last executing test programs: 2m0.615722845s ago: executing program 1 (id=8107): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x2, 0x4, 0xf, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x8008, 0x0, 0x6}}) 2m0.423449986s ago: executing program 1 (id=8112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0xe, 0x1, 0x2}}}}]}, 0x38}}, 0x0) 2m0.027723518s ago: executing program 1 (id=8117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000ffff23bd7000e8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="385a03002b920500200012800f000100626f6e64001e6163d7a06cb67300058006000500040000000a000100aaaaaaaaaa400000080020"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 1m59.792569298s ago: executing program 1 (id=8120): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m59.279478365s ago: executing program 1 (id=8127): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000005c0), 0x4) 1m58.5185515s ago: executing program 1 (id=8136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 1m58.099431892s ago: executing program 32 (id=8136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 2.619759097s ago: executing program 3 (id=9488): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.45644415s ago: executing program 3 (id=9493): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r0, &(0x7f0000000cc0)=[{{}, 0x11, 0x1d, 0xc}], 0x18) 2.374373356s ago: executing program 5 (id=9494): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x88, 0x66, 0x0, &(0x7f00000004c0)) 2.199242918s ago: executing program 3 (id=9498): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x10, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0xfffc, 0x6, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) 2.160987937s ago: executing program 5 (id=9499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.960486537s ago: executing program 5 (id=9502): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.876644744s ago: executing program 3 (id=9503): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.603687881s ago: executing program 3 (id=9506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) 1.596289251s ago: executing program 4 (id=9507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004004) 1.504025787s ago: executing program 2 (id=9508): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e24, @local}}) 1.440573824s ago: executing program 0 (id=9509): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) 1.311514988s ago: executing program 3 (id=9510): openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x1b) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[], 0xfd, 0x5525, &(0x7f0000001600)="$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") 1.264598856s ago: executing program 5 (id=9511): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdaba427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x488c4) 1.221943824s ago: executing program 2 (id=9512): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x8918, 0x0) 1.210891254s ago: executing program 4 (id=9513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r0, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.210235024s ago: executing program 0 (id=9514): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 1.006919305s ago: executing program 5 (id=9515): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x2, 0x1, 0x6}, 0xc) 991.721674ms ago: executing program 0 (id=9516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 924.555921ms ago: executing program 4 (id=9517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000001100)={0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff}) 889.105329ms ago: executing program 2 (id=9518): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10) 742.340353ms ago: executing program 5 (id=9519): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x1c5001, 0x0) 726.079942ms ago: executing program 0 (id=9520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000000480)={0x28, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x4, 0x4b}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x125}, @typed={0x8, 0x3d, 0x0, 0x0, @fd}]}, 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x4008880) 617.740547ms ago: executing program 2 (id=9521): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 590.856286ms ago: executing program 4 (id=9522): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x81, @value=0x327}) 511.545283ms ago: executing program 0 (id=9523): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x7be, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 400.286508ms ago: executing program 2 (id=9524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002404000000a080001400000000108000340030000000900010073797a30"], 0xc8}}, 0x0) 316.268824ms ago: executing program 4 (id=9525): r0 = syz_open_dev$vbi(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000480)={0x8, @pix_mp={0x1000, 0x36, 0x47524247, 0x4, 0x9, [{0xf, 0x6}, {0x1000, 0xc}, {0x6, 0x2}, {0x4, 0x8}, {0x7, 0x800}, {0x5, 0x4}, {0x2, 0x3}, {0x7, 0xfff}], 0x4b, 0xbe, 0x1, 0x1, 0x5}}) 221.54941ms ago: executing program 0 (id=9526): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f0000000700)={[{@jqfmt_vfsv1}]}, 0x1, 0x55a, &(0x7f0000000100)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 53.385462ms ago: executing program 2 (id=9527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 0s ago: executing program 4 (id=9528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_channels={0x3d, 0x7, 0x5, 0x6, 0x1, 0x200, 0x7, 0xa, 0x3}}) kernel console output (not intermixed with test programs): ][ T5361] usb 2-1: Product: syz [ 1066.627438][ T5361] usb 2-1: Manufacturer: syz [ 1066.643567][ T5361] usb 2-1: SerialNumber: syz [ 1066.681753][T22632] loop2: detected capacity change from 0 to 4096 [ 1066.697399][ T4837] usb 5-1: Product: syz [ 1066.706216][ T4837] usb 5-1: Manufacturer: syz [ 1066.727582][ T4837] usb 5-1: SerialNumber: syz [ 1066.751647][T22632] ntfs: volume version 3.1. [ 1066.768492][ T4837] imon 5-1:2.157: unable to register, err -19 [ 1066.890315][ T5361] usb 2-1: selecting invalid altsetting 0 [ 1066.927159][ T5361] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1066.962832][ T5361] usb 2-1: No valid video chain found. [ 1067.011790][ T5361] usb 2-1: selecting invalid altsetting 0 [ 1067.025148][ T5361] usbtest: probe of 2-1:220.1 failed with error -22 [ 1067.035627][ T4837] usb 5-1: USB disconnect, device number 99 [ 1067.048222][ T5361] usb 2-1: USB disconnect, device number 123 [ 1067.299325][T22639] loop2: detected capacity change from 0 to 4096 [ 1067.344220][T22639] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1067.557914][ T11] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1067.579666][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1067.586032][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1067.604904][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1067.631344][ T11] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1067.644777][ T4275] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1067.838653][T22658] loop0: detected capacity change from 0 to 256 [ 1067.907649][T22658] FAT-fs (loop0): Directory bread(block 64) failed [ 1067.966758][T22658] FAT-fs (loop0): Directory bread(block 65) failed [ 1067.973473][T22658] FAT-fs (loop0): Directory bread(block 66) failed [ 1068.027177][T22658] FAT-fs (loop0): Directory bread(block 67) failed [ 1068.054063][T22658] FAT-fs (loop0): Directory bread(block 68) failed [ 1068.060695][T22658] FAT-fs (loop0): Directory bread(block 69) failed [ 1068.132188][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7944'. [ 1068.147844][T22658] FAT-fs (loop0): Directory bread(block 70) failed [ 1068.169669][T22658] FAT-fs (loop0): Directory bread(block 71) failed [ 1068.179872][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7944'. [ 1068.196640][T22658] FAT-fs (loop0): Directory bread(block 72) failed [ 1068.203341][T22658] FAT-fs (loop0): Directory bread(block 73) failed [ 1068.983652][ T26] audit: type=1326 audit(1777928695.670:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.4.7960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af819cdd9 code=0x7ffc0000 [ 1069.147817][T22701] kernel profiling enabled (shift: 63) [ 1069.154435][T22701] profiling shift: 63 too large [ 1069.586079][T22715] loop1: detected capacity change from 0 to 4096 [ 1069.724241][T22715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1069.988826][T22729] loop2: detected capacity change from 0 to 64 [ 1070.141793][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 1070.423384][T22709] comedi comedi2: reset error (fatal) [ 1070.829581][T22748] loop4: detected capacity change from 0 to 2048 [ 1070.892835][T22748] Alternate GPT is invalid, using primary GPT. [ 1070.899328][T22748] loop4: p1 p2 p3 [ 1071.414042][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1071.417160][ T4541] udevd[4541]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1071.450863][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1071.543488][T22774] loop4: detected capacity change from 0 to 64 [ 1072.027990][T22790] QAT: Device 127 not found [ 1072.713764][T22816] loop1: detected capacity change from 0 to 512 [ 1072.740308][T22816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1072.769205][T22816] EXT4-fs (loop1): 1 truncate cleaned up [ 1072.774937][T22816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1072.904913][T22827] loop4: detected capacity change from 0 to 2048 [ 1072.912990][T22827] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129 [ 1072.990714][T22827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.035229][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 1073.190708][T22831] loop0: detected capacity change from 0 to 2048 [ 1073.331938][T22831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1073.377048][T22840] x_tables: unsorted underflow at hook 4 [ 1073.403297][T22844] unsupported nlmsg_type 40 [ 1073.548929][T22831] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #12: block 2: comm syz.0.8019: lblock 0 mapped to illegal pblock 2 (length 1) [ 1073.821559][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 1074.848547][T22886] loop3: detected capacity change from 0 to 4096 [ 1074.965634][ T4840] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1074.968729][T22886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1075.171507][ T4840] usb 3-1: Using ep0 maxpacket: 32 [ 1075.191871][ T4840] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1075.225534][ T4840] usb 3-1: config 0 has no interface number 0 [ 1075.231649][T22902] loop1: detected capacity change from 0 to 64 [ 1075.231747][ T4840] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.299563][ T4840] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1075.338464][ T4840] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1075.379966][ T4840] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1075.380007][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1075.398936][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1075.409783][ T4840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.422664][ T4840] usb 3-1: Product: syz [ 1075.429430][ T4840] usb 3-1: Manufacturer: syz [ 1075.438025][ T4840] usb 3-1: SerialNumber: syz [ 1075.459433][ T4840] usb 3-1: config 0 descriptor?? [ 1075.877193][T22919] netlink: 'syz.4.8059': attribute type 5 has an invalid length. [ 1075.947247][ T4840] appletouch 3-1:0.85: Failed to request geyser raw mode [ 1075.964707][ T4840] appletouch: probe of 3-1:0.85 failed with error -5 [ 1076.013771][ T4840] usb 3-1: USB disconnect, device number 124 [ 1076.062379][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1076.062400][ T26] audit: type=1800 audit(1777928702.214:130): pid=22904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.8053" name="/" dev="sockfs" ino=84738 res=0 errno=0 [ 1076.232647][T22927] autofs4:pid:22927:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1076.392204][T22932] netlink: 'syz.4.8065': attribute type 5 has an invalid length. [ 1076.684060][T22938] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8070'. [ 1076.794139][T22921] loop3: detected capacity change from 0 to 32768 [ 1076.959745][T22921] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 1076.959745][T22921] [ 1076.967347][T22948] netlink: 'syz.2.8072': attribute type 3 has an invalid length. [ 1076.986224][T22921] ERROR: (device loop3): remounting filesystem as read-only [ 1077.457750][T22933] loop0: detected capacity change from 0 to 32768 [ 1077.501075][T22933] (syz.0.8066,22933,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1077.539866][T22960] loop4: detected capacity change from 0 to 1024 [ 1077.561094][T22963] loop2: detected capacity change from 0 to 256 [ 1077.597255][T22933] (syz.0.8066,22933,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1077.689392][T22963] FAT-fs (loop2): Directory bread(block 64) failed [ 1077.706313][T22933] JBD2: Ignoring recovery information on journal [ 1077.730643][T22963] FAT-fs (loop2): Directory bread(block 65) failed [ 1077.796298][T22963] FAT-fs (loop2): Directory bread(block 66) failed [ 1077.804592][T22963] FAT-fs (loop2): Directory bread(block 67) failed [ 1077.821675][T22963] FAT-fs (loop2): Directory bread(block 68) failed [ 1077.828625][T22963] FAT-fs (loop2): Directory bread(block 69) failed [ 1077.835403][T22963] FAT-fs (loop2): Directory bread(block 70) failed [ 1077.842175][T22963] FAT-fs (loop2): Directory bread(block 71) failed [ 1077.854925][ T63] hfsplus: b-tree write err: -5, ino 25 [ 1077.862995][T22963] FAT-fs (loop2): Directory bread(block 72) failed [ 1077.882892][T22963] FAT-fs (loop2): Directory bread(block 73) failed [ 1077.902890][ T63] hfsplus: b-tree write err: -5, ino 4 [ 1077.908526][ T63] hfsplus: b-tree write err: -5, ino 2 [ 1077.928252][T22933] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1077.977803][ T63] hfsplus: b-tree write err: -5, ino 26 [ 1078.219159][T22976] kAFS: unable to lookup cell '(/' [ 1078.295719][ T4284] ocfs2: Unmounting device (7,0) on (node local) [ 1079.079843][T23000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8098'. [ 1079.116230][T23004] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1079.197632][T23008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8102'. [ 1079.605996][T23023] loop2: detected capacity change from 0 to 256 [ 1079.633258][T23024] loop0: detected capacity change from 0 to 64 [ 1079.682805][T23023] FAT-fs (loop2): Directory bread(block 64) failed [ 1079.704379][T23023] FAT-fs (loop2): Directory bread(block 65) failed [ 1079.732786][T23023] FAT-fs (loop2): Directory bread(block 66) failed [ 1079.740770][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8112'. [ 1079.786713][T23023] FAT-fs (loop2): Directory bread(block 67) failed [ 1079.863038][T23023] FAT-fs (loop2): Directory bread(block 68) failed [ 1079.870349][T23023] FAT-fs (loop2): Directory bread(block 69) failed [ 1079.898930][T23023] FAT-fs (loop2): Directory bread(block 70) failed [ 1079.905562][T23023] FAT-fs (loop2): Directory bread(block 71) failed [ 1079.960167][T23023] FAT-fs (loop2): Directory bread(block 72) failed [ 1079.988834][T23023] FAT-fs (loop2): Directory bread(block 73) failed [ 