last executing test programs: 2.85062102s ago: executing program 1 (id=9530): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30323953}) 2.742906553s ago: executing program 1 (id=9535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2.572907157s ago: executing program 1 (id=9538): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='loginuid\x00') write$FUSE_INIT(r0, 0x0, 0x0) 2.491571749s ago: executing program 1 (id=9542): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept(r0, 0x0, 0x0) 2.381073202s ago: executing program 1 (id=9545): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) 2.199287546s ago: executing program 4 (id=9551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000030400000000fcffffff00000400", @ANYRES32=0x0, @ANYBLOB="61040100000000002c0012800b00010067656e65766500001c0002800500080001000000060005004e030000050009"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x44004) 1.897234444s ago: executing program 4 (id=9556): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x10, 0x3a, '@{&\r', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x2d) 1.724263588s ago: executing program 4 (id=9560): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x412, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d", @ANYRESOCT, @ANYBLOB='d']) 1.569666372s ago: executing program 4 (id=9564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x4840) 1.455654135s ago: executing program 4 (id=9566): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82, &(0x7f0000000040)=ANY=[], 0x13, 0x6371, &(0x7f0000007000)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) 1.027953765s ago: executing program 2 (id=9575): r0 = memfd_create(&(0x7f0000000080)='\x022\xa1SaWd\x95\f\x17\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) ioctl$FIONCLEX(r0, 0x5450) 973.616497ms ago: executing program 0 (id=9576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)={0x14, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x4000000) 923.039277ms ago: executing program 0 (id=9578): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3, 0x0}) 819.03064ms ago: executing program 2 (id=9579): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x6a, 0x10, 0x0, &(0x7f0000000080)) 771.098382ms ago: executing program 0 (id=9581): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752}) 651.885255ms ago: executing program 2 (id=9582): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000002980)={0x100008, 0x0, 0x20000, {r0}}, 0x20) 636.688735ms ago: executing program 0 (id=9583): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 621.650775ms ago: executing program 3 (id=9584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0xfffd, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd}, {}, {0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) 469.708149ms ago: executing program 3 (id=9585): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x1b59, 0x20407, @empty, 0x200}}, 0x24) 459.011699ms ago: executing program 2 (id=9586): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0x9, 0x205, 0x4200, &(0x7f0000003c40)="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"}) 456.526039ms ago: executing program 0 (id=9587): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x811, &(0x7f0000000280), 0x1, 0x783, &(0x7f00000007c0)="$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") llistxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)=""/183, 0xb7) 384.589311ms ago: executing program 3 (id=9588): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "3e0ab00c136241fc90213ca3d768edf423fc73b112dfc164119625dd81d8a3e0bbaa4ec2f05a3ee8fd8d553cd68a21a85326865942b1aa8efb0a37ae243e171d", 0x3d}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r0) 357.057332ms ago: executing program 2 (id=9589): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x2, 0x4, 0x358, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "177bc60d6843b93e904a44a64aa4964e002fb83129254387e3e340eaf860"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 294.448823ms ago: executing program 3 (id=9590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000060900020073797a31000000002400038020000080080003400000000214000b80108001800c000100636f756e746572000900010073797a30"], 0xe4}}, 0x0) 258.898534ms ago: executing program 3 (id=9591): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @private, @multicast2}, &(0x7f0000000240)=0x1) 237.850375ms ago: executing program 4 (id=9592): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) 153.559697ms ago: executing program 1 (id=9593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) 115.279848ms ago: executing program 2 (id=9594): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={'\x00', 0x1300, 0x5, 0x2, 0xe2, 0x1043, '\x00\x00\x00@\x00', '\x00\x00\x00\b', "03000001", "e8cc1304", ["d6e40000dfd90400", "c2e24cd519e6350cc5dc932c", "00010000000000ea00", "25050000000200"]}) 61.762019ms ago: executing program 3 (id=9595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000240), &(0x7f00000001c0)=@tcp6, 0x2}, 0x20) 0s ago: executing program 0 (id=9596): r0 = socket(0xa, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x10d, 0xe2, 0x0, &(0x7f0000000200)=0x4) kernel console output (not intermixed with test programs): back devices can't be added as a team port [ 856.082313][T21132] loop4: detected capacity change from 0 to 736 [ 856.097811][ T26] audit: type=1326 audit(2000000482.764:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.1.7491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f2546f3f159 code=0x7ffc0000 [ 856.131104][T21130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.174779][ T26] audit: type=1326 audit(2000000482.764:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.1.7491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2546f3f159 code=0x7ffc0000 [ 856.303110][ T26] audit: type=1326 audit(2000000482.764:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.1.7491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2546f3f159 