last executing test programs: 5.019795091s ago: executing program 2 (id=1823): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0xa0880c, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x5, 0x2e2, &(0x7f0000000900)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802e53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) 4.557455973s ago: executing program 2 (id=1828): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 4.010318517s ago: executing program 2 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}]}, 0x60}}, 0x2) 4.000388797s ago: executing program 0 (id=1832): r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x88001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x1, 0x89, 0x5, 0x1, 0x9}) 3.86772367s ago: executing program 1 (id=1841): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) 3.652045217s ago: executing program 2 (id=1834): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x41e, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="08e1004e"]) 3.590486288s ago: executing program 0 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3000000013000100000000000000b700080000000900000008000000ffffffff080013"], 0x30}], 0x1, 0x0, 0x0, 0x4}, 0x0) 3.590153088s ago: executing program 1 (id=1836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a3100000000b0000000030a01011100000000000000010000000900030073797a3100000000700008800800014000000000000000000c00014000cf3044a10000030c00024000000000000000020c000240000000000000608b0c00014000000000000000050c00014000000000000000600c00014000000000000000060c00014000000000000000080c00024000000000000100000900010073797a310000000014000480080002407c40280f080001"], 0x114}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) 3.134513939s ago: executing program 1 (id=1838): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 3.072175521s ago: executing program 0 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@map=r0, 0x26, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.761836309s ago: executing program 0 (id=1842): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x0, [0x33b, 0x10000, 0x45, 0x6, 0x4000, 0x2], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 2.681802221s ago: executing program 1 (id=1843): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 2.289686951s ago: executing program 1 (id=1845): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) getcwd(0x0, 0x0) 2.160062125s ago: executing program 0 (id=1846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 1.766077285s ago: executing program 1 (id=1847): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 1.406343154s ago: executing program 0 (id=1848): getpgid(0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120109000000c5400d0521013b6f000000010902120001fe0000000904"], 0x0) 1.073493883s ago: executing program 3 (id=1850): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) 869.116388ms ago: executing program 3 (id=1851): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x3, &(0x7f0000000a40)=[{0x1d, '\x00', @data=0xc, 0x400003}, {0x24, '\x00', @st={0x4, [{0x3, @uvalue=0x6}, {0x2, @svalue=0x400000000000009}, {0x2, @uvalue=0x9}, {0x2, @uvalue=0x83}]}, 0x1}, {0x5, '\x00', @st={0x4, [{0x0, @svalue=0x10000000000403}, {0x0, @svalue=0xf}, {0x1, @svalue=0xc55}, {0x1, @uvalue=0xfffffffffffffff7}]}, 0x4}]}) 751.220241ms ago: executing program 2 (id=1852): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 563.168106ms ago: executing program 3 (id=1853): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) 463.280139ms ago: executing program 2 (id=1854): r0 = syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003da377207205feca01550102030109023d0001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x30, @string={0x30, 0x3, "6d29a513a88422d1c62277bcdaa999ebd8d24190f6583b5fce04d8605dd95881a0b9eeef8bdfbcd2bef55be34a5c"}}}, 0x0) 366.046101ms ago: executing program 3 (id=1855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) 166.245236ms ago: executing program 3 (id=1856): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r0}, 0xc) 0s ago: executing program 3 (id=1857): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0xc, {0xffff0001, 0xdf8, 0x9, 0x7ff}, {0x2, 0xb, 0xfffffff7, 0x1ff}, {0xd42, 0x200}}) kernel console output (not intermixed with test programs): on unit 1: -71 (exp. 1). [ 120.322456][ T174] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 120.362615][ T174] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 120.404647][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.421036][ T174] usb 4-1: No streaming interface found for terminal 29. [ 120.461052][ T174] uvcvideo 4-1:63.66: Entity type for entity Output 5 was not initialized! [ 120.495322][ T6329] syz.1.230: attempt to access beyond end of device [ 120.495322][ T6329] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.542295][ T174] usb 4-1: USB disconnect, device number 3 [ 120.594758][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.639051][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.689765][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.716504][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.785266][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 120.820511][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.356324][ T9] usb 3-1: USB disconnect, device number 5 [ 121.643740][ T5780] cgroup: fork rejected by pids controller in /syz3 [ 122.189997][ T28] audit: type=1326 audit(1786164973.504:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 122.333084][ T28] audit: type=1326 audit(1786164973.514:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 122.410388][ T28] audit: type=1326 audit(1786164973.554:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 122.480494][ T28] audit: type=1326 audit(1786164973.554:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 122.861193][ T6394] geneve2: entered promiscuous mode [ 122.876837][ T6394] geneve2: entered allmulticast mode [ 123.074873][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.293888][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.717869][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.149702][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.253854][ T6413] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 124.320624][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 125.193594][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.208986][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.217922][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.231899][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.243047][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.251038][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.371319][ T5785] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.577041][ T5785] usb 1-1: Using ep0 maxpacket: 32 [ 125.621023][ T5785] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 125.658518][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.710463][ T5785] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 125.766244][ T5785] usb 1-1: config 0 has no interface number 1 [ 125.813206][ T5785] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.930915][ T5785] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 125.954674][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.990450][ T5785] usb 1-1: Product: syz [ 126.015093][ T5785] usb 1-1: Manufacturer: syz [ 126.019815][ T5785] usb 1-1: SerialNumber: syz [ 126.074198][ T5785] usb 1-1: config 0 descriptor?? [ 126.143499][ T5785] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 126.423166][ T5785] pwc: Failed to set LED on/off time (-71) [ 126.486738][ T5785] pwc: send_video_command error -71 [ 126.502726][ T5785] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 126.548281][ T5785] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 126.604176][ T5785] usb 1-1: USB disconnect, device number 5 [ 126.642027][ T6446] loop1: detected capacity change from 0 to 1024 [ 126.934941][ T6446] hfsplus: xattr searching failed [ 127.280559][ T51] Bluetooth: hci3: command tx timeout [ 129.111448][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 129.374014][ T51] Bluetooth: hci3: command tx timeout [ 129.750661][ T6499] comedi comedi4: bad chanlist[0]=0xfffffffe chan=65534 range length=2 [ 130.278431][ T6474] loop2: detected capacity change from 0 to 32768 [ 130.463211][ T6474] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 130.777938][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.860542][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.881764][ T6474] XFS (loop2): Ending clean mount [ 130.912808][ T6427] bridge_slave_0: entered allmulticast mode [ 130.939070][ T6427] bridge_slave_0: entered promiscuous mode [ 131.004667][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.034836][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.111958][ T6427] bridge_slave_1: entered allmulticast mode [ 131.165040][ T6427] bridge_slave_1: entered promiscuous mode [ 131.276106][ T5782] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 131.321577][ T11] hsr_slave_0: left promiscuous mode [ 131.451787][ T51] Bluetooth: hci3: command tx timeout [ 131.493747][ T11] hsr_slave_1: left promiscuous mode [ 131.600873][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.650589][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.722717][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.730212][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.871524][ T11] bridge_slave_1: left allmulticast mode [ 131.877366][ T11] bridge_slave_1: left promiscuous mode [ 131.934056][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.073643][ T11] bridge_slave_0: left allmulticast mode [ 132.079405][ T11] bridge_slave_0: left promiscuous mode [ 132.132946][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.565282][ T11] veth1_macvtap: left promiscuous mode [ 132.626136][ T11] veth0_macvtap: left promiscuous mode [ 132.650610][ T11] veth1_vlan: left promiscuous mode [ 132.656401][ T11] veth0_vlan: left promiscuous mode [ 133.231566][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238751][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.239661][ T6564] loop2: detected capacity change from 0 to 1024 [ 133.262226][ T6566] loop1: detected capacity change from 0 to 64 [ 133.331375][ T6564] EXT4-fs: Ignoring removed bh option [ 133.445639][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.534359][ T51] Bluetooth: hci3: command tx timeout [ 133.560758][ T6564] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.816132][ T6564] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.314: Freeing blocks not in datazone - block = 0, count = 16 [ 133.915568][ T6564] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.314: bg 0: block 112: padding at end of block bitmap is not set [ 133.983517][ T6564] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 134.153648][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.595899][ T11] team0 (unregistering): Port device team_slave_1 removed [ 135.659233][ T11] team0 (unregistering): Port device team_slave_0 removed [ 135.717089][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.798728][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.356738][ T11] bond0 (unregistering): Released all slaves [ 136.567634][ T6573] netlink: 'syz.0.318': attribute type 21 has an invalid length. [ 136.593303][ T6573] netlink: 128 bytes leftover after parsing attributes in process `syz.0.318'. [ 136.621275][ T6573] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 136.634361][ T6573] netlink: 'syz.0.318': attribute type 5 has an invalid length. [ 136.645237][ T6573] netlink: 3 bytes leftover after parsing attributes in process `syz.0.318'. [ 136.727620][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.798481][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.987090][ T6427] team0: Port device team_slave_0 added [ 137.006475][ T6427] team0: Port device team_slave_1 added [ 137.174473][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.242549][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.350821][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.410076][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.449270][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.589202][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.018227][ T6427] hsr_slave_0: entered promiscuous mode [ 138.058614][ T6427] hsr_slave_1: entered promiscuous mode [ 138.220476][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.250424][ T6427] Cannot create hsr debugfs directory [ 138.891273][ T6629] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 139.912021][ T6619] loop1: detected capacity change from 0 to 32768 [ 140.200963][ T6621] loop2: detected capacity change from 0 to 32768 [ 140.275152][ T6619] find_entry called with index = 0 [ 140.325098][ T6621] [ 140.325098][ T6621] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.325098][ T6621] [ 140.344222][ T6619] read_mapping_page failed! [ 140.349244][ T6619] ERROR: (device loop1): txCommit: [ 140.349244][ T6619] [ 140.511779][ T6621] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 140.511779][ T6621] [ 140.582728][ T6621] ERROR: (device loop2): jfs_unlink: [ 140.582728][ T6621] [ 140.755092][ T6647] loop0: detected capacity change from 0 to 256 [ 140.964060][ T6427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.990705][ T5782] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 140.990705][ T5782] [ 141.050513][ T49] ERROR: (device loop2): diWrite: ixpxd invalid [ 141.050513][ T49] [ 141.052878][ T6647] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.059969][ T49] ERROR: (device loop2): txCommit: [ 141.059969][ T49] [ 141.105143][ T6427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.163092][ T49] jfs_write_inode: jfs_commit_inode failed! [ 141.184598][ T5782] [ 141.184598][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.184598][ T5782] [ 141.212457][ T5782] [ 141.212457][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.212457][ T5782] [ 141.223253][ T6647] FAT-fs (loop0): Filesystem has been set read-only [ 141.230169][ T6647] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.273442][ T6427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.330583][ T6647] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.388002][ T6427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.394933][ T28] audit: type=1800 audit(1786164992.714:6): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.343" name="file1" dev="loop0" ino=1048593 res=0 errno=0 [ 141.462414][ T6647] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 141.979536][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.991461][ T6659] loop0: detected capacity change from 0 to 256 [ 142.047684][ T6659] exfat: Deprecated parameter 'utf8' [ 142.076979][ T6659] exfat: Deprecated parameter 'utf8' [ 142.162483][ T6659] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 142.247675][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.385398][ T6659] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 142.399366][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.406744][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.479196][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.486700][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.394999][ T6682] loop1: detected capacity change from 0 to 164 [ 143.557458][ T6682] ISOFS: unable to read i-node block [ 143.627847][ T6682] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 144.185553][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.513101][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.357'. [ 144.525903][ T28] audit: type=1326 audit(1786164995.854:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 144.773717][ T28] audit: type=1326 audit(1786164995.854:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 144.836733][ T6698] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 144.908284][ T28] audit: type=1326 audit(1786164996.