1080.117372][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1080.184912][T23040] syz.4.8118 (23040): drop_caches: 0 [ 1080.288579][T23021] Process accounting paused [ 1080.325410][T23044] loop1: detected capacity change from 0 to 128 [ 1080.356916][T23044] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1080.360984][ T5353] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1080.406699][T23044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1080.461570][T23048] 8021q: VLANs not supported on hsr0 [ 1080.485258][T23044] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1080.520297][T23044] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed [ 1080.592031][ T5353] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1080.619697][ T5353] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1080.658133][ T5353] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.697358][ T5353] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1080.728472][ T5353] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1080.750355][ T5353] usb 1-1: Product: syz [ 1080.761345][ T5353] usb 1-1: Manufacturer: syz [ 1080.783261][ T5353] usb 1-1: SerialNumber: syz [ 1080.793716][ T5353] usb 1-1: config 0 descriptor?? [ 1080.847101][ T5353] hub 1-1:0.0: bad descriptor, ignoring hub [ 1080.861005][ T5353] hub: probe of 1-1:0.0 failed with error -5 [ 1080.869136][ T4278] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 1080.892391][ T5353] usb 1-1: selecting invalid altsetting 0 [ 1080.901356][ T4278] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 1081.311255][T23068] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1081.311973][ T5353] usb 1-1: USB disconnect, device number 119 [ 1081.346483][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1081.507378][ T5355] kworker/dying (5355) used greatest stack depth: 15672 bytes left [ 1081.660302][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.840531][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.039916][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.068733][T23083] xt_time: unknown flags 0xc [ 1082.198952][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.353933][T23087] loop4: detected capacity change from 0 to 2048 [ 1082.482489][T23092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1082.543558][T23087] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1082.625044][ T4328] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1082.657861][T23087] Remounting filesystem read-only [ 1082.842103][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 1082.865729][ T4328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.915144][ T4328] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1083.009508][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.021808][T13205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1083.032675][T13205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1083.041693][ T4328] usb 3-1: Product: syz [ 1083.045934][ T4328] usb 3-1: Manufacturer: syz [ 1083.050742][T13205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1083.060213][ T4328] usb 3-1: SerialNumber: syz [ 1083.067455][T23100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1083.075527][ T4328] usb 3-1: config 0 descriptor?? [ 1083.083287][T23080] loop0: detected capacity change from 0 to 32768 [ 1083.086370][T23100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1083.091924][ T4328] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1083.097898][T23100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1083.104294][ T4328] usb 3-1: selecting invalid altsetting 1 [ 1083.116301][T23080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8140 (23080) [ 1083.176420][T23080] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1083.221637][T23103] loop4: detected capacity change from 0 to 16 [ 1083.231267][T23080] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1083.248795][T23103] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 1083.249029][T23080] BTRFS info (device loop0): using free space tree [ 1083.315347][ T4328] gspca_stk014: init reg: 0x00 [ 1083.321430][ T4328] stk014: probe of 3-1:0.0 failed with error -5 [ 1083.340544][T23103] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 1083.396276][T23103] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 1083.437962][T23103] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 1083.569726][ T4837] usb 3-1: USB disconnect, device number 125 [ 1083.667818][T23080] BTRFS info (device loop0): enabling ssd optimizations [ 1083.776495][T23080] BTRFS error (device loop0): unable to set label with more than 255 bytes [ 1083.910341][ T4284] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1083.930437][T23132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8151'. [ 1083.953724][T23132] device gtp0 entered promiscuous mode [ 1084.706161][T23146] loop2: detected capacity change from 0 to 4096 [ 1084.843448][T23097] chnl_net:caif_netlink_parms(): no params data found [ 1084.900529][T23146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1085.200108][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1085.409884][T13205] Bluetooth: hci2: command 0x0409 tx timeout [ 1086.103223][T23097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.110414][T23097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.148486][T23153] loop3: detected capacity change from 0 to 32768 [ 1086.170166][T23097] device bridge_slave_0 entered promiscuous mode [ 1086.173787][T23153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8160 (23153) [ 1086.241998][T23153] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1086.337115][T23153] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1086.391931][T23153] BTRFS info (device loop3): using free space tree [ 1086.577448][T23097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.588749][T23097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.664468][T23097] device bridge_slave_1 entered promiscuous mode [ 1086.751594][T23153] BTRFS info (device loop3): enabling ssd optimizations [ 1086.825504][ T11] device hsr_slave_0 left promiscuous mode [ 1086.855544][ T11] device hsr_slave_1 left promiscuous mode [ 1086.925864][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.930827][T23227] loop0: detected capacity change from 0 to 4096 [ 1086.945738][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.987161][T23227] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1087.000292][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.030439][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1087.056922][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.088372][ T11] device bridge_slave_1 left promiscuous mode [ 1087.126684][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.425078][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1087.586758][ T11] device bridge_slave_0 left promiscuous mode [ 1087.632130][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.652388][T13205] Bluetooth: hci2: command 0x041b tx timeout [ 1087.778130][T23247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1087.840187][ T11] device veth1_macvtap left promiscuous mode [ 1087.862074][ T11] device veth0_macvtap left promiscuous mode [ 1087.877478][ T11] device veth1_vlan left promiscuous mode [ 1087.891546][ T11] device veth0_vlan left promiscuous mode [ 1088.550962][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1089.492098][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1089.621337][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1089.763077][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.825897][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.908207][T23100] Bluetooth: hci2: command 0x040f tx timeout [ 1090.340003][ T11] bond0 (unregistering): Released all slaves [ 1090.492885][T23231] netlink: 'syz.4.8180': attribute type 21 has an invalid length. [ 1090.501647][T23243] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8182'. [ 1090.534032][T23273] netlink: 'syz.0.8199': attribute type 27 has an invalid length. [ 1090.562532][T23273] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1090.632877][T23293] device netdevsim0 entered promiscuous mode [ 1090.648601][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8209'. [ 1090.685453][T23097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.742452][T23097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.920166][T23097] team0: Port device team_slave_0 added [ 1090.950530][T23097] team0: Port device team_slave_1 added [ 1091.109383][T23097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.116605][T23097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.217038][T23097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.241231][T23097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.324032][T23097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.455558][T23097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.680583][T23324] loop2: detected capacity change from 0 to 1024 [ 1091.692946][T23324] EXT4-fs: Ignoring removed bh option [ 1091.723190][T23097] device hsr_slave_0 entered promiscuous mode [ 1091.742862][T23326] loop4: detected capacity change from 0 to 16 [ 1091.763692][T23322] loop3: detected capacity change from 0 to 1764 [ 1091.767505][T23326] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1091.779583][T23097] device hsr_slave_1 entered promiscuous mode [ 1091.805861][T23097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.827837][ T4413] udevd[4413]: incorrect cramfs checksum on /dev/loop4 [ 1091.832892][T23097] Cannot create hsr debugfs directory [ 1091.897514][T23324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1091.926134][T23322] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1092.159531][T13205] Bluetooth: hci2: command 0x0419 tx timeout [ 1092.211241][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1092.724324][T23097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1092.745521][ T26] audit: type=1326 audit(1777928717.619:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1092.756636][T23097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1092.852839][ T26] audit: type=1326 audit(1777928717.619:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1092.881660][T23097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1092.964486][T23097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1092.993520][T23356] loop2: detected capacity change from 0 to 4096 [ 1092.994495][ T26] audit: type=1326 audit(1777928717.619:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1093.096458][T23356] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1093.129448][ T26] audit: type=1326 audit(1777928717.646:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1093.259335][ T26] audit: type=1326 audit(1777928717.646:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1093.287209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.318992][T23356] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1093.363663][T23097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.409920][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1093.423278][ T26] audit: type=1326 audit(1777928717.646:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1093.448724][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.457347][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1093.468047][T23373] loop4: detected capacity change from 0 to 256 [ 1093.503621][T23097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.520670][T23373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1093.569145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1093.579635][ T26] audit: type=1326 audit(1777928717.646:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1093.605727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1093.612233][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.627875][ T4275] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 1093.639655][ T4275] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 1093.686070][ T26] audit: type=1326 audit(1777928717.646:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.8232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1093.717414][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.724998][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.810392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1093.825731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1093.867926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1093.897485][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.905128][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.961271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1094.020355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1094.032891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1094.054661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1094.065978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1094.105512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1094.134746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1094.156362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1094.190140][T23097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.209046][T23097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1094.217417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1094.234406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1094.246513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.407230][ T26] audit: type=1326 audit(1777928719.142:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23390 comm="syz.0.8247" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1094.525493][ T26] audit: type=1326 audit(1777928719.197:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23390 comm="syz.0.8247" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1094.682333][T23393] loop4: detected capacity change from 0 to 4096 [ 1094.737706][T23393] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1094.906233][T23393] ntfs3: loop4: failed to convert "c46c" to iso8859-3 [ 1094.906767][T23404] netlink: 'syz.3.8252': attribute type 1 has an invalid length. [ 1094.996992][T23407] loop2: detected capacity change from 0 to 64 [ 1095.005191][T23400] loop0: detected capacity change from 0 to 4096 [ 1095.076292][T23400] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1095.165419][T23400] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1095.498464][T23097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.528101][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1095.550920][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1095.605133][ T5353] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1095.877672][ T5353] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1095.915729][ T5353] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1095.945573][ T5353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.984244][ T5353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1096.028275][ T5353] usb 5-1: config 1 has no interface number 0 [ 1096.034689][ T5353] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1096.083347][ T5353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.139067][ T5353] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1096.357212][ T5353] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1096.376930][ T5353] snd_usb_pod 5-1:1.1: invalid control EP [ 1096.383280][ T5353] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1096.421019][ T5353] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1096.479115][ T5353] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 1096.625484][ T4840] usb 5-1: USB disconnect, device number 100 [ 1097.205380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1097.229031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.246009][T23097] device veth0_vlan entered promiscuous mode [ 1097.269957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1097.287314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1097.342036][T23097] device veth1_vlan entered promiscuous mode [ 1097.409528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1097.418405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1097.455074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1097.555121][T23481] 9p: Unknown access argument 18446744073709551615: -34 [ 1097.567408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1097.588501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.597622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.653234][T23097] device veth0_macvtap entered promiscuous mode [ 1097.658198][T23485] loop0: detected capacity change from 0 to 512 [ 1097.693251][T23097] device veth1_macvtap entered promiscuous mode [ 1097.706068][T23487] loop4: detected capacity change from 0 to 512 [ 1097.729005][T23485] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1097.751254][T23487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1097.776868][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.813911][T23485] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1097.839174][T23485] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1097.885415][T23487] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.8280: invalid indirect mapped block 4294967295 (level 1) [ 1097.900755][T23487] EXT4-fs (loop4): Remounting filesystem read-only [ 1097.907773][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.918189][T23487] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.8280: invalid indirect mapped block 4294967295 (level 1) [ 1097.935203][T23485] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1097.950919][T23485] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1097.972519][T23485] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2916: inode #16: comm syz.0.8279: corrupted xattr block 31 [ 1097.985130][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.996221][T23487] EXT4-fs (loop4): Remounting filesystem read-only [ 1098.021618][T23487] EXT4-fs (loop4): 2 truncates cleaned up [ 1098.027529][T23487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1098.037046][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.042509][T23485] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 1098.080214][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.108321][T23485] EXT4-fs (loop0): 1 orphan inode deleted [ 1098.114186][T23485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1098.118211][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.142072][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1098.148725][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1098.172865][T23490] loop2: detected capacity change from 0 to 4096 [ 1098.209280][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.214320][T23490] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1098.242436][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.277390][T23097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.310540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.346621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1098.352616][T23485] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1098.386691][T23490] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1098.400003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1098.433370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1098.467301][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 1098.475492][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.501496][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.593335][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.637195][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.670789][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.703327][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.724662][T23097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.746777][T23478] loop3: detected capacity change from 0 to 32768 [ 1098.750648][T23097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.811895][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 1098.827895][T23097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.871526][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1098.885727][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1098.927156][T23097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.949055][T23478] ERROR: (device loop3): dbAllocAG: Corrupt dmapctl page [ 1098.949055][T23478] [ 1098.974325][T23097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.997382][T23478] ERROR: (device loop3): remounting filesystem as read-only [ 1099.004814][T23478] jfs_mkdir: dtInsert returned -EIO [ 1099.040492][T23097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.049413][T23097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.070359][T23478] ERROR: (device loop3): jfs_mkdir: [ 1099.070359][T23478] [ 1099.095165][T23508] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1099.385268][T10930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.406735][T10930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.460001][T10930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1099.528870][T23515] netlink: 'syz.0.8287': attribute type 10 has an invalid length. [ 1099.566847][T23515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8287'. [ 1099.742853][T23515] team0: Port device geneve0 added [ 1099.774199][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.806000][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.859301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1100.486902][T23538] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1100.511149][T23503] loop4: detected capacity change from 0 to 40427 [ 1100.631251][T23503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1100.728671][T23549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1100.818823][T23503] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 1100.859543][T23503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1101.531452][T15306] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1101.666154][T23569] loop5: detected capacity change from 0 to 4096 [ 1101.679727][T23541] loop3: detected capacity change from 0 to 32768 [ 1101.693622][T23570] loop0: detected capacity change from 0 to 4096 [ 1101.734457][T23569] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1101.760539][T15306] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1101.786548][T15306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.821460][T23569] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1101.831116][T15306] usb 3-1: config 0 descriptor?? [ 1101.877237][T15306] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1101.929511][ T9] read_mapping_page failed! [ 1101.954921][ T9] ERROR: (device loop3): txCommit: [ 1101.954921][ T9] [ 1102.001191][T23570] __ntfs_error: 6 callbacks suppressed [ 1102.001212][T23570] ntfs: (device loop0): parse_options(): NLS character set is not found. Using previous one default. [ 1102.038738][ T9] jfs_write_inode: jfs_commit_inode failed! [ 1102.087608][T23570] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1102.234208][T23570] ntfs: volume version 3.1. [ 1102.287562][T15306] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1102.309957][T15306] pac7311: probe of 3-1:0.0 failed with error -71 [ 1102.367137][T15306] usb 3-1: USB disconnect, device number 126 [ 1102.388476][T23583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8312'. [ 1102.695195][T10930] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1102.921337][T23594] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1103.512359][T23617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8326'. [ 1103.664391][T23620] loop2: detected capacity change from 0 to 128 [ 1103.735762][T23620] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1103.759587][ T26] audit: type=1107 audit(1777928727.772:147): pid=23624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>' [ 1104.067644][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1104.754235][T23663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8346'. [ 1104.824373][T23663] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8346'. [ 1104.868118][T23663] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8346'. [ 1105.608606][T23641] loop2: detected capacity change from 0 to 32768 [ 1105.675126][T23641] [ 1105.675126][T23641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1105.675126][T23641] [ 1105.719652][T23688] netlink: 'syz.4.8355': attribute type 30 has an invalid length. [ 1105.893946][ T4275] [ 1105.893946][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1105.893946][ T4275] [ 1105.937753][T23655] loop5: detected capacity change from 0 to 32768 [ 1105.974248][ T4275] [ 1105.974248][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1105.974248][ T4275] [ 1106.317108][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1106.475999][T23704] loop2: detected capacity change from 0 to 256 [ 1107.318999][T23686] loop0: detected capacity change from 0 to 32768 [ 1107.394927][T23686] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 1107.394927][T23686] [ 1107.494514][T23686] ERROR: (device loop0): remounting filesystem as read-only [ 1107.866457][T23745] loop0: detected capacity change from 0 to 1024 [ 1107.985198][T23745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1108.174513][T23753] loop3: detected capacity change from 0 to 512 [ 1108.226355][T23753] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1108.330075][T23753] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1108.379500][T23753] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1108.434114][T23753] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1108.441894][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 1108.449602][T23753] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1108.465618][T23753] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2916: inode #16: comm syz.3.8380: corrupted xattr block 31 [ 1108.486248][T23753] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 1108.564958][T23753] EXT4-fs (loop3): 1 orphan inode deleted [ 1108.590856][T23753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1108.699425][T23768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1108.752753][T23753] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1108.761792][T23768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1108.888973][T23770] netlink: 'syz.4.8388': attribute type 21 has an invalid length. [ 1108.897115][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8388'. [ 1108.964604][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1109.288507][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1109.481206][T23790] netlink: 'syz.4.8394': attribute type 10 has an invalid length. [ 1109.498684][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 1109.505081][T23790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8394'. [ 1109.511102][ T7] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1109.523674][T23791] netlink: 'syz.2.8395': attribute type 1 has an invalid length. [ 1109.557152][ T7] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1109.572692][T23790] team0: Port device geneve0 added [ 1109.588915][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.615120][ T7] usb 6-1: Product: syz [ 1109.619364][ T7] usb 6-1: Manufacturer: syz [ 1109.667710][ T7] usb 6-1: SerialNumber: syz [ 1109.707780][ T7] r8152-cfgselector 6-1: config 0 descriptor?? [ 1110.074119][ T5361] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1110.190336][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1110.208024][ T7] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 1110.298338][ T5361] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1110.331719][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.355661][ T5361] usb 3-1: Product: syz [ 1110.359934][ T5361] usb 3-1: Manufacturer: syz [ 1110.383130][ T5361] usb 3-1: SerialNumber: syz [ 1110.400777][ T5361] usb 3-1: config 0 descriptor?? [ 1110.429165][ T5361] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1110.706506][T23827] netlink: 'syz.0.8410': attribute type 21 has an invalid length. [ 1110.726434][T23827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1110.732763][T23829] Lens A: ================= START STATUS ================= [ 1110.742150][T23825] loop3: detected capacity change from 0 to 4096 [ 1110.749634][T23829] Lens A: Focus, Absolute: 0 [ 1110.749753][T23829] Lens A: ================== END STATUS ================== [ 1110.791863][T23825] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1110.834650][T23825] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1110.864289][T23825] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1110.898894][ T5353] usb 3-1: USB disconnect, device number 127 [ 1110.918623][T23825] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1110.936275][T23831] netlink: 6716 bytes leftover after parsing attributes in process `syz.4.8413'. [ 1110.945632][T23825] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1110.979616][T23825] ntfs: volume version 3.1. [ 1110.999200][T23825] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1111.036573][T23825] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1111.080171][T23825] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1111.148901][T23825] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1111.180093][T23825] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1111.210132][T23840] Zero length message leads to an empty skb [ 1112.531392][T23891] loop2: detected capacity change from 0 to 128 [ 1112.785790][T23857] loop0: detected capacity change from 0 to 32768 [ 1112.863033][T23900] Process accounting resumed [ 1113.047994][ T5353] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1113.250924][T23908] loop3: detected capacity change from 0 to 8 [ 1113.261257][ T5353] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1113.285053][ T5353] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1113.315560][ T5353] usb 6-1: Product: syz [ 1113.326506][ T5353] usb 6-1: SerialNumber: syz [ 1113.363128][T23908] SQUASHFS error: Failed to read block 0x8f: -5 [ 1113.371174][ T5353] usb 6-1: config 0 descriptor?? [ 1113.869789][ T7] usb 6-1: USB disconnect, device number 3 [ 1113.929622][T23899] loop4: detected capacity change from 0 to 32768 [ 1114.022873][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8457'. [ 1114.048928][T23899] XFS (loop4): Mounting V5 Filesystem [ 1114.143815][T23899] XFS (loop4): Ending clean mount [ 