1784205441.747:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c0ff5e68e code=0x7ffc0000 [ 251.614045][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 251.628706][ T28] audit: type=1326 audit(1784205441.777:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c0ff5e68e code=0x7ffc0000 [ 251.636543][ T56] usbhid 2-1:0.0: can't add hid device: -71 [ 251.666033][ T56] usbhid: probe of 2-1:0.0 failed with error -71 [ 251.683192][ T28] audit: type=1326 audit(1784205441.817:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c0ff5e68e code=0x7ffc0000 [ 251.718227][ T28] audit: type=1326 audit(1784205441.837:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.3.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c0ff5e68e code=0x7ffc0000 [ 251.737714][ T56] usb 2-1: USB disconnect, device number 15 [ 251.786686][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 251.796060][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 251.851537][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 251.874628][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.889921][ T8] usb 3-1: config 0 descriptor?? [ 251.916469][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 252.345961][ T8] gspca_stv06xx: I2C: Read error writing address: -71 [ 252.372323][ T8] usb 3-1: USB disconnect, device number 16 [ 253.029096][T10689] loop3: detected capacity change from 0 to 32768 [ 253.051803][T10689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2211 (10689) [ 253.096849][T10706] ax25_connect(): syz.2.2220 uses autobind, please contact jreuter@yaina.de [ 253.126694][T10689] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.165814][T10689] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 253.190466][T10689] BTRFS info (device loop3): setting nodatasum [ 253.225860][T10689] BTRFS info (device loop3): force zlib compression, level 3 [ 253.233315][T10689] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 253.243812][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 253.263942][T10689] BTRFS info (device loop3): use lzo compression, level 0 [ 253.273710][T10708] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2221'. [ 253.297544][T10689] BTRFS info (device loop3): turning on flush-on-commit [ 253.317799][T10689] BTRFS info (device loop3): enabling auto defrag [ 253.333674][T10689] BTRFS info (device loop3): max_inline at 4096 [ 253.350239][T10689] BTRFS info (device loop3): using free space tree [ 253.657253][T10689] BTRFS info (device loop3): enabling ssd optimizations [ 253.772769][T10738] loop0: detected capacity change from 0 to 512 [ 253.859840][T10738] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.921074][T10738] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2228: bad orphan inode 13 [ 253.957811][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.998424][T10738] ext4_test_bit(bit=12, block=18) = 1 [ 254.013677][T10738] is_bad_inode(inode)=0 [ 254.021394][T10738] NEXT_ORPHAN(inode)=0 [ 254.041735][T10738] max_ino=32 [ 254.052152][T10738] i_nlink=1 [ 254.065392][T10738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 254.115147][ T5783] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 254.192621][T10738] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 254.246215][T10738] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2228: bg 0: block 248: padding at end of block bitmap is not set [ 254.321510][T10738] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2228: Failed to acquire dquot type 1 [ 254.355742][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 254.383409][ T5783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 254.418525][ T5783] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 254.454369][ T5783] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 254.462515][ T5783] usb 3-1: Product: syz [ 254.483659][ T5783] usb 3-1: Manufacturer: syz [ 254.488314][ T5783] usb 3-1: SerialNumber: syz [ 254.507012][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 254.530013][T10754] loop1: detected capacity change from 0 to 4096 [ 254.689915][T10754] ntfs: volume version 3.1. [ 254.740039][ T5783] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 254.763901][ T5783] usb 3-1: Handspring Visor / Palm OS: port 143, is for Remote File System use [ 254.783800][ T5783] usb 3-1: Handspring Visor / Palm OS: port 223, is for unknown use [ 254.791910][ T5783] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 254.943292][ T5783] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 254.973098][ T5783] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 255.008883][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 255.049523][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 255.079350][ T5783] usb 3-1: USB disconnect, device number 17 [ 255.104714][ T5783] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 255.130696][ T5783] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 255.149539][ T5783] visor 3-1:1.0: device disconnected [ 255.204233][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 255.264075][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 255.525906][T10776] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 255.643806][T10778] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.698619][T10780] dlm: Unknown command passed to DLM device : 11 [ 255.698619][T10780] [ 255.887737][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.894304][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.118701][T10799] delete_channel: no stack [ 256.383345][T10810] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2262'. [ 256.484535][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 256.484551][ T28] audit: type=1326 audit(2000000000.540:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.3.2264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 256.594491][ T28] audit: type=1326 audit(2000000000.570:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.3.2264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 256.655058][ T28] audit: type=1326 audit(2000000000.570:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.3.2264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 256.715723][ T28] audit: type=1326 audit(2000000000.570:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.3.2264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 256.783414][ T28] audit: type=1326 audit(2000000000.570:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.3.2264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0ff9de59 code=0x7ffc0000 [ 256.877613][T10824] loop3: detected capacity change from 0 to 256 [ 257.128852][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 257.163618][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2273'. [ 257.319554][T10816] loop2: detected capacity change from 0 to 32768 [ 257.385884][T10816] JBD2: Ignoring recovery information on journal [ 257.549857][T10816] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 257.606305][T10816] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 257.636822][T10816] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 257.663769][T10816] OCFS2: File system is now read-only. [ 257.669388][T10816] (syz.2.2265,10816,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 257.684510][T10816] (syz.2.2265,10816,1):ocfs2_reserve_cluster_bitmap_bits:1155 ERROR: status = -30 [ 257.704039][T10816] (syz.2.2265,10816,1):ocfs2_reserve_clusters_with_limit:1224 ERROR: status = -30 [ 257.733880][T10816] (syz.2.2265,10816,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 257.761284][T10816] (syz.2.2265,10816,1):ocfs2_block_group_alloc:697 ERROR: status = -30 [ 257.786295][T10816] (syz.2.2265,10816,1):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 257.804009][T10816] (syz.2.2265,10816,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 257.812762][T10816] (syz.2.2265,10816,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 257.834241][T10816] (syz.2.2265,10816,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 257.853789][T10816] (syz.2.2265,10816,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 257.873682][T10816] (syz.2.2265,10816,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 257.882144][T10816] (syz.2.2265,10816,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 257.902507][T10816] (syz.2.2265,10816,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 257.914706][T10816] (syz.2.2265,10816,1):ocfs2_symlink:1867 ERROR: status = -30 [ 257.922230][T10816] (syz.2.2265,10816,1):ocfs2_symlink:2068 ERROR: status = -30 [ 257.941608][T10834] loop1: detected capacity change from 0 to 32768 [ 257.957227][T10816] syz.2.2265 (10816) used greatest stack depth: 19096 bytes left [ 257.966934][T10834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2272 (10834) [ 258.017801][T10834] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.030603][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 258.046489][T10834] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 258.069582][T10834] BTRFS info (device loop1): setting nodatasum [ 258.103707][T10834] BTRFS