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 144.953607][ T6698] bond1 (unregistering): Released all slaves [ 145.025607][ T28] audit: type=1326 audit(1786164996.044:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 145.120200][ T28] audit: type=1326 audit(1786164996.074:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 145.250601][ T6427] veth0_vlan: entered promiscuous mode [ 145.270436][ T28] audit: type=1326 audit(1786164996.074:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 145.358645][ T6427] veth1_vlan: entered promiscuous mode [ 145.506214][ T28] audit: type=1326 audit(1786164996.074:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 145.540024][ T6427] veth0_macvtap: entered promiscuous mode [ 145.648069][ T6427] veth1_macvtap: entered promiscuous mode [ 145.660355][ T28] audit: type=1326 audit(1786164996.074:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 145.780380][ T28] audit: type=1326 audit(1786164996.074:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.1.356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 145.835378][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.887273][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.960983][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.013090][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.090508][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.150508][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.195912][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.244870][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.280316][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.329029][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.380412][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.480324][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.500315][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.537864][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.563585][ T6728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.571409][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 146.578852][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 146.586208][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 146.689873][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.750696][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.759479][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.860345][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.399054][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.464381][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.734370][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.791500][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.125787][ T6755] [U] ÿ [ 148.677980][ T6766] loop1: detected capacity change from 0 to 2048 [ 148.823699][ T6766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.140640][ T6796] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.581215][ T6829] xt_NFQUEUE: number of total queues is 0 [ 151.777922][ T6820] loop2: detected capacity change from 0 to 8192 [ 151.895349][ T6820] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.946106][ T6820] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 151.990813][ T6820] REISERFS (device loop2): using ordered data mode [ 151.998267][ T6820] reiserfs: using flush barriers [ 152.070605][ T6820] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.166833][ T6820] REISERFS (device loop2): checking transaction log (loop2) [ 152.252697][ T6820] REISERFS (device loop2): Using r5 hash to sort names [ 152.335441][ T6820] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 152.651823][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 152.687014][ T6848] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.163750][ T6859] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 153.683371][ T6871] netlink: 164 bytes leftover after parsing attributes in process `syz.0.420'. [ 154.703394][ T6896] warning: `syz.0.432' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.810458][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.036199][ T9] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 155.088859][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 155.156538][ T9] usb 3-1: Product: syz [ 155.191844][ T9] usb 3-1: Manufacturer: syz [ 155.257448][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 155.540440][ T5835] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 155.773727][ T5835] usb 1-1: not running at top speed; connect to a high speed hub [ 155.797738][ T5835] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 155.816634][ T5835] usb 1-1: config 11 has no interface number 0 [ 155.831394][ T5835] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 155.863936][ T5835] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 155.895664][ T9] usb 3-1: USB disconnect, device number 6 [ 155.935219][ T5835] usb 1-1: config 11 interface 95 has no altsetting 0 [ 155.944307][ T5785] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.966557][ T5835] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 156.008189][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 156.035488][ T5835] usb 1-1: Manufacturer: syz [ 156.073997][ T6906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.156945][ T5785] usb 4-1: Using ep0 maxpacket: 16 [ 156.186767][ T5785] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 156.214102][ T5785] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.246242][ T5785] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.265409][ T5785] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.280224][ T5785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 156.289961][ T5785] usb 4-1: config 0 has no interface number 0 [ 156.330712][ T5785] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 156.356601][ T5835] usb 1-1: USB disconnect, device number 6 [ 156.397583][ T5785] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 156.439790][ T5785] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.504169][ T5785] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.572551][ T5785] usb 4-1: config 0 interface 125 has no altsetting 0 [ 156.605968][ T5785] usb 4-1: config 0 interface 125 has no altsetting 2 [ 156.625949][ T6921] loop1: detected capacity change from 0 to 16 [ 156.671498][ T5785] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 156.720123][ T6921] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.730524][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.764555][ T5785] usb 4-1: Product: syz [ 156.768819][ T5785] usb 4-1: Manufacturer: syz [ 156.802344][ T5785] usb 4-1: SerialNumber: syz [ 156.828314][ T5785] usb 4-1: config 0 descriptor?? [ 156.855162][ T5785] usb 4-1: selecting invalid altsetting 2 [ 156.855337][ T6921] syz.1.444: attempt to access beyond end of device [ 156.855337][ T6921] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 156.924520][ T6921] erofs: (device loop1): z_erofs_readahead: readahead error at folio 5 @ nid 89 [ 156.975979][ T6921] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 157.003454][ T6921] syz.1.444: attempt to access beyond end of device [ 157.003454][ T6921] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 157.084058][ T6921] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 157.137825][ T28] audit: type=1800 audit(1786165008.464:16): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.444" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 157.237417][ T6921] syz.1.444 (6921) used greatest stack depth: 20144 bytes left [ 157.282575][ C0] usb 4-1: async_complete: urb error -71 [ 157.288611][ C0] usb 4-1: async_complete: urb error -71 [ 157.294421][ C0] usb 4-1: async_complete: urb error -71 [ 157.330475][ T5785] get_1284_register: usb error -71 [ 157.379708][ T5785] usb 4-1: USB disconnect, device number 4 [ 157.455839][ T6929] loop1: detected capacity change from 0 to 64 [ 159.376181][ T6965] loop1: detected capacity change from 0 to 1024 [ 159.493071][ T6965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.559493][ T6970] geneve2: entered promiscuous mode [ 159.610577][ T6970] geneve2: entered allmulticast mode [ 159.741127][ T6965] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 159.771543][ T6973] loop3: detected capacity change from 0 to 1024 [ 159.859191][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.964602][ T6977] loop0: detected capacity change from 0 to 1024 [ 159.985819][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.061627][ T6973] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.469: empty directory 'file1' has too many links (111) [ 160.406740][ T6979] xt_TCPMSS: Only works on TCP SYN packets [ 160.415050][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.427403][ T49] hfsplus: b-tree write err: -5, ino 25 [ 160.629549][ T49] hfsplus: b-tree write err: -5, ino 4 [ 160.682291][ T49] hfsplus: b-tree write err: -5, ino 2 [ 160.893211][ T6981] loop1: detected capacity change from 0 to 4096 [ 160.932862][ T6981] EXT4-fs: inline encryption not supported [ 160.989859][ T6981] EXT4-fs: inline encryption not supported [ 161.040948][ T6981] ext4: Unknown parameter 'fowner' [ 161.057669][ T6963] loop2: detected capacity change from 0 to 32768 [ 161.097219][ T6981] exfat: Deprecated parameter 'debug' [ 161.161172][ T6981] exFAT-fs (loop1): invalid boot record signature [ 161.174664][ T6963] JBD2: Ignoring recovery information on journal [ 161.220744][ T6981] exFAT-fs (loop1): failed to read boot sector [ 161.230078][ T6963] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 161.321696][ T6963] JBD2: bad block at offset 32 [ 161.340588][ T6981] exFAT-fs (loop1): failed to recognize exfat type [ 161.375416][ T6963] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 162.022799][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 163.007443][ T7009] loop3: detected capacity change from 0 to 8192 [ 163.433473][ T7026] loop0: detected capacity change from 0 to 512 [ 163.481617][ T7026] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.623018][ T7026] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.493: corrupted in-inode xattr: invalid ea_ino [ 163.770391][ T7026] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.493: couldn't read orphan inode 15 (err -117) [ 163.844623][ T7026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.269412][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.398002][ T28] audit: type=1326 audit(1786165015.704:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8759e0d9 code=0x7ffc0000 [ 164.570384][ T28] audit: type=1326 audit(1786165015.774:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7efc8759e0d9 code=0x7ffc0000 [ 164.655713][ T7044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.764892][ T28] audit: type=1326 audit(1786165015.774:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8759e0d9 code=0x7ffc0000 [ 164.850340][ T28] audit: type=1326 audit(1786165015.774:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8759e0d9 code=0x7ffc0000 [ 165.506439][ T7063] loop2: detected capacity change from 0 to 256 [ 165.758602][ T7065] loop1: detected capacity change from 0 to 1024 [ 166.127656][ T11] hfsplus: b-tree write err: -5, ino 25 [ 166.147447][ T11] hfsplus: b-tree write err: -5, ino 4 [ 166.160830][ T11] hfsplus: b-tree write err: -5, ino 2 [ 166.381588][ T7051] loop3: detected capacity change from 0 to 32768 [ 166.441718][ T7051] JBD2: Ignoring recovery information on journal [ 166.462789][ T7051] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 166.556564][ T7051] JBD2: bad block at offset 32 [ 166.599735][ T7051] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 166.671395][ T7080] binfmt_misc: register: failed to install interpreter file ./file0 [ 167.048871][ T6427] ocfs2: Unmounting device (7,3) on (node local) [ 167.228939][ T7090] netlink: 'syz.3.521': attribute type 2 has an invalid length. [ 167.448298][ T28] audit: type=1326 audit(1786165018.774:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 167.570344][ T28] audit: type=1326 audit(1786165018.774:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 167.725951][ T28] audit: type=1326 audit(1786165018.824:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 167.853468][ T28] audit: type=1326 audit(1786165018.834:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7b99e0d9 code=0x7ffc0000 [ 