1114.292005][ T4283] XFS (loop4): Unmounting Filesystem [ 1114.406717][T23940] rdma_rxe: rxe creation allowed on top of a real device only [ 1114.735322][T23922] loop2: detected capacity change from 0 to 32768 [ 1115.304368][T23966] netlink: 'syz.5.8470': attribute type 8 has an invalid length. [ 1115.911033][T23983] dlm: non-version read from control device 36 [ 1116.531891][T24000] program syz.4.8485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1116.663048][T24010] loop5: detected capacity change from 0 to 64 [ 1117.054626][T24024] netlink: 'syz.0.8503': attribute type 4 has an invalid length. [ 1117.093222][T24024] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8503'. [ 1117.096910][T24027] netlink: 'syz.3.8494': attribute type 10 has an invalid length. [ 1117.157385][T24027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1117.172165][T24029] loop2: detected capacity change from 0 to 2048 [ 1117.214129][T24029] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1117.311717][T24027] team0: Port device geneve0 added [ 1117.641591][T24042] program syz.5.8501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1117.918355][T24051] xt_hashlimit: size too large, truncated to 1048576 [ 1118.240731][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1118.240750][ T26] audit: type=1326 audit(1777928741.146:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24059 comm="syz.4.8511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af819cdd9 code=0x7ffc0000 [ 1118.328777][ T26] audit: type=1326 audit(1777928741.183:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24059 comm="syz.4.8511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f9af819cdd9 code=0x7ffc0000 [ 1118.408791][ T26] audit: type=1326 audit(1777928741.183:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24059 comm="syz.4.8511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af819cdd9 code=0x7ffc0000 [ 1118.489245][T24062] loop5: detected capacity change from 0 to 16 [ 1118.495768][ T26] audit: type=1326 audit(1777928741.183:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24059 comm="syz.4.8511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af819cdd9 code=0x7ffc0000 [ 1118.544829][T24062] erofs: (device loop5): mounted with root inode @ nid 36. [ 1118.570123][T24062] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD2 format 3 for nid 83, please upgrade kernel [ 1118.603930][T24029] loop2: detected capacity change from 0 to 40427 [ 1118.611095][T24062] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-95] [ 1118.647847][T24029] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1118.656097][T24029] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1118.678004][T24029] F2FS-fs (loop2): Encoding requested by superblock is unknown [ 1118.888305][T24071] netlink: 'syz.5.8514': attribute type 10 has an invalid length. [ 1118.918246][T24071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8514'. [ 1119.029753][T24071] team0: Port device geneve0 added [ 1119.088173][T24058] loop0: detected capacity change from 0 to 32768 [ 1119.173126][ T26] audit: type=1800 audit(1777928742.004:161): pid=24058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8509" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 1119.408087][T24081] loop2: detected capacity change from 0 to 256 [ 1119.449866][T24085] loop4: detected capacity change from 0 to 164 [ 1119.491650][T24085] rock: directory entry would overflow storage [ 1119.512482][T24085] rock: sig=0x4543, size=28, remaining=18 [ 1119.552047][T24087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1119.917567][T24091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8526'. [ 1120.270094][T24101] netlink: 'syz.5.8531': attribute type 21 has an invalid length. [ 1120.704848][ T93] block nbd3: Attempted send on invalid socket [ 1120.711441][ T93] I/O error, dev nbd3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1120.729440][ T93] block nbd3: Attempted send on invalid socket [ 1120.735710][ T93] I/O error, dev nbd3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1120.745278][ T93] Buffer I/O error on dev nbd3p5, logical block 1, async page read [ 1120.834903][T24120] netlink: 'syz.3.8540': attribute type 39 has an invalid length. [ 1120.920999][ T4769] udevd[4769]: inotify_add_watch(7, /dev/nbd3p5, 10) failed: No such file or directory [ 1121.269806][T24129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8543'. [ 1121.272576][T24095] loop2: detected capacity change from 0 to 32768 [ 1121.345487][T24095] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8527 (24095) [ 1121.368928][ T4348] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1121.399800][T24095] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1121.427117][T24095] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1121.477567][T24095] BTRFS info (device loop2): using free space tree [ 1121.505004][T24135] netlink: 'syz.3.8544': attribute type 10 has an invalid length. [ 1121.513429][T24135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8544'. [ 1121.525795][T24135] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1121.533197][T24135] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.559964][T24135] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1121.585269][ T4348] usb 6-1: Using ep0 maxpacket: 16 [ 1121.593434][ T4348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.608597][T24103] loop0: detected capacity change from 0 to 32768 [ 1121.617818][ T4348] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.634935][T24103] (syz.0.8532,24103,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1121.651751][ T4348] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.661929][T24103] (syz.0.8532,24103,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1121.676327][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.694749][ T4348] usb 6-1: Product: syz [ 1121.699992][ T4348] usb 6-1: Manufacturer: syz [ 1121.705303][ T4348] usb 6-1: SerialNumber: syz [ 1121.754418][T24095] BTRFS info (device loop2): enabling ssd optimizations [ 1121.763492][T24103] JBD2: Ignoring recovery information on journal [ 1121.939263][ T4348] usb 6-1: 0:2 : does not exist [ 1121.956438][ T4348] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1122.029720][ T4348] usb 6-1: USB disconnect, device number 4 [ 1122.051393][T24103] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1122.101043][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1122.344482][ T4541] udevd[4541]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.388816][T24166] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1122.827130][ T4284] ocfs2: Unmounting device (7,0) on (node local) [ 1122.939779][T24176] netlink: 'syz.4.8554': attribute type 12 has an invalid length. [ 1122.964996][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8555'. [ 1123.272943][T24186] loop3: detected capacity change from 0 to 164 [ 1123.273104][T24182] loop5: detected capacity change from 0 to 1764 [ 1123.381057][T24186] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1124.042243][T24213] netlink: 272 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1124.204742][T24219] loop2: detected capacity change from 0 to 16 [ 1124.216818][T24219] erofs: (device loop2): mounted with root inode @ nid 36. [ 1124.403464][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8572'. [ 1124.656395][T24232] wg1 speed is unknown, defaulting to 1000 [ 1124.685112][T24232] wg1 speed is unknown, defaulting to 1000 [ 1124.732599][T24232] wg1 speed is unknown, defaulting to 1000 [ 1124.740552][T24236] loop0: detected capacity change from 0 to 2048 [ 1124.793529][T24236] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 1124.819288][T24232] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1124.843046][T24232] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1124.868470][T24236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1125.094703][T24232] wg1 speed is unknown, defaulting to 1000 [ 1125.149355][T24232] wg1 speed is unknown, defaulting to 1000 [ 1125.186747][T24232] wg1 speed is unknown, defaulting to 1000 [ 1125.235908][T24232] wg1 speed is unknown, defaulting to 1000 [ 1125.261279][T24232] wg1 speed is unknown, defaulting to 1000 [ 1125.333523][T24245] loop5: detected capacity change from 0 to 4096 [ 1125.343922][T24245] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1125.392370][T24245] ntfs3: loop5: Failed to load $Extend. [ 1125.450747][T24224] loop3: detected capacity change from 0 to 32768 [ 1125.470692][T24224] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8573 (24224) [ 1125.500354][T24224] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1125.500441][T24224] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1125.500530][T24224] BTRFS info (device loop3): using free space tree [ 1125.770599][T24275] loop4: detected capacity change from 0 to 2048 [ 1125.842104][T24224] BTRFS info (device loop3): enabling ssd optimizations [ 1125.919792][T24224] BTRFS warning (device loop3): can't clear the compat_ro:1 feature bit while mounted [ 1125.974785][T24281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1126.063346][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1126.093359][T24285] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.198319][ T4413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4413) [ 1127.002423][T24307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1127.034283][T24309] loop4: detected capacity change from 0 to 8 [ 1127.056716][T24307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1127.104152][T24311] loop5: detected capacity change from 0 to 512 [ 1127.151441][T24309] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1127.199212][T24309] SQUASHFS error: Failed to read block 0x91: -5 [ 1127.199790][T24311] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1127.213815][T24309] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1127.240031][T24309] SQUASHFS error: Unable to read inode 0x11f [ 1127.246377][T24311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1127.254879][T24311] System zones: 0-1, 15-15, 18-18, 34-34 [ 1127.261899][T24311] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1127.270006][T24311] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1127.417621][T24311] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1127.496320][T24311] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1127.550742][T24311] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.8598: bad orphan inode 16 [ 1127.587814][T24311] ext4_test_bit(bit=15, block=18) = 1 [ 1127.593402][T24311] is_bad_inode(inode)=0 [ 1127.597611][T24311] NEXT_ORPHAN(inode)=0 [ 1127.602027][T24319] loop2: detected capacity change from 0 to 128 [ 1127.658062][T24311] max_ino=32 [ 1127.683839][T24311] i_nlink=2 [ 1127.715720][T24311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1127.725907][T24319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1127.739556][T24319] ext4 filesystem being mounted at /1694/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.908187][T24311] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1128.023619][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1128.141232][T23097] EXT4-fs (loop5): unmounting filesystem. [ 1128.277382][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8605'. [ 1128.374722][T24336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1128.450936][T24336] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1128.483740][T24336] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.650634][ T4328] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1128.658902][T24336] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1128.698124][T24336] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1128.779164][T24336] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.8606: Failed to acquire dquot type 1 [ 1128.868191][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1128.906136][ T4328] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1128.944376][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1128.964165][ T4328] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1128.985067][ T4328] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1129.000682][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.043835][T23097] EXT4-fs (loop5): unmounting filesystem. [ 1129.058126][ T4328] usb 4-1: config 0 descriptor?? [ 1129.302232][ T4328] hdpvr 4-1:0.0: firmware version 0xd8 dated šIÜ#·¤ÎS«SÌðæP©’+¹g(j@£9ˆ*·ƒ0¾3‹ŒrÚ%  » [ 1129.340089][ T4328] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1129.511959][T24372] syz.2.8619 uses old SIOCAX25GETINFO [ 1129.532843][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8618'. [ 1129.547444][T24370] set_capacity_and_notify: 1 callbacks suppressed [ 1129.547464][T24370] loop0: detected capacity change from 0 to 4096 [ 1129.550666][ T4328] hdpvr 4-1:0.0: device init failed [ 1129.601380][ T4328] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1129.614112][T24376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1129.643244][ T4328] usb 4-1: USB disconnect, device number 102 [ 1129.710886][ T5358] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1129.916966][ T5358] usb 5-1: Using ep0 maxpacket: 16 [ 1129.925045][ T5358] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.979355][ T5358] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.019563][ T5358] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.052208][ T5358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.094038][ T5358] usb 5-1: Product: syz [ 1130.109488][ T5358] usb 5-1: Manufacturer: syz [ 1130.141336][ T5358] usb 5-1: SerialNumber: syz [ 1130.393651][ T5358] usb 5-1: 0:2 : does not exist [ 1130.406611][ T5358] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1130.448550][ T5358] usb 5-1: USB disconnect, device number 101 [ 1130.609596][T24405] dlm: no locking on control device [ 1130.718501][ T5361] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1130.737625][ T4769] udevd[4769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1130.848610][ T5356] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1130.967017][T24414] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1130.967672][ T5361] usb 4-1: Using ep0 maxpacket: 16 [ 1131.019490][ T5361] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1131.049803][ T5361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.060501][ T5356] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1131.076145][ T5356] usb 3-1: config 0 has no interface number 0 [ 1131.088896][ T5361] usb 4-1: config 0 descriptor?? [ 1131.097669][ T5356] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1131.112080][ T5361] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1131.135934][ T5356] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1131.157413][ T5356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.180602][ T5356] usb 3-1: config 0 descriptor?? [ 1131.212860][ T5356] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input75 [ 1131.334832][ T5361] usb 4-1: Detected FT232B [ 1131.483470][T24399] loop0: detected capacity change from 0 to 32768 [ 1131.558250][ T5361] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1131.576036][ T5361] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1131.605868][ T5361] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1131.651307][ T5361] usb 4-1: USB disconnect, device number 103 [ 1131.692922][ T5361] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1131.752831][ T5361] ftdi_sio 4-1:0.0: device disconnected [ 1131.983144][ T5358] usb 3-1: USB disconnect, device number 2 [ 1132.055520][T24433] loop4: detected capacity change from 0 to 256 [ 1132.145941][T24433] FAT-fs (loop4): Directory bread(block 64) failed [ 1132.164898][T24433] FAT-fs (loop4): Directory bread(block 65) failed [ 1132.192787][T24433] FAT-fs (loop4): Directory bread(block 66) failed [ 1132.232312][T24433] FAT-fs (loop4): Directory bread(block 67) failed [ 1132.265391][T24433] FAT-fs (loop4): Directory bread(block 68) failed [ 1132.298614][T24433] FAT-fs (loop4): Directory bread(block 69) failed [ 1132.328670][T24437] tmpfs: Bad value for 'mpol' [ 1132.331460][T24433] FAT-fs (loop4): Directory bread(block 70) failed [ 1132.378055][T24433] FAT-fs (loop4): Directory bread(block 71) failed [ 1132.384780][T24433] FAT-fs (loop4): Directory bread(block 72) failed [ 1132.444918][T24433] FAT-fs (loop4): Directory bread(block 73) failed [ 1133.343928][T24463] ERROR: device name not specified. [ 1133.964815][T24480] 9pnet: Could not find request transport: virTio [ 1134.222216][T24497] device vti0 entered promiscuous mode [ 1134.947941][T24529] loop5: detected capacity change from 0 to 256 [ 1134.994669][T24529] exfat: Deprecated parameter 'namecase' [ 1135.038071][T24534] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8678'. [ 1135.076583][T24529] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1135.675648][T24554] netlink: 'syz.0.8685': attribute type 1 has an invalid length. [ 1135.708453][T24554] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1135.918346][T24564] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1135.997510][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1136.034725][T24570] netlink: 'syz.0.8691': attribute type 1 has an invalid length. [ 1136.313335][T24582] loop5: detected capacity change from 0 to 8 [ 1136.401623][T24582] SQUASHFS error: Failed to read block 0x738: -5 [ 1136.438384][T24582] SQUASHFS error: Unable to read metadata cache entry [736] [ 1136.829131][T24596] loop4: detected capacity change from 0 to 2048 [ 1136.933270][T24596] GPT:first_usable_lbas don't match. [ 1136.948248][T24596] GPT:34 != 290 [ 1136.951809][T24596] GPT: Use GNU Parted to correct GPT errors. [ 1136.957930][T24596] loop4: p1 p2 p3 [ 1137.327325][ T5361] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1137.535135][ T5361] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 1137.565996][ T5361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1137.604280][ T5361] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1137.641992][ T5361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.672475][ T5361] usb 5-1: Product: syz [ 1137.677044][ T5361] usb 5-1: Manufacturer: syz [ 1137.681788][ T5361] usb 5-1: SerialNumber: syz [ 1137.953560][ T5361] usb 5-1: 0:2 : does not exist [ 1137.958875][ T5361] usb 5-1: unit 9 not found! [ 1137.993535][ T5361] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1138.054547][ T5361] usb 5-1: USB disconnect, device number 102 [ 1138.143283][T24635] loop3: detected capacity change from 0 to 256 [ 1138.147728][T24603] loop2: detected capacity change from 0 to 32768 [ 1138.161731][T24635] exfat: Deprecated parameter 'utf8' [ 1138.173476][T24635] exfat: Deprecated parameter 'namecase' [ 1138.202424][T24635] exfat: Deprecated parameter 'namecase' [ 1138.218422][T24603] (syz.2.8706,24603,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1138.257493][T24635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 1138.261852][T24603] (syz.2.8706,24603,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1138.336943][ T4769] udevd[4769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.473544][T24603] JBD2: Ignoring recovery information on journal [ 1138.639044][T24649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1138.648260][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1138.708970][T24603] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1138.718432][T24650] loop0: detected capacity change from 0 to 512 [ 1138.762805][T24650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1138.982736][T24650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1139.034825][T24650] ext4 filesystem being mounted at /1729/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.201355][T24650] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1139.276110][T24650] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1139.326198][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 1139.337921][T24650] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.8721: Failed to acquire dquot type 1 [ 1139.375298][T24668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8728'. [ 1139.599220][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 1140.108610][ T26] audit: type=1326 audit(1777928761.323:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.163060][ T26] audit: type=1326 audit(1777928761.323:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.214935][ T26] audit: type=1326 audit(1777928761.323:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.241502][ T26] audit: type=1326 audit(1777928761.323:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.324473][ T26] audit: type=1326 audit(1777928761.323:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.426196][ T26] audit: type=1326 audit(1777928761.323:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.455909][T24700] loop5: detected capacity change from 0 to 4096 [ 1140.523535][ T26] audit: type=1326 audit(1777928761.323:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.647041][ T26] audit: type=1326 audit(1777928761.323:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.5.8741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d859cdd9 code=0x7ffc0000 [ 1140.771017][T24712] loop3: detected capacity change from 0 to 128 [ 1140.820043][T24712] affs: Error parsing options [ 1141.190406][T24724] syz.3.8755 (24724): /proc/24722/oom_adj is deprecated, please use /proc/24722/oom_score_adj instead. [ 1141.914768][T24750] netlink: 'syz.3.8768': attribute type 21 has an invalid length. [ 1141.953721][T24750] IPv6: NLM_F_CREATE should be specified when creating new route [ 1141.983760][T24750] netlink: 'syz.3.8768': attribute type 1 has an invalid length. [ 1142.205363][T24761] netlink: 'syz.0.8772': attribute type 2 has an invalid length. [ 1142.232933][T24762] loop3: detected capacity change from 0 to 512 [ 1142.246131][T24761] netlink: 'syz.0.8772': attribute type 1 has an invalid length. [ 1142.254041][T24761] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1142.324081][T24762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1142.336278][T24762] ext4 filesystem being mounted at /1894/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.636372][ T4840] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1142.818055][T24787] loop0: detected capacity change from 0 to 22 [ 1142.865597][ T4840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.873343][T24787] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1142.906989][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 1142.927580][T24787] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1142.965231][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1143.009495][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1143.039075][ T4840] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.081853][ T4840] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1143.090993][ T4840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.140316][ T4840] usb 4-1: config 0 descriptor?? [ 1143.178511][T24762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1143.290093][T24794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8789'. [ 1143.318296][T24794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8789'. [ 1143.464597][ T5358] usb 4-1: USB disconnect, device number 104 [ 1143.653667][T24781] loop5: detected capacity change from 0 to 32768 [ 1143.726103][T24781] [ 1143.726103][T24781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1143.726103][T24781] [ 1143.795935][T24781] ialloc: diAlloc returned -5! [ 1143.923873][T23097] [ 1143.923873][T23097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1143.923873][T23097] [ 1143.960954][T23097] [ 1143.960954][T23097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1143.960954][T23097] [ 1144.110542][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1144.717262][T24834] loop4: detected capacity change from 0 to 2048 [ 1144.784720][T24834] loop4: p1 p2 < > p3 < p5 > p4 [ 1144.789934][T24834] loop4: partition table partially beyond EOD, truncated [ 1144.835648][T24834] loop4: p1 size 917504 extends beyond EOD, truncated [ 1144.879164][T24834] loop4: p2 start 4278190080 is beyond EOD, truncated [ 1144.889685][ T26] audit: type=1326 audit(1777928765.735:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1144.914664][T24834] loop4: p4 start 150994949 is beyond EOD, truncated [ 1144.921459][T24834] loop4: p5 size 917504 extends beyond EOD, truncated [ 1144.983861][ T26] audit: type=1326 audit(1777928765.744:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.106669][ T26] audit: type=1326 audit(1777928765.744:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.246686][T24815] loop0: detected capacity change from 0 to 32768 [ 1145.254425][ T26] audit: type=1326 audit(1777928765.744:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.388043][ T26] audit: type=1326 audit(1777928765.744:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.442389][ T26] audit: type=1326 audit(1777928765.744:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.475186][ T26] audit: type=1326 audit(1777928765.744:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.512810][T24815] XFS (loop0): Mounting V5 Filesystem [ 1145.561796][ T26] audit: type=1326 audit(1777928765.744:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.3.8811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1145.638640][T24858] Process accounting paused [ 1145.690144][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1145.726680][ T4769] udevd[4769]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1145.737669][ T4541] udevd[4541]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1145.743074][T24815] XFS (loop0): Ending clean mount [ 1145.777062][T24815] XFS (loop0): Quotacheck needed: Please wait. [ 1145.862649][ T4769] udevd[4769]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1145.877228][ T4541] udevd[4541]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1145.892818][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1145.965956][T24815] XFS (loop0): Quotacheck: Done. [ 1145.982248][ C1] sd 0:0:1:0: [sda] tag#370 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1145.993247][ C1] sd 0:0:1:0: [sda] tag#370 CDB: Read(6) 08 00 00 00 03 44 [ 1146.294575][ T4284] XFS (loop0): Unmounting Filesystem [ 1146.404256][T24880] loop2: detected capacity change from 0 to 4096 [ 1146.460752][T24880] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1146.960898][T24872] loop4: detected capacity change from 0 to 32768 [ 1147.000791][T24872] (syz.4.8822,24872,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1147.076608][T24872] (syz.4.8822,24872,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1147.142067][T24872] JBD2: Ignoring recovery information on journal [ 1147.254151][T24872] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1147.550719][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 1147.823946][T24915] loop0: detected capacity change from 0 to 4096 [ 1147.843397][T24915] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1147.980751][T24915] ntfs: volume version 3.1. [ 1148.065625][T24915] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1148.296961][T24932] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8849'. [ 1148.794826][T24949] loop5: detected capacity change from 0 to 1024 [ 1148.857649][T24953] loop3: detected capacity change from 0 to 256 [ 1148.893205][T24953] exfat: Deprecated parameter 'utf8' [ 1148.924011][T24955] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8861'. [ 1148.950754][T24953] exfat: Deprecated parameter 'utf8' [ 1148.971693][T24953] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1149.156555][T24953] fuse: Bad value for 'fd' [ 1149.667698][ T5361] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1149.757794][T24947] loop4: detected capacity change from 0 to 32768 [ 1149.785012][T24947] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1149.873343][ T5361] usb 4-1: Using ep0 maxpacket: 32 [ 1149.886468][ T5361] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1149.934720][ T5361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.989571][ T5361] usb 4-1: config 0 descriptor?? [ 1150.030290][ T5361] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1150.203331][ T4769] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1150.451939][ T5361] gspca_sq930x: ucbus_write failed -71 [ 1150.459291][ T5361] sq930x: probe of 4-1:0.0 failed with error -71 [ 1150.485155][ T5361] usb 4-1: USB disconnect, device number 105 [ 1151.422993][ T5361] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1151.620957][ T5361] usb 6-1: Using ep0 maxpacket: 16 [ 1151.638480][ T5361] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1151.671183][ T5361] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.698740][ T5361] usb 6-1: config 0 has no interface number 0 [ 1151.738340][ T5361] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1151.758771][ T5361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.789181][ T5361] usb 6-1: Product: syz [ 1151.799559][ T5361] usb 6-1: Manufacturer: syz [ 1151.818635][ T5361] usb 6-1: SerialNumber: syz [ 1151.844282][ T5361] usb 6-1: config 0 descriptor?? [ 1151.862489][T25043] netlink: 'syz.2.8902': attribute type 13 has an invalid length. [ 1151.877035][T25043] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8902'. [ 1151.897274][T25043] syz_tun: refused to change device tx_queue_len [ 1151.912527][T25043] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1151.918315][T25015] loop0: detected capacity change from 0 to 32768 [ 1151.975577][T25015] (syz.0.8890,25015,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1152.030124][T25015] (syz.0.8890,25015,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1152.090683][ T5361] usb 6-1: Found UVC 0.00 device syz (046d:08d3) [ 1152.114801][ T5361] usb 6-1: No valid video chain found. [ 1152.141911][T25015] JBD2: Ignoring recovery information on journal [ 1152.162616][T25052] xt_TCPMSS: Only works on TCP SYN packets [ 1152.230745][T25015] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1152.322867][ T5356] usb 6-1: USB disconnect, device number 5 [ 1152.500695][ T4284] ocfs2: Unmounting device (7,0) on (node local) [ 1153.360997][T25078] loop5: detected capacity change from 0 to 4096 [ 1153.407282][T25078] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1153.434934][T25086] loop3: detected capacity