last executing test programs: 926.052507ms ago: executing program 0 (id=7219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x0) 873.828608ms ago: executing program 3 (id=7221): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80) write$binfmt_format(r0, &(0x7f00000079c0)='-1\x00', 0x3) 796.4025ms ago: executing program 0 (id=7223): mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) 756.796231ms ago: executing program 1 (id=7224): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 688.519653ms ago: executing program 3 (id=7226): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) 644.648104ms ago: executing program 0 (id=7227): r0 = syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0x0, 0x23f, &(0x7f0000000ac0)="$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") fadvise64(r0, 0xb4, 0x800001, 0x3) 621.137045ms ago: executing program 1 (id=7228): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffff8001, 0x0, 0x0, 0x0, 0x800000, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x810000000000000, 0x21d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, 0xf8ae, 0x9c7e, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x9, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 600.789006ms ago: executing program 3 (id=7229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x100000}}, 0x1c}}, 0x0) 540.610437ms ago: executing program 2 (id=7230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) 513.129738ms ago: executing program 1 (id=7231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r0, r0, 0x2f, 0x1c, 0x4}, 0x20) 463.984278ms ago: executing program 2 (id=7232): personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) 396.62318ms ago: executing program 3 (id=7233): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff}) 396.51402ms ago: executing program 1 (id=7234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 364.595171ms ago: executing program 2 (id=7235): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000007, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002f80)={0x28000000, 0x9}) 338.725961ms ago: executing program 0 (id=7236): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 248.676364ms ago: executing program 3 (id=7237): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 233.252784ms ago: executing program 2 (id=7238): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) 221.561265ms ago: executing program 1 (id=7239): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000400)={0x1, 0x80, 0x80, 0x7, 0x10, 0x7, 0x2, 0x2, 0x20, 0x1, 0x1, 0xffffffff, &(0x7f0000000480)=[0x7], 0x1, 0x0}) 148.954246ms ago: executing program 0 (id=7240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) 148.372237ms ago: executing program 2 (id=7241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000400)="02000000020001000003be8c5ee1768810003c08030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200dff47f00000000f50607bdff59100a070061547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccad", 0x90) 84.207198ms ago: executing program 1 (id=7242): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 40.779499ms ago: executing program 2 (id=7243): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560f, 0x0) 601.62µs ago: executing program 3 (id=7244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000001280)=0x40) 0s ago: executing program 0 (id=7245): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): nge from 0 to 512 [ 493.288877][T17911] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 493.323980][T17911] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 493.367163][T17911] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 493.427988][T17911] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 493.462683][T17911] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 493.470843][T17911] EXT4-fs (loop3): orphan cleanup on readonly fs [ 493.536285][T17911] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5321: bg 0: block 34: padding at end of block bitmap is not set [ 493.623844][T17911] Quota error (device loop3): write_blk: dquota write failed [ 493.662397][T17911] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 493.687212][T17931] bond3: option xmit_hash_policy: invalid value (14) [ 493.702612][T17911] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.5321: Failed to acquire dquot type 1 [ 493.716937][T17931] bond3 (unregistering): Released all slaves [ 493.737919][T17911] EXT4-fs (loop3): 1 truncate cleaned up [ 493.750707][T17911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.751636][T17934] loop2: detected capacity change from 0 to 64 [ 493.795064][T17911] ext4: Unknown parameter 'fd' [ 493.859786][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.400762][T17963] bond4: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 494.424781][T17963] bond4 (unregistering): Released all slaves [ 494.583526][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5343'. [ 494.902470][ T8] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 495.104829][T18004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.117258][ T8] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 495.127147][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.158042][ T8] usb 3-1: config 0 descriptor?? [ 495.397166][ T8] usb 3-1: Cannot read MAC address [ 495.406208][ T8] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 495.437094][ T8] usb 3-1: USB disconnect, device number 71 [ 495.743801][T18035] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5364'. [ 495.947503][T18046] netlink: 'syz.1.5367': attribute type 9 has an invalid length. [ 496.061951][T18052] loop0: detected capacity change from 0 to 64 [ 496.411858][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.440096][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.472312][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.506047][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.524197][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.545164][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.569665][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 496.586721][T18078] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 496.614304][T18080] loop0: detected capacity change from 0 to 16 [ 496.652667][T18080] erofs: (device loop0): mounted with root inode @ nid 36. [ 497.113584][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 497.162303][T18108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.258538][T18116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5404'. [ 497.408378][T18126] binder: 18123:18126 ioctl c0306201 200000001580 returned -14 [ 498.296478][T18181] loop1: detected capacity change from 0 to 1024 [ 498.398625][T18181] hfsplus: keylen 65060 too large [ 498.422161][T18181] hfsplus: xattr searching failed [ 498.805172][T18208] libceph: resolve '1.7.0.0.1' (ret=-3): failed [ 498.996648][T18212] loop3: detected capacity change from 0 to 4096 [ 499.038539][T18212] ntfs3: loop3: ino=b, mi_enum_attr [ 499.044892][T18212] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 499.078706][T18212] ntfs3: loop3: Failed to load $Extend (-22). [ 499.107018][T18212] ntfs3: loop3: Failed to initialize $Extend. [ 499.162668][ T27] audit: type=1800 audit(1700006735.919:133): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5448" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 499.183215][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.190004][T18226] loop1: detected capacity change from 0 to 128 [ 499.255859][T18226] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 499.287003][T18226] ext4 filesystem being mounted at /1401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 499.365579][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 500.023523][T18269] loop0: detected capacity change from 0 to 64 [ 500.066775][T18267] loop1: detected capacity change from 0 to 2048 [ 500.139638][T18273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.375370][T18273] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 500.407031][T18273] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 500.471691][T18273] Remounting filesystem read-only [ 500.488372][ T3527] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 500.501003][ T3527] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.513917][ T3527] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.523377][ T3527] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 500.530691][ T3527] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 500.552867][ T3527] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 500.560136][ T3527] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 500.572438][ T3527] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.581336][ T3527] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.598093][ T3527] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.616503][ T5781] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 500.649239][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 500.659264][ T5781] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 500.672075][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.701466][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.721817][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.749905][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 500.765052][ T5781] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 500.784129][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.801329][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.816909][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.826500][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 500.846971][ T5781] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 500.874968][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.894209][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.894218][T18282] loop2: detected capacity change from 0 to 32768 [ 500.894238][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 500.946339][T18298] __nla_validate_parse: 2 callbacks suppressed [ 500.946357][T18298] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.5489'. [ 500.946379][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 500.969978][T18282] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 500.979533][T18300] loop3: detected capacity change from 0 to 1024 [ 500.987498][ T5781] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 500.989154][T18282] JBD2: Ignoring recovery information on journal [ 500.996563][ T5781] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 501.027968][ T5781] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 501.036533][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 501.045767][ T5781] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 501.054468][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 501.063994][T18300] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 501.080754][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 501.092749][ T5781] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 501.102483][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 501.145551][T18282] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 501.423626][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 501.694643][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5500'. [ 501.712671][T18324] netlink: 440 bytes leftover after parsing attributes in process `syz.3.5500'. [ 501.870235][ T27] audit: type=1326 audit(1700006738.619:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 501.877083][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.963716][ T27] audit: type=1326 audit(1700006738.619:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 501.987799][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.003840][ T27] audit: type=1326 audit(1700006738.629:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.032963][ T27] audit: type=1326 audit(1700006738.629:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.108546][ T27] audit: type=1326 audit(1700006738.629:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.162154][ T27] audit: type=1326 audit(1700006738.629:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.219079][ T27] audit: type=1326 audit(1700006738.689:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.250819][ T27] audit: type=1326 audit(1700006738.689:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.300406][ T27] audit: type=1326 audit(1700006738.689:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.1.