168.556864][ T7124] loop0: detected capacity change from 0 to 736 [ 168.730457][ T5835] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.951134][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 168.988037][ T5835] usb 3-1: config index 0 descriptor too short (expected 64919, got 151) [ 169.031400][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.121482][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.187754][ T5835] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.210387][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.256850][ T5835] usb 3-1: Product: syz [ 169.281559][ T5835] usb 3-1: Manufacturer: syz [ 169.305443][ T5835] usb 3-1: SerialNumber: syz [ 169.426420][ T7135] bond1: option downdelay: invalid value (18446744073661448198) [ 169.434424][ T7135] bond1: option downdelay: allowed values 0 - 2147483647 [ 169.446853][ T7135] bond1 (unregistering): Released all slaves [ 169.796609][ T5835] usb 3-1: 0:2 : does not exist [ 169.858411][ T5835] usb 3-1: USB disconnect, device number 7 [ 169.910450][ T5773] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.190558][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 170.251604][ T7147] loop1: detected capacity change from 0 to 2048 [ 170.278306][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.290321][ T5773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.325877][ T5773] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 170.352052][ T7147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.362621][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.411177][ T5773] usb 4-1: Product: syz [ 170.416477][ T5773] usb 4-1: Manufacturer: syz [ 170.443426][ T5773] usb 4-1: SerialNumber: syz [ 170.472510][ T5773] usb 4-1: config 0 descriptor?? [ 170.525159][ T5773] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 170.673906][ T7155] loop0: detected capacity change from 0 to 512 [ 170.773994][ T5773] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 170.839865][ T7155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.852944][ T7155] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.919674][ T5773] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 170.961947][ T5773] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 170.973003][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.272708][ T5773] usb 4-1: USB disconnect, device number 5 [ 171.664040][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 171.960810][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 172.024508][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 172.501591][ T5835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.700952][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 172.722489][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 172.766391][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.791840][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.822530][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 172.839441][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 172.850123][ T5835] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 172.888767][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.905617][ T5835] usb 2-1: config 0 descriptor?? [ 172.933383][ T7185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.091008][ T28] audit: type=1400 audit(1786165024.414:25): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7204 comm="syz.3.574" [ 173.608916][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 173.626602][ T7209] loop0: detected capacity change from 0 to 1024 [ 173.659005][ T174] usb 2-1: USB disconnect, device number 6 [ 173.874177][ T7209] hfsplus: invalid extended attribute record [ 174.345403][ T7216] loop2: detected capacity change from 0 to 256 [ 174.655301][ T7216] FAT-fs (loop2): Directory bread(block 64) failed [ 174.702251][ T7216] FAT-fs (loop2): Directory bread(block 65) failed [ 174.742783][ T7216] FAT-fs (loop2): Directory bread(block 66) failed [ 174.802545][ T7216] FAT-fs (loop2): Directory bread(block 67) failed [ 174.842812][ T7216] FAT-fs (loop2): Directory bread(block 68) failed [ 174.849462][ T7216] FAT-fs (loop2): Directory bread(block 69) failed [ 174.933089][ T7216] FAT-fs (loop2): Directory bread(block 70) failed [ 174.939793][ T7216] FAT-fs (loop2): Directory bread(block 71) failed [ 175.027869][ T7216] FAT-fs (loop2): Directory bread(block 72) failed [ 175.080489][ T7216] FAT-fs (loop2): Directory bread(block 73) failed [ 175.674882][ T7236] gretap1: entered allmulticast mode [ 176.268491][ T7250] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.597'. [ 176.310414][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 176.678419][ T7258] loop3: detected capacity change from 0 to 512 [ 176.767120][ T7258] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.843856][ T7264] netlink: 660 bytes leftover after parsing attributes in process `syz.2.604'. [ 176.871066][ T7258] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.601: bad orphan inode 13 [ 176.952215][ T7258] ext4_test_bit(bit=12, block=18) = 1 [ 176.957764][ T7258] is_bad_inode(inode)=0 [ 177.087739][ T7258] NEXT_ORPHAN(inode)=0 [ 177.103010][ T7258] max_ino=32 [ 177.106369][ T7258] i_nlink=1 [ 177.121638][ T7258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 177.342339][ T7258] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.426734][ T7258] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.601: bg 0: block 248: padding at end of block bitmap is not set [ 177.512180][ T7258] Quota error (device loop3): write_blk: dquota write failed [ 177.547974][ T7258] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 177.578827][ T7258] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.601: Failed to acquire dquot type 1 [ 177.838420][ T7279] loop0: detected capacity change from 0 to 16 [ 177.861781][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 177.902676][ T7279] erofs: (device loop0): mounted with root inode @ nid 36. [ 178.241207][ T5835] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 178.476356][ T5835] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 178.491955][ T5835] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 178.526874][ T5835] usb 3-1: config 0 has no interface number 0 [ 178.541443][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 178.547634][ T5835] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 178.570356][ T7291] netlink: 31 bytes leftover after parsing attributes in process `syz.3.616'. [ 178.579304][ T7291] netlink: 'syz.3.616': attribute type 3 has an invalid length. [ 178.594672][ T5835] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.618554][ T5835] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 178.620545][ T7291] netlink: 'syz.3.616': attribute type 2 has an invalid length. [ 178.645889][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.665612][ T7291] netlink: 31 bytes leftover after parsing attributes in process `syz.3.616'. [ 178.669563][ T5835] usb 3-1: config 0 descriptor?? [ 179.050973][ T28] audit: type=1326 audit(1786165030.384:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 179.212547][ T5835] usb 3-1: USB disconnect, device number 8 [ 179.254699][ T28] audit: type=1326 audit(1786165030.414:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 179.426716][ T28] audit: type=1326 audit(1786165030.414:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 179.578632][ T28] audit: type=1326 audit(1786165030.414:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 179.681043][ T28] audit: type=1326 audit(1786165030.434:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 179.861015][ T28] audit: type=1326 audit(1786165030.434:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 179.960785][ T28] audit: type=1326 audit(1786165030.434:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 180.145766][ T28] audit: type=1326 audit(1786165030.434:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 180.275075][ T28] audit: type=1326 audit(1786165030.434:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 180.440467][ T28] audit: type=1326 audit(1786165031.474:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 181.990444][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.212376][ T9] usb 1-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 182.249181][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.290900][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 182.346928][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.369303][ T9] usb 1-1: Product: syz [ 182.379442][ T9] usb 1-1: Manufacturer: syz [ 182.389595][ T9] usb 1-1: SerialNumber: syz [ 182.655775][ T9] usb 1-1: 0:1 : does not exist [ 182.678272][ T9] usb 1-1: unit 6 not found! [ 182.703521][ T9] usb 1-1: unit 2 not found! [ 182.763519][ T9] usb 1-1: USB disconnect, device number 7 [ 182.859546][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.900898][ T7348] loop3: detected capacity change from 0 to 32768 [ 183.109137][ T7348] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 183.109137][ T7348] [ 183.169468][ T7348] ERROR: (device loop3): remounting filesystem as read-only [ 183.282410][ T7348] ialloc: diAlloc returned -5! [ 183.547595][ T7372] netlink: 'syz.1.656': attribute type 38 has an invalid length. [ 183.655185][ T7376] xt_addrtype: ipv6 does not support BROADCAST matching [ 184.821969][ T7395] loop3: detected capacity change from 0 to 4096 [ 184.863876][ T7395] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.992096][ T7395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.157597][ T7395] EXT4-fs: Cannot change journaled quota options when quota turned on [ 185.262593][ T7407] loop2: detected capacity change from 0 to 1764 [ 185.392203][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.418418][ T7407] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 185.561410][ T7411] x_tables: duplicate underflow at hook 4 [ 185.671348][ T7413] No such timeout policy "syz0" [ 185.968976][ T7419] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 186.971167][ T7447] xt_hashlimit: size too large, truncated to 1048576 [ 186.990569][ T7447] xt_hashlimit: max too large, truncated to 1048576 [ 187.308629][ T7455] loop2: detected capacity change from 0 to 512 [ 187.351458][ T7455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.431067][ T7457] Illegal XDP return value 4294967274 on prog (id 36) dev N/A, expect packet loss! [ 187.514525][ T7455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.541192][ T7455] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.899455][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.575653][ T7450] loop0: detected capacity change from 0 to 32768 [ 188.607495][ T7450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.693 (7450) [ 188.761463][ T7450] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.830457][ T7450] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 188.850384][ T7450] BTRFS info (device loop0): using free space tree [ 189.144136][ T7494] ipt_rpfilter: unknown options [ 189.357255][ T7450] BTRFS info (device loop0): enabling ssd optimizations [ 189.400575][ T7450] BTRFS info (device loop0): auto enabling async discard [ 189.931481][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.407805][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 190.450965][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 190.554842][ T7508] vlan0: entered promiscuous mode [ 191.261864][ T7516] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 191.345347][ T7516] macvlan1: entered allmulticast mode [ 191.422470][ T7516] veth1_vlan: entered allmulticast mode [ 191.514231][ T7516] team0: Port device macvlan1 added [ 191.918488][ T7528] loop1: detected capacity change from 0 to 512 [ 191.961213][ T7528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.002147][ T7528] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 192.090344][ T7528] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 192.124999][ T7528] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 192.223784][ T7528] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 192.322857][ T7528] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000] [ 192.349699][ T7528] EXT4-fs (loop1): failed to initialize system zone (-117) [ 192.378611][ T7528] EXT4-fs (loop1): mount failed [ 192.621923][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 193.258790][ T7550] loop2: detected capacity change from 0 to 2048 [ 193.344419][ T7547] nvme_fabrics: missing parameter 'transport=%s' [ 193.368946][ T7550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.460596][ T7550] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.639167][ T7550] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.727: bg 0: block 345: padding at end of block bitmap is not set [ 193.904383][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.072429][ T7536] loop3: detected capacity change from 0 to 32768 [ 194.176096][ T7536] JBD2: Ignoring recovery information on journal [ 194.257502][ T7563] xt_l2tp: v2 doesn't support IP mode [ 194.271719][ T7566] loop2: detected capacity change from 0 to 128 [ 194.288951][ T7562] bridge_slave_0: left allmulticast mode [ 194.351859][ T7536] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 194.367772][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.380058][ T7566] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 194.486618][ T7566] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 194.531809][ T7562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 194.618852][ T7566] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.733: checksumming directory block 0 [ 194.644657][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.651469][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.885294][ T7536] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 194.932295][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.030657][ T7536] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 195.110597][ T7536] OCFS2: Returning error to the calling process. [ 195.131759][ T7536] (syz.3.724,7536,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 195.199058][ T7536] (syz.3.724,7536,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 