change from 0 to 2048 [ 1153.536614][T25086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.549529][T25078] ntfs3: loop5: failed to convert "c46c" to koi8-u [ 1153.765858][T25095] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1154.028912][T25102] cgroup: subsys name conflicts with all [ 1154.161169][T25110] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8934'. [ 1154.596277][T25127] loop2: detected capacity change from 0 to 64 [ 1154.673328][T25127] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1155.444918][T25159] loop0: detected capacity change from 0 to 128 [ 1155.478327][T25159] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1155.576691][T25159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1155.797953][T25166] loop4: detected capacity change from 0 to 1764 [ 1155.944074][T25166] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1156.273462][T25180] loop4: detected capacity change from 0 to 1024 [ 1156.375204][T25180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1156.423974][T25188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1156.500605][T25191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8972'. [ 1156.510842][T25191] tc_dump_action: action bad kind [ 1156.537443][T25180] EXT4-fs warning (device loop4): ext4_rmdir:3243: inode #11: comm syz.4.8968: empty directory 'file1' has too many links (111) [ 1156.677693][T25193] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1156.725368][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 1157.107223][T25170] loop3: detected capacity change from 0 to 32768 [ 1157.245710][T25213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8982'. [ 1157.293071][T25170] XFS (loop3): Mounting V5 Filesystem [ 1157.305231][T25213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8982'. [ 1157.433174][T25228] loop4: detected capacity change from 0 to 256 [ 1157.433274][T25170] XFS (loop3): Ending clean mount [ 1157.501875][T25230] xt_l2tp: invalid flags combination: 4 [ 1157.507999][T25170] XFS (loop3): Quotacheck needed: Please wait. [ 1157.633963][T25170] XFS (loop3): Quotacheck: Done. [ 1157.837880][ T4274] XFS (loop3): Unmounting Filesystem [ 1157.916027][ T4328] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1158.139926][ T4328] usb 6-1: Using ep0 maxpacket: 8 [ 1158.147022][ T4328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.186540][ T4328] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1158.226994][ T4328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1158.235449][ T4328] usb 6-1: SerialNumber: syz [ 1158.290310][ T4328] usb 6-1: config 0 descriptor?? [ 1158.327563][ T4328] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 1158.349420][ T4328] usb 6-1: Failed to create links for entity 255 [ 1158.356121][ T4328] usb 6-1: Failed to register entities (-22). [ 1158.566550][ T4844] usb 6-1: USB disconnect, device number 6 [ 1158.687232][T25258] loop3: detected capacity change from 0 to 1024 [ 1158.867220][T25258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1158.919030][T25272] loop0: detected capacity change from 0 to 4096 [ 1159.111651][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1159.651199][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1159.651218][ T26] audit: type=1326 audit(1777928779.358:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25292 comm="syz.3.9019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1159.771262][ T26] audit: type=1326 audit(1777928779.367:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25292 comm="syz.3.9019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1159.877478][ T26] audit: type=1326 audit(1777928779.404:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25292 comm="syz.3.9019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1159.982919][ T26] audit: type=1326 audit(1777928779.404:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25292 comm="syz.3.9019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1160.123148][ T26] audit: type=1326 audit(1777928779.404:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25292 comm="syz.3.9019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1161.118020][T25313] loop5: detected capacity change from 0 to 32768 [ 1161.165358][T25339] QAT: failed to copy from user. [ 1161.192832][T25313] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1161.456672][T25321] loop0: detected capacity change from 0 to 32768 [ 1161.476984][T25349] netlink: 'syz.3.9045': attribute type 46 has an invalid length. [ 1161.506838][T25321] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.9030 (25321) [ 1161.532025][T25349] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1161.608251][T25321] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1161.654773][ T4769] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1161.665578][T25321] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1161.688889][T25321] BTRFS info (device loop0): enabling ssd optimizations [ 1161.736949][T25321] BTRFS info (device loop0): not using ssd optimizations [ 1161.744576][T25321] BTRFS info (device loop0): turning off barriers [ 1161.752476][T25321] BTRFS info (device loop0): using free space tree [ 1162.095795][T25355] loop2: detected capacity change from 0 to 4096 [ 1162.118221][T25321] BTRFS warning (device loop0): get dev_stats failed, device not found [ 1162.176704][T25355] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1162.289713][ T4284] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1162.863297][T25393] loop4: detected capacity change from 0 to 2048 [ 1162.959077][T25393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1163.644035][T25411] netlink: 'syz.2.9066': attribute type 3 has an invalid length. [ 1163.672074][T25411] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9066'. [ 1163.767868][T25387] loop3: detected capacity change from 0 to 32768 [ 1163.825073][T25387] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1163.871531][T25387] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1163.880393][T25387] BTRFS info (device loop3): using free space tree [ 1163.977688][T25422] netlink: 'syz.2.9071': attribute type 6 has an invalid length. [ 1164.118524][T15306] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1164.289384][T25387] BTRFS info (device loop3): enabling ssd optimizations [ 1164.360574][T15306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.391194][T15306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.464394][T15306] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1164.506104][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1164.506934][T15306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.563424][T15306] usb 5-1: Product: syz [ 1164.575581][T15306] usb 5-1: Manufacturer: syz [ 1164.580262][T15306] usb 5-1: SerialNumber: syz [ 1164.708134][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1164.714563][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1164.856413][T15306] usb 5-1: 0:1 : does not exist [ 1164.877970][T15306] usb 5-1: unit 0 not found! [ 1164.933100][T15306] usb 5-1: USB disconnect, device number 103 [ 1165.259786][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1165.623987][T25481] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9091'. [ 1165.669735][T25481] netlink: 658 bytes leftover after parsing attributes in process `syz.5.9091'. [ 1166.463886][T25513] loop3: detected capacity change from 0 to 128 [ 1166.541966][T25513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1166.580162][T25513] ext4 filesystem being mounted at /1951/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.612031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.626104][T25513] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.9108: No space for directory leaf checksum. Please run e2fsck -D. [ 1166.655337][T25513] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.9108: checksumming directory block 0 [ 1166.827935][T25527] loop4: detected capacity change from 0 to 256 [ 1166.837218][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1167.047837][T25535] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9116'. [ 1167.471631][T25550] netlink: 'syz.0.9126': attribute type 1 has an invalid length. [ 1167.480497][T25550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9126'. [ 1167.555047][T25553] ieee802154 phy0 wpan0: encryption failed: -22 [ 1168.212590][ T26] audit: type=1326 audit(1777928787.268:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.9140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1168.336271][ T26] audit: type=1326 audit(1777928787.268:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.9140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1168.421781][ T26] audit: type=1326 audit(1777928787.314:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.9140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1168.446002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1168.529460][ T26] audit: type=1326 audit(1777928787.314:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.9140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1168.553733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1168.726368][ T26] audit: type=1326 audit(1777928787.314:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.9140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f79cdd9 code=0x7ffc0000 [ 1169.102037][T25598] netlink: 'syz.3.9149': attribute type 2 has an invalid length. [ 1169.123958][T25598] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9149'. [ 1169.142062][T25593] loop2: detected capacity change from 0 to 32768 [ 1169.331100][T25600] loop4: detected capacity change from 0 to 4096 [ 1169.410331][T25605] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1169.867012][T25589] loop0: detected capacity change from 0 to 32768 [ 1170.028672][T25589] XFS (loop0): Mounting V5 Filesystem [ 1170.171614][T25589] XFS (loop0): Ending clean mount [ 1170.199291][T25589] XFS (loop0): Quotacheck needed: Please wait. [ 1170.303931][T25589] XFS (loop0): Quotacheck: Done. [ 1170.418707][ T4284] XFS (loop0): Unmounting Filesystem [ 1170.734452][T25642] loop5: detected capacity change from 0 to 256 [ 1170.831571][T25642] FAT-fs (loop5): Directory bread(block 64) failed [ 1170.849752][T25642] FAT-fs (loop5): Directory bread(block 65) failed [ 1170.860000][T25642] FAT-fs (loop5): Directory bread(block 66) failed [ 1170.877399][T25642] FAT-fs (loop5): Directory bread(block 67) failed [ 1170.885236][T16922] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1170.897665][T25644] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1170.914839][T25642] FAT-fs (loop5): Directory bread(block 68) failed [ 1170.921744][T25642] FAT-fs (loop5): Directory bread(block 69) failed [ 1170.935291][T25642] FAT-fs (loop5): Directory bread(block 70) failed [ 1170.946181][T25642] FAT-fs (loop5): Directory bread(block 71) failed [ 1170.957041][T25642] FAT-fs (loop5): Directory bread(block 72) failed [ 1170.975371][T25642] FAT-fs (loop5): Directory bread(block 73) failed [ 1171.095929][T16922] usb 3-1: Using ep0 maxpacket: 32 [ 1171.103396][T16922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.149802][T16922] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1171.155682][T25648] trusted_key: encrypted_key: master key parameter '' is invalid [ 1171.171640][T16922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.204077][T16922] usb 3-1: Product: syz [ 1171.214587][T16922] usb 3-1: Manufacturer: syz [ 1171.228813][T16922] usb 3-1: SerialNumber: syz [ 1171.251074][T16922] usb 3-1: config 0 descriptor?? [ 1171.265919][T16922] usb 3-1: bad CDC descriptors [ 1171.272036][T16922] usb 3-1: unsupported MDLM descriptors [ 1171.387550][T25652] device veth3 entered promiscuous mode [ 1171.492622][T25654] loop5: detected capacity change from 0 to 2048 [ 1171.518923][T16922] usb 3-1: USB disconnect, device number 3 [ 1171.543641][T25654] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1171.626707][T25659] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1172.414686][T15306] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1172.420424][T25681] loop4: detected capacity change from 0 to 4096 [ 1172.446673][T25681] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1172.554446][T25681] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1172.594163][T25681] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1172.609596][T25681] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1172.627477][T15306] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 1172.640578][T25681] ntfs: volume version 3.1. [ 1172.657746][T15306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.696846][T15306] usb 6-1: config 0 has no interface number 0 [ 1172.711547][T25681] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1172.725106][T15306] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1172.725140][T15306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.725163][T15306] usb 6-1: Product: syz [ 1172.725179][T15306] usb 6-1: Manufacturer: syz [ 1172.725195][T15306] usb 6-1: SerialNumber: syz [ 1172.727000][T15306] usb 6-1: config 0 descriptor?? [ 1173.042239][T15306] usb 6-1: USB disconnect, device number 7 [ 1174.018322][T23100] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1174.088140][T25729] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9208'. [ 1174.181399][T25733] loop3: detected capacity change from 0 to 512 [ 1174.216422][T25735] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.9210'. [ 1174.242868][T25732] device veth3 entered promiscuous mode [ 1174.243828][T25735] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9210'. [ 1174.261606][T25733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1174.322944][T25733] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.9209: bad orphan inode 131083 [ 1174.356849][T25733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1174.446967][T25733] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.9209: reserved inode found cleared - inode=18 [ 1174.677849][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1174.978779][T25757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1175.610611][T25780] loop0: detected capacity change from 0 to 4096 [ 1175.654677][T25780] __ntfs_warning: 1 callbacks suppressed [ 1175.654695][T25780] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1175.744016][T25780] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1175.777607][T25780] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1175.810721][T25780] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1175.846739][T25780] ntfs: volume version 3.1. [ 1175.897464][T15306] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1175.949508][T25780] ntfs: (device loop0): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1176.052627][ T4284] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1176.073375][T25793] loop5: detected capacity change from 0 to 4096 [ 1176.086838][T25793] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1176.113988][T15306] usb 5-1: Using ep0 maxpacket: 16 [ 1176.121089][T15306] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1176.123400][T25793] ntfs3: loop5: failed to convert "c46c" to macgreek [ 1176.146512][T15306] usb 5-1: config 1 has no