code=0x7ffc0000 [ 856.327667][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.495508][T21155] __nla_validate_parse: 2 callbacks suppressed [ 856.495527][T21155] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7509'. [ 856.883886][ T4512] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 856.910762][T21173] loop4: detected capacity change from 0 to 512 [ 857.071962][T21181] loop2: detected capacity change from 0 to 64 [ 857.080117][T21173] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 857.133848][T21173] ext4 filesystem being mounted at /1475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.183278][ T4512] usb 2-1: Using ep0 maxpacket: 32 [ 857.264038][T21173] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.7517: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 857.287988][T21148] loop3: detected capacity change from 0 to 32768 [ 857.302777][T21173] EXT4-fs (loop4): Remounting filesystem read-only [ 857.331563][T21173] EXT4-fs error (device loop4): ext4_evict_inode:295: comm syz.4.7517: couldn't truncate inode 15 (err -117) [ 857.363915][ T4512] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 857.373715][T21173] EXT4-fs (loop4): Remounting filesystem read-only [ 857.394178][ T4512] usb 2-1: config 0 has no interface number 0 [ 857.414910][T21148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7504 (21148) [ 857.435895][ T4512] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.465941][ T4512] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.476831][ T4512] usb 2-1: config 0 interface 85 has no altsetting 0 [ 857.524931][T21148] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 857.555857][T21148] BTRFS info (device loop3): using free space tree [ 857.565018][T21148] BTRFS info (device loop3): has skinny extents [ 857.707113][ T4512] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 857.721660][ T4512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.738490][ T4512] usb 2-1: Product: syz [ 857.745606][ T4512] usb 2-1: Manufacturer: syz [ 857.759059][ T4512] usb 2-1: SerialNumber: syz [ 857.766500][ T4512] usb 2-1: config 0 descriptor?? [ 857.856498][T21148] BTRFS info (device loop3): enabling ssd optimizations [ 858.324119][ T4512] appletouch 2-1:0.85: Failed to request geyser raw mode [ 858.342543][ T4512] appletouch: probe of 2-1:0.85 failed with error -5 [ 858.447277][ T4512] usb 2-1: USB disconnect, device number 65 [ 858.524371][T21240] delete_channel: no stack [ 859.011431][T21266] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7550'. [ 859.166700][T21278] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7558'. [ 859.194318][T21280] loop2: detected capacity change from 0 to 16 [ 859.259581][ T4514] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 859.268263][T21280] erofs: (device loop2): mounted with root inode @ nid 36. [ 859.501936][T21294] loop2: detected capacity change from 0 to 256 [ 859.546408][T21294] exfat: Deprecated parameter 'utf8' [ 859.564629][T21294] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 859.777269][T21304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7571'. [ 859.823822][T21304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7571'. [ 859.868621][ T4514] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 859.889620][ T4514] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 859.908584][ T4514] usb 5-1: Product: syz [ 859.916646][T21302] loop0: detected capacity change from 0 to 4096 [ 859.930065][ T4514] usb 5-1: SerialNumber: syz [ 859.937096][ T4514] usb 5-1: config 0 descriptor?? [ 860.043834][T21302] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 860.080322][T21302] ntfs3: loop0: Failed to load $Extend. [ 860.253827][ T4514] usb 5-1: USB disconnect, device number 64 [ 860.567615][T21292] loop3: detected capacity change from 0 to 40427 [ 860.679382][T21292] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 860.723239][T21292] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 860.767089][T21292] F2FS-fs (loop3): invalid crc value [ 860.796212][T21292] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 861.038664][T21349] netlink: 'syz.1.7590': attribute type 32 has an invalid length. [ 861.073078][T21292] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 861.080468][T21292] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 861.143055][T21354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7591'. [ 861.188242][T21354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7591'. [ 861.240729][T21354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7591'. [ 861.308035][T21292] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 861.558142][T21370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7603'. [ 861.603465][T21370] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7603'. [ 861.607785][T21373] loop0: detected capacity change from 0 to 512 [ 861.759431][T21373] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7605: bg 0: block 313: padding at end of block bitmap is not set [ 861.918582][T21373] EXT4-fs (loop0): Remounting filesystem read-only [ 861.965337][T21373] EXT4-fs (loop0): 1 truncate cleaned up [ 861.971156][T21373] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 862.208141][T21392] 9p: Unknown access argument Ø [ 862.362585][T21396] loop2: detected capacity change from 0 to 128 [ 862.420922][T21391] loop3: detected capacity change from 0 to 8192 [ 862.474494][T21396] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 862.538793][T21391] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 862.548293][T21391] REISERFS (device loop3): using ordered data mode [ 862.591397][T21391] reiserfs: using flush barriers [ 862.673405][T21391] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 862.718345][T21391] REISERFS (device loop3): checking transaction log (loop3) [ 862.749049][T21391] REISERFS (device loop3): Using r5 hash to sort names [ 