195.254826][ T7536] (syz.3.724,7536,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 195.327455][ T7536] (syz.3.724,7536,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 195.382469][ T7536] (syz.3.724,7536,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 195.425837][ T7536] (syz.3.724,7536,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 195.520749][ T7536] (syz.3.724,7536,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 195.563829][ T7536] (syz.3.724,7536,0):ocfs2_mknod:385 ERROR: status = -5 [ 195.611889][ T7536] (syz.3.724,7536,0):ocfs2_mknod:502 ERROR: status = -5 [ 195.619382][ T7536] (syz.3.724,7536,0):ocfs2_mkdir:659 ERROR: status = -5 [ 195.721241][ T7582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.728704][ T7582] IPv6: NLM_F_CREATE should be set when creating new route [ 195.736101][ T7582] IPv6: NLM_F_CREATE should be set when creating new route [ 195.835461][ T7536] syz.3.724 (7536) used greatest stack depth: 18840 bytes left [ 195.953299][ T6427] ocfs2: Unmounting device (7,3) on (node local) [ 196.133183][ T7591] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.896233][ T7608] loop3: detected capacity change from 0 to 512 [ 197.155247][ T7608] __quota_error: 3 callbacks suppressed [ 197.155267][ T7608] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 197.271327][ T7608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 197.310825][ T7608] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.745: Failed to acquire dquot type 1 [ 197.400691][ T7608] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 197.455708][ T7608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 197.519989][ T7608] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.745: Failed to acquire dquot type 1 [ 197.587541][ T7621] netlink: 'syz.0.759': attribute type 21 has an invalid length. [ 197.597577][ T7608] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.745: bg 0: block 248: padding at end of block bitmap is not set [ 197.626879][ T7621] netlink: 128 bytes leftover after parsing attributes in process `syz.0.759'. [ 197.684118][ T7621] netlink: 'syz.0.759': attribute type 5 has an invalid length. [ 197.700040][ T7608] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 197.740453][ T7621] netlink: 'syz.0.759': attribute type 6 has an invalid length. [ 197.751774][ T7608] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 197.785901][ T7621] netlink: 3 bytes leftover after parsing attributes in process `syz.0.759'. [ 197.822537][ T7608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 197.875432][ T7608] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.745: Failed to acquire dquot type 1 [ 197.932874][ T7608] EXT4-fs (loop3): 1 orphan inode deleted [ 197.983201][ T7608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.075182][ T7608] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.295431][ T7608] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 198.552968][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.862460][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.768'. [ 200.319845][ T7675] loop1: detected capacity change from 0 to 256 [ 201.652275][ T28] audit: type=1400 audit(1786165052.984:39): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=7708 comm="syz.2.802" [ 201.892674][ T7711] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 201.965280][ T7711] macvlan1: entered allmulticast mode [ 202.053855][ T7717] loop2: detected capacity change from 0 to 128 [ 202.064760][ T7711] veth1_vlan: entered allmulticast mode [ 202.127098][ T7711] team0: Port device macvlan1 added [ 203.711285][ T7750] xt_hashlimit: size too large, truncated to 1048576 [ 203.771011][ T7750] xt_hashlimit: invalid rate [ 204.920006][ T7774] netlink: 'syz.3.832': attribute type 10 has an invalid length. [ 204.961678][ T7774] macvlan1: entered allmulticast mode [ 205.022170][ T7774] veth1_vlan: entered allmulticast mode [ 205.083479][ T7774] team0: Port device macvlan1 added [ 206.192335][ T7794] SET target dimension over the limit! [ 206.650834][ T7802] netlink: 'syz.2.848': attribute type 6 has an invalid length. [ 206.978827][ T7780] loop0: detected capacity change from 0 to 32768 [ 207.084904][ T7780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.836 (7780) [ 207.210501][ T7780] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.250172][ T7780] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 207.314306][ T7812] overlayfs: conflicting options: nfs_export=on,index=off [ 207.352711][ T7780] BTRFS info (device loop0): use zlib compression, level 3 [ 207.391740][ T7780] BTRFS info (device loop0): turning on sync discard [ 207.398518][ T7780] BTRFS info (device loop0): using free space tree [ 207.716945][ T7829] dlm: non-version read from control device 36 [ 207.790504][ T7780] BTRFS info (device loop0): enabling ssd optimizations [ 208.091230][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.203162][ T7840] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 208.546808][ T7842] loop2: detected capacity change from 0 to 4096 [ 208.625703][ T7842] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.752170][ T7842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.943907][ T7842] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 209.292243][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.421390][ T7881] netlink: 'syz.2.878': attribute type 22 has an invalid length. [ 210.851892][ T7885] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 210.944735][ T7885] bond1 (unregistering): Released all slaves [ 211.815647][ T7904] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 211.847094][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 211.981625][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'. [ 212.086215][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 212.092951][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 212.099034][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 213.028423][ T7926] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.083034][ T7926] bond1 (unregistering): Released all slaves [ 213.814047][ T7945] netlink: 372 bytes leftover after parsing attributes in process `syz.3.908'. [ 214.438087][ T7958] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 214.497054][ T7958] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.915'. [ 214.517443][ T7961] loop2: detected capacity change from 0 to 64 [ 214.609339][ T7961] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 215.144243][ T7970] loop2: detected capacity change from 0 to 736 [ 215.181779][ T7972] nft_compat: unsupported protocol 1 [ 215.764913][ T7980] xt_bpf: check failed: parse error [ 215.780465][ T1194] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 216.040485][ T1194] usb 2-1: Using ep0 maxpacket: 32 [ 216.051622][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.148130][ T7988] cgroup: Invalid name [ 216.280022][ T7989] loop3: detected capacity change from 0 to 4096 [ 216.300315][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.330290][ T1194] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.339585][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.373570][ T7989] EXT4-fs (loop3): Test dummy encryption mode enabled [ 216.385060][ T1194] usb 2-1: config 0 descriptor?? [ 216.527888][ T7997] loop2: detected capacity change from 0 to 512 [ 216.555426][ T7989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.555652][ T1194] hub 2-1:0.0: USB hub found [ 216.601908][ T7997] EXT4-fs: Ignoring removed i_version option [ 216.669634][ T7989] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 216.719608][ T7997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.791056][ T1194] hub 2-1:0.0: 3 ports detected [ 216.844280][ T7997] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.912387][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.020490][ T7997] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:335: inode #15: comm syz.2.932: verity file corrupted; can't find descriptor [ 217.020575][ T1194] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 217.128386][ T7997] EXT4-fs (loop2): Remounting filesystem read-only [ 217.159459][ T7997] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 217.285725][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.340602][ T1194] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 217.423421][ T1194] usbhid 2-1:0.0: can't add hid device: -71 [ 217.429585][ T1194] usbhid: probe of 2-1:0.0 failed with error -71 [ 217.502568][ T174] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 217.643549][ T1194] usb 2-1: USB disconnect, device number 7 [ 217.707709][ T174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.729154][ T174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.760313][ T174] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.813249][ T174] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 217.860030][ T174] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 217.901048][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.949945][ T174] usb 1-1: Product: syz [ 217.983020][ T174] usb 1-1: Manufacturer: syz [ 217.987867][ T174] usb 1-1: SerialNumber: syz [ 218.241175][ T8021] netlink: 48 bytes leftover after parsing attributes in process `syz.2.943'. [ 218.311305][ T174] usb 1-1: USB disconnect, device number 8 [ 218.409356][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.161764][ T8038] netlink: 'syz.2.952': attribute type 5 has an invalid length. [ 219.488300][ T8046] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 220.143555][ T28] audit: type=1326 audit(1786165071.474:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc8759e0d9 code=0x0 [ 220.443776][ T8065] loop0: detected capacity change from 0 to 128 [ 220.519473][ T8065] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 220.554617][ T8071] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 220.576004][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.732096][ T8065] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 187 marked as free, partition length is 32) [ 220.773569][ T8073] 0x000000000000-0x000000020000 : "" [ 220.878587][ T8073] ftl_cs: FTL header not found. [ 221.558978][ T8083] loop0: detected capacity change from 0 to 8192 [ 222.577761][ T8113] loop0: detected capacity change from 0 to 1024 [ 222.849607][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.991'. [ 223.725507][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 224.097553][ T8153] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36465 - 0 [ 224.146262][ T8153] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36465 - 0 [ 224.192382][ T8153] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36465 - 0 [ 224.220310][ T8153] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36465 - 0 [ 224.290999][ T8153] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 47042 - 0 [ 224.330382][ T8153] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 47042 - 0 [ 224.339262][ T8153] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 47042 - 0 [ 224.382974][ T8153] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 47042 - 0 [ 224.409622][ T8153] geneve3: entered promiscuous mode [ 224.449325][ T8153] geneve3: entered allmulticast mode [ 224.574276][ T8161] xt_bpf: check failed: parse error [ 226.091470][ T28] audit: type=1326 audit(1786165077.424:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.1027" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 226.091529][ T28] audit: type=1326 audit(1786165077.424:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.1027" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 226.151610][ T28] audit: type=1326 audit(1786165077.474:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.1027" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 226.151666][ T28] audit: type=1326 audit(1786165077.474:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.1027" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 226.208163][ T28] audit: type=1326 audit(1786165077.474:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.1027" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 226.317726][ T8196] netlink: 'syz.0.1029': attribute type 2 has an invalid length. [ 226.317752][ T8196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1029'. [ 226.542736][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.826267][ T8202] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 226.826399][ T8202] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 227.059554][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 227.270834][ T8213] 0x000000000000-0x000000020000 : "" [ 227.298748][ T8213] ftl_cs: FTL header not found. [ 227.934986][ T8222] loop2: detected capacity change from 0 to 16 [ 227.983579][ T8222] erofs: (device loop2): mounted with root inode @ nid 36. [ 228.081343][ T8222] syz.2.1041: attempt to access beyond end of device [ 228.081343][ T8222] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 228.142518][ T8222] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -21 in[55, 4041] out[4096] [ 228.200642][ T28] audit: type=1800 audit(1786165079.534:46): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1041" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 228.544176][ T8231] nvme_fabrics: missing parameter 'traddr=%s' [ 230.302309][ T8276] loop0: detected capacity change from 0 to 4096 [ 230.355215][ T8276] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 230.532576][ T8276] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 230.861375][ T8289] openvswitch: netlink: Actions may not be safe on all matching packets [ 231.972323][ T8303] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 232.275926][ T8281] loop1: detected capacity change from 0 to 32768 [ 232.390997][ T8281] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.606850][ T8281] XFS (loop1): Ending clean mount [ 232.981085][ T5772] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.453183][ T8336] loop2: detected capacity change from 0 to 64 [ 235.197995][ T8367] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 235.646063][ T8379] loop1: detected capacity change from 0 to 256 [ 235.736013][ T8379] exfat: Deprecated parameter 'namecase' [ 235.763714][ T8382] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1110'. [ 235.830157][ T8379] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 235.929986][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.155123][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 236.193098][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 236.230393][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.268744][ T9] usb 3-1: config 0 descriptor?? [ 236.315335][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 236.340707][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1115'. [ 236.379213][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 236.458895][ T28] audit: type=1326 audit(1786165087.784:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 236.580319][ T28] audit: type=1326 audit(1786165087.814:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 236.740439][ T28] audit: type=1326 audit(1786165087.824:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 236.791935][ T9] gspca_sunplus: reg_w_riv err -71 [ 236.797524][ T9] sunplus: probe of 3-1:0.0 failed with error -71 [ 236.860943][ T8396] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 236.868771][ T8396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1117'. [ 236.892633][ T9] usb 3-1: USB disconnect, device number 9 [ 236.903606][ T8400] loop0: detected capacity change from 0 to 16 [ 236.926832][ T28] audit: type=1326 audit(1786165087.824:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 236.953204][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 236.971011][ T8400] erofs: (device loop0): mounted with root inode @ nid 36. [ 237.056334][ T8400] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 237.091097][ T8400] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 237.128679][ T8400] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 237.168432][ T28] audit: type=1326 audit(1786165087.824:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37619e0d9 code=0x7ffc0000 [ 237.192620][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.210118][ T8400] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 237.230951][ T8400] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 237.252459][ T8400] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 237.280632][ T8400] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 237.303716][ T8400] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 237.356556][ T8400] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 237.390627][ T28] audit: type=1800 audit(1786165088.724:52): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1119" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 237.476766][ T28] audit: type=1326 audit(1786165088.794:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.1.1121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 237.634003][ T28] audit: type=1326 audit(1786165088.794:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.1.1121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 237.658176][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.880348][ T28] audit: type=1326 audit(1786165088.844:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.1.1121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 237.935111][ T28] audit: type=1326 audit(1786165088.844:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.1.1121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 238.782339][ T8431] loop1: detected capacity change from 0 to 16 [ 238.933486][ T8431] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.176442][ T8431] syz.1.1133: attempt to access beyond end of device [ 239.176442][ T8431] loop1: rw=524288, sector=74, nr_sectors = 2096 limit=16 [ 239.251539][ T8431] syz.1.1133: attempt to access beyond end of device [ 239.251539][ T8431] loop1: rw=524288, sector=2170, nr_sectors = 464 limit=16 [ 239.773821][ T8450] loop1: detected capacity change from 0 to 256 [ 240.090415][ T8455] loop3: detected capacity change from 0 to 512 [ 240.202439][ T8455] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 240.261737][ T8455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 240.270032][ T8455] System zones: 0-1, 15-15, 18-18, 34-34 [ 240.371252][ T8455] EXT4-fs (loop3): orphan cleanup on readonly fs [ 240.377975][ T8455] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 240.520540][ T8455] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 240.546949][ T8455] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1145: bad orphan inode 16 [ 240.636288][ T8464] Cannot find del_set index 2 as target [ 240.650673][ T8455] ext4_test_bit(bit=15, block=18) = 1 [ 240.656145][ T8455] is_bad_inode(inode)=0 [ 240.715753][ T8455] NEXT_ORPHAN(inode)=0 [ 240.719918][ T8455] max_ino=32 [ 240.755678][ T8455] i_nlink=2 [ 240.793346][ T8455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.021932][ T8455] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 241.198931][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.208252][ T5785] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 241.232666][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 241.402492][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.414246][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.436839][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.497765][ T5785] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 241.509679][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.539399][ T5785] usb 3-1: Product: syz [ 241.553986][ T5785] usb 3-1: Manufacturer: syz [ 241.558662][ T5785] usb 3-1: SerialNumber: syz [ 241.592750][ T5785] usb 3-1: config 0 descriptor?? [ 241.650362][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 241.842622][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.876295][ T5835] usb 3-1: USB disconnect, device number 10 [ 241.891758][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.928275][ T8460] loop1: detected capacity change from 0 to 32768 [ 241.965778][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.995263][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.048168][ T9] usb 4-1: SerialNumber: syz [ 242.065332][ T8460] [ 242.065332][ T8460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.065332][ T8460] [ 242.307112][ T9] usb 4-1: 0:2 : does not exist [ 242.365721][ T12] [ 242.365721][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.365721][ T12] [ 242.461894][ T9] usb 4-1: USB disconnect, device number 6 [ 242.470528][ T12] [ 242.470528][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.470528][ T12] [ 242.560553][ T5772] [ 242.560553][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.560553][ T5772] [ 242.577087][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.704440][ T113] [ 242.704440][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.704440][ T113] [ 242.770692][ T5772] [ 242.770692][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.770692][ T5772] [ 244.507413][ T5785] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 244.606930][ T8482] loop2: detected capacity change from 0 to 32768 [ 244.723475][ T5785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.738891][ T8482] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 244.777932][ T5785] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.864021][ T5785] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.940385][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.973807][ T8482] XFS (loop2): Ending clean mount [ 244.989904][ T5785] usb 4-1: Product: syz [ 245.025337][ T5785] usb 4-1: Manufacturer: syz [ 245.055141][ T5785] usb 4-1: SerialNumber: syz [ 245.100663][ T8482] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 245.161172][ T5835] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.280919][ T5782] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 245.325891][ T5785] usb 4-1: 0:2 : does not exist [ 245.347636][ T5785] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 245.370327][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 245.389246][ T5835] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 245.404206][ T5835] usb 1-1: config 0 has no interface number 0 [ 245.426970][ T5785] usb 4-1: USB disconnect, device number 7 [ 245.439295][ T5835] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 245.490490][ T5835] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 245.605641][ T5835] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 245.634937][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.645896][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.691332][ T5835] usb 1-1: Product: syz [ 245.695666][ T5835] usb 1-1: Manufacturer: syz [ 245.708881][ T5835] usb 1-1: SerialNumber: syz [ 245.746551][ T5835] usb 1-1: config 0 descriptor?? [ 245.775309][ T8519] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 245.797541][ T5835] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 245.862724][ T8525] loop1: detected capacity change from 0 to 4096 [ 245.961883][ T8525] NILFS (loop1): invalid segment: Checksum error in segment payload [ 245.983674][ T8525] NILFS (loop1): trying rollback from an earlier position [ 246.041316][ T5835] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 246.135633][ T5835] usb 1-1: USB disconnect, device number 9 [ 246.175431][ T8525] NILFS (loop1): recovery complete [ 246.215855][ T5835] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 246.292362][ T8526] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.331431][ T5835] cypress_m8 1-1:0.35: device disconnected [ 246.512338][ T8530] loop3: detected capacity change from 0 to 256 [ 246.567543][ T8530] exfat: Deprecated parameter 'utf8' [ 246.605753][ T8530] exfat: Deprecated parameter 'namecase' [ 246.649103][ T8530] exfat: Deprecated parameter 'namecase' [ 246.744072][ T8530] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 247.920468][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 248.157670][ T8550] loop0: detected capacity change from 0 to 256 [ 249.005311][ T8535] loop1: detected capacity change from 0 to 32768 [ 249.130322][ T8535] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page [ 249.130322][ T8535] [ 249.166361][ T8535] ERROR: (device loop1): remounting filesystem as read-only [ 250.520803][ T8592] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 250.986472][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'. [ 251.020432][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'. [ 251.125847][ T8605] loop3: detected capacity change from 0 to 256 [ 252.010631][ T5835] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.220460][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 252.227708][ T5835] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 252.242429][ T5835] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 252.251666][ T8631] binder: Bad value for 'max' [ 252.266591][ T5835] usb 3-1: config 0 has no interface number 1 [ 252.285769][ T5835] usb 3-1: config 0 has no interface number 2 [ 252.299050][ T5835] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 252.330383][ T5835] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 252.361827][ T5835] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.375392][ T5835] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 252.386060][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.429806][ T5835] usb 3-1: config 0 descriptor?? [ 252.683733][ T5835] usb 3-1: Could not set interface, error -71 [ 252.730185][ T5835] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 252.840397][ T5835] usb 3-1: USB disconnect, device number 11 [ 253.271909][ T8646] loop1: detected capacity change from 0 to 256 [ 253.332018][ T8646] exfat: Deprecated parameter 'utf8' [ 253.370958][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 253.423875][ T8646] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 254.303130][ T8664] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1241'. [ 254.380991][ T8664] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1241'. [ 254.390110][ T8664] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1241'. [ 254.727009][ T8672] mmap: syz.0.1245 (8672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 256.089664][ T8703] loop0: detected capacity change from 0 to 256 [ 256.106118][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.112675][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.336011][ T8703] FAT-fs (loop0): Directory bread(block 64) failed [ 256.370584][ T8703] FAT-fs (loop0): Directory bread(block 65) failed [ 256.420567][ T8703] FAT-fs (loop0): Directory bread(block 66) failed [ 256.427793][ T8703] FAT-fs (loop0): Directory bread(block 67) failed [ 256.500676][ T8703] FAT-fs (loop0): Directory bread(block 68) failed [ 256.507474][ T8703] FAT-fs (loop0): Directory bread(block 69) failed [ 256.595578][ T8703] FAT-fs (loop0): Directory bread(block 70) failed [ 256.660830][ T8703] FAT-fs (loop0): Directory bread(block 71) failed [ 256.690526][ T8703] FAT-fs (loop0): Directory bread(block 72) failed [ 256.697148][ T8703] FAT-fs (loop0): Directory bread(block 73) failed [ 256.897272][ T8713] loop2: detected capacity change from 0 to 4096 [ 256.956800][ T8713] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 257.158486][ T8686] loop3: detected capacity change from 0 to 32768 [ 257.264320][ T8686] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 257.449446][ T8686] XFS (loop3): Ending clean mount [ 257.998381][ T6427] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 258.026552][ T8733] netlink: 'syz.1.1267': attribute type 21 has an invalid length. [ 258.054844][ T8733] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.073190][ T8733] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 258.121571][ T174] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.345445][ T174] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.365474][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.421637][ T174] usb 3-1: config 0 descriptor?? [ 258.460120][ T174] cp210x 3-1:0.0: cp210x converter detected [ 258.737543][ T174] usb 3-1: cp210x converter now attached to ttyUSB0 [ 258.970368][ T5814] usb 3-1: USB disconnect, device number 12 [ 