interface number 0 [ 1176.186266][T15306] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1176.217810][T15306] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1176.245431][T15306] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1176.255614][T15306] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1176.265880][ T4840] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1176.273727][T15306] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1176.283857][T15306] usb 5-1: Product: syz [ 1176.289900][T15306] usb 5-1: Manufacturer: syz [ 1176.294817][T15306] usb 5-1: SerialNumber: syz [ 1176.311700][T25785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1176.329037][T25785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1176.493348][ T4840] usb 4-1: Using ep0 maxpacket: 16 [ 1176.510742][ T4840] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1176.547314][ T4328] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1176.555395][ T4840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.572738][T15306] aqc111: probe of 5-1:1.105 failed with error -71 [ 1176.603618][T15306] usb 5-1: USB disconnect, device number 104 [ 1176.621440][ T4840] usb 4-1: Product: syz [ 1176.635218][ T4840] usb 4-1: Manufacturer: syz [ 1176.643549][ T4840] usb 4-1: SerialNumber: syz [ 1176.665267][ T4840] usb 4-1: config 0 descriptor?? [ 1176.799575][ T4328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.821075][ T4328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1176.854259][ T4328] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1176.882772][ T4328] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1176.903321][ T4840] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1176.921668][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1176.932484][ T4328] usb 1-1: Product: syz [ 1176.937033][ T4328] usb 1-1: Manufacturer: syz [ 1176.949152][ T4840] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1176.957308][ T4328] usb 1-1: SerialNumber: syz [ 1176.963182][ T4840] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1176.963182][ T4840] Please send a copy of this message to and [ 1176.990733][ T4328] usb 1-1: config 0 descriptor?? [ 1177.003112][ T4328] usb 1-1: no audio or video endpoints found [ 1177.045020][ T4840] usb 4-1: USB disconnect, device number 106 [ 1177.098184][T25799] loop2: detected capacity change from 0 to 40427 [ 1177.130029][T25799] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 1177.161685][T25799] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1177.188401][T25799] F2FS-fs (loop2): invalid crc value [ 1177.212049][T25799] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1177.245147][ T5360] usb 1-1: USB disconnect, device number 120 [ 1177.372605][T25820] loop4: detected capacity change from 0 to 2048 [ 1177.381820][T25799] F2FS-fs (loop2): recover fsync data on readonly fs [ 1177.403549][T25799] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 1177.409589][T25820] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1177.424832][T25799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1177.478984][T25823] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1177.840629][T25831] SET target dimension over the limit! [ 1177.934209][ T4328] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1178.018402][T25837] loop3: detected capacity change from 0 to 256 [ 1178.144947][T25837] FAT-fs (loop3): Directory bread(block 64) failed [ 1178.172042][T25837] FAT-fs (loop3): Directory bread(block 65) failed [ 1178.172794][ T4328] usb 6-1: Using ep0 maxpacket: 16 [ 1178.194397][T25837] FAT-fs (loop3): Directory bread(block 66) failed [ 1178.216214][T25837] FAT-fs (loop3): Directory bread(block 67) failed [ 1178.221051][ T4328] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1178.226773][T25837] FAT-fs (loop3): Directory bread(block 68) failed [ 1178.261906][ T4328] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1178.285752][ T4328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.288433][T25837] FAT-fs (loop3): Directory bread(block 69) failed [ 1178.299175][ T4328] usb 6-1: Product: syz [ 1178.306921][ T4328] usb 6-1: Manufacturer: syz [ 1178.309024][T25837] FAT-fs (loop3): Directory bread(block 70) failed [ 1178.317321][ T4328] usb 6-1: SerialNumber: syz [ 1178.320212][T25837] FAT-fs (loop3): Directory bread(block 71) failed [ 1178.335820][T25837] FAT-fs (loop3): Directory bread(block 72) failed [ 1178.342417][T25837] FAT-fs (loop3): Directory bread(block 73) failed [ 1178.342774][ T4328] usb 6-1: config 0 descriptor?? [ 1178.364078][T25825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1178.388812][T25799] Process accounting resumed [ 1178.414241][ T4328] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 1178.806934][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 1178.813170][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 1178.835231][ T4328] usb 6-1: USB disconnect, device number 8 [ 1178.842462][ T4328] mcba_usb 6-1:0.0 can0: device disconnected [ 1179.219622][T25868] loop2: detected capacity change from 0 to 16 [ 1179.245426][T25868] erofs: (device loop2): mounted with root inode @ nid 36. [ 1180.342239][T25891] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1181.417712][ T26] audit: type=1326 audit(1777928799.452:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.509428][T16922] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1181.547085][ T26] audit: type=1326 audit(1777928799.452:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.602572][ T26] audit: type=1326 audit(1777928799.498:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.662821][ T26] audit: type=1326 audit(1777928799.498:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.691694][ T26] audit: type=1326 audit(1777928799.498:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.743844][ T26] audit: type=1326 audit(1777928799.498:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.777570][T16922] usb 1-1: too many configurations: 217, using maximum allowed: 8 [ 1181.822758][T25935] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9298'. [ 1181.834417][T16922] usb 1-1: config index 0 descriptor too short (expected 52555, got 72) [ 1181.889417][T16922] usb 1-1: config index 1 descriptor too short (expected 52555, got 72) [ 1181.911033][T16922] usb 1-1: config index 2 descriptor too short (expected 52555, got 72) [ 1181.919712][ T26] audit: type=1326 audit(1777928799.498:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1181.968401][T16922] usb 1-1: config index 3 descriptor too short (expected 52555, got 72) [ 1182.001134][T16922] usb 1-1: config index 4 descriptor too short (expected 52555, got 72) [ 1182.020788][ T26] audit: type=1326 audit(1777928799.517:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1182.055417][T16922] usb 1-1: config index 5 descriptor too short (expected 52555, got 72) [ 1182.095135][T16922] usb 1-1: config index 6 descriptor too short (expected 52555, got 72) [ 1182.109427][T25945] netlink: 'syz.3.9302': attribute type 1 has an invalid length. [ 1182.145764][T16922] usb 1-1: config index 7 descriptor too short (expected 52555, got 72) [ 1182.154530][T25945] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9302'. [ 1182.169897][ T26] audit: type=1326 audit(1777928799.517:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25928 comm="syz.3.9296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f52d7b9cdd9 code=0x7ffc0000 [ 1182.195782][T25945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9302'. [ 1182.209677][T16922] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1182.221401][T16922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.230073][T16922] usb 1-1: Product: syz [ 1182.234448][T16922] usb 1-1: Manufacturer: syz [ 1182.240127][T16922] usb 1-1: SerialNumber: syz [ 1182.250489][T16922] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1182.368971][T16922] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1182.734220][ T4837] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1182.924942][T15306] usb 1-1: USB disconnect, device number 121 [ 1182.941455][ T4837] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1182.949765][ T4837] usb 3-1: config 0 has no interface number 0 [ 1182.988711][ T4837] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 22765, setting to 64 [ 1183.038365][ T4837] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1183.082695][ T4837] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1183.100491][ T4837] usb 3-1: Manufacturer: syz [ 1183.110405][ T4837] usb 3-1: SerialNumber: syz [ 1183.131326][ T4837] usb 3-1: config 0 descriptor?? [ 1183.156918][T25952] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1183.412271][ T4837] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 1183.434434][ T4837] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 1183.466120][ T4837] usb 3-1: USB disconnect, device number 4 [ 1183.513667][T16922] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1183.523801][T16922] ath9k_htc: Failed to initialize the device [ 1183.599625][T15306] usb 1-1: ath9k_htc: USB layer deinitialized [ 1183.970053][T25982] loop5: detected capacity change from 0 to 512 [ 1183.976922][T25960] loop3: detected capacity change from 0 to 32768 [ 1184.049645][T25960] ERROR: (device loop3): diAllocAG: error reading iag [ 1184.049645][T25960] [ 1184.140701][T25982] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1184.150484][T25960] ialloc: diAlloc returned -5! [ 1184.182344][T25982] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.654331][T23097] EXT4-fs (loop5): unmounting filesystem. [ 1184.818440][T26008] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1184.930796][T26011] loop0: detected capacity change from 0 to 2048 [ 1185.021223][T26011] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1185.073876][T26011] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1185.129709][T26011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1185.273032][T16922] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1185.504916][T16922] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1185.558782][T16922] usb 3-1: config 0 has no interface number 0 [ 1185.616336][T16922] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1185.651378][T16922] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1185.668633][T26035] loop3: detected capacity change from 0 to 512 [ 1185.731460][T16922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.749443][T26035] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1185.767604][T26035] ext4 filesystem being mounted at /2006/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.822911][T16922] usb 3-1: Product: syz [ 1185.827342][T16922] usb 3-1: Manufacturer: syz [ 1185.832019][T16922] usb 3-1: SerialNumber: syz [ 1185.928462][T16922] usb 3-1: config 0 descriptor?? [ 1186.008013][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1186.183481][T16922] CoreChips: probe of 3-1:0.41 failed with error -71 [ 1186.250435][T16922] usb 3-1: USB disconnect, device number 5 [ 1186.883427][T26079] loop4: detected capacity change from 0 to 16 [ 1186.937718][T26079] erofs: (device loop4): mounted with root inode @ nid 36. [ 1187.176297][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9356'. [ 1187.185406][T26090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9356'. [ 1187.595042][T26103] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1187.886903][T26115] loop0: detected capacity change from 0 to 16 [ 1187.968417][T26115] erofs: (device loop0): mounted with root inode @ nid 36. [ 1188.456587][T26138] loop2: detected capacity change from 0 to 512 [ 1188.566042][T26138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1188.641826][T26145] loop4: detected capacity change from 0 to 256 [ 1188.657600][T26145] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1188.671085][T26138] ext4 filesystem being mounted at /1859/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.722032][T26145] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1188.832751][T26145] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1188.947837][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1189.809748][ T5360] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1189.838996][T26188] loop0: detected capacity change from 0 to 1024 [ 1189.923588][T26188] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1190.025219][ T5360] usb 6-1: Using ep0 maxpacket: 8 [ 1190.040903][ T5360] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1190.083777][ T5360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.127451][ T5360] usb 6-1: Product: syz [ 1190.131709][ T5360] usb 6-1: Manufacturer: syz [ 1190.172018][ T5360] usb 6-1: SerialNumber: syz [ 1190.205104][ T5360] usb 6-1: config 0 descriptor?? [ 1190.212644][T26197] loop3: detected capacity change from 0 to 64 [ 1190.227545][ T5360] gspca_main: se401-2.14.0 probing 047d:5003 [ 1190.721395][ T5360] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1190.728848][ T5360] se401: probe of 6-1:0.0 failed with error -71 [ 1190.765473][ T5360] usb 6-1: USB disconnect, device number 9 [ 1191.094139][T26226] block device autoloading is deprecated and will be removed. [ 1191.869163][ T4895] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1192.041359][T26260] loop3: detected capacity change from 0 to 4096 [ 1192.088041][ T4895] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1192.103519][T26269] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1192.112448][T26268] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1192.134490][ T4895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.141007][T26260] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1192.187626][ T4895] usb 5-1: Product: syz [ 1192.194311][T26260] Remounting filesystem read-only [ 1192.208240][ T4895] usb 5-1: Manufacturer: syz [ 1192.212942][ T4895] usb 5-1: SerialNumber: syz [ 1192.302173][ T4895] usb 5-1: config 0 descriptor?? [ 1192.366428][ T4895] hub 5-1:0.0: bad descriptor, ignoring hub [ 1192.372868][ T4895] hub: probe of 5-1:0.0 failed with error -5 [ 1192.392232][ T4895] usbsevseg 5-1:0.0: USB 7 Segment device now attached [ 1192.712289][ T4895] usb 5-1: USB disconnect, device number 105 [ 1192.719011][ T4895] usbsevseg 5-1:0.0: USB 7 Segment now disconnected [ 1192.965189][T26292] loop5: detected capacity change from 0 to 1024 [ 1193.242955][ T5361] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1193.398368][T26306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9442'. [ 1193.423611][T26302] loop0: detected capacity change from 0 to 4096 [ 1193.444654][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9442'. [ 1193.473894][ T5361] usb 4-1: Using ep0 maxpacket: 16 [ 1193.488212][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9442'. [ 1193.499765][ T5361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.512339][T26302] ntfs: volume version 3.1. [ 1193.528967][ T5361] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1193.563413][ T5361] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1193.590731][ T5361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.619041][ T5361] usb 4-1: Product: syz [ 1193.648686][ T5361] usb 4-1: Manufacturer: syz [ 1193.664703][ T5361] usb 4-1: SerialNumber: syz [ 1193.701204][ T5361] r8152-cfgselector 4-1: config 0 descriptor?? [ 1193.964572][ T5361] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1194.210615][ T5361] usb 4-1: USB disconnect, device number 107 [ 1194.220724][T26296] loop2: detected capacity change from 0 to 32768 [ 1194.254093][T26296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.9438 (26296) [ 1194.368655][T26296] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1194.430033][T26296] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1194.484706][T26296] BTRFS info (device loop2): enabling auto defrag [ 1194.521685][T26296] BTRFS info (device loop2): use no compression [ 1194.528070][T26296] BTRFS info (device loop2): max_inline at 4096 [ 1194.581755][T26296] BTRFS info (device loop2): using free space tree [ 1194.839966][T26296] BTRFS info (device loop2): enabling ssd optimizations [ 1195.102624][ T4275] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1195.184977][T26370] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1195.251960][T26370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1195.305502][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1195.355510][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1195.695539][T26378] loop3: detected capacity change from 0 to 4096 [ 1195.736437][T26386] loop5: detected capacity change from 0 to 512 [ 1195.866455][T26386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1196.031663][T26386] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.9466: iget: bad i_size value: 38620345925642 [ 1196.191564][T26386] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.9466: couldn't read orphan inode 15 (err -117) [ 1196.241971][T26386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1196.360688][T26403] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1196.524580][T23097] EXT4-fs (loop5): unmounting filesystem. [ 1196.925564][T26421] netlink: 798 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1197.499417][T26443] : renamed from ipvlan0 [ 1197.848976][T26455] loop0: detected capacity change from 0 to 64 [ 1197.972571][T26458] loop4: detected capacity change from 0 to 4096 [ 1198.018337][T26458] EXT4-fs: inline encryption not supported [ 1198.115548][T26458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1198.133874][T26466] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1198.179682][T26458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=885ec019, mo2=0002] [ 1198.212836][T26458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1198.276684][T26471] device veth1_macvtap left promiscuous mode [ 1198.439220][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 1198.505699][T26478] netlink: 'syz.3.9506': attribute type 1 has an invalid length. [ 1198.530451][T26478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9506'. [ 1198.640864][T26480] ip6gretap0: refused to change device tx_queue_len [ 1199.619299][T26517] loop0: detected capacity change from 0 to 764 [ 1199.678476][ T5361] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1199.692968][T26517] Symlink component flag not implemented [ 1199.699583][T26517] Symlink component flag not implemented (101) [ 1199.886233][ T5361] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1199.919459][ T5361] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1199.960198][ T5361] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1200.000638][T26526] loop0: detected capacity change from 0 to 512 [ 1200.001624][ T5361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.044625][T26526] ================================================================== [ 1200.052775][T26526] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e40 [ 1200.059938][T26526] Read of size 8 at addr ffff888055d305d0 by task syz.0.9526/26526 [ 1200.068168][T26526] [ 1200.070529][T26526] CPU: 0 PID: 26526 Comm: syz.0.9526 Not tainted syzkaller #0 [ 1200.078030][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.088146][T26526] Call Trace: [ 1200.091476][T26526] [ 1200.094535][T26526] dump_stack_lvl+0x188/0x24e [ 1200.099350][T26526] ? __lock_acquire+0x7d10/0x7d10 [ 1200.104540][T26526] ? show_regs_print_info+0x12/0x12 [ 1200.109037][T26487] loop3: detected capacity change from 0 to 40427 [ 1200.109801][T26526] ? load_image+0x400/0x400 [ 1200.109832][T26526] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1200.126599][T26526] ? __virt_addr_valid+0x188/0x540 [ 1200.132101][T26526] ? __virt_addr_valid+0x465/0x540 [ 1200.137320][T26526] ? __ext4_iget+0x2bb/0x3e40 [ 1200.142074][T26526] print_report+0xa8/0x210 [ 1200.146571][T26526] kasan_report+0x10b/0x140 [ 1200.151130][T26526] ? __ext4_iget+0x2bb/0x3e40 [ 1200.155870][T26526] __ext4_iget+0x2bb/0x3e40 [ 1200.160426][T26526] ? apply_workqueue_attrs+0x180/0x180 [ 1200.165940][T26526] ? ext4_get_projid+0x140/0x140 [ 1200.171095][T26526] ? mb_cache_create+0x42f/0x530 [ 1200.176102][T26526] ext4_fill_super+0x6124/0x78c0 [ 1200.181139][T26526] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1200.187428][T26526] ? vscnprintf+0x80/0x80 [ 1200.191812][T26526] ? set_blocksize+0x1d0/0x470 [ 1200.196635][T26526] ? sb_set_blocksize+0xa5/0xe0 [ 1200.201540][T26526] get_tree_bdev+0x3f1/0x610 [ 1200.206195][T26526] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1200.212502][T26526] vfs_get_tree+0x88/0x270 [ 1200.216985][T26526] do_new_mount+0x24a/0xa40 [ 1200.221539][T26526] __se_sys_mount+0x2e3/0x3d0 [ 1200.226356][T26526] ? __x64_sys_mount+0xc0/0xc0 [ 1200.229588][T26487] F2FS-fs (loop3): invalid crc value [ 1200.231241][T26526] ? lockdep_hardirqs_on+0x94/0x140 [ 1200.231278][T26526] ? __x64_sys_mount+0x1c/0xc0 [ 1200.231301][T26526] do_syscall_64+0x4c/0xa0 [ 1200.251245][T26526] ? clear_bhb_loop+0x60/0xb0 [ 1200.255994][T26526] ? clear_bhb_loop+0x60/0xb0 [ 1200.260732][T26526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.266773][T26526] RIP: 0033:0x7f3b4f79e04a [ 1200.271323][T26526] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.291067][T26526] RSP: 002b:00007f3b505bee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1200.299710][T26526] RAX: ffffffffffffffda RBX: 00007f3b505beee0 RCX: 00007f3b4f79e04a [ 1200.307730][T26526] RDX: 0000200000000680 RSI: 0000200000000040 RDI: 00007f3b505beea0 [ 1200.315745][T26526] RBP: 0000200000000680 R08: 00007f3b505beee0 R09: 0000000000010000 [ 1200.323762][T26526] R10: 0000000000010000 R11: 0000000000000246 R12: 0000200000000040 [ 1200.331773][T26526] R13: 00007f3b505beea0 R14: 000000000000055a R15: 0000200000000700 [ 1200.339854][T26526] [ 1200.342889][T26526] [ 1200.345305][T26526] Allocated by task 7230: [ 1200.349635][T26526] kasan_set_track+0x4b/0x70 [ 1200.354337][T26526] __kasan_slab_alloc+0x6b/0x80 [ 1200.359203][T26526] slab_post_alloc_hook+0x4b/0x480 [ 1200.364336][T26526] kmem_cache_alloc_lru+0x11a/0x2e0 [ 1200.369547][T26526] reiserfs_alloc_inode+0x26/0xc0 [ 1200.374589][T26526] iget5_locked+0x9e/0x260 [ 1200.379070][T26526] reiserfs_fill_super+0x11d3/0x23b0 [ 1200.384375][T26526] mount_bdev+0x287/0x3c0 [ 1200.388716][T26526] legacy_get_tree+0xe6/0x180 [ 1200.393406][T26526] vfs_get_tree+0x88/0x270 [ 1200.397835][T26526] do_new_mount+0x24a/0xa40 [ 1200.402346][T26526] __se_sys_mount+0x2e3/0x3d0 [ 1200.407078][T26526] do_syscall_64+0x4c/0xa0 [ 1200.411509][T26526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.417415][T26526] [ 1200.419746][T26526] Last potentially related work creation: [ 1200.425475][T26526] kasan_save_stack+0x3a/0x60 [ 1200.430357][T26526] __kasan_record_aux_stack+0xb2/0xc0 [ 1200.435737][T26526] call_rcu+0x14f/0x990 [ 1200.439911][T26526] evict+0x834/0x8d0 [ 1200.443824][T26526] reiserfs_fill_super+0x1475/0x23b0 [ 1200.449134][T26526] mount_bdev+0x287/0x3c0 [ 1200.453468][T26526] legacy_get_tree+0xe6/0x180 [ 1200.458167][T26526] vfs_get_tree+0x88/0x270 [ 1200.462594][T26526] do_new_mount+0x24a/0xa40 [ 1200.467112][T26526] __se_sys_mount+0x2e3/0x3d0 [ 1200.471800][T26526] do_syscall_64+0x4c/0xa0 [ 1200.476234][T26526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.482149][T26526] [ 1200.484478][T26526] Second to last potentially related work creation: [ 1200.491070][T26526] kasan_save_stack+0x3a/0x60 [ 1200.495761][T26526] __kasan_record_aux_stack+0xb2/0xc0 [ 1200.501139][T26526] call_rcu+0x14f/0x990 [ 1200.505315][T26526] evict+0x834/0x8d0 [ 1200.509219][T26526] reiserfs_fill_super+0x1475/0x23b0 [ 1200.514521][T26526] mount_bdev+0x287/0x3c0 [ 1200.518858][T26526] legacy_get_tree+0xe6/0x180 [ 1200.523679][T26526] vfs_get_tree+0x88/0x270 [ 1200.528371][T26526] do_new_mount+0x24a/0xa40 [ 1200.533144][T26526] __se_sys_mount+0x2e3/0x3d0 [ 1200.537843][T26526] do_syscall_64+0x4c/0xa0 [ 1200.542294][T26526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.548373][T26526] [ 1200.550712][T26526] The buggy address belongs to the object at ffff888055d30000 [ 1200.550712][T26526] which belongs to the cache reiser_inode_cache of size 1568 [ 1200.565466][T26526] The buggy address is located 1488 bytes inside of [ 1200.565466][T26526] 1568-byte region [ffff888055d30000, ffff888055d30620) [ 1200.578921][T26526] [ 1200.581250][T26526] The buggy address belongs to the physical page: [ 1200.587669][T26526] page:ffffea0001574c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055d34240 pfn:0x55d30 [ 1200.599308][T26526] head:ffffea0001574c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1200.607641][T26526] memcg:ffff888026781701 [ 1200.611889][T26526] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1200.620042][T26526] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801a380500 [ 1200.628809][T26526] raw: ffff888055d34240 0000000080130009 00000001ffffffff ffff888026781701 [ 1200.637405][T26526] page dumped because: kasan: bad access detected [ 1200.643942][T26526] page_owner tracks the page as allocated [ 1200.649733][T26526] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4836, tgid 4835 (syz.2.219), ts 112966204976, free_ts 23767340957 [ 1200.674330][T26526] post_alloc_hook+0x173/0x1a0 [ 1200.679213][T26526] get_page_from_freelist+0x1a1e/0x1ab0 [ 1200.684974][T26526] __alloc_pages+0x1ec/0x4f0 [ 1200.689614][T26526] alloc_slab_page+0x5d/0x160 [ 1200.694320][T26526] new_slab+0x87/0x2c0 [ 1200.698408][T26526] ___slab_alloc+0xbc6/0x1240 [ 1200.703356][T26526] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 1200.708563][T26526] reiserfs_alloc_inode+0x26/0xc0 [ 1200.713680][T26526] iget5_locked+0x9e/0x260 [ 1200.718108][T26526] reiserfs_fill_super+0x11d3/0x23b0 [ 1200.723411][T26526] mount_bdev+0x287/0x3c0 [ 1200.727771][T26526] legacy_get_tree+0xe6/0x180 [ 1200.732462][T26526] vfs_get_tree+0x88/0x270 [ 1200.736978][T26526] do_new_mount+0x24a/0xa40 [ 1200.741489][T26526] __se_sys_mount+0x2e3/0x3d0 [ 1200.746310][T26526] do_syscall_64+0x4c/0xa0 [ 1200.750968][T26526] page last free stack trace: [ 1200.755648][T26526] free_unref_page_prepare+0x8b4/0x9a0 [ 1200.761124][T26526] free_unref_page+0x2e/0x3f0 [ 1200.765818][T26526] free_contig_range+0x9d/0x150 [ 1200.770689][T26526] destroy_args+0xf0/0xa0a [ 1200.775163][T26526] debug_vm_pgtable+0x33c/0x38e [ 1200.780108][T26526] do_one_initcall+0x26a/0x840 [ 1200.784886][T26526] do_initcall_level+0x137/0x1e4 [ 1200.789933][T26526] do_initcalls+0x4b/0x8a [ 1200.794387][T26526] kernel_init_freeable+0x415/0x5be [ 1200.799695][T26526] kernel_init+0x19/0x1b0 [ 1200.804040][T26526] ret_from_fork+0x1f/0x30 [ 1200.808560][T26526] [ 1200.811067][T26526] Memory state around the buggy address: [ 1200.816799][T26526] ffff888055d30480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.824871][T26526] ffff888055d30500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.832942][T26526] >ffff888055d30580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.841107][T26526] ^ [ 1200.848043][T26526] ffff888055d30600: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1200.856136][T26526] ffff888055d30680: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 1200.864392][T26526] ================================================================== [ 1200.872480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.920004][T26508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1200.931853][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9529'. [ 1200.947803][T26487] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1201.138055][T26487] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1201.185571][T26526] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1201.192853][T26526] CPU: 1 PID: 26526 Comm: syz.0.9526 Not tainted syzkaller #0 [ 1201.200360][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1201.210465][T26526] Call Trace: [ 1201.213782][T26526] [ 1201.216749][T26526] dump_stack_lvl+0x188/0x24e [ 1201.221490][T26526] ? memcpy+0x3c/0x60 [ 1201.225507][T26526] ? show_regs_print_info+0x12/0x12 [ 1201.230755][T26526] ? load_image+0x400/0x400 [ 1201.235411][T26526] panic+0x2e5/0x730 [ 1201.239345][T26526] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1201.245551][T26526] ? bpf_jit_dump+0xd0/0xd0 [ 1201.250184][T26526] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1201.256474][T26526] ? _raw_spin_unlock+0x40/0x40 [ 1201.261374][T26526] check_panic_on_warn+0x80/0xa0 [ 1201.266363][T26526] ? __ext4_iget+0x2bb/0x3e40 [ 1201.271092][T26526] end_report+0x66/0x110 [ 1201.275355][T26526] kasan_report+0x118/0x140 [ 1201.279882][T26526] ? __ext4_iget+0x2bb/0x3e40 [ 1201.284659][T26526] __ext4_iget+0x2bb/0x3e40 [ 1201.289182][T26526] ? apply_workqueue_attrs+0x180/0x180 [ 1201.294672][T26526] ? ext4_get_projid+0x140/0x140 [ 1201.299617][T26526] ? mb_cache_create+0x42f/0x530 [ 1201.304666][T26526] ext4_fill_super+0x6124/0x78c0 [ 1201.309708][T26526] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1201.315965][T26526] ? vscnprintf+0x80/0x80 [ 1201.320308][T26526] ? set_blocksize+0x1d0/0x470 [ 1201.325124][T26526] ? sb_set_blocksize+0xa5/0xe0 [ 1201.330001][T26526] get_tree_bdev+0x3f1/0x610 [ 1201.334606][T26526] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1201.340868][T26526] vfs_get_tree+0x88/0x270 [ 1201.345385][T26526] do_new_mount+0x24a/0xa40 [ 1201.349991][T26526] __se_sys_mount+0x2e3/0x3d0 [ 1201.354682][T26526] ? __x64_sys_mount+0xc0/0xc0 [ 1201.359486][T26526] ? lockdep_hardirqs_on+0x94/0x140 [ 1201.364700][T26526] ? __x64_sys_mount+0x1c/0xc0 [ 1201.369477][T26526] do_syscall_64+0x4c/0xa0 [ 1201.374007][T26526] ? clear_bhb_loop+0x60/0xb0 [ 1201.379137][T26526] ? clear_bhb_loop+0x60/0xb0 [ 1201.383976][T26526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.390070][T26526] RIP: 0033:0x7f3b4f79e04a [ 1201.394767][T26526] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.414983][T26526] RSP: 002b:00007f3b505bee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1201.423614][T26526] RAX: ffffffffffffffda RBX: 00007f3b505beee0 RCX: 00007f3b4f79e04a [ 1201.431600][T26526] RDX: 0000200000000680 RSI: 0000200000000040 RDI: 00007f3b505beea0 [ 1201.439672][T26526] RBP: 0000200000000680 R08: 00007f3b505beee0 R09: 0000000000010000 [ 1201.447745][T26526] R10: 0000000000010000 R11: 0000000000000246 R12: 0000200000000040 [ 1201.455727][T26526] R13: 00007f3b505beea0 R14: 000000000000055a R15: 0000200000000700 [ 1201.463714][T26526] [ 1201.467293][T26526] Kernel Offset: disabled [ 1201.471728][T26526] Rebooting in 86400 seconds..