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4ac299e1d9 code=0x7ffc0000 [ 502.328978][T18358] loop2: detected capacity change from 0 to 256 [ 502.827002][T18377] loop1: detected capacity change from 0 to 4096 [ 502.868964][T18377] NILFS (loop1): invalid segment: Checksum error in segment payload [ 502.895289][T18377] NILFS (loop1): trying rollback from an earlier position [ 502.956167][T18377] NILFS (loop1): recovery complete [ 502.967032][T18388] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.025824][T18390] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 503.202257][ T5791] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 503.407863][ T5791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.418502][ T5791] usb 1-1: config 255 has an invalid interface number: 199 but max is 0 [ 503.433265][ T5791] usb 1-1: config 255 has no interface number 0 [ 503.452226][ T5791] usb 1-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 503.473117][ T5791] usb 1-1: config 255 interface 199 has no altsetting 0 [ 503.485363][ T5791] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e [ 503.502092][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.512183][ T5791] usb 1-1: Product: syz [ 503.516391][ T5791] usb 1-1: Manufacturer: syz [ 503.530178][ T5791] usb 1-1: SerialNumber: syz [ 503.551367][T18387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.653507][T18411] CIFS mount error: No usable UNC path provided in device string! [ 503.653507][T18411] [ 503.702252][T18411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 503.774908][ T5791] kvaser_usb 1-1:255.199: Cannot get usb endpoint(s) [ 503.797045][ T5791] usb 1-1: USB disconnect, device number 77 [ 503.881337][T18419] loop3: detected capacity change from 0 to 64 [ 503.906206][T18419] BFS-fs: bfs_iget(): Unknown vtype=0 loop3:00000002 [ 504.016124][T18425] qrtr: Invalid version 164 [ 504.163309][T18435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.392355][T18447] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.602713][T18461] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 504.897774][T18480] loop0: detected capacity change from 0 to 256 [ 504.954779][T18480] FAT-fs (loop0): Directory bread(block 64) failed [ 504.961568][T18480] FAT-fs (loop0): Directory bread(block 65) failed [ 505.007395][T18480] FAT-fs (loop0): Directory bread(block 66) failed [ 505.014546][T18480] FAT-fs (loop0): Directory bread(block 67) failed [ 505.021291][T18480] FAT-fs (loop0): Directory bread(block 68) failed [ 505.034801][T18480] FAT-fs (loop0): Directory bread(block 69) failed [ 505.041504][T18480] FAT-fs (loop0): Directory bread(block 70) failed [ 505.051237][T18480] FAT-fs (loop0): Directory bread(block 71) failed [ 505.076019][T18480] FAT-fs (loop0): Directory bread(block 72) failed [ 505.086263][T18480] FAT-fs (loop0): Directory bread(block 73) failed [ 505.168043][ T27] audit: type=1800 audit(1700006741.929:143): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5575" name="bus" dev="loop0" ino=1048674 res=0 errno=0 [ 505.341117][T18497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5585'. [ 505.771779][T18523] lo: entered promiscuous mode [ 505.777887][T18523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.968169][T18537] loop1: detected capacity change from 0 to 512 [ 506.006556][T18537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.028967][T18537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.054795][T18537] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 506.116797][T18537] EXT4-fs (loop1): 1 truncate cleaned up [ 506.139847][T18537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.274905][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.449220][T18557] veth5: entered promiscuous mode [ 506.454893][T18557] veth5: entered allmulticast mode [ 506.610166][T18567] netlink: 'syz.2.5617': attribute type 10 has an invalid length. [ 506.637519][T18567] team0: Cannot enslave team device to itself [ 506.753052][T18576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5623'. [ 506.808475][T18577] loop2: detected capacity change from 0 to 512 [ 506.873069][T18577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.906595][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5626'. [ 506.963602][T18577] ext4 filesystem being mounted at /1428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.055206][T18577] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.5622: corrupted xattr block 13: invalid checksum [ 507.243082][T18593] loop1: detected capacity change from 0 to 1024 [ 507.286138][T18593] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 507.299651][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.347903][T18579] loop3: detected capacity change from 0 to 32768 [ 507.402931][T18579] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 507.520984][T18595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5631'. [ 507.596857][T16621] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 507.712359][T18601] netlink: 'syz.2.5634': attribute type 1 has an invalid length. [ 507.738931][T18603] loop3: detected capacity change from 0 to 256 [ 508.150073][T18611] netlink: 'syz.2.5639': attribute type 2 has an invalid length. [ 508.154198][T18609] loop0: detected capacity change from 0 to 4096 [ 508.168611][T18611] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5639'. [ 508.267613][T18609] ntfs3: loop0: Failed to load $Extend (-22). [ 508.286448][T18609] ntfs3: loop0: Failed to initialize $Extend. [ 508.379170][T18609] ntfs3: loop0: ino=5, "/" directory corrupted [ 508.390869][T18599] loop1: detected capacity change from 0 to 40427 [ 508.432895][T18599] F2FS-fs (loop1): invalid crc value [ 508.444665][T18599] F2FS-fs (loop1): Found nat_bits in checkpoint [ 508.564146][T18599] F2FS-fs (loop1): Start checkpoint disabled! [ 508.600708][T18599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 508.827809][T18629] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5649'. [ 508.858291][T18629] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5649'. [ 508.966195][T18632] netlink: 'syz.2.5650': attribute type 8 has an invalid length. [ 508.982268][T18632] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 509.112135][ T8] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 509.313050][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 509.320414][ T8] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 509.329138][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.362995][ T8] usb 1-1: config 0 has no interface number 0 [ 509.372417][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 509.389783][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.398113][ T8] usb 1-1: Product: syz [ 509.402965][ T8] usb 1-1: Manufacturer: syz [ 509.407609][ T8] usb 1-1: SerialNumber: syz [ 509.422984][ T8] usb 1-1: config 0 descriptor?? [ 509.667764][ T8] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 509.685717][ T8] usb 1-1: No valid video chain found. [ 509.872995][ T42] usb 1-1: USB disconnect, device number 78 [ 509.935537][T18680] loop1: detected capacity change from 0 to 16 [ 509.944159][T18680] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 509.988493][T16618] udevd[16618]: incorrect cramfs checksum on /dev/loop1 [ 510.197771][T18694] netlink: 'syz.3.5680': attribute type 21 has an invalid length. [ 510.244190][T18691] loop1: detected capacity change from 0 to 4096 [ 510.260214][T18691] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 510.285521][T18698] loop2: detected capacity change from 0 to 64 [ 510.316259][T18691] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 510.325335][ T27] audit: type=1800 audit(1700006747.089:144): pid=18698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5681" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 510.351071][T18691] ntfs3: loop1: Inode r=b is not in use! [ 510.357447][T18691] ntfs3: loop1: Failed to load $Extend (-116). [ 510.364369][T18691] ntfs3: loop1: Failed to initialize $Extend. [ 510.631667][T18704] loop1: detected capacity change from 0 to 64 [ 510.638860][T18703] loop2: detected capacity change from 0 to 256 [ 510.698235][T18704] Trying to free block not in datazone [ 511.065134][T18712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.207316][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'. [ 511.317501][T18722] loop2: detected capacity change from 0 to 4096 [ 511.404532][T18722] ntfs3: loop2: Failed to load $Extend (-22). [ 511.416890][T18722] ntfs3: loop2: Failed to initialize $Extend. [ 511.427342][T18726] loop1: detected capacity change from 0 to 64 [ 511.485365][T18722] ntfs3: loop2: ino=5, "/" directory corrupted [ 511.642981][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5699'. [ 512.598211][T18789] loop0: detected capacity change from 0 to 512 [ 512.616521][T18789] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 512.636463][T18789] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 512.654858][T18789] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 512.660949][T18791] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 512.678520][T18789] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 512.705201][T18789] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 512.715542][T18789] EXT4-fs (loop0): orphan cleanup on readonly fs [ 512.727384][T18789] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.5725: bg 0: block 34: padding at end of block bitmap is not set [ 512.742547][T18794] PKCS8: Unsupported PKCS#8 version [ 512.758865][T18789] Quota error (device loop0): write_blk: dquota write failed [ 512.767333][T18789] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 512.777783][T18789] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.5725: Failed to acquire dquot type 1 [ 512.791983][T18789] EXT4-fs (loop0): 1 truncate cleaned up [ 512.808412][T18789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.832278][ T42] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 512.879992][T18789] ext4: Unknown parameter 'fd' [ 512.949705][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.994377][T18802] loop3: detected capacity change from 0 to 4096 [ 513.054070][T18802] NILFS (loop3): invalid segment: Checksum error in segment payload [ 513.055837][ T42] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.075055][T18802] NILFS (loop3): trying rollback from an earlier position [ 513.087563][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.105221][ T42] usb 3-1: Product: syz [ 513.113937][ T42] usb 3-1: Manufacturer: syz [ 513.118584][ T42] usb 3-1: SerialNumber: syz [ 513.134818][T18802] NILFS (loop3): recovery complete [ 513.145708][T18807] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.201399][ T5841] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 513.512882][T18817] loop3: detected capacity change from 0 to 16 [ 513.527040][T18817] erofs: (device loop3): mounted with root inode @ nid 36. [ 513.551262][T18819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5740'. [ 513.633109][ T5791] usb 3-1: USB disconnect, device number 72 [ 513.672142][ T8] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 513.863492][T18827] NILFS (loop0): invalid segment: Checksum error in segment payload [ 513.880449][ T8] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 513.885834][T18827] NILFS (loop0): trying rollback from an earlier position [ 513.892852][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.913705][ T8] usb 2-1: config 0 descriptor?? [ 513.958714][T18827] NILFS (loop0): recovery complete [ 513.992356][T18831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.997340][T18832] netlink: 'syz.3.5744': attribute type 9 has an invalid length. [ 514.181627][ T8] usb 2-1: Cannot read MAC address [ 514.192906][ T8] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 514.220191][ T8] usb 2-1: USB disconnect, device number 70 [ 514.228150][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 514.272380][ T5841] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 514.302299][ T5841] ath9k_htc: Failed to initialize the device [ 514.323070][ T5791] usb 3-1: ath9k_htc: USB layer deinitialized [ 514.405011][T18842] netlink: 'syz.3.5750': attribute type 8 has an invalid length. [ 514.425731][T18842] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 514.463367][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.486273][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.504080][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.526667][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.559681][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.577351][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.588242][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 514.605995][T18846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5753'. [ 514.972991][T18858] NILFS (loop2): invalid segment: Checksum error in segment payload [ 514.981056][T18858] NILFS (loop2): trying rollback from an earlier position [ 515.047320][T18858] NILFS (loop2): recovery complete [ 515.069797][T18868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.235176][T18874] set_capacity_and_notify: 3 callbacks suppressed [ 515.235194][T18874] loop0: detected capacity change from 0 to 512 [ 515.330483][T18874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.383104][T18874] ext4 filesystem being mounted at /1392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.468787][T18874] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.5763: corrupted xattr block 13: invalid checksum [ 515.553514][T18889] loop2: detected capacity change from 0 to 256 [ 515.575876][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.812258][ T5791] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 515.893758][T18900] loop1: detected capacity change from 0 to 512 [ 515.915633][T18900] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 515.928309][T18900] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 515.939227][T18900] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 515.950754][T18900] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 515.964220][T18900] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 515.972404][T18900] EXT4-fs (loop1): orphan cleanup on readonly fs [ 515.988908][T18900] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.5777: bg 0: block 34: padding at end of block bitmap is not set [ 516.008947][T18900] Quota error (device loop1): write_blk: dquota write failed [ 516.017747][T18900] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 516.033879][ T5791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.042726][T18900] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.5777: Failed to acquire dquot type 1 [ 516.050696][ T5791] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 516.068554][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.071071][T18900] EXT4-fs (loop1): 1 truncate cleaned up [ 516.076700][ T5791] usb 4-1: Product: syz [ 516.076719][ T5791] usb 4-1: Manufacturer: syz [ 516.076736][ T5791] usb 4-1: SerialNumber: syz [ 516.104835][T18900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.117683][ T42] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 516.155177][T18900] ext4: Unknown parameter 'fd' [ 516.184057][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.265066][T18907] xt_recent: Unsupported userspace flags (000000de) [ 516.295877][T18909] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 516.313997][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.325291][T18909] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 516.325306][ T5791] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: [ 516.325324][ T5791] eb [ 516.341316][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.341347][ T42] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.341371][ T42] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.386142][ T5791] aa 00 00 00 00 00 00 [ 516.386908][ T42] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 516.392799][ T5791] snd-usb-6fire: probe of 4-1:1.0 failed with error -5 [ 516.432511][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.543336][ T5791] usb 4-1: USB disconnect, device number 70 [ 516.877574][ T5791] usb 3-1: USB disconnect, device number 73 [ 517.439353][T18926] loop3: detected capacity change from 0 to 64 [ 517.555817][T18920] loop1: detected capacity change from 0 to 32768 [ 517.631856][T18920] ea_get: invalid extended attribute [ 517.654946][T18929] loop0: detected capacity change from 0 to 256 [ 518.094729][T18945] loop2: detected capacity change from 0 to 64 [ 519.007435][T18991] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 519.082200][ T42] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 519.283018][ T42] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 519.298937][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.324682][ T42] usb 2-1: config 0 descriptor?? [ 519.339170][ T42] gspca_main: spca505-2.14.0 probing 0733:0430 [ 519.353419][T19011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5831'. [ 519.462346][ T5840] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 519.651955][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.672355][ T5840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.690013][ T5840] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 519.704910][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 519.718024][ T5840] usb 1-1: SerialNumber: syz [ 519.754742][ T42] gspca_spca505: reg write: error -71 [ 519.766210][ T42] spca505: probe of 2-1:0.0 failed with error -5 [ 519.793056][ T42] usb 2-1: USB disconnect, device number 71 [ 519.949427][ T5840] usb 1-1: 0:2 : does not exist [ 519.993910][ T5840] usb 1-1: USB disconnect, device number 79 [ 520.036155][T16618] udevd[16618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.239159][T19053] Timeout policy `syz1' can only be used by L3 protocol number 37376 [ 520.626069][T19078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.847152][T19090] loop3: detected capacity change from 0 to 128 [ 520.849608][T19086] loop2: detected capacity change from 0 to 2048 [ 520.923218][T19086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.088325][T19103] loop0: detected capacity change from 0 to 256 [ 521.178791][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.438708][T19117] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5883'. [ 521.480776][T19115] loop1: detected capacity change from 0 to 16 [ 521.500940][T19115] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 521.670595][T19127] netlink: 'syz.3.5889': attribute type 21 has an invalid length. [ 521.698140][T19127] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5889'. [ 521.738171][T19131] ip6tnl1: entered allmulticast mode [ 521.825030][T19133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5892'. [ 521.966620][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5897'. [ 521.990231][T19145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5897'. [ 522.008294][T19145] ip6tnl3: entered promiscuous mode [ 522.020774][T19145] ip6tnl3: entered allmulticast mode [ 522.043527][T19150] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5899'. [ 522.078546][T19150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.185528][T19158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5902'. [ 522.260717][T19157] nvme nvme0: failed to connect socket: -22 [ 522.593219][ T2951] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.630718][ T5841] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.639160][ T2951] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.780901][ T5841] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.839868][T19185] netlink: 'syz.1.5916': attribute type 32 has an invalid length. [ 522.890391][T19189] loop3: detected capacity change from 0 to 64 [ 522.934685][T19189] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 523.192358][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.632359][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 523.641683][ T42] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 523.658265][T19197] loop0: detected capacity change from 0 to 32768 [ 523.690767][T19197] ea_get: invalid extended attribute [ 523.823069][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 523.840003][ T42] usb 3-1: config 0 has no interfaces? [ 523.858898][ T42] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 523.892125][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.900219][ T42] usb 3-1: Product: syz [ 523.933452][ T42] usb 3-1: Manufacturer: syz [ 523.938115][ T42] usb 3-1: SerialNumber: syz [ 523.954317][ T42] r8152-cfgselector 3-1: config 0 descriptor?? [ 524.181462][ T42] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 524.289125][T19239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5943'. [ 524.380233][ T42] usb 3-1: USB disconnect, device number 74 [ 524.553731][T19257] kernel profiling enabled (shift: 9) [ 524.686752][T19263] loop3: detected capacity change from 0 to 256 [ 524.708341][T19263] exfat: Deprecated parameter 'namecase' [ 524.720744][T19265] loop1: detected capacity change from 0 to 2048 [ 524.722189][T19263] exfat: Deprecated parameter 'namecase' [ 524.750455][T19265] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 524.799295][T19263] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x624fe598, utbl_chksum : 0xe619d30d) [ 524.812334][T19268] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.856360][T19265] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 524.904597][T19265] Remounting filesystem read-only [ 524.966651][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 524.999197][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 525.011980][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 525.021188][ T5781] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 525.035812][ T5781] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 525.062580][ T5781] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 525.332823][T19290] vers=2.0 not permitted when mounting with smb3 [ 525.332823][T19290] [ 525.376785][T19290] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 525.543076][T19305] loop2: detected capacity change from 0 to 512 [ 525.591876][T19305] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 525.611946][T19305] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 525.634523][T19305] System zones: 0-1, 15-15, 18-18, 34-34 [ 525.640673][T19305] EXT4-fs (loop2): orphan cleanup on readonly fs [ 525.651002][T19305] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 525.665681][T19305] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 525.680611][T19305] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 525.693466][T19305] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.5975: bad orphan inode 16 [ 525.704621][T19305] ext4_test_bit(bit=15, block=18) = 1 [ 525.714865][T19305] is_bad_inode(inode)=0 [ 525.720684][T19305] NEXT_ORPHAN(inode)=0 [ 525.726511][T19305] max_ino=32 [ 525.738653][T19305] i_nlink=2 [ 525.744430][T19305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.801523][T19305] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 525.961288][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.578867][T19325] loop2: detected capacity change from 0 to 32768 [ 526.781566][T19344] loop1: detected capacity change from 0 to 512 [ 526.868491][T19344] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 526.912407][T19344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 526.962350][T19344] EXT4-fs (loop1): orphan cleanup on readonly fs [ 526.992244][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.010371][T19344] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.5995: Allocating blocks 41-42 which overlap fs metadata [ 527.088070][T19344] Quota error (device loop1): write_blk: dquota write failed [ 527.115906][T19344] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 527.147267][T19344] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.5995: Failed to acquire dquot type 0 [ 527.187250][T19344] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 527.216483][T19344] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.5995: corrupted inode contents [ 527.233283][T19344] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #12: comm syz.1.5995: mark_inode_dirty error [ 527.252651][T19363] overlay: Unknown parameter '\' [ 527.272712][T19344] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.5995: corrupted inode contents [ 527.289516][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'. [ 527.304970][T19344] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #12: comm syz.1.5995: mark_inode_dirty error [ 527.325439][T19344] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.5995: corrupted inode contents [ 527.372118][T19344] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 527.409308][T19344] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.5995: corrupted inode contents [ 527.445380][T19344] EXT4-fs error (device loop1): ext4_truncate:4314: inode #12: comm syz.1.5995: mark_inode_dirty error [ 527.478927][T19344] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 527.501901][T19344] EXT4-fs (loop1): 1 truncate cleaned up [ 527.521672][T19344] EXT4-fs (loop1): pa ffff888031012658: logic 1, phys. 41, len 23 [ 527.529856][T19344] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 527.555432][T19344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 527.585874][T19380] loop0: detected capacity change from 0 to 64 [ 527.652731][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.711280][T19384] usb usb5: usbfs: process 19384 (syz.3.6014) did not claim interface 63 before use [ 528.774592][T19439] loop2: detected capacity change from 0 to 4096 [ 528.809105][T19439] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 528.862747][T19439] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 528.875474][T19449] 9p: Unknown Cache mode or invalid value re [ 528.886715][T19439] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 529.014422][T19453] loop0: detected capacity change from 0 to 256 [ 529.030277][T19453] exfat: Deprecated parameter 'namecase' [ 529.060956][T19453] exfat: Deprecated parameter 'namecase' [ 529.119154][T19453] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x624fe598, utbl_chksum : 0xe619d30d) [ 529.623739][T19477] SET target dimension over the limit! [ 529.838641][T19487] loop3: detected capacity change from 0 to 512 [ 529.886941][T19487] EXT4-fs: inline encryption not supported [ 529.918742][T19487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 529.950295][T19487] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 530.024925][T19493] loop0: detected capacity change from 0 to 512 [ 530.040285][T19487] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 530.059624][T19461] loop2: detected capacity change from 0 to 32768 [ 530.075547][T19487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.6063: bg 0: block 248: padding at end of block bitmap is not set [ 530.119274][T19487] Quota error (device loop3): write_blk: dquota write failed [ 530.128585][T19487] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 530.140143][T19487] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.6063: Failed to acquire dquot type 1 [ 530.141425][T19493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.160176][T19487] EXT4-fs (loop3): 1 truncate cleaned up [ 530.164631][T19493] ext4 filesystem being mounted at /1474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.199753][T19493] EXT4-fs error (device loop0): ext4_empty_dir:3141: inode #12: comm syz.0.6065: Directory block failed checksum [ 530.208454][T19487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 530.247138][T19461] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 530.270364][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.365968][T19461] XFS (loop2): Ending clean mount [ 530.381084][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 530.399886][ T2951] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 530.449238][ T2951] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 530.592651][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 530.702821][ T42] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 530.894438][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.915231][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 530.962811][ T42] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 530.977769][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.165175][T19540] team0: entered allmulticast mode [ 531.170482][T19540] team_slave_1: entered allmulticast mode [ 531.179360][T19540] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.202872][ T42] cxacru 1-1:1.0: receive of cm 0x90 failed (-71) [ 531.210003][ T42] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 531.226060][ T42] cxacru: probe of 1-1:1.0 failed with error -22 [ 531.247669][ T42] usb 1-1: USB disconnect, device number 80 [ 531.272672][ T5820] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 531.302813][ T5841] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 531.445752][T19552] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 531.473410][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 531.481876][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.501264][ T5820] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 531.510709][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.527462][ T5820] usb 2-1: Product: syz [ 531.527749][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 531.541850][ T5820] usb 2-1: Manufacturer: syz [ 531.549912][ T5820] usb 2-1: SerialNumber: syz [ 531.557344][ T5820] usb 2-1: config 0 descriptor?? [ 531.568203][ T5841] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 531.593090][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 531.607249][ T5841] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 531.617557][ T5841] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 531.626884][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.647265][ T5841] usb 4-1: config 0 descriptor?? [ 531.811108][ T5820] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 531.871038][ T5841] hdpvr 4-1:0.0: firmware version 0x7e dated M8 9 >S|hnBk矉?qC$F [ 531.881756][ T5841] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 