259.015872][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.050575][ T5814] cp210x 3-1:0.0: device disconnected [ 259.597781][ T8752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1276'. [ 259.647329][ T8756] netlink: 'syz.1.1278': attribute type 2 has an invalid length. [ 259.823190][ T8758] process 'syz.0.1280' launched '/dev/fd/3' with NULL argv: empty string added [ 261.826859][ T8793] loop0: detected capacity change from 0 to 512 [ 261.875990][ T8793] EXT4-fs: inline encryption not supported [ 261.941074][ T8793] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 262.115190][ T8793] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1296: bad orphan inode 15 [ 262.254100][ T8793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.432133][ T8793] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.1296: reserved inode found cleared - inode=18 [ 262.657030][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.041506][ T8810] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 263.087059][ T8814] loop3: detected capacity change from 0 to 512 [ 263.164802][ T8814] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 263.215044][ T8814] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.1305: iget: bad i_size value: 12154757448730 [ 263.293521][ T8814] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1305: couldn't read orphan inode 13 (err -117) [ 263.316779][ T8814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.383694][ T8814] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 263.487402][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.630703][ T8819] netlink: 'syz.0.1307': attribute type 3 has an invalid length. [ 263.657028][ T8819] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1307'. [ 264.146263][ T8828] loop3: detected capacity change from 0 to 512 [ 264.204505][ T8828] EXT4-fs: inline encryption not supported [ 264.273695][ T8828] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 264.372560][ T8828] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1311: bad orphan inode 15 [ 264.423974][ T8828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.627626][ T8828] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.1311: reserved inode found cleared - inode=18 [ 264.882836][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.130492][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 265.719940][ T8861] loop2: detected capacity change from 0 to 256 [ 266.215285][ T8871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1333'. [ 266.251699][ T8873] loop0: detected capacity change from 0 to 128 [ 266.303682][ T8873] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.370106][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 266.397606][ T8873] ext4 filesystem being mounted at /361/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.460591][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 266.605747][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 266.635813][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.667353][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.685181][ T8] usb 3-1: Product: syz [ 266.689425][ T8] usb 3-1: Manufacturer: syz [ 266.717627][ T8] usb 3-1: SerialNumber: syz [ 266.768917][ T8] usb 3-1: config 0 descriptor?? [ 266.829204][ T8] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 266.950874][ T8880] loop1: detected capacity change from 0 to 8 [ 267.142799][ T8880] SQUASHFS error: Unable to read directory block [629:26] [ 267.288430][ T8] sonixb 3-1:0.0: Error writing register 01: -71 [ 267.325620][ T8] sonixb: probe of 3-1:0.0 failed with error -71 [ 267.344046][ T8882] loop3: detected capacity change from 0 to 4096 [ 267.390401][ T8] usb 3-1: USB disconnect, device number 13 [ 267.468821][ T8882] __ntfs_error: 11 callbacks suppressed [ 267.468874][ T8882] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 267.593353][ T8882] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 267.672504][ T8882] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 267.744781][ T8882] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 267.825540][ T8882] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 267.932621][ T8882] ntfs: volume version 3.1. [ 267.958887][ T8892] loop1: detected capacity change from 0 to 16 [ 267.980274][ T8882] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 268.031020][ T8892] erofs: (device loop1): mounted with root inode @ nid 36. [ 268.077708][ T8882] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 268.190431][ T8882] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 268.233113][ T8882] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 268.290595][ T8882] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 268.352111][ T8896] loop2: detected capacity change from 0 to 2048 [ 268.405283][ T8896] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 268.507446][ T8898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.520971][ T8896] syz.2.1343: attempt to access beyond end of device [ 268.520971][ T8896] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 268.618040][ T8901] libceph: resolve '‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 268.712634][ T8896] syz.2.1343: attempt to access beyond end of device [ 268.712634][ T8896] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 268.798543][ T8896] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 268.839742][ T8896] NILFS (loop2): error -5 reading inode: ino=15 [ 268.903474][ T8904] loop0: detected capacity change from 0 to 1024 [ 269.016859][ T8904] hfsplus: keylen 65060 too large [ 269.676810][ T8920] loop3: detected capacity change from 0 to 256 [ 270.758188][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1362'. [ 271.116264][ T8942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.715763][ T8954] loop3: detected capacity change from 0 to 256 [ 271.846886][ T8954] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 271.905374][ T8956] ubi31: attaching mtd0 [ 271.944929][ T8956] ubi31: scanning is finished [ 271.949698][ T8956] ubi31: empty MTD device detected [ 272.167665][ T8958] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1374'. [ 272.261640][ T8956] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 272.293874][ T8956] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 272.343238][ T8956] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 272.387893][ T8956] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 272.470554][ T8956] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 272.477815][ T8956] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 272.570426][ T8956] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 344985031 [ 272.647927][ T8956] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 272.812829][ T8959] ubi31: background thread "ubi_bgt31d" started, PID 8959 [ 273.620421][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 273.841949][ T8974] loop0: detected capacity change from 0 to 2048 [ 273.882786][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 273.903813][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 273.942607][ T8974] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 274.033057][ T8] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 274.072982][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.132666][ T8] usb 4-1: Product: syz [ 274.136932][ T8] usb 4-1: Manufacturer: syz [ 274.206279][ T8] usb 4-1: SerialNumber: syz [ 274.254857][ T8] usb 4-1: config 0 descriptor?? [ 274.324834][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 274.370317][ T8] hub: probe of 4-1:0.0 failed with error -5 [ 274.440821][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 274.664850][ T8] usb 4-1: USB disconnect, device number 8 [ 274.752986][ T8982] loop1: detected capacity change from 0 to 1764 [ 274.913657][ T8982] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 275.912715][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1397'. [ 275.970094][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1397'. [ 275.993649][ T9011] loop2: detected capacity change from 0 to 512 [ 276.022756][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 276.069465][ T9011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.180537][ T9011] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.311382][ T9011] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1398: corrupted xattr block 33: invalid checksum [ 276.419568][ T9019] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1400'. [ 276.443324][ T9020] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1402'. [ 276.705213][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.747764][ T9022] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1403'. [ 276.826331][ T9022] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1403'. [ 277.583658][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 277.641113][ T9045] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1415'. [ 278.757766][ T9063] mmap: syz.3.1423 (9063): VmData 50044928 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 278.780522][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 278.906349][ T9071] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 278.952331][ T9071] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1427'. [ 279.084376][ T9073] i2c i2c-0: Invalid block write size 34 [ 280.785904][ T9110] sctp: [Deprecated]: syz.0.1446 (pid 9110) Use of int in max_burst socket option. [ 280.785904][ T9110] Use struct sctp_assoc_value instead [ 281.221039][ T9119] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 281.228164][ T9119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.399637][ T9127] comedi comedi4: bad chanlist[0]=0x00200007 chan=7 range length=2 [ 281.407793][ T9119] vhci_hcd vhci_hcd.0: Device attached [ 281.517118][ T9121] loop0: detected capacity change from 0 to 4096 [ 281.736581][ T5814] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 281.840719][ T9121] ntfs3: loop0: ino=5, "/" directory corrupted [ 281.851711][ T5773] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 282.118664][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.128971][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.150263][ T5773] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 282.214476][ T5773] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 282.234051][ T9138] ip6tnl1: entered allmulticast mode [ 282.250276][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.258390][ T5773] usb 3-1: Product: syz [ 282.308857][ T5773] usb 3-1: Manufacturer: syz [ 282.319299][ T5773] usb 3-1: SerialNumber: syz [ 282.350984][ T5773] kaweth 3-1:1.0: couldn't find required endpoints [ 282.695640][ T9120] vhci_hcd: connection reset by peer [ 282.701728][ T174] usb 3-1: USB disconnect, device number 14 [ 282.734133][ T988] vhci_hcd: stop threads [ 282.739806][ T988] vhci_hcd: release socket [ 282.808056][ T988] vhci_hcd: disconnect device [ 282.944978][ T9151] loop1: detected capacity change from 0 to 64 [ 282.977561][ T9152] loop3: detected capacity change from 0 to 512 [ 283.100319][ T9154] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.122513][ T1101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.163278][ T5835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.182374][ T1101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.218037][ T9152] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 283.271350][ T9152] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 283.284697][ T5835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.410769][ T9152] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 283.488302][ T9152] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 283.520555][ T9152] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 283.528842][ T9152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 283.665873][ T9152] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1465: bg 0: block 34: padding at end of block bitmap is not set [ 283.779836][ T9152] __quota_error: 13 callbacks suppressed [ 283.779857][ T9152] Quota error (device loop3): write_blk: dquota write failed [ 283.810603][ T174] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.880506][ T9152] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 284.011591][ T9152] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1465: Failed to acquire dquot type 1 [ 284.124293][ T9152] EXT4-fs (loop3): 1 truncate cleaned up [ 284.153881][ T9152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.416698][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.801451][ T5835] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 286.051112][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.067224][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.110371][ T5835] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.180376][ T5835] usb 1-1: config 1 interface 0 has no altsetting 0 [ 286.220842][ T5835] usb 1-1: config 1 interface 0 has no altsetting 1 [ 286.275661][ T5835] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 286.306911][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.330452][ T5835] usb 1-1: Product: syz [ 286.334714][ T5835] usb 1-1: Manufacturer: syz [ 286.339361][ T5835] usb 1-1: SerialNumber: syz [ 286.455538][ T9182] loop2: detected capacity change from 0 to 40427 [ 286.516780][ T9182] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 286.570445][ T9182] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 286.651880][ T9182] F2FS-fs (loop2): invalid crc value [ 286.694884][ T5835] smsusb:smsusb_probe: board id=8, interface number 0 [ 286.752900][ T5835] usb 1-1: selecting invalid altsetting 0 [ 286.784697][ T5835] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 286.789439][ T9182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 286.824272][ T5835] smsusb: probe of 1-1:1.0 failed with error -22 [ 286.856328][ T5835] usb 1-1: USB disconnect, device number 10 [ 286.880620][ T5814] vhci_hcd: vhci_device speed not set [ 287.041440][ T9182] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 287.070568][ T9182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 287.200469][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.228279][ T9182] F2FS-fs (loop2): Corrupted max_depth of 3: 255 [ 287.268218][ T9182] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 288.351357][ T9237] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.678932][ T9244] loop0: detected capacity change from 0 to 64 [ 290.775472][ T9276] loop3: detected capacity change from 0 to 4096 [ 290.823762][ T9276] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 290.917302][ T9276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 291.020511][ T9276] ntfs3: loop3: ino=21, The size of extended attributes must not exceed 64KiB [ 291.394734][ T9272] loop1: detected capacity change from 0 to 32768 [ 291.594187][ T9272] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 292.003088][ T9287] bond1: option xmit_hash_policy: invalid value (8) [ 292.046643][ T9287] bond1 (unregistering): Released all slaves [ 292.126920][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 292.145714][ T9281] loop0: detected capacity change from 0 to 32768 [ 292.267085][ T9281] JBD2: Ignoring recovery information on journal [ 292.347100][ T9281] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 292.624734][ T9294] loop3: detected capacity change from 0 to 4096 [ 292.880766][ T9297] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.369445][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 293.833750][ T9308] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 294.243479][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 294.679395][ T9317] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 294.730354][ T9317] NCSI netlink: No device for ifindex 0 [ 295.086550][ T9323] loop2: detected capacity change from 0 to 512 [ 295.130917][ T9323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.291451][ T9323] EXT4-fs (loop2): orphan cleanup on readonly fs [ 295.300103][ T9323] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1544: EA inode hash validation failed [ 295.387420][ T9323] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 295.455725][ T9323] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.1544: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 295.540733][ T9323] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.1544: ea_inode dec ref err=-117 [ 295.562706][ T9311] loop1: detected capacity change from 0 to 32768 [ 295.580751][ T9323] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.1544: bit already cleared for inode 11 [ 295.602582][ T9311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1539 (9311) [ 295.633644][ T9323] EXT4-fs (loop2): 1 orphan inode deleted [ 295.670993][ T9323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 295.723719][ T9311] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.760533][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.772239][ T9311] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 295.806804][ T9311] BTRFS info (device loop1): using free space tree [ 295.817229][ T9323] EXT4-fs error (device loop2): __ext4_iget:5079: inode #14: block 1886221359: comm syz.2.1544: invalid block [ 295.844956][ T9309] loop0: detected capacity change from 0 to 32768 [ 296.065651][ T9309] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.172282][ T9351] loop3: detected capacity change from 0 to 16 [ 296.225623][ T9351] erofs: (device loop3): mounted with root inode @ nid 36. [ 296.265901][ T9311] BTRFS info (device loop1): enabling ssd optimizations [ 296.317243][ T9311] BTRFS info (device loop1): auto enabling async discard [ 296.376132][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.505223][ T9309] XFS (loop0): Ending clean mount [ 296.760513][ T9356] usb usb8: usbfs: process 9356 (syz.2.1549) did not claim interface 0 before use [ 296.851875][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.646195][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.526914][ T9378] tmpfs: Bad value for 'mpol' [ 298.978467][ T9388] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1565'. [ 299.245587][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 299.265524][ T9392] openvswitch: netlink: Missing key (keys=40, expected=80) [ 299.430880][ T5835] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 299.561028][ T5773] IPVS: starting estimator thread 0... [ 299.676534][ T5835] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.706531][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.715015][ T9398] IPVS: using max 16 ests per chain, 38400 per kthread [ 299.760521][ T5835] usb 1-1: Product: syz [ 299.764763][ T5835] usb 1-1: Manufacturer: syz [ 299.814568][ T5835] usb 1-1: SerialNumber: syz [ 299.959212][ T174] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 300.270470][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 300.510670][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 300.853743][ T8] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 301.056301][ T9413] loop3: detected capacity change from 0 to 16 [ 301.120762][ T5835] usb 1-1: USB disconnect, device number 11 [ 301.141383][ T174] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 301.154711][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.188488][ T9413] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 301.214287][ T174] ath9k_htc: Failed to initialize the device [ 301.269507][ T5835] usb 1-1: ath9k_htc: USB layer deinitialized [ 301.690079][ T8] qmi_wwan: probe of 3-1:1.0 failed with error -22 [ 301.746859][ T8] usb 3-1: USB disconnect, device number 15 [ 302.459980][ T9431] ip6t_srh: unknown srh invflags 4449 [ 302.672615][ T9433] bond1: entered promiscuous mode [ 304.250445][ T28] audit: type=1326 audit(1786165155.574:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 304.380282][ T28] audit: type=1326 audit(1786165155.574:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 304.467427][ T28] audit: type=1326 audit(1786165155.604:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 304.583719][ T9473] loop0: detected capacity change from 0 to 512 [ 304.600302][ T28] audit: type=1326 audit(1786165155.614:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 304.679049][ T9473] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 304.834268][ T28] audit: type=1326 audit(1786165155.614:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 304.858951][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.905705][ T9473] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1607: casefold flag without casefold feature [ 305.011728][ T9473] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1607: couldn't read orphan inode 15 (err -117) [ 305.050491][ T28] audit: type=1326 audit(1786165155.614:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 305.088394][ T9473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.139445][ T28] audit: type=1326 audit(1786165155.614:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 305.245030][ T9473] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #2: block 4: comm syz.0.1607: lblock 0 mapped to illegal pblock 4 (length 1) [ 305.279089][ T28] audit: type=1326 audit(1786165155.614:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 305.353182][ T28] audit: type=1326 audit(1786165155.614:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.1.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f28ff59e0d9 code=0x7ffc0000 [ 305.651579][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.294678][ T9509] loop1: detected capacity change from 0 to 256 [ 308.548546][ T9518] loop2: detected capacity change from 0 to 32768 [ 308.730500][ T9551] sctp: [Deprecated]: syz.1.1644 (pid 9551) Use of int in maxseg socket option. [ 308.730500][ T9551] Use struct sctp_assoc_value instead [ 308.758985][ T9554] netlink: 'syz.0.1646': attribute type 30 has an invalid length. [ 308.784487][ T9518] ea_get: invalid extended attribute [ 309.253467][ T9563] loop2: detected capacity change from 0 to 128 [ 309.323982][ T9563] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.336985][ T9563] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.593160][ T9568] loop1: detected capacity change from 0 to 128 [ 309.635664][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.658323][ T9569] tc_dump_action: action bad kind [ 309.711780][ T9568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 309.750392][ T9568] FAT-fs (loop1): Filesystem has been set read-only [ 311.432156][ T9603] loop3: detected capacity change from 0 to 8 [ 311.659922][ T9606] loop1: detected capacity change from 0 to 2048 [ 311.760747][ T9606] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.017472][ T9578] loop0: detected capacity change from 0 to 32768 [ 312.148524][ T9578] add_index: next_index = 0. Resetting! [ 312.185225][ T9578] find_entry called with index >= next_index [ 312.240713][ T9578] find_entry called with index >= next_index [ 312.910351][ T174] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 313.040469][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.139809][ T174] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 313.159736][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.201184][ T174] usb 4-1: Product: syz [ 313.241612][ T174] usb 4-1: Manufacturer: syz [ 313.266801][ T174] usb 4-1: SerialNumber: syz [ 313.297493][ T174] r8152-cfgselector 4-1: config 0 descriptor?? [ 313.620093][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'. [ 313.631607][ T174] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 313.885662][ T174] usb 4-1: USB disconnect, device number 9 [ 314.290922][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 314.620443][ T174] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 314.720727][ T9652] loop3: detected capacity change from 0 to 256 [ 314.852652][ T174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.892335][ T174] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 314.935236][ T174] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.976049][ T174] usb 3-1: config 1 interface 0 has no altsetting 0 [ 315.013002][ T174] usb 3-1: string descriptor 0 read error: -22 [ 315.019454][ T174] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 315.090285][ T174] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 315.159864][ T174] usb 3-1: 0:2 : does not exist [ 315.287490][ T174] usb-storage 3-1:1.1: USB Mass Storage device detected [ 315.672544][ T9662] bond1: option updelay: invalid value (18446744073709510581) [ 315.700514][ T174] us122l: couldn't allocate write buffer [ 315.718279][ T9662] bond1: option updelay: allowed values 0 - 2147483647 [ 315.726190][ T174] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 315.778319][ T9662] bond1 (unregistering): Released all slaves [ 315.785340][ T174] usb 3-1: USB disconnect, device number 16 [ 315.954774][ T9671] netlink: 'syz.1.1700': attribute type 11 has an invalid length. [ 316.376369][ T9677] loop0: detected capacity change from 0 to 1024 [ 316.549690][ T9677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.962494][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.529128][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540283][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.199698][ T9676] loop1: detected capacity change from 0 to 40427 [ 318.217523][ T9708] comedi comedi0: Minor 65537 is invalid! [ 318.251961][ T9676] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 318.259103][ T9676] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 318.331631][ T9676] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 318.360281][ T9676] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 318.396210][ T9711] x_tables: unsorted entry at hook 3 [ 318.415018][ T9676] F2FS-fs (loop1): invalid crc value [ 318.520259][ T9676] F2FS-fs (loop1): Found nat_bits in checkpoint [ 318.914929][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 318.932307][ T9676] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 318.939508][ T9676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 319.300129][ T5772] syz-executor: attempt to access beyond end of device [ 319.300129][ T5772] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 319.374574][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 319.410046][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 322.561074][ T5814] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 322.919656][ T9775] loop0: detected capacity change from 0 to 32768 [ 322.942320][ T5814] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 322.951718][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.000793][ T5814] usb 3-1: config 0 descriptor?? [ 323.104328][ T9775] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.234315][ T9775] XFS (loop0): Ending clean mount [ 323.300079][ T9817] loop1: detected capacity change from 0 to 512 [ 323.333089][ T9775] XFS (loop0): Quotacheck needed: Please wait. [ 323.413459][ T9817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.435410][ T5814] usb 3-1: Cannot set MAC address [ 323.452066][ T5814] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 323.492073][ T5814] usb 3-1: USB disconnect, device number 17 [ 323.568242][ T9817] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.628983][ T9775] XFS (loop0): Quotacheck: Done. [ 323.779901][ T9822] loop3: detected capacity change from 0 to 4096 [ 323.895078][ T9823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.908515][ T9822] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 323.921530][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.952870][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.978247][ T9822] NILFS (loop3): mounting fs with errors [ 326.470416][ T174] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.615326][ T9877] loop3: detected capacity change from 0 to 256 [ 326.740323][ T174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.785595][ T174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.844908][ T174] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 326.885699][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.922054][ T174] usb 2-1: Product: syz [ 326.926467][ T174] usb 2-1: Manufacturer: syz [ 326.969888][ T174] usb 2-1: SerialNumber: syz [ 327.309692][ T174] usb 2-1: 0:1 : does not exist [ 327.335535][ T174] usb 2-1: unit 4 not found! [ 327.355388][ T174] usb 2-1: unit 51 not