info (device loop1): force zlib compression, level 3 [ 258.111251][T10834] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 258.153486][T10834] BTRFS info (device loop1): use lzo compression, level 0 [ 258.173701][T10834] BTRFS info (device loop1): turning on flush-on-commit [ 258.180800][T10834] BTRFS info (device loop1): enabling auto defrag [ 258.227041][T10834] BTRFS info (device loop1): max_inline at 4096 [ 258.233362][T10834] BTRFS info (device loop1): using free space tree [ 258.393871][T10834] BTRFS info (device loop1): enabling ssd optimizations [ 258.565015][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.648219][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 258.781754][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5790) [ 259.281304][T10888] veth0_to_batadv: entered promiscuous mode [ 259.300776][T10888] veth0_to_batadv: entered allmulticast mode [ 260.928367][T10950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2318'. [ 261.008128][T10950] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 261.045398][T10950] bridge2: entered promiscuous mode [ 261.409709][T10968] openvswitch: netlink: Actions may not be safe on all matching packets [ 261.700631][T10976] loop2: detected capacity change from 0 to 512 [ 261.733879][T10976] EXT4-fs (loop2): Test dummy encryption mode enabled [ 261.755443][T10976] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 261.792976][T10976] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.2330: bad orphan inode 131072 [ 261.840714][T10976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.855243][T10981] ntfs3: loop1: try to read out of volume at offset 0x0 [ 262.023811][T10987] loop3: detected capacity change from 0 to 2048 [ 262.099623][T10987] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 262.139915][T10987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.250179][T10976] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 262.281773][T10995] loop1: detected capacity change from 0 to 1024 [ 262.361249][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.486354][T10999] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2339'. [ 262.504577][T10995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.619251][T10995] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #11: comm syz.1.2337: directory missing '..' [ 262.718085][T10995] EXT4-fs (loop1): Remounting filesystem read-only [ 262.972989][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.996050][ T28] audit: type=1326 audit(2000000007.040:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.2.2346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 263.020147][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.049156][T11017] No source specified [ 263.101350][T11011] loop3: detected capacity change from 0 to 8192 [ 263.103906][ T28] audit: type=1326 audit(2000000007.040:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.2.2346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 263.207539][ T28] audit: type=1326 audit(2000000007.100:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.2.2346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 263.294027][ T28] audit: type=1326 audit(2000000007.100:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.2.2346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 263.396814][ T28] audit: type=1326 audit(2000000007.100:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.2.2346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce98b9de59 code=0x7ffc0000 [ 263.448667][T11019] loop0: detected capacity change from 0 to 4096 [ 263.463956][T11019] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 263.606514][T11019] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 263.624692][T11027] loop2: detected capacity change from 0 to 16 [ 263.684583][T11027] erofs: (device loop2): mounted with root inode @ nid 36. [ 264.235823][T11039] loop0: detected capacity change from 0 to 256 [ 264.286226][T11039] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 264.406477][T11039] syz.0.2358: attempt to access beyond end of device [ 264.406477][T11039] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 264.444030][T11045] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 265.115538][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 265.300016][T11077] x_tables: duplicate underflow at hook 4 [ 265.505663][T11085] loop3: detected capacity change from 0 to 16 [ 265.515141][T11087] loop0: detected capacity change from 0 to 64 [ 265.541538][T11087] MINIX-fs: mounting file system with errors, running fsck is recommended [ 265.553078][T11085] erofs: (device loop3): mounted with root inode @ nid 36. [ 265.781553][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 265.915755][T11096] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2385'. [ 266.365608][T11111] loop0: detected capacity change from 0 to 16 [ 266.405549][T11111] erofs: (device loop0): mounted with root inode @ nid 36. [ 266.744176][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 267.093838][T11138] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 267.500455][T11154] netlink: 'syz.1.2416': attribute type 4 has an invalid length. [ 267.550475][T11154] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2416'. [ 267.594381][T11157] loop2: detected capacity change from 0 to 512 [ 267.683541][T11157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.723796][T11157] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.821495][T11157] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.2417: corrupted xattr block 33: invalid ea_ino [ 268.037153][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.440225][T11177] loop1: detected capacity change from 0 to 4096 [ 268.480986][T11177] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 268.627103][T11177] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 269.236103][T11213] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 269.328145][T11219] xt_hashlimit: size too large, truncated to 1048576 [ 269.335432][T11219] xt_hashlimit: max too large, truncated to 1048576 [ 269.616152][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 270.202639][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 270.415657][T11264] loop3: detected capacity change from 0 to 64 [ 270.443446][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 270.674031][T11273] futex_wake_op: syz.0.2473 tries to shift op by 144; fix this program [ 270.683307][T11273] futex_wake_op: syz.0.2473 tries to shift op by 144; fix this program [ 271.021371][T11285] program syz.1.2479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.177451][T11293] netlink: 'syz.2.2483': attribute type 21 has an invalid length. [ 271.185587][T11293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2483'. [ 271.532916][T11305] loop0: detected capacity change from 0 to 16 [ 271.567091][T11305] erofs: (device loop0): mounted with root inode @ nid 36. [ 271.786692][ T5780] Bluetooth: hci0: Malformed LE Event: 0x0b [ 272.629389][T11331] loop3: detected capacity change from 0 to 2048 [ 272.639095][T11331] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 272.729572][T11311] loop1: detected capacity change from 0 to 32768 [ 272.787796][T11311] (syz.1.2492,11311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.805752][T11317] loop2: detected capacity change from 0 to 32768 [ 272.815347][T11317] XFS: attr2 mount option is deprecated. [ 272.836249][T11311] (syz.1.2492,11311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.891903][T11317] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 272.928030][T11311] JBD2: Ignoring recovery information on journal [ 272.954169][ T5783] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 273.068573][T11311] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 273.089482][T11317] XFS (loop2): Ending clean mount [ 273.116413][ T56] XFS (loop2): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 273.151661][T11311] [ 273.154052][T11311] ====================================================== [ 273.161097][T11311] WARNING: possible circular locking dependency detected [ 273.168186][T11311] syzkaller #0 Not tainted [ 273.172639][T11311] ------------------------------------------------------ [ 273.179692][T11311] syz.1.2492/11311 is trying to acquire lock: [ 273.183762][ T56] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 273.185786][T11311] ffff88805c162658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 273.210012][T11311] [ 273.210012][T11311] but task is already holding lock: [ 273.217398][T11311] ffff88805c06b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 273.226970][T11311] [ 273.226970][T11311] which lock already depends on the new lock. [ 273.226970][T11311] [ 273.237402][T11311] [ 273.237402][T11311] the existing dependency chain (in reverse order) is: [ 273.246452][T11311] [ 273.246452][T11311] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 273.250495][ T56] XFS (loop2): Unmount and run xfs_repair [ 273.254297][T11311] down_read+0x46/0x2e0 [ 273.254324][T11311] ocfs2_init_acl+0x30a/0x770 [ 273.265819][ T56] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 273.269939][T11311] ocfs2_mknod+0x1427/0x2310 [ 273.269964][T11311] ocfs2_create+0x196/0x430 [ 273.285972][ T56] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 273.287482][T11311] path_openat+0x1705/0x3270 [ 273.301527][T11311] do_filp_open+0x1f2/0x430 [ 273.302847][ T56] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 273.306568][T11311] do_sys_openat2+0x134/0x1d0 [ 273.306596][T11311] __x64_sys_creat+0x90/0xb0 [ 273.306625][T11311] do_syscall_64+0x55/0xb0 [ 273.306653][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.306681][T11311] [ 273.306681][T11311] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 273.345821][T11311] down_read+0x46/0x2e0 [ 273.350543][T11311] ocfs2_start_trans+0x3a8/0x6f0 [ 273.356054][T11311] ocfs2_modify_bh+0xe4/0x4c0 [ 273.361293][T11311] ocfs2_local_read_info+0x1433/0x17d0 [ 273.367310][T11311] dquot_load_quota_sb+0x734/0xb30 [ 273.372992][T11311] dquot_load_quota_inode+0x2d7/0x5c0 [ 273.378931][T11311] ocfs2_enable_quotas+0x1c4/0x4a0 [ 273.384627][T11311] ocfs2_fill_super+0x4187/0x5030 [ 273.386433][ T56] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 273.390197][T11311] mount_bdev+0x21c/0x2c0 [ 273.390223][T11311] legacy_get_tree+0xea/0x180 [ 273.409150][T11311] vfs_get_tree+0x8c/0x280 [ 273.414124][T11311] do_new_mount+0x24a/0xa40 [ 273.419181][T11311] __se_sys_mount+0x2e7/0x3d0 [ 273.424420][T11311] do_syscall_64+0x55/0xb0 [ 273.429414][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.431968][ T56] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 273.435856][T11311] [ 273.435856][T11311] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 273.435897][T11311] ocfs2_start_trans+0x2a9/0x6f0 [ 273.457704][T11311] ocfs2_mknod+0xf33/0x2310 [ 273.459090][ T56] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 273.462749][T11311] ocfs2_create+0x196/0x430 [ 273.476669][T11311] path_openat+0x1705/0x3270 [ 273.481825][T11311] do_filp_open+0x1f2/0x430 [ 273.486909][T11311] do_sys_openat2+0x134/0x1d0 [ 273.487170][ T56] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.492132][T11311] __x64_sys_creat+0x90/0xb0 [ 273.492161][T11311] do_syscall_64+0x55/0xb0 [ 273.511113][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.517571][T11311] [ 273.517571][T11311] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 273.520668][ T56] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.528130][T11311] down_write+0x97/0x200 [ 273.528159][T11311] ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 273.548523][T11311] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 273.555456][T11311] ocfs2_mknod+0xed1/0x2310 [ 273.559393][ T56] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.560493][T11311] ocfs2_create+0x196/0x430 [ 273.574409][T11311] path_openat+0x1705/0x3270 [ 273.579576][T11311] do_filp_open+0x1f2/0x430 [ 273.584643][T11311] do_sys_openat2+0x134/0x1d0 [ 273.589892][T11311] __x64_sys_creat+0x90/0xb0 [ 273.595045][T11311] do_syscall_64+0x55/0xb0 [ 273.596864][T11317] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 273.600012][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.600062][T11311] [ 273.600062][T11311] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 273.628271][T11311] __lock_acquire+0x37ef/0x7d80 [ 273.629231][T11317] XFS (loop2): Failed to initialize disk quotas. [ 273.633671][T11311] lock_acquire+0x19e/0x420 [ 273.633694][T11311] down_write+0x97/0x200 [ 273.633716][T11311] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 273.656359][T11311] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 273.663250][T11311] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 273.669442][T11311] ocfs2_xattr_set+0xc75/0x13a0 [ 273.674855][T11311] ocfs2_set_acl+0x4d4/0x580 [ 273.680020][T11311] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 273.685532][T11311] vfs_set_acl+0x80f/0xa70 [ 273.690530][T11311] do_set_acl+0xf5/0x180 [ 273.699345][T11311] path_setxattr+0x362/0x590 [ 273.704522][T11311] __x64_sys_setxattr+0xbb/0xd0 [ 273.709937][T11311] do_syscall_64+0x55/0xb0 [ 273.714933][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.721407][T11311] [ 273.721407][T11311] other info that might help us debug this: [ 273.721407][T11311] [ 273.731668][T11311] Chain exists of: [ 273.731668][T11311] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 273.731668][T11311] [ 273.748672][T11311] Possible unsafe locking scenario: [ 273.748672][T11311] [ 273.756157][T11311] CPU0 CPU1 [ 