532.021943][ T5820] usb 2-1: USB disconnect, device number 72 [ 532.062724][ T5841] hdpvr 4-1:0.0: device init failed [ 532.076737][ T5841] hdpvr: probe of 4-1:0.0 failed with error -12 [ 532.103278][ T5841] usb 4-1: USB disconnect, device number 71 [ 532.145833][T19579] loop0: detected capacity change from 0 to 64 [ 532.481792][T19593] loop2: detected capacity change from 0 to 4096 [ 532.518939][T19593] ntfs3: loop2: ino=19, mi_enum_attr [ 532.524832][T19593] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 532.572406][T19593] ntfs3: loop2: ino=5, "/" directory corrupted [ 532.591314][T19597] netlink: 'syz.0.6111': attribute type 1 has an invalid length. [ 532.601819][T19597] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.6111'. [ 532.833489][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 532.862356][T19605] netlink: 'syz.2.6115': attribute type 1 has an invalid length. [ 532.870147][T19605] netlink: 'syz.2.6115': attribute type 2 has an invalid length. [ 532.878344][T19607] syz.3.6116 uses old SIOCAX25GETINFO [ 532.900444][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6115'. [ 533.089772][T19623] loop3: detected capacity change from 0 to 64 [ 533.457479][ T27] audit: type=1326 audit(1700006770.219:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 533.481579][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.491527][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6130'. [ 533.515682][ T27] audit: type=1326 audit(1700006770.229:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 533.562156][ T27] audit: type=1326 audit(1700006770.249:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 533.563734][T19643] loop1: detected capacity change from 0 to 4096 [ 533.606807][ T27] audit: type=1326 audit(1700006770.269:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 533.630990][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.636795][T19643] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 533.668481][ T27] audit: type=1326 audit(1700006770.269:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac2ad9df42 code=0x7ffc0000 [ 533.704625][ T27] audit: type=1326 audit(1700006770.269:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac2ad9df42 code=0x7ffc0000 [ 533.728774][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6137'. [ 533.728799][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6137'. [ 533.729931][T19647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6137'. [ 533.740753][ T27] audit: type=1326 audit(1700006770.269:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 533.799415][T19643] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 533.823145][ T27] audit: type=1326 audit(1700006770.269:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 533.842534][T19643] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 533.847247][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.899445][ T27] audit: type=1326 audit(1700006770.279:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19640 comm="syz.2.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 534.141018][T19661] loop2: detected capacity change from 0 to 164 [ 534.178468][T19661] rock: directory entry would overflow storage [ 534.210534][T19661] rock: sig=0x66, size=4, remaining=3 [ 534.234597][T19661] rock: directory entry would overflow storage [ 534.241696][T19661] rock: sig=0x66, size=4, remaining=3 [ 534.806268][T19695] netlink: 'syz.3.6160': attribute type 3 has an invalid length. [ 534.842785][T19697] RGB/YUV Input: ================= START STATUS ================= [ 534.858561][T19697] RGB/YUV Input: Test Pattern: 75% Colorbar [ 534.873717][T19697] RGB/YUV Input: Show Information: All [ 534.879377][T19697] RGB/YUV Input: Vertical Flip: false [ 534.885465][T19697] RGB/YUV Input: Horizontal Flip: false [ 534.891175][T19697] RGB/YUV Input: Brightness: 128 [ 534.902339][T19697] RGB/YUV Input: Contrast: 128 [ 534.912580][T19697] RGB/YUV Input: Hue: 0 [ 534.916836][T19697] RGB/YUV Input: Saturation: 128 [ 534.935562][T19697] RGB/YUV Input: ================== END STATUS ================== [ 535.281640][T19708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 535.297084][T19708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.317088][T19708] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 535.362627][T19708] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 535.898037][T19718] loop0: detected capacity change from 0 to 32768 [ 535.945728][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 535.945728][T19718] [ 535.972418][T19718] xtLookup: xtSearch returned -5 [ 535.977427][T19718] free_index: error reading directory table [ 536.007333][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.007333][T19718] [ 536.032235][T19718] xtLookup: xtSearch returned -5 [ 536.037254][T19718] free_index: error reading directory table [ 536.051936][T19724] loop2: detected capacity change from 0 to 32768 [ 536.063331][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.063331][T19718] [ 536.109738][T19718] xtLookup: xtSearch returned -5 [ 536.124660][T19718] free_index: error reading directory table [ 536.136050][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.136050][T19718] [ 536.164661][T19718] xtLookup: xtSearch returned -5 [ 536.187079][T19718] free_index: error reading directory table [ 536.204101][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.204101][T19718] [ 536.231535][T19718] xtLookup: xtSearch returned -5 [ 536.243021][T19718] free_index: error reading directory table [ 536.262144][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.262144][T19718] [ 536.295672][T19718] xtLookup: xtSearch returned -5 [ 536.300680][T19718] add_index: get/read_metapage failed! [ 536.324453][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.324453][T19718] [ 536.346676][T19718] xtLookup: xtSearch returned -5 [ 536.351679][T19718] free_index: error reading directory table [ 536.360836][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.360836][T19718] [ 536.371660][T19718] xtLookup: xtSearch returned -5 [ 536.376982][T19718] free_index: error reading directory table [ 536.383422][T19718] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 536.383422][T19718] [ 536.399303][T19718] xtLookup: xtSearch returned -5 [ 536.404825][T19718] free_index: error reading directory table [ 536.432295][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 536.646496][T19740] loop1: detected capacity change from 0 to 32768 [ 537.125965][T19763] loop0: detected capacity change from 0 to 64 [ 537.232306][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 537.312242][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 537.337762][T19773] MPI: mpi too large (107144 bits) [ 537.486509][T19781] netlink: 'syz.2.6201': attribute type 10 has an invalid length. [ 537.555067][T19781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.574063][T19781] batadv0: entered allmulticast mode [ 537.593420][T19781] team0: Port device batadv0 added [ 537.766271][T19792] loop1: detected capacity change from 0 to 256 [ 538.174295][T19785] loop0: detected capacity change from 0 to 32768 [ 538.244596][T19785] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 538.385205][T19817] misc userio: Invalid payload size [ 538.386066][T19785] XFS (loop0): Ending clean mount [ 538.579321][T19823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6218'. [ 538.592448][T19793] loop2: detected capacity change from 0 to 32768 [ 538.629230][ T5778] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 539.280838][T19850] netlink: 'syz.1.6231': attribute type 2 has an invalid length. [ 539.300818][T19850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6231'. [ 539.392289][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 539.574841][T19860] loop0: detected capacity change from 0 to 512 [ 539.779282][T19845] loop3: detected capacity change from 0 to 32768 [ 539.834065][T19845] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 539.866147][T19845] XFS (loop3): Ending clean mount [ 539.912419][ T5820] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 539.932283][T19880] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.977826][ T5779] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 540.106075][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.125248][ T5820] usb 1-1: not running at top speed; connect to a high speed hub [ 540.144101][ T5820] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 540.168853][ T5820] usb 1-1: config 249 has an invalid descriptor of length 244, skipping remainder of the config [ 540.192247][ T5820] usb 1-1: config 249 has no interface number 0 [ 540.198688][ T5820] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid maxpacket 65228, setting to 64 [ 540.241023][ T5820] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.285617][ T5820] usb 1-1: config 249 interface 203 has no altsetting 0 [ 540.314734][ T5820] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 540.314766][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.314788][ T5820] usb 1-1: Product: syz [ 540.314805][ T5820] usb 1-1: Manufacturer: syz [ 540.314821][ T5820] usb 1-1: SerialNumber: syz [ 540.318199][T19860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 540.362484][ T5841] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 540.501401][T19895] TCP: TCP_TX_DELAY enabled [ 540.529871][ T5820] rtl8150 1-1:249.203: couldn't find required endpoints [ 540.542387][ T5820] rtl8150: probe of 1-1:249.203 failed with error -5 [ 540.571950][ T5820] usb 1-1: USB disconnect, device number 81 [ 540.584822][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.602938][ T5841] usb 3-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 540.620303][ T5841] usb 3-1: config 1 interface 1 has no altsetting 1 [ 540.635476][ T5841] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 540.645607][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.655044][ T5841] usb 3-1: Product: syz [ 540.659747][ T5841] usb 3-1: Manufacturer: syz [ 540.666359][ T5841] usb 3-1: SerialNumber: syz [ 540.788109][T19906] loop1: detected capacity change from 0 to 2048 [ 540.861401][T19906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.884870][ T5841] usb 3-1: 1:65 : no or invalid class specific endpoint descriptor [ 540.977910][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.994106][ T5841] usb 3-1: USB disconnect, device number 75 [ 541.046461][T16994] udevd[16994]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.230820][T19918] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 541.230820][T19918] program syz.3.6259 not setting count and/or reply_len properly [ 541.472907][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 541.536866][T19933] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6266'. [ 541.546207][T19933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.620052][T19935] loop0: detected capacity change from 0 to 256 [ 541.634668][T19935] exfat: Deprecated parameter 'utf8' [ 541.640166][T19935] exfat: Deprecated parameter 'namecase' [ 541.673406][T19935] exfat: Deprecated parameter 'namecase' [ 541.759854][T19935] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 541.884316][T19923] loop1: detected capacity change from 0 to 32768 [ 541.923339][T19923] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6261 (19923) [ 541.951358][T19923] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 541.967421][T19923] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 541.987456][T19923] BTRFS info (device loop1): enabling auto defrag [ 542.004630][T19923] BTRFS info (device loop1): force clearing of disk cache [ 542.011851][T19923] BTRFS info (device loop1): ignoring data csums [ 542.048477][T19923] BTRFS info (device loop1): turning on async discard [ 542.060818][T19923] BTRFS info (device loop1): setting nodatacow, compression disabled [ 542.080104][T19923] BTRFS info (device loop1): turning off async discard [ 542.102188][T19923] BTRFS info (device loop1): disabling free space tree [ 542.506797][ T5781] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 542.756075][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 542.756091][ T27] audit: type=1326 audit(1700006779.519:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 542.840737][ T27] audit: type=1326 audit(1700006779.549:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 542.864954][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.942485][ T27] audit: type=1326 audit(1700006779.549:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 542.966582][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.059558][ T27] audit: type=1326 audit(1700006779.579:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 543.083743][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.124845][ T27] audit: type=1326 audit(1700006779.579:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 543.148972][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.159169][ T27] audit: type=1326 audit(1700006779.579:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 543.183253][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.222125][ T27] audit: type=1326 audit(1700006779.579:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 543.246218][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.263028][ T27] audit: type=1326 audit(1700006779.579:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 543.287625][ T27] audit: type=1326 audit(1700006779.579:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.0.6284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 543.311742][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.368308][ T5820] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 543.398750][T20008] xt_limit: Overflow, try lower: 0/0 [ 543.438394][T20006] loop3: detected capacity change from 0 to 4096 [ 543.449835][T20006] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 543.517650][T20006] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 543.569555][ T5820] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 543.585126][ T5820] usb 3-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 543.616332][ T5820] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 543.655834][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.683338][ T5820] usb 3-1: config 