found! [ 327.481809][ T174] usb 2-1: USB disconnect, device number 8 [ 327.623724][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.765033][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 328.844182][ T9889] loop2: detected capacity change from 0 to 32768 [ 328.878227][ T9889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1792 (9889) [ 328.980031][ T9889] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.025885][ T9889] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 329.058050][ T9889] BTRFS info (device loop2): setting nodatasum [ 329.112485][ T9889] BTRFS info (device loop2): force zlib compression, level 3 [ 329.153478][ T9889] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 329.172159][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 329.200270][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 329.200644][ T9889] BTRFS info (device loop2): use lzo compression, level 0 [ 329.210071][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 329.210099][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 329.236898][ T23] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 329.270285][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.298853][ T23] usb 4-1: Product: syz [ 329.303827][ T9889] BTRFS info (device loop2): turning on flush-on-commit [ 329.319431][ T23] usb 4-1: Manufacturer: syz [ 329.336770][ T9889] BTRFS info (device loop2): enabling auto defrag [ 329.343747][ T23] usb 4-1: SerialNumber: syz [ 329.374320][ T9889] BTRFS info (device loop2): max_inline at 4096 [ 329.376267][ T23] usb 4-1: config 0 descriptor?? [ 329.410467][ T9889] BTRFS info (device loop2): using free space tree [ 329.429086][ T23] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 329.672064][ T9939] loop1: detected capacity change from 0 to 1024 [ 329.737612][ T9889] BTRFS info (device loop2): enabling ssd optimizations [ 329.760621][ T23] ums-isd200: probe of 4-1:0.0 failed with error -22 [ 329.771309][ T9939] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 329.864907][ T9943] libceph: resolve '0' (ret=-3): failed [ 329.999447][ T5814] usb 4-1: USB disconnect, device number 10 [ 330.672942][ T5782] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.585325][ T9973] loop2: detected capacity change from 0 to 64 [ 332.112012][ T9980] netlink: 'syz.0.1827': attribute type 29 has an invalid length. [ 332.119931][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 332.221850][ T9980] netlink: 'syz.0.1827': attribute type 29 has an invalid length. [ 332.280793][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 332.732166][ T9993] loop3: detected capacity change from 0 to 1024 [ 332.873770][ T9993] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 333.122266][ T9999] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 333.152494][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 333.321565][ T5785] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 333.531298][ T5785] usb 3-1: too many configurations: 30, using maximum allowed: 8 [ 333.622282][ T5785] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.651944][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.660024][ T5785] usb 3-1: Product: syz [ 333.750358][ T5785] usb 3-1: Manufacturer: syz [ 333.764607][ T5785] usb 3-1: SerialNumber: syz [ 333.888056][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.450523][ C0] usb 3-1: ath9k_htc: invalid pkt_len (e108) [ 334.942364][ T5785] usb 3-1: USB disconnect, device number 18 [ 334.970447][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 334.977588][ T8] ath9k_htc: Failed to initialize the device [ 335.046315][ T5785] usb 3-1: ath9k_htc: USB layer deinitialized [ 335.550337][ T5814] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 335.766639][ T5814] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 335.790259][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.888349][ T5814] pegasus 1-1:254.0: Missing or invalid endpoints [ 336.150121][ T5814] usb 1-1: USB disconnect, device number 12 [ 336.200833][T10020] loop1: detected capacity change from 0 to 32768 [ 336.272999][T10020] JBD2: Ignoring recovery information on journal [ 336.338020][T10020] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 336.347126][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 336.353540][T10020] JBD2: bad block at offset 32 [ 336.469436][T10020] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 336.550374][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 336.577029][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.623437][ T8] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 336.650818][T10020] [ 336.653219][T10020] ====================================================== [ 336.660272][T10020] WARNING: possible circular locking dependency detected [ 336.667763][T10020] syzkaller #0 Not tainted [ 336.672943][T10020] ------------------------------------------------------ [ 336.680003][T10020] syz.1.1847/10020 is trying to acquire lock: [ 336.686203][T10020] ffff88805df84e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 336.695947][T10020] [ 336.695947][T10020] but task is already holding lock: [ 336.703432][T10020] ffff88801cbbb0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 336.714309][T10020] [ 336.714309][T10020] which lock already depends on the new lock. [ 336.714309][T10020] [ 336.724835][T10020] [ 336.724835][T10020] the existing dependency chain (in reverse order) is: [ 336.733879][T10020] [ 336.733879][T10020] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 336.743301][T10020] down_read+0x46/0x2e0 [ 336.748430][T10020] ocfs2_start_trans+0x3a8/0x6f0 [ 336.754832][T10020] ocfs2_mknod+0xf33/0x2310 [ 336.759918][T10020] vfs_mknod+0x325/0x360 [ 336.764780][T10020] do_mknodat+0x386/0x500 [ 336.769707][T10020] __x64_sys_mknodat+0xa9/0xc0 [ 336.775041][T10020] do_syscall_64+0x55/0xb0 [ 336.780156][T10020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.786696][T10020] [ 336.786696][T10020] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 336.794319][T10020] ocfs2_start_trans+0x2a9/0x6f0 [ 336.799935][T10020] ocfs2_setattr+0xc84/0x1bf0 [ 336.805264][T10020] notify_change+0xb05/0xde0 [ 336.810438][T10020] chmod_common+0x257/0x400 [ 336.815540][T10020] do_fchmodat+0x10c/0x1e0 [ 336.820740][T10020] __x64_sys_fchmodat+0x7d/0x90 [ 336.826361][T10020] do_syscall_64+0x55/0xb0 [ 336.831455][T10020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.837932][T10020] [ 336.837932][T10020] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 336.847016][T10020] down_write+0x97/0x200 [ 336.852383][T10020] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 336.859117][T10020] ocfs2_xattr_set+0x63a/0x13a0 [ 336.864573][T10020] ocfs2_set_acl+0x4d4/0x580 [ 336.869835][T10020] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 336.875524][T10020] vfs_set_acl+0x80f/0xa70 [ 336.880675][T10020] path_setxattr+0x362/0x590 [ 336.886288][T10020] __x64_sys_setxattr+0xbb/0xd0 [ 336.891884][T10020] do_syscall_64+0x55/0xb0 [ 336.897228][T10020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.904071][T10020] [ 336.904071][T10020] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 336.912071][T10020] __lock_acquire+0x37ef/0x7d80 [ 336.919020][T10020] lock_acquire+0x19e/0x420 [ 336.924270][T10020] down_read+0x46/0x2e0 [ 336.929002][T10020] ocfs2_init_acl+0x30a/0x770 [ 336.934600][T10020] ocfs2_mknod+0x1427/0x2310 [ 336.939855][T10020] ocfs2_create+0x196/0x430 [ 336.945013][T10020] path_openat+0x1705/0x3270 [ 336.950356][T10020] do_filp_open+0x1f2/0x430 [ 336.955614][T10020] do_sys_openat2+0x134/0x1d0 [ 336.961274][T10020] __x64_sys_open+0x11f/0x140 [ 336.966518][T10020] do_syscall_64+0x55/0xb0 [ 336.971560][T10020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.978034][T10020] [ 336.978034][T10020] other info that might help us debug this: [ 336.978034][T10020] [ 336.988315][T10020] Chain exists of: [ 336.988315][T10020] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 336.988315][T10020] [ 337.002373][T10020] Possible unsafe locking scenario: [ 337.002373][T10020] [ 337.009855][T10020] CPU0 CPU1 [ 337.015250][T10020] ---- ---- [ 337.020643][T10020] rlock(&journal->j_trans_barrier); [ 337.026063][T10020] lock(sb_internal#2); [ 337.033312][T10020] lock(&journal->j_trans_barrier); [ 337.041164][T10020] rlock(&oi->ip_xattr_sem); [ 337.045895][T10020] [ 337.045895][T10020] *** DEADLOCK *** [ 337.045895][T10020] [ 337.054280][T10020] 8 locks held by syz.1.1847/10020: [ 337.059504][T10020] #0: ffff8880253e8418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 337.069268][T10020] #1: ffff88805df85118 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: path_openat+0x7f4/0x3270 [ 337.079666][T10020] #2: ffff88805dfdd118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 337.093701][T10020] #3: ffff88805df86d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 337.107588][T10020] #4: ffff88805df81818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 337.121363][T10020] #5: ffff8880253e8608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 337.130676][T10020] #6: ffff88801cbbb0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 337.141544][T10020] #7: ffff88805b014990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 337.151634][T10020] [ 337.151634][T10020] stack backtrace: [ 337.157576][T10020] CPU: 0 PID: 10020 Comm: syz.1.1847 Not tainted syzkaller #0 [ 337.165276][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.175478][T10020] Call Trace: [ 337.179004][T10020] [ 337.182039][T10020] dump_stack_lvl+0x18c/0x250 [ 337.187390][T10020] ? load_image+0x420/0x420 [ 337.192039][T10020] ? show_regs_print_info+0x20/0x20 [ 337.197296][T10020] ? print_circular_bug+0x12b/0x1a0 [ 337.202666][T10020] check_noncircular+0x2fc/0x400 [ 337.207687][T10020] ? print_deadlock_bug+0x5d0/0x5d0 [ 337.212940][T10020] ? _find_first_zero_bit+0xd6/0x100 [ 337.218528][T10020] ? add_lock_to_list+0x191/0x280 [ 337.223627][T10020] __lock_acquire+0x37ef/0x7d80 [ 337.228530][T10020] ? ocfs2_lock_res_init_common+0x32a/0x450 [ 337.234483][T10020] ? verify_lock_unused+0x140/0x140 [ 337.239838][T10020] ? __lock_acquire+0x7d80/0x7d80 [ 337.244938][T10020] ? do_raw_spin_lock+0x11f/0x2b0 [ 337.250041][T10020] lock_acquire+0x19e/0x420 [ 337.254637][T10020] ? ocfs2_init_acl+0x30a/0x770 [ 337.259547][T10020] ? __might_sleep+0xe0/0xe0 [ 337.264224][T10020] ? read_lock_is_recursive+0x20/0x20 [ 337.269669][T10020] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 337.276329][T10020] ? mark_lock+0x94/0x320 [ 337.281257][T10020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.287651][T10020] down_read+0x46/0x2e0 [ 337.291870][T10020] ? ocfs2_init_acl+0x30a/0x770 [ 337.296788][T10020] ocfs2_init_acl+0x30a/0x770 [ 337.301563][T10020] ? ocfs2_mknod_locked+0x159/0x290 [ 337.306829][T10020] ? ocfs2_acl_chmod+0x340/0x340 [ 337.311832][T10020] ? dquot_alloc_inode+0x211/0xa40 [ 337.317037][T10020] ? ocfs2_block_signals+0x9b/0xe0 [ 337.322194][T10020] ? ocfs2_free_mem_caches+0x50/0x50 [ 337.327522][T10020] ? ocfs2_init_security_get+0x139/0x1a0 [ 337.333231][T10020] ocfs2_mknod+0x1427/0x2310 [ 337.337871][T10020] ? ocfs2_mkdir+0x430/0x430 [ 337.342519][T10020] ? __lock_acquire+0x7d80/0x7d80 [ 337.347595][T10020] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 337.353543][T10020] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 337.359482][T10020] ? _raw_spin_unlock+0x40/0x40 [ 337.364578][T10020] ? ocfs2_inode_unlock+0xa5/0x140 [ 337.369761][T10020] ? __lock_acquire+0x7d80/0x7d80 [ 337.374928][T10020] ? __rwlock_init+0x150/0x150 [ 337.379747][T10020] ? do_raw_spin_unlock+0x121/0x230 [ 337.384997][T10020] ? rcu_is_watching+0x15/0xb0 [ 337.389808][T10020] ? ocfs2_lookup+0x4ac/0x960 [ 337.394533][T10020] ocfs2_create+0x196/0x430 [ 337.399344][T10020] ? ocfs2_update_inode_fsync_trans+0x230/0x230 [ 337.405642][T10020] ? ocfs2_lookup+0x960/0x960 [ 337.410536][T10020] ? HAS_UNMAPPED_ID+0x101/0x170 [ 337.415530][T10020] ? inode_permission+0xf3/0x480 [ 337.420540][T10020] ? bpf_lsm_inode_create+0x9/0x10 [ 337.425819][T10020] ? security_inode_create+0xb7/0x100 [ 337.431346][T10020] ? ocfs2_lookup+0x960/0x960 [ 337.436066][T10020] path_openat+0x1705/0x3270 [ 337.441069][T10020] ? do_filp_open+0x430/0x430 [ 337.445804][T10020] do_filp_open+0x1f2/0x430 [ 337.450385][T10020] ? vfs_tmpfile+0x620/0x620 [ 337.455216][T10020] ? _raw_spin_unlock+0x28/0x40 [ 337.460217][T10020] ? alloc_fd+0x590/0x640 [ 337.464689][T10020] do_sys_openat2+0x134/0x1d0 [ 337.469483][T10020] ? do_sys_open+0xe0/0xe0 [ 337.473961][T10020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.479999][T10020] ? lock_chain_count+0x20/0x20 [ 337.484896][T10020] __x64_sys_open+0x11f/0x140 [ 337.489627][T10020] do_syscall_64+0x55/0xb0 [ 337.494114][T10020] ? clear_bhb_loop+0x40/0x90 [ 337.498904][T10020] ? clear_bhb_loop+0x40/0x90 [ 337.503625][T10020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.510723][T10020] RIP: 0033:0x7f28ff59e0d9 [ 337.515256][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.534970][T10020] RSP: 002b:00007f29004dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 337.543493][T10020] RAX: ffffffffffffffda RBX: 00007f28ff825fa0 RCX: 00007f28ff59e0d9 [ 337.551594][T10020] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240 [ 337.560124][T10020] RBP: 00007f28ff635024 R08: 0000000000000000 R09: 0000000000000000 [ 337.568309][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.576406][T10020] R13: 00007f28ff826038 R14: 00007f28ff825fa0 R15: 00007ffea227fc68 [ 337.584526][T10020] [ 337.602644][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.637636][ T8] usb 3-1: Product: syz [ 337.641916][ T8] usb 3-1: Manufacturer: syz [ 337.646550][ T8] usb 3-1: SerialNumber: syz [ 337.692379][ T8] usb 3-1: config 0 descriptor?? [ 337.731964][ T28] audit: type=1800 audit(1786165189.054:85): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1847" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 337.807804][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 337.909292][ T8] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 338.137518][ T8] usb 3-1: USB disconnect, device number 19 [ 346.320476][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!