273.761545][T11311] ---- ---- [ 273.766956][T11311] lock(&oi->ip_xattr_sem); [ 273.769123][ T56] XFS (loop2): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 273.771575][T11311] lock(&journal->j_trans_barrier); [ 273.771596][T11311] lock(&oi->ip_xattr_sem); [ 273.771615][T11311] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 273.807917][ T56] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 273.808558][T11311] [ 273.808558][T11311] *** DEADLOCK *** [ 273.808558][T11311] [ 273.808565][T11311] 3 locks held by syz.1.2492/11311: [ 273.808580][T11311] #0: ffff888059dea418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 273.837267][ T56] XFS (loop2): Unmount and run xfs_repair [ 273.842170][T11311] #1: ffff88805c06b498 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: vfs_set_acl+0x368/0xa70 [ 273.858148][T11311] #2: ffff88805c06b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 273.865894][ T56] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 273.868127][T11311] [ 273.868127][T11311] stack backtrace: [ 273.868153][T11311] CPU: 1 PID: 11311 Comm: syz.1.2492 Not tainted syzkaller #0 [ 273.888920][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 273.890280][ T56] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 273.899012][T11311] Call Trace: [ 273.899023][T11311] [ 273.899031][T11311] dump_stack_lvl+0x18c/0x250 [ 273.918855][T11311] ? load_image+0x420/0x420 [ 273.923414][T11311] ? show_regs_print_info+0x20/0x20 [ 273.928664][T11311] ? print_circular_bug+0x12b/0x1a0 [ 273.932318][ T56] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 273.933890][T11311] check_noncircular+0x2fc/0x400 [ 273.933922][T11311] ? look_up_lock_class+0x75/0x140 [ 273.933949][T11311] ? print_deadlock_bug+0x5d0/0x5d0 [ 273.933973][T11311] ? lockdep_lock+0xf5/0x230 [ 273.934000][T11311] ? _find_first_zero_bit+0xd6/0x100 [ 273.959904][ T56] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 273.962707][T11311] __lock_acquire+0x37ef/0x7d80 [ 273.981800][T11311] ? verify_lock_unused+0x140/0x140 [ 273.982932][ T56] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 273.987040][T11311] ? __lock_acquire+0x7d80/0x7d80 [ 273.987077][T11311] ? verify_lock_unused+0x140/0x140 [ 273.987107][T11311] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 274.004248][ T56] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 274.006196][T11311] ? do_raw_spin_lock+0x11f/0x2b0 [ 274.012000][ T56] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 274.020683][T11311] ? mutex_unlock+0x10/0x10 [ 274.020713][T11311] lock_acquire+0x19e/0x420 [ 274.020736][T11311] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 274.020768][T11311] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 274.020800][T11311] ? __might_sleep+0xe0/0xe0 [ 274.020827][T11311] ? read_lock_is_recursive+0x20/0x20 [ 274.020850][T11311] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 274.020885][T11311] ? verify_lock_unused+0x140/0x140 [ 274.020907][T11311] ? check_noncircular+0x18a/0x400 [ 274.020935][T11311] down_write+0x97/0x200 [ 274.029353][ T56] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 274.034790][T11311] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 274.034824][T11311] ? down_read_killable+0x340/0x340 [ 274.040367][ T56] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 274.043837][T11311] ? deref_stack_reg+0x1ab/0x230 [ 274.043862][T11311] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 274.043897][T11311] ? mark_lock+0x94/0x320 [ 274.043922][T11311] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.043946][T11311] ? __lock_acquire+0x7d80/0x7d80 [ 274.051833][T11317] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 274.055989][T11311] ? lock_chain_count+0x20/0x20 [ 274.056036][T11311] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 274.056072][T11311] ? lockdep_hardirqs_on+0x98/0x150 [ 274.056098][T11311] ? ocfs2_block_group_search+0x470/0x470 [ 274.056124][T11311] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 274.183235][T11311] ? _raw_spin_unlock+0x40/0x40 [ 274.188165][T11311] ? stack_trace_save+0xaa/0x100 [ 274.193160][T11311] ? stack_trace_snprint+0xf0/0xf0 [ 274.198335][T11311] ? __stack_depot_save+0x575/0x660 [ 274.203584][T11311] ? kasan_set_track+0x5f/0x70 [ 274.208389][T11311] ? kasan_set_track+0x4e/0x70 [ 274.213206][T11311] ? __kasan_kmalloc+0x8f/0xa0 [ 274.218010][T11311] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 274.224564][T11311] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 274.230416][T11311] ? ocfs2_xattr_set+0xc75/0x13a0 [ 274.235517][T11311] ? ocfs2_set_acl+0x4d4/0x580 [ 274.240323][T11311] ? ocfs2_iop_set_acl+0x1b2/0x2b0 [ 274.245470][T11311] ? vfs_set_acl+0x80f/0xa70 [ 274.250091][T11311] ? do_set_acl+0xf5/0x180 [ 274.254554][T11311] ? path_setxattr+0x362/0x590 [ 274.259367][T11311] ? __x64_sys_setxattr+0xbb/0xd0 [ 274.264443][T11311] ? do_syscall_64+0x55/0xb0 [ 274.269077][T11311] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.275186][T11311] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 274.281556][T11311] ? ocfs2_init_steal_slots+0x160/0x160 [ 274.287113][T11311] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 274.292810][T11311] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 274.298452][T11311] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 274.304539][T11311] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 274.310813][T11311] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 274.316728][T11311] ? down_write+0x16e/0x200 [ 274.321258][T11311] ? down_read_killable+0x340/0x340 [ 274.326492][T11311] ? up_write+0x1be/0x410 [ 274.330828][T11311] ocfs2_xattr_set+0xc75/0x13a0 [ 274.335716][T11311] ? _raw_spin_unlock+0x40/0x40 [ 274.340594][T11311] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 274.346327][T11311] ? ocfs2_set_acl+0xe6/0x580 [ 274.351039][T11311] ? vfs_set_acl+0x80f/0xa70 [ 274.355633][T11311] ? do_set_acl+0xf5/0x180 [ 274.360064][T11311] ? path_setxattr+0x362/0x590 [ 274.364852][T11311] ? do_syscall_64+0x55/0xb0 [ 274.369512][T11311] ? ocfs2_set_acl+0xe6/0x580 [ 274.374221][T11311] ? rcu_is_watching+0x15/0xb0 [ 274.379001][T11311] ? ocfs2_set_acl+0xe6/0x580 [ 274.383691][T11311] ? __kmalloc+0xe5/0x240 [ 274.388066][T11311] ocfs2_set_acl+0x4d4/0x580 [ 274.392708][T11311] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 274.397670][T11311] ? ocfs2_xattr_get+0x260/0x260 [ 274.402620][T11311] ? evm_inode_set_acl+0xbc/0x430 [ 274.407661][T11311] ? down_read_killable+0x340/0x340 [ 274.412873][T11311] ? evm_revalidate_status+0x4f/0xb0 [ 274.418171][T11311] ? posix_acl_valid+0x3ba/0x430 [ 274.423160][T11311] vfs_set_acl+0x80f/0xa70 [ 274.427608][T11311] do_set_acl+0xf5/0x180 [ 274.431873][T11311] path_setxattr+0x362/0x590 [ 274.436488][T11311] ? simple_xattrs_free+0x150/0x150 [ 274.441710][T11311] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.447738][T11311] ? lock_chain_count+0x20/0x20 [ 274.452618][T11311] __x64_sys_setxattr+0xbb/0xd0 [ 274.457495][T11311] do_syscall_64+0x55/0xb0 [ 274.461927][T11311] ? clear_bhb_loop+0x40/0x90 [ 274.466623][T11311] ? clear_bhb_loop+0x40/0x90 [ 274.471349][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.477291][T11311] RIP: 0033:0x7f3a2e19de59 [ 274.481729][T11311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.501382][T11311] RSP: 002b:00007f3a2f057028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 274.509831][T11311] RAX: ffffffffffffffda RBX: 00007f3a2e425fa0 RCX: 00007f3a2e19de59 [ 274.517820][T11311] RDX: 0000200000000c40 RSI: 0000200000000080 RDI: 00002000000000c0 [ 274.525845][T11311] RBP: 00007f3a2e233e6f R08: 0000000000000000 R09: 0000000000000000 [ 274.533840][T11311] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 274.541830][T11311] R13: 00007f3a2e426038 R14: 00007f3a2e425fa0 R15: 00007ffc70d76798 [ 274.549819][T11311] [ 274.554667][ T5779] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 274.566612][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 274.573800][ T5783] usb 4-1: config 7 has an invalid interface number: 143 but max is 1 [ 274.582054][ T5783] usb 4-1: config 7 has an invalid interface number: 217 but max is 1 [ 274.590710][ T5783] usb 4-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 274.608488][ T5783] usb 4-1: config 7 has no interface number 0 [ 274.614673][ T5783] usb 4-1: config 7 has no interface number 1 [ 274.620890][ T5783] usb 4-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 274.632173][ T5783] usb 4-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 274.645555][ T5783] usb 4-1: config 7 interface 143 has no altsetting 0 [ 274.655744][ T5783] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 274.665125][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.673233][ T5783] usb 4-1: Product: syz [ 274.721214][ T5783] usb 4-1: Manufacturer: syz [ 274.726869][ T5783] usb 4-1: SerialNumber: syz [ 274.765123][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 274.941913][ T5783] qmi_wwan: probe of 4-1:7.143 failed with error -22 [ 274.958266][ T5783] usb 4-1: USB disconnect, device number 17