0 descriptor?? [ 543.691500][ T5820] rndis_host 3-1:0.0: skipping garbage [ 543.705157][ T5820] rndis_host 3-1:0.0: invalid descriptor buffer length [ 543.732430][ T5820] usb 3-1: bad CDC descriptors [ 543.739645][T20016] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.925164][ T5840] usb 3-1: USB disconnect, device number 76 [ 544.009275][T20027] xt_l2tp: invalid flags combination: 8 [ 544.237410][T20040] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.376313][T20050] loop0: detected capacity change from 0 to 256 [ 544.381603][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6316'. [ 544.446766][T20050] FAT-fs (loop0): Directory bread(block 64) failed [ 544.466048][T20050] FAT-fs (loop0): Directory bread(block 65) failed [ 544.474091][T20050] FAT-fs (loop0): Directory bread(block 66) failed [ 544.480669][T20050] FAT-fs (loop0): Directory bread(block 67) failed [ 544.492252][T20050] FAT-fs (loop0): Directory bread(block 68) failed [ 544.499349][T20050] FAT-fs (loop0): Directory bread(block 69) failed [ 544.506776][T20050] FAT-fs (loop0): Directory bread(block 70) failed [ 544.514822][T20050] FAT-fs (loop0): Directory bread(block 71) failed [ 544.521485][T20050] FAT-fs (loop0): Directory bread(block 72) failed [ 544.538963][T20050] FAT-fs (loop0): Directory bread(block 73) failed [ 544.757473][T20064] loop3: detected capacity change from 0 to 64 [ 545.251489][T20086] loop0: detected capacity change from 0 to 4096 [ 545.294046][T20086] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 545.407548][T20086] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 545.441111][T20100] netlink: 'syz.1.6341': attribute type 10 has an invalid length. [ 545.468693][T20100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.509829][T20100] team0: Port device batadv0 added [ 545.738114][T20108] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 36469 - 0 [ 545.772295][T20108] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 36469 - 0 [ 545.776423][T20110] loop2: detected capacity change from 0 to 256 [ 545.781176][T20108] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 36469 - 0 [ 545.822310][T20108] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 36469 - 0 [ 545.836816][T20108] geneve5: entered promiscuous mode [ 546.140425][T20127] netlink: 'syz.0.6355': attribute type 32 has an invalid length. [ 546.195672][T20132] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 546.253494][T20130] loop2: detected capacity change from 0 to 4096 [ 546.275830][T20130] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 546.355484][T20130] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 546.615451][T20148] netlink: 'syz.3.6366': attribute type 7 has an invalid length. [ 546.631260][T20148] netlink: 'syz.3.6366': attribute type 8 has an invalid length. [ 546.643452][T20148] netlink: 'syz.3.6366': attribute type 15 has an invalid length. [ 546.728830][ T27] audit: type=1326 audit(1700006783.489:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20151 comm="syz.0.6367" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 546.842234][ T5820] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 546.891977][T20162] loop0: detected capacity change from 0 to 256 [ 547.023290][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 547.030483][ T5820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.051122][ T5841] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 547.069984][ T5820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.085278][ T5820] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 547.094977][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.104479][ T5820] usb 2-1: Product: syz [ 547.109201][ T5820] usb 2-1: Manufacturer: syz [ 547.114163][ T5820] usb 2-1: SerialNumber: syz [ 547.254926][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 547.264175][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.282400][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.305570][ T5841] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.322943][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.348038][ T5841] usb 4-1: Product: syz [ 547.353713][ T5820] usb 2-1: unit 5 not found! [ 547.358904][ T5820] usb 2-1: unit 0 not found! [ 547.368601][ T5841] usb 4-1: Manufacturer: syz [ 547.379558][ T5841] usb 4-1: SerialNumber: syz [ 547.399818][ T5820] usb 2-1: USB disconnect, device number 73 [ 547.621046][ T5841] usb 4-1: 0:2 : does not exist [ 547.647236][ T5841] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 547.693141][ T5841] usb 4-1: USB disconnect, device number 72 [ 547.780861][T16618] udevd[16618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 548.025758][T20210] x_tables: duplicate underflow at hook 3 [ 548.329748][T20226] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6404'. [ 548.410143][T20230] loop2: detected capacity change from 0 to 512 [ 548.432683][T20230] EXT4-fs (loop2): Test dummy encryption mode enabled [ 548.466565][T20230] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.6406: inode has both inline data and extents flags [ 548.504267][T20230] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.6406: couldn't read orphan inode 15 (err -117) [ 548.543748][T20236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6408'. [ 548.558675][T20230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.575788][T20230] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #2: comm syz.2.6406: invalid size [ 548.582507][T20236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6408'. [ 548.643961][T20236] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6408'. [ 548.645559][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.826568][T20251] loop1: detected capacity change from 0 to 256 [ 548.878939][T20251] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 549.133044][T20265] loop1: detected capacity change from 0 to 64 [ 549.182190][T20265] hfs: unable to locate alternate MDB [ 549.187628][T20265] hfs: continuing without an alternate MDB [ 549.201481][T20269] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6425'. [ 549.462220][T20282] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6429'. [ 549.588893][T20286] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 57066 - 0 [ 549.600942][T20286] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 57066 - 0 [ 549.618761][T20286] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 57066 - 0 [ 549.631277][T20286] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 57066 - 0 [ 549.644312][T20286] geneve2: entered promiscuous mode [ 549.746242][T20296] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 549.802216][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 549.802233][ T27] audit: type=1326 audit(1700006786.559:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.0.6439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 549.841993][ T27] audit: type=1326 audit(1700006786.559:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.0.6439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 549.889982][ T27] audit: type=1326 audit(1700006786.599:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.0.6439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 549.955882][T20306] netlink: 'syz.2.6442': attribute type 30 has an invalid length. [ 549.958262][ T27] audit: type=1326 audit(1700006786.599:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.0.6439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 549.987895][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.019925][ T27] audit: type=1326 audit(1700006786.599:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.0.6439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec879e1d9 code=0x7ffc0000 [ 550.044191][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.221989][T20322] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 51296 - 0 [ 550.282280][T20322] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 51296 - 0 [ 550.306357][T20322] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 51296 - 0 [ 550.320479][T20322] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 51296 - 0 [ 550.335702][T20322] geneve3: entered promiscuous mode [ 550.517942][T20336] netlink: 'syz.2.6457': attribute type 1 has an invalid length. [ 550.526755][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.547371][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'. [ 550.572212][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.612379][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.642103][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.651991][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.701907][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.733505][T20338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.312979][T20380] IPv6: NLM_F_CREATE should be specified when creating new route [ 551.441703][T20385] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6474'. [ 553.301797][T20469] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 553.366231][T20467] bond3: option miimon: invalid value (18446744073709551614) [ 553.389556][T20467] bond3: option miimon: allowed values 0 - 2147483647 [ 553.413917][T20467] bond3 (unregistering): Released all slaves [ 553.429674][T20476] loop2: detected capacity change from 0 to 512 [ 553.464652][T20476] EXT4-fs error (device loop2): __ext4_iget:5091: inode #11: block 1: comm syz.2.6520: invalid block [ 553.495676][T20476] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.6520: couldn't read orphan inode 11 (err -117) [ 553.544151][T20476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.670999][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.712257][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.978042][T20499] netlink: 'syz.1.6530': attribute type 1 has an invalid length. [ 554.002152][T20499] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6530'. [ 554.044937][T20504] netlink: zone id is out of range [ 554.052176][T20504] netlink: zone id is out of range [ 554.062178][T20504] netlink: zone id is out of range [ 554.072186][T20504] netlink: zone id is out of range [ 554.077353][T20504] netlink: zone id is out of range [ 554.099163][T20504] netlink: get zone limit has 4 unknown bytes [ 554.789430][T20542] loop3: detected capacity change from 0 to 64 [ 554.892129][T20546] bridge0: port 3(gretap0) entered blocking state [ 554.912506][T20546] bridge0: port 3(gretap0) entered disabled state [ 554.941743][T20546] gretap0: entered allmulticast mode [ 554.965577][T20546] gretap0: entered promiscuous mode [ 555.006206][T20546] bridge0: port 3(gretap0) entered blocking state [ 555.013631][T20546] bridge0: port 3(gretap0) entered forwarding state [ 555.502483][T20578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6568'. [ 555.511555][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6568'. [ 555.647020][T20581] loop1: detected capacity change from 0 to 4096 [ 555.663923][T20588] loop3: detected capacity change from 0 to 512 [ 555.731229][T20581] ntfs3: loop1: Failed to load $Extend (-22). [ 555.756176][T20588] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.6573: iget: bad i_size value: 12154757448730 [ 555.769160][T20581] ntfs3: loop1: Failed to initialize $Extend. [ 555.785694][T20588] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.6573: couldn't read orphan inode 13 (err -117) [ 555.801852][T20588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.972316][T20588] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 556.073858][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.198823][T20601] xt_bpf: check failed: parse error [ 556.292316][T19534] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 556.374179][T20611] program syz.1.6584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.494736][T19534] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 556.508632][T19534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.533135][T19534] usb 3-1: config 0 descriptor?? [ 556.631854][T20619] loop1: detected capacity change from 0 to 4096 [ 556.785203][T20619] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 556.868918][T20629] loop0: detected capacity change from 0 to 64 [ 556.968926][T19534] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 556.997972][T19534] hackrf 3-1:0.0: Could not detect board [ 557.032109][T19534] hackrf: probe of 3-1:0.0 failed with error -71 [ 557.051699][T19534] usb 3-1: USB disconnect, device number 77 [ 557.336878][T20646] devtmpfs: Cannot enable quota on remount [ 558.066172][T20650] loop1: detected capacity change from 0 to 32768 [ 558.136357][T20650] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 558.441483][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 558.639807][T20690] comedi comedi1: Cannot bond this driver to itself! [ 558.751706][T20694] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6624'. [ 558.769398][T20694] openvswitch: netlink: Key type 29 is not supported [ 558.812439][ T5841] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 559.012286][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 559.028041][ T5841] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 559.034920][T20712] bond4: option miimon: invalid value (18446744073709551614) [ 559.049220][T20712] bond4: option miimon: allowed values 0 - 2147483647 [ 559.055691][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.066597][T20712] bond4 (unregistering): Released all slaves [ 559.079344][ T5841] usb 1-1: Product: syz [ 559.084150][ T5841] usb 1-1: Manufacturer: syz [ 559.088799][ T5841] usb 1-1: SerialNumber: syz [ 559.111825][ T5841] usb 1-1: config 0 descriptor?? [ 559.143522][ T5841] gspca_main: spca508-2.14.0 probing 041e:4018 [ 559.306582][T20723] loop1: detected capacity change from 0 to 512 [ 559.367397][T20723] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 559.411760][T20723] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 559.424062][T20723] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6638: Failed to acquire dquot type 1 [ 559.437840][T20723] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 559.472382][T20723] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 559.502353][T20723] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6638: Failed to acquire dquot type 1 [ 559.526701][T20723] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.6638: bg 0: block 248: padding at end of block bitmap is not set [ 559.562504][T20723] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 559.587729][ T5841] gspca_spca508: reg_read err -71 [ 559.594862][T20723] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 559.604436][ T5841] gspca_spca508: reg_read err -71 [ 559.617085][ T5841] gspca_spca508: reg_read err -71 [ 559.619460][T20723] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 559.628075][ T5841] gspca_spca508: reg_read err -71 [ 559.648347][ T5841] gspca_spca508: reg write: error -71 [ 559.662231][ T5841] spca508: probe of 1-1:0.0 failed with error -71 [ 559.668869][T20723] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6638: Failed to acquire dquot type 1 [ 559.679885][ T5841] usb 1-1: USB disconnect, device number 82 [ 559.697837][T20723] EXT4-fs (loop1): 1 orphan inode deleted [ 559.733080][T20723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.776250][T20723] ext4 filesystem being mounted at /1685/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.904801][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.057626][T20730] loop2: detected capacity change from 0 to 32768 [ 560.087383][T20730] JBD2: Ignoring recovery information on journal [ 560.168923][T20730] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 560.346166][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 560.489573][T20760] loop2: detected capacity change from 0 to 256 [ 560.603952][T20760] FAT-fs (loop2): Directory bread(block 64) failed [ 560.620773][T20760] FAT-fs (loop2): Directory bread(block 65) failed [ 560.655686][T20760] FAT-fs (loop2): Directory bread(block 66) failed [ 560.673462][T20760] FAT-fs (loop2): Directory bread(block 67) failed [ 560.680173][T20760] FAT-fs (loop2): Directory bread(block 68) failed [ 560.715404][T20760] FAT-fs (loop2): Directory bread(block 69) failed [ 560.729621][T20760] FAT-fs (loop2): Directory bread(block 70) failed [ 560.745592][T20760] FAT-fs (loop2): Directory bread(block 71) failed [ 560.754985][T20760] FAT-fs (loop2): Directory bread(block 72) failed [ 560.769950][T20768] netlink: 'syz.0.6658': attribute type 8 has an invalid length. [ 560.782114][T20760] FAT-fs (loop2): Directory bread(block 73) failed [ 560.795480][T20768] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6658'. [ 561.017655][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6659'. [ 561.334744][T20784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6665'. [ 561.385300][T20786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6666'. [ 561.482513][ T5840] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 561.535661][T20790] loop0: detected capacity change from 0 to 4096 [ 561.601717][T20790] ntfs3: loop0: Failed to load $Extend (-22). [ 561.622166][T20790] ntfs3: loop0: Failed to initialize $Extend. [ 561.672891][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 561.700223][ T5840] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 561.720752][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.754126][ T5840] usb 4-1: Product: syz [ 561.761245][ T5840] usb 4-1: Manufacturer: syz [ 561.771374][ T5840] usb 4-1: SerialNumber: syz [ 561.795402][ T5840] usb 4-1: config 0 descriptor?? [ 561.814521][ T5840] gspca_main: se401-2.14.0 probing 047d:5003 [ 562.218987][ T5840] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 562.240332][ T5840] se401: probe of 4-1:0.0 failed with error -71 [ 562.247165][T20817] nft_compat: unsupported protocol 1 [ 562.268131][ T5840] usb 4-1: USB disconnect, device number 73 [ 562.268778][T20816] netlink: 'syz.2.6680': attribute type 7 has an invalid length. [ 562.452162][T20809] loop1: detected capacity change from 0 to 32768 [ 562.479103][T20809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6677 (20809) [ 562.519791][T20809] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.538101][T20809] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 562.551840][T20809] BTRFS info (device loop1): using free space tree [ 562.591837][T20836] x_tables: duplicate underflow at hook 3 [ 562.652306][T20809] BTRFS info (device loop1): enabling ssd optimizations [ 562.659325][T20809] BTRFS info (device loop1): auto enabling async discard [ 562.759970][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 563.157870][T20859] loop0: detected capacity change from 0 to 512 [ 563.192774][T20859] ext4: Unknown parameter 'noacl' [ 563.318856][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.449009][T20862] loop2: detected capacity change from 0 to 4096 [ 563.496017][T20862] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 563.512390][ T5841] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 563.531812][T20862] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 563.552607][T20862] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 563.578410][T20862] ntfs: volume version 3.1. [ 563.715635][ T5841] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 563.742283][ T5841] usb 1-1: config 160 has no interface number 0 [ 563.748791][ T5841] usb 1-1: config 160 interface 200 has no altsetting 0 [ 563.760171][ T11] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 563.805714][ T5841] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 563.836131][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.849414][ T5841] usb 1-1: Product: syz [ 563.869880][ T5841] usb 1-1: Manufacturer: syz [ 563.878338][ T5841] usb 1-1: SerialNumber: syz [ 564.133765][ T5841] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 564.140839][ T5841] usb 1-1: MIDIStreaming interface descriptor not found [ 564.212782][ T5841] usb 1-1: USB disconnect, device number 83 [ 564.274888][T20871] loop1: detected capacity change from 0 to 32768 [ 564.281865][T16994] udevd[16994]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.349143][T20871] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 564.414213][T20871] XFS (loop1): Ending clean mount [ 564.453140][ T5820] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 564.506610][ T5781] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 564.662459][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 564.685222][ T5820] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 564.699003][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.708171][ T5820] usb 3-1: Product: syz [ 564.709852][T20904] loop1: detected capacity change from 0 to 16 [ 564.716758][ T5820] usb 3-1: Manufacturer: syz [ 564.723876][ T5820] usb 3-1: SerialNumber: syz [ 564.752429][ T5840] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 564.760947][T20904] erofs: (device loop1): mounted with root inode @ nid 36. [ 564.761292][ T5820] r8152-cfgselector 3-1: config 0 descriptor?? [ 564.826655][T20904] syz.1.6710: attempt to access beyond end of device [ 564.826655][T20904] loop1: rw=524288, sector=0, nr_sectors = 1154 limit=16 [ 564.974951][ T5840] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 564.992939][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.005723][ T5840] usb 4-1: Product: syz [ 565.009958][ T5840] usb 4-1: Manufacturer: syz [ 565.016816][ T5840] usb 4-1: SerialNumber: syz [ 565.071031][ T5791] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.218093][ T5820] r8152-cfgselector 3-1: Unknown version 0x0000 [ 565.250382][ T5820] r8152-cfgselector 3-1: USB disconnect, device number 78 [ 565.332197][ T5840] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 565.456777][T20910] loop1: detected capacity change from 0 to 32768 [ 565.487031][T20910] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 565.525684][T20910] XFS (loop1): Ending clean mount [ 565.537950][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 565.572120][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 565.610441][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 565.622264][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.632886][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 565.655774][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 565.666989][ T5840] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 565.676904][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.690974][T20913] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 565.698864][T20913] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 565.706746][T20913] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 565.717563][ T5840] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 565.960241][ T5840] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 566.019010][ T5840] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 566.112406][ T5791] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 566.129344][ T5791] ath9k_htc: Failed to initialize the device [ 566.137161][T20930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6717'. [ 566.168248][ T5791] usb 4-1: ath9k_htc: USB layer deinitialized [ 566.237534][ T5820] usb 1-1: USB disconnect, device number 84 [ 566.237691][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 566.270328][ T5820] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 566.300418][ T5820] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 566.320475][ T5820] mos7720 1-1:1.0: device disconnected [ 566.341457][ T5840] usb 4-1: USB disconnect, device number 74 [ 566.430834][T20938] loop1: detected capacity change from 0 to 256 [ 566.470435][T20938] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 566.484727][T20938] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 566.495976][T20938] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 566.646029][T20946] tmpfs: Unknown parameter 'func' [ 567.128245][T20950] loop2: detected capacity change from 0 to 32768 [ 567.160834][T20950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6727 (20950) [ 567.193628][T20950] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.212470][T20950] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 567.231674][T20950] BTRFS info (device loop2): using free space tree [ 567.374110][T20950] BTRFS info (device loop2): enabling ssd optimizations [ 567.381135][T20950] BTRFS info (device loop2): auto enabling async discard [ 567.516323][T20989] netlink: 'syz.3.6738': attribute type 11 has an invalid length. [ 567.548635][T20989] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6738'. [ 567.625712][ T5780] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.689940][T20964] loop0: detected capacity change from 0 to 32768 [ 567.781498][T20964] JBD2: Ignoring recovery information on journal [ 567.881270][T20964] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 568.295730][T21008] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6747'. [ 568.332902][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 568.371329][T21012] loop3: detected capacity change from 0 to 2048 [ 568.425301][T21014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6750'. [ 568.452455][T21014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6750'. [ 568.475005][T21014] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6750'. [ 568.485193][T21012] GPT:first_usable_lbas don't match. [ 568.490656][T21012] GPT:34 != 290 [ 568.500057][T21012] GPT: Use GNU Parted to correct GPT errors. [ 568.516567][T21012] loop3: p1 p2 p3 [ 568.630307][T21019] loop1: detected capacity change from 0 to 512 [ 568.738105][T21019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.783535][T21019] ext4 filesystem being mounted at /1717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.961104][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.978014][T16621] udevd[16621]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 568.999939][T16618] udevd[16618]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 569.024280][T19913] udevd[19913]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 569.116516][T21036] netlink: 'syz.0.6759': attribute type 10 has an invalid length. [ 569.150650][T21036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6759'. [ 569.184727][T21036] batman_adv: batadv0: Adding interface: virt_wifi0 [ 569.191396][T21036] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.225698][T21036] batman_adv: batadv0: Interface activated: virt_wifi0 [ 569.390380][T21029] loop2: detected capacity change from 0 to 32768 [ 569.397166][ T5820] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 569.402914][T21046] loop3: detected capacity change from 0 to 512 [ 569.425004][T21046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.439516][T21046] EXT4-fs: Ignoring removed mblk_io_submit option [ 569.485111][T21046] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 569.496554][T21029] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 569.521351][T21046] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 569.563751][T21046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 569.592202][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 569.604523][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 569.622309][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 569.644733][ T5820] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 569.654664][T21046] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.6763: bad symlink. [ 569.663019][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.677056][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 569.694293][ T5820] usb 2-1: Product: syz [ 569.698523][ T5820] usb 2-1: Manufacturer: syz [ 569.722145][ T5820] usb 2-1: SerialNumber: syz [ 569.738388][ T5820] usb 2-1: config 0 descriptor?? [ 569.779576][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.789130][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 569.789143][ T27] audit: type=1326 audit(1700006806.559:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 569.866064][ T27] audit: type=1326 audit(1700006806.559:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 569.952269][ T27] audit: type=1326 audit(1700006806.579:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.023988][ T27] audit: type=1326 audit(1700006806.599:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.065650][ T27] audit: type=1326 audit(1700006806.599:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.091211][ T27] audit: type=1326 audit(1700006806.599:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.118746][ T27] audit: type=1326 audit(1700006806.599:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.156861][ T27] audit: type=1326 audit(1700006806.599:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.184949][ T27] audit: type=1326 audit(1700006806.599:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.2.6765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 570.250433][ T5820] usb 2-1: USB disconnect, device number 74 [ 570.631504][T21068] loop3: detected capacity change from 0 to 32768 [ 570.646506][T21068] [ 570.646506][T21068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 570.646506][T21068] [ 570.707035][ T49] read_mapping_page failed! [ 570.716402][ T49] ERROR: (device loop3): txCommit: [ 570.716402][ T49] [ 570.732387][ T49] jfs_write_inode: jfs_commit_inode failed! [ 570.751597][ T5779] [ 570.751597][ T5779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 570.751597][ T5779] [ 570.763063][ T5779] [ 570.763063][ T5779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 570.763063][ T5779] [ 570.888049][T21086] loop3: detected capacity change from 0 to 1024 [ 570.892217][ T5820] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 571.015134][T21088] veth0_vlan: entered allmulticast mode [ 571.096798][ T5820] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 571.107310][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.130444][ T5820] usb 3-1: Product: syz [ 571.141107][ T5820] usb 3-1: Manufacturer: syz [ 571.153952][ T5820] usb 3-1: SerialNumber: syz [ 571.238623][ T5841] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 571.990140][T21128] loop0: detected capacity change from 0 to 1024 [ 572.177559][T21134] netlink: 'syz.0.6805': attribute type 12 has an invalid length. [ 572.185585][T21134] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6805'. [ 572.272411][ T5841] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 572.283161][ T5841] ath9k_htc: Failed to initialize the device [ 572.327004][ T5841] usb 3-1: ath9k_htc: USB layer deinitialized [ 572.334627][T21140] x_tables: duplicate underflow at hook 2 [ 572.556352][ T5820] usb 3-1: USB disconnect, device number 79 [ 572.693577][ T27] audit: type=1800 audit(1700006809.449:192): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6818" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 573.242125][ T5840] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 573.387435][T21197] loop2: detected capacity change from 0 to 256 [ 573.436267][ T5840] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 573.456818][T21197] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 573.469000][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.469029][ T5840] usb 1-1: Product: syz [ 573.469046][ T5840] usb 1-1: Manufacturer: syz [ 573.469060][ T5840] usb 1-1: SerialNumber: syz [ 573.476055][ T5840] r8152-cfgselector 1-1: config 0 descriptor?? [ 573.971023][ T5840] r8152-cfgselector 1-1: Unknown version 0x0000 [ 573.988551][ T5840] r8152-cfgselector 1-1: USB disconnect, device number 85 [ 574.384543][T21247] loop1: detected capacity change from 0 to 1024 [ 574.483021][T21251] loop3: detected capacity change from 0 to 2048 [ 574.582827][T21251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.743660][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.162115][ T5840] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 575.358477][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.376602][T21300] kcapi: manufacturer command 256 unknown. [ 575.382209][T19534] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 575.385002][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 575.416065][ T5840] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 575.430280][ T5840] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 575.439860][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.478494][ T5840] ttusb_dec_send_command: command bulk message failed: error -8 [ 575.496561][ T5840] ttusb-dec: probe of 4-1:1.0 failed with error -8 [ 575.568593][T19534] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.592094][T19534] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 575.612486][T19534] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 575.621897][T19534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.640719][T19534] usb 1-1: Product: syz [ 575.646705][T19534] usb 1-1: Manufacturer: syz [ 575.651413][T19534] usb 1-1: SerialNumber: syz [ 575.737481][T19534] usb 4-1: USB disconnect, device number 75 [ 575.917208][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6896'. [ 575.956646][ T51] Bluetooth: hci4: unexpected event for opcode 0xf302 [ 575.965027][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 576.101836][T21328] bridge4: entered allmulticast mode [ 576.154611][T19534] usb 1-1: USB disconnect, device number 86 [ 576.157056][ T5785] Bluetooth: hci4: CSR: Local version failed (-71) [ 576.393309][T21326] loop2: detected capacity change from 0 to 32768 [ 576.452822][T21326] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 576.567183][T21348] loop1: detected capacity change from 0 to 1024 [ 576.575393][T21326] XFS (loop2): Ending clean mount [ 576.742966][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 577.011616][T21359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6911'. [ 577.263127][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6918'. [ 577.472159][ T5840] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 577.494235][T21386] usb usb9: usbfs: process 21386 (syz.3.6924) did not claim interface 3 before use [ 577.537534][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6926'. [ 577.562589][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6926'. [ 577.658335][T21394] loop0: detected capacity change from 0 to 1024 [ 577.675070][ T5840] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29399, setting to 8 [ 577.675408][T21394] EXT4-fs: Ignoring removed bh option [ 577.698658][ T5840] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 577.734449][T21394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 577.765306][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.785854][T21368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 577.807370][T21401] netlink: 'syz.3.6932': attribute type 29 has an invalid length. [ 577.833315][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6932'. [ 577.842673][T21401] netlink: 'syz.3.6932': attribute type 29 has an invalid length. [ 577.851371][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6932'. [ 577.860852][T21394] EXT4-fs (loop0): re-mounted 00000000-0000-0006-0000-000000000000 r/w. [ 577.870037][T21394] ext4 filesystem being remounted at /1665/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.908361][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 578.028476][ T5840] usb 2-1: string descriptor 0 read error: -71 [ 578.053017][ T5840] hub 2-1:32.0: USB hub found [ 578.059225][ T5840] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 578.143081][ T5840] usb 2-1: USB disconnect, device number 75 [ 578.232415][ T5791] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 578.447960][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 578.462514][ T5791] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 578.486664][ T5791] usb 3-1: config 0 has no interface number 0 [ 578.493410][ T5791] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 578.504005][ T5791] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 578.519015][ T5791] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 578.534905][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.543347][ T5791] usb 3-1: Product: syz [ 578.547735][ T5791] usb 3-1: Manufacturer: syz [ 578.562118][ T5791] usb 3-1: SerialNumber: syz [ 578.573684][ T5791] usb 3-1: config 0 descriptor?? [ 578.587156][T21406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 578.602303][T21406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 578.833541][T21406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 578.840966][T21406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 579.113749][ T5791] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 579.130865][ T5791] asix: probe of 3-1:0.34 failed with error -71 [ 579.166112][ T5791] usb 3-1: USB disconnect, device number 80 [ 579.368566][T21465] loop1: detected capacity change from 0 to 512 [ 579.379064][T21465] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 579.410427][T21465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 579.432626][T21465] System zones: 1-12 [ 579.442306][T21465] EXT4-fs (loop1): orphan cleanup on readonly fs [ 579.502073][T21465] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.6962: attempt to clear invalid blocks 1024 len 1 [ 579.557532][T21465] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.6962: bg 0: block 361: padding at end of block bitmap is not set [ 579.616196][T21465] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 579.655676][T21465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6962: invalid indirect mapped block 1811939328 (level 0) [ 579.702691][T21465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6962: invalid indirect mapped block 2 (level 2) [ 579.747658][T21465] EXT4-fs (loop1): 1 truncate cleaned up [ 579.763523][T21465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 579.828984][T21478] loop0: detected capacity change from 0 to 2048 [ 579.866597][T21478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 579.903709][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 580.347868][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6982'. [ 580.567156][T21519] netlink: 640 bytes leftover after parsing attributes in process `syz.2.6988'. [ 580.640566][T21523] loop0: detected capacity change from 0 to 16 [ 580.675293][T21523] erofs: (device loop0): mounted with root inode @ nid 36. [ 580.907680][T21535] loop3: detected capacity change from 0 to 2048 [ 580.924265][T21535] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 580.979725][T21539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.005694][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6998'. [ 581.332180][T21554] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 581.332263][T21557] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 581.575768][T21570] netlink: 'syz.3.7013': attribute type 2 has an invalid length. [ 581.587421][T21570] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7013'. [ 581.626513][T21573] loop0: detected capacity change from 0 to 512 [ 581.673842][T21573] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 581.742349][T21573] FAT-fs (loop0): Filesystem has been set read-only [ 581.749182][T21573] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 581.773725][T21573] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 581.880391][T21580] loop1: detected capacity change from 0 to 4096 [ 581.948193][T21580] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 581.991614][T21580] ntfs3: loop1: Failed to load $Extend (-22). [ 582.015054][T21580] ntfs3: loop1: Failed to initialize $Extend. [ 582.092273][T21588] netlink: 'syz.3.7022': attribute type 10 has an invalid length. [ 582.100153][T21588] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.7022'. [ 582.152258][T21588] openvswitch: netlink: Flow key attr not present in new flow. [ 582.318639][T21599] netlink: 'syz.0.7026': attribute type 21 has an invalid length. [ 582.545560][T21613] dummy0: entered promiscuous mode [ 582.741125][T21621] loop2: detected capacity change from 0 to 512 [ 582.791386][T21626] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 582.814087][T21621] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 582.836404][T21621] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 582.857461][T21621] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 582.899882][T21621] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 582.915512][T21621] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 582.933631][T21621] EXT4-fs (loop2): failed to initialize system zone (-117) [ 582.941021][T21621] EXT4-fs (loop2): mount failed [ 582.972412][T21630] loop0: detected capacity change from 0 to 2048 [ 583.052303][T21630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.139179][ T12] bond0: (slave bond_slave_0): interface is now down [ 583.155181][T21638] ip_tables: iptables: counters copy to user failed while replacing table [ 583.163959][ T12] bond0: (slave bond_slave_1): interface is now down [ 583.179487][ T12] bond0: now running without any active interface! [ 583.641879][T21667] ALSA: mixer_oss: invalid OSS volume '*0iN*' [ 583.662163][ T5820] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 583.844372][ T5820] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 583.857985][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.883311][ T5820] usb 2-1: config 0 descriptor?? [ 583.904021][ T5820] cp210x 2-1:0.0: cp210x converter detected [ 584.230625][T21694] netlink: 'syz.0.7073': attribute type 2 has an invalid length. [ 584.352505][ T5820] usb 2-1: cp210x converter now attached to ttyUSB0 [ 584.372336][ T5820] usb 2-1: USB disconnect, device number 76 [ 584.391257][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 584.411944][ T5820] cp210x 2-1:0.0: device disconnected [ 584.421477][T21684] loop3: detected capacity change from 0 to 32768 [ 584.436478][T21698] netlink: 'syz.2.7075': attribute type 2 has an invalid length. [ 584.446732][T21684] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7070 (21684) [ 584.490559][T21684] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 584.511231][T21684] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 584.525052][T21700] loop0: detected capacity change from 0 to 128 [ 584.538166][T21684] BTRFS info (device loop3): enabling auto defrag [ 584.552759][T21684] BTRFS info (device loop3): force clearing of disk cache [ 584.571912][T21684] BTRFS info (device loop3): ignoring data csums [ 584.585732][T21684] BTRFS info (device loop3): turning on async discard [ 584.606728][T21684] BTRFS info (device loop3): setting nodatacow, compression disabled [ 584.630134][T21684] BTRFS info (device loop3): turning off async discard [ 584.646842][T21684] BTRFS info (device loop3): disabling free space tree [ 584.800989][T21722] __vm_enough_memory: pid: 21722, comm: syz.0.7081, not enough memory for the allocation [ 584.987350][ T5779] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 585.212368][T21737] nftables ruleset with unbound chain [ 585.341310][ T27] audit: type=1326 audit(1700006822.099:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.417299][T21743] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.444177][ T27] audit: type=1326 audit(1700006822.129:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.541696][ T27] audit: type=1326 audit(1700006822.129:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.642342][ T27] audit: type=1326 audit(1700006822.139:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.730175][ T27] audit: type=1326 audit(1700006822.139:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.814975][ T27] audit: type=1326 audit(1700006822.139:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.839068][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.891413][T21757] loop2: detected capacity change from 0 to 256 [ 585.898467][ T27] audit: type=1326 audit(1700006822.139:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.922569][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.947680][T21726] loop1: detected capacity change from 0 to 32768 [ 585.970162][ T27] audit: type=1326 audit(1700006822.139:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 585.993330][T21726] (syz.1.7082,21726,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 585.994304][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.057963][T21726] (syz.1.7082,21726,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 586.113754][T21726] (syz.1.7082,21726,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 586.135576][ T27] audit: type=1326 audit(1700006822.139:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.2.7089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fac2ad9e1d9 code=0x7ffc0000 [ 586.159673][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.220504][T21726] JBD2: Ignoring recovery information on journal [ 586.262705][T21769] SET target dimension over the limit! [ 586.356445][T21726] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 586.603217][T21787] netlink: 'syz.0.7111': attribute type 2 has an invalid length. [ 586.611233][T21787] netlink: 'syz.0.7111': attribute type 8 has an invalid length. [ 586.623790][T21787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7111'. [ 586.667674][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 587.040825][T21801] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 587.620944][T21841] loop2: detected capacity change from 0 to 64 [ 587.761690][T21845] loop0: detected capacity change from 0 to 764 [ 587.846494][T21851] SET target dimension over the limit! [ 588.174269][T21865] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 588.182403][T21865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 588.479887][T21847] loop3: detected capacity change from 0 to 40427 [ 588.490004][T21847] F2FS-fs (loop3): Image doesn't support compression [ 588.497511][T21847] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 588.526634][T21847] F2FS-fs (loop3): invalid crc value [ 588.536878][T21847] F2FS-fs (loop3): Found nat_bits in checkpoint [ 588.616594][T21847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 588.684082][T21847] syz.3.7138: attempt to access beyond end of device [ 588.684082][T21847] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 588.720430][T21847] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 588.764260][T21887] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7158'. [ 588.938670][T21894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7163'. [ 588.959353][T21894] xfrm0: entered promiscuous mode [ 588.965311][T21894] xfrm0: entered allmulticast mode [ 588.988205][T21894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7163'. [ 589.126060][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7164'. [ 589.228017][T21901] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 589.272296][T21901] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 589.336206][T21907] netlink: 'syz.3.7161': attribute type 11 has an invalid length. [ 589.345888][T21907] netlink: 'syz.3.7161': attribute type 5 has an invalid length. [ 589.552247][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.569932][ T27] audit: type=1326 audit(1700006826.329:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21918 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51359e1d9 code=0x7ffc0000 [ 589.602239][ T5820] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 589.670423][T21923] netlink: 'syz.0.7175': attribute type 1 has an invalid length. [ 589.751532][T21929] overlayfs: missing 'lowerdir' [ 589.796129][ T5820] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 8.00 [ 589.807616][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 589.826259][ T5820] usb 3-1: Product: syz [ 589.839343][ T5820] usb 3-1: config 0 descriptor?? [ 589.857472][ T5820] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 589.866958][ T5820] usb 3-1: Detected FT4232H [ 589.968729][T21939] binder: BC_ATTEMPT_ACQUIRE not supported [ 589.975204][T21939] binder: 21938:21939 ioctl c0306201 200000004a40 returned -22 [ 590.062696][ T5820] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 590.087437][ T5820] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 590.104514][ T5820] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 590.137089][ T5820] usb 3-1: USB disconnect, device number 81 [ 590.171802][ T5820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 590.181450][T21947] netlink: 'syz.3.7187': attribute type 2 has an invalid length. [ 590.201679][ T5820] ftdi_sio 3-1:0.0: device disconnected [ 590.207849][T21947] netlink: 'syz.3.7187': attribute type 8 has an invalid length. [ 590.235302][T21947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7187'. [ 590.395333][T21959] netlink: 'syz.3.7193': attribute type 1 has an invalid length. [ 590.406309][T21958] netlink: 'syz.0.7192': attribute type 8 has an invalid length. [ 590.739303][T21977] netlink: zone id is out of range [ 591.353220][T22017] PM: Enabling pm_trace changes system date and time during resume. [ 591.353220][T22017] PM: Correct system time has to be restored manually after resume. [ 591.534086][T22028] loop0: detected capacity change from 0 to 16 [ 591.582417][T22028] erofs: (device loop0): mounted with root inode @ nid 36. [ 591.654717][T22028] syz.0.7227: attempt to access beyond end of device [ 591.654717][T22028] loop0: rw=524288, sector=74, nr_sectors = 2048 limit=16 [ 591.689984][T22028] syz.0.7227: attempt to access beyond end of device [ 591.689984][T22028] loop0: rw=524288, sector=2122, nr_sectors = 512 limit=16 [ 592.120947][T22058] [ 592.123343][T22058] ====================================================== [ 592.130378][T22058] WARNING: possible circular locking dependency detected [ 592.137437][T22058] syzkaller #0 Not tainted [ 592.137452][T22058] ------------------------------------------------------ [ 592.137459][T22058] syz.1.7242/22058 is trying to acquire lock: [ 592.137478][T22058] ffff8880626b40b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 592.137616][T22058] [ 592.137616][T22058] but task is already holding lock: [ 592.137623][T22058] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 592.137698][T22058] [ 592.137698][T22058] which lock already depends on the new lock. [ 592.137698][T22058] [ 592.137704][T22058] [ 592.137704][T22058] the existing dependency chain (in reverse order) is: [ 592.137712][T22058] [ 592.137712][T22058] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 592.137738][T22058] __mutex_lock+0x135/0xc80 [ 592.137803][T22058] rfcomm_security_cfm+0x41/0x550 [ 592.137824][T22058] hci_auth_complete_evt+0x366/0xba0 [ 592.137895][T22058] hci_event_packet+0x807/0x1280 [ 592.137915][T22058] hci_rx_work+0x43a/0xd60 [ 592.137939][T22058] process_scheduled_works+0xa60/0x1600 [ 592.137964][T22058] worker_thread+0xa5e/0xfe0 [ 592.137984][T22058] kthread+0x2fa/0x390 [ 592.138001][T22058] ret_from_fork+0x48/0x80 [ 592.138030][T22058] ret_from_fork_asm+0x11/0x20 [ 592.138060][T22058] [ 592.138060][T22058] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 592.138088][T22058] __mutex_lock+0x135/0xc80 [ 592.138108][T22058] hci_remote_features_evt+0x535/0x900 [ 592.138128][T22058] hci_event_packet+0x807/0x1280 [ 592.138146][T22058] hci_rx_work+0x43a/0xd60 [ 592.138169][T22058] process_scheduled_works+0xa60/0x1600 [ 592.138191][T22058] worker_thread+0xa5e/0xfe0 [ 592.138212][T22058] kthread+0x2fa/0x390 [ 592.138229][T22058] ret_from_fork+0x48/0x80 [ 592.138249][T22058] ret_from_fork_asm+0x11/0x20 [ 592.138272][T22058] [ 592.138272][T22058] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 592.138299][T22058] __lock_acquire+0x3a07/0x7eb0 [ 592.138320][T22058] lock_acquire+0x19e/0x420 [ 592.138339][T22058] __mutex_lock+0x135/0xc80 [ 592.138358][T22058] l2cap_chan_connect+0xfc/0xe30 [ 592.138378][T22058] l2cap_sock_connect+0x586/0x760 [ 592.138430][T22058] kernel_connect+0x142/0x1c0 [ 592.138523][T22058] rfcomm_dlc_open+0xa1f/0xec0 [ 592.138543][T22058] rfcomm_sock_connect+0x2ed/0x600 [ 592.138564][T22058] __sys_connect+0x3da/0x470 [ 592.138586][T22058] __x64_sys_connect+0x7a/0x90 [ 592.138607][T22058] do_syscall_64+0x55/0xb0 [ 592.138624][T22058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.138653][T22058] [ 592.138653][T22058] other info that might help us debug this: [ 592.138653][T22058] [ 592.138660][T22058] Chain exists of: [ 592.138660][T22058] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 592.138660][T22058] [ 592.138692][T22058] Possible unsafe locking scenario: [ 592.138692][T22058] [ 592.138698][T22058] CPU0 CPU1 [ 592.138704][T22058] ---- ---- [ 592.138710][T22058] lock(rfcomm_mutex); [ 592.138723][T22058] lock(hci_cb_list_lock); [ 592.138737][T22058] lock(rfcomm_mutex); [ 592.138751][T22058] lock(&hdev->lock); [ 592.138764][T22058] [ 592.138764][T22058] *** DEADLOCK *** [ 592.138764][T22058] [ 592.138769][T22058] 1 lock held by syz.1.7242/22058: [ 592.138780][T22058] #0: ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 592.138830][T22058] [ 592.138830][T22058] stack backtrace: [ 592.138837][T22058] CPU: 1 PID: 22058 Comm: syz.1.7242 Not tainted syzkaller #0 [ 592.138856][T22058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.138868][T22058] Call Trace: [ 592.138877][T22058] [ 592.138886][T22058] dump_stack_lvl+0x18c/0x250 [ 592.138905][T22058] ? load_image+0x420/0x420 [ 592.138940][T22058] ? show_regs_print_info+0x20/0x20 [ 592.138964][T22058] ? print_circular_bug+0x12b/0x1a0 [ 592.138990][T22058] check_noncircular+0x2fc/0x400 [ 592.139017][T22058] ? print_deadlock_bug+0x5d0/0x5d0 [ 592.139039][T22058] ? lockdep_lock+0xf5/0x230 [ 592.139064][T22058] ? _find_first_zero_bit+0xd6/0x100 [ 592.139087][T22058] __lock_acquire+0x3a07/0x7eb0 [ 592.139116][T22058] ? is_bpf_text_address+0x28f/0x2a0 [ 592.139145][T22058] ? verify_lock_unused+0x140/0x140 [ 592.139166][T22058] ? __lock_acquire+0x1431/0x7eb0 [ 592.139189][T22058] ? verify_lock_unused+0x140/0x140 [ 592.139220][T22058] lock_acquire+0x19e/0x420 [ 592.139241][T22058] ? l2cap_chan_connect+0xfc/0xe30 [ 592.139267][T22058] ? __might_sleep+0xe0/0xe0 [ 592.139290][T22058] ? read_lock_is_recursive+0x20/0x20 [ 592.139312][T22058] ? hci_get_route+0x3a5/0x4d0 [ 592.139331][T22058] ? __lock_acquire+0x7eb0/0x7eb0 [ 592.139356][T22058] __mutex_lock+0x135/0xc80 [ 592.139377][T22058] ? l2cap_chan_connect+0xfc/0xe30 [ 592.139400][T22058] ? do_raw_read_unlock+0x3d/0x80 [ 592.139425][T22058] ? _raw_read_unlock+0x28/0x40 [ 592.139492][T22058] ? hci_get_route+0x3a5/0x4d0 [ 592.139510][T22058] ? l2cap_chan_connect+0xfc/0xe30 [ 592.139533][T22058] ? mutex_lock_nested+0x20/0x20 [ 592.139556][T22058] ? print_unlock_imbalance_bug+0x160/0x160 [ 592.139584][T22058] ? mark_lock+0x94/0x320 [ 592.139609][T22058] l2cap_chan_connect+0xfc/0xe30 [ 592.139631][T22058] ? lock_chain_count+0x20/0x20 [ 592.139661][T22058] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 592.139683][T22058] ? __local_bh_enable_ip+0x13a/0x1c0 [ 592.139705][T22058] ? _local_bh_enable+0xa0/0xa0 [ 592.139727][T22058] ? bacmp+0xe/0x30 [ 592.139751][T22058] l2cap_sock_connect+0x586/0x760 [ 592.139777][T22058] ? l2cap_sock_bind+0x940/0x940 [ 592.139800][T22058] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 592.139823][T22058] ? __lock_acquire+0x7eb0/0x7eb0 [ 592.139845][T22058] ? lock_chain_count+0x20/0x20 [ 592.139865][T22058] ? kernel_connect+0xf2/0x1c0 [ 592.139893][T22058] kernel_connect+0x142/0x1c0 [ 592.139920][T22058] ? kernel_accept+0x350/0x350 [ 592.139953][T22058] ? rfcomm_dlc_open+0x9e3/0xec0 [ 592.139977][T22058] rfcomm_dlc_open+0xa1f/0xec0 [ 592.140001][T22058] ? rfcomm_sock_connect+0x2c6/0x600 [ 592.140025][T22058] ? __local_bh_enable_ip+0x13a/0x1c0 [ 592.140046][T22058] ? rfcomm_dlc_free+0x50/0x50 [ 592.140067][T22058] ? __local_bh_enable_ip+0x13a/0x1c0 [ 592.140087][T22058] ? _local_bh_enable+0xa0/0xa0 [ 592.140112][T22058] ? do_raw_spin_unlock+0x121/0x230 [ 592.140140][T22058] rfcomm_sock_connect+0x2ed/0x600 [ 592.140168][T22058] __sys_connect+0x3da/0x470 [ 592.140192][T22058] ? __sys_connect_file+0x170/0x170 [ 592.140225][T22058] __x64_sys_connect+0x7a/0x90 [ 592.140249][T22058] do_syscall_64+0x55/0xb0 [ 592.140267][T22058] ? clear_bhb_loop+0x40/0x90 [ 592.140287][T22058] ? clear_bhb_loop+0x40/0x90 [ 592.140307][T22058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.140336][T22058] RIP: 0033:0x7f4ac299e1d9 [ 592.140354][T22058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.140372][T22058] RSP: 002b:00007f4ac3839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 592.140394][T22058] RAX: ffffffffffffffda RBX: 00007f4ac2c25fa0 RCX: 00007f4ac299e1d9 [ 592.140410][T22058] RDX: 000000000000000a RSI: 0000200000005dc0 RDI: 0000000000000004 [ 592.140423][T22058] RBP: 00007f4ac2a35888 R08: 0000000000000000 R09: 0000000000000000 [ 592.140437][T22058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.140450][T22058] R13: 00007f4ac2c26038 R14: 00007f4ac2c25fa0 R15: 00007fff906e44e8 [ 592.140483][T22058] [ 594.032181][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 594.192172][ T51] Bluetooth: hci3: command 0x0406 tx timeout