862.778239][T21391] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 863.062308][T21422] netlink: 'syz.4.7625': attribute type 13 has an invalid length. [ 863.580087][T21446] __nla_validate_parse: 1 callbacks suppressed [ 863.580109][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7638'. [ 863.671447][T21446] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7638'. [ 863.761381][T21452] loop4: detected capacity change from 0 to 64 [ 864.089910][T21415] loop2: detected capacity change from 0 to 40427 [ 864.163213][T21415] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 864.182619][T21415] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 864.224262][T21415] F2FS-fs (loop2): invalid crc value [ 864.260049][T21460] loop0: detected capacity change from 0 to 8192 [ 864.328147][T21460] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 864.363539][T21475] 9p: Unknown access argument Ø [ 864.402323][T21460] REISERFS (device loop0): using ordered data mode [ 864.413226][T21460] reiserfs: using flush barriers [ 864.421047][T21460] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 864.426604][T21415] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 864.549053][T21460] REISERFS (device loop0): checking transaction log (loop0) [ 864.582157][T21415] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 864.589251][T21415] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 864.604024][T21460] REISERFS (device loop0): Using r5 hash to sort names [ 864.611486][T21460] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 864.792896][T21415] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 864.911388][T21498] netlink: 'syz.1.7660': attribute type 5 has an invalid length. [ 865.457641][T21515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7668'. [ 865.740756][T21493] loop4: detected capacity change from 0 to 32768 [ 865.825389][T21518] loop1: detected capacity change from 0 to 4096 [ 865.844879][T21493] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7657 (21493) [ 865.897367][T21528] loop2: detected capacity change from 0 to 1024 [ 865.913890][T21493] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 865.946421][T21493] BTRFS info (device loop4): using free space tree [ 865.965982][T21493] BTRFS info (device loop4): has skinny extents [ 866.037948][T21528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 866.208665][T21528] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #11: comm syz.2.7674: directory missing '.' [ 866.315341][T21501] loop0: detected capacity change from 0 to 40427 [ 866.372162][T21501] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 866.390418][T21501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 866.410010][T21493] BTRFS info (device loop4): enabling ssd optimizations [ 866.444022][T21501] F2FS-fs (loop0): invalid crc value [ 866.512385][T21501] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 866.843037][T21501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 866.855227][T21501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 866.999754][T21574] nvme_tcp: malformed address passed: %27trsvcid=8009:8009 [ 867.056404][T21501] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 867.338084][T21584] set_capacity_and_notify: 1 callbacks suppressed [ 867.338100][T21584] loop3: detected capacity change from 0 to 4096 [ 867.954866][T21608] loop3: detected capacity change from 0 to 1024 [ 868.041205][T21608] hfsplus: request for non-existent node 16777217 in B*Tree [ 868.095308][T21608] hfsplus: request for non-existent node 16777217 in B*Tree [ 868.344020][T21619] Cannot find add_set index 1 as target [ 868.407387][T20151] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 868.451928][T21622] loop3: detected capacity change from 0 to 512 [ 868.495396][T21622] EXT4-fs (loop3): Ignoring removed orlov option [ 868.539042][T21622] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 868.554707][T21622] ext4 filesystem being mounted at /1522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.579364][T21634] loop0: detected capacity change from 0 to 512 [ 868.655685][T21634] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 868.708306][T21634] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1: comm syz.0.7710: invalid block [ 868.716460][T20151] usb 2-1: Using ep0 maxpacket: 32 [ 868.735830][T21634] EXT4-fs (loop0): Remounting filesystem read-only [ 868.774218][T21634] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.7710: couldn't read orphan inode 11 (err -117) [ 868.816012][T21645] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7715'. [ 868.874058][T21634] EXT4-fs (loop0): Remounting filesystem read-only [ 868.874086][T21634] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 868.898727][T20151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.898768][T20151] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.071878][T21656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7721'. [ 869.112219][T20151] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 869.121365][T20151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.160095][T20151] usb 2-1: Product: syz [ 869.164495][T20151] usb 2-1: Manufacturer: syz [ 869.169766][T20151] usb 2-1: SerialNumber: syz [ 869.176788][T20151] usb 2-1: config 0 descriptor?? [ 869.258790][T20151] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 869.370330][ T4463] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 869.389832][ T4516] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 869.445956][T21678] netlink: 'syz.2.7729': attribute type 2 has an invalid length. [ 869.506925][ T4456] usb 2-1: USB disconnect, device number 66 [ 869.774751][ T4463] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 869.784662][ T4463] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 869.817404][ T4463] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 869.818337][ T4516] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 869.827388][ T4463] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.841840][ T4516] usb 5-1: config 0 has no interface number 0 [ 869.871186][ T4463] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.880898][ T4463] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 869.902904][ T4463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.946328][T21658] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 869.956262][T21658] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 869.968414][T21658] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 869.989840][ T4463] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 870.035793][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7732'. [ 870.053044][ T4516] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 870.088345][ T4516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.126142][ T4516] usb 5-1: Product: syz [ 870.152052][ T4516] usb 5-1: Manufacturer: syz [ 870.162908][ T4516] usb 5-1: SerialNumber: syz [ 870.182914][ T4516] usb 5-1: config 0 descriptor?? [ 870.225307][ T4463] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 870.243388][ T4463] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 870.482903][T21700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7740'. [ 870.486243][ T4521] usb 1-1: USB disconnect, device number 57 [ 870.501509][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 870.528857][T21700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7740'. [ 870.528882][ T4521] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 870.581835][ T4521] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 870.596190][ T4521] mos7720 1-1:1.0: device disconnected [ 870.726449][ T4516] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 870.763308][ T4516] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 870.786044][ T4516] asix: probe of 5-1:0.251 failed with error -5 [ 870.809507][ T4516] usb 5-1: USB disconnect, device number 65 [ 870.908874][T21712] xt_CT: No such helper "syz1" [ 870.984538][T21721] loop2: detected capacity change from 0 to 1024 [ 871.040574][T21725] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 871.054061][T21721] hfsplus: request for non-existent node 16777217 in B*Tree [ 871.094757][T21721] hfsplus: request for non-existent node 16777217 in B*Tree [ 871.118847][T21727] netlink: 'syz.3.7753': attribute type 1 has an invalid length. [ 871.191702][T21727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7753'. [ 871.373406][T21738] loop1: detected capacity change from 0 to 1024 [ 871.491864][T21738] EXT4-fs (loop1): Ignoring removed bh option [ 871.518014][T21738] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 871.518014][T21738] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 871.518014][T21738] [ 871.580734][T21753] device ip6tnl1 entered promiscuous mode [ 871.623947][ T4453] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 871.657276][T21738] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noload,barrier=0x0000000000000804,nolazytime,abort,lazytime,grpquota,stripe=0x0000000000000005,bh,init_itable,nouser_xattr,,errors=continue. Quota mode: writeback. [ 871.880582][ T4453] usb 4-1: Using ep0 maxpacket: 16 [ 871.886589][T21770] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7773'. [ 872.008892][ T4453] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 872.017165][ T4453] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.063569][ T4453] usb 4-1: config 0 has no interface number 0 [ 872.233829][ T4453] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 872.249156][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.258112][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7786'. [ 872.284205][ T4453] usb 4-1: Product: syz [ 872.297307][ T4453] usb 4-1: Manufacturer: syz [ 872.327102][ T4453] usb 4-1: SerialNumber: syz [ 872.384617][ T4453] usb 4-1: config 0 descriptor?? [ 872.557227][T21803] loop0: detected capacity change from 0 to 512 [ 872.683128][ T4453] usb 4-1: USB disconnect, device number 67 [ 872.807764][T21803] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7789: bg 0: block 184: padding at end of block bitmap is not set [ 872.893984][T21803] EXT4-fs (loop0): Remounting filesystem read-only [ 872.971278][T21803] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 873.009881][T21803] EXT4-fs (loop0): Remounting filesystem read-only [ 873.029163][T21803] EXT4-fs (loop0): 1 truncate cleaned up [ 873.053417][T21803] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 873.067160][T21803] ext4 filesystem being mounted at /1550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.612049][ T4463] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 873.997849][ T4463] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 874.015118][ T4463] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 874.174157][ T4463] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 3.00 [ 874.194563][ T4463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 874.225857][ T4463] usb 1-1: Product: syz [ 874.245127][ T4463] usb 1-1: Manufacturer: syz [ 874.290277][T21845] loop4: detected capacity change from 0 to 32768 [ 874.308438][ T4463] pl2303 1-1:1.0: required endpoints missing [ 874.321194][ T4463] pl2303 1-1:1.1: pl2303 converter detected [ 874.379746][T21845] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.7809 (21845) [ 874.458149][ T4463] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 874.465169][T21845] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 874.514921][T21845] BTRFS info (device loop4): setting nodatacow, compression disabled [ 874.573352][T21845] BTRFS info (device loop4): setting datasum, datacow enabled [ 874.619965][T21845] BTRFS info (device loop4): enabling ssd optimizations [ 874.636991][T21845] BTRFS info (device loop4): force clearing of disk cache [ 874.665114][T21845] BTRFS info (device loop4): using spread ssd allocation scheme [ 874.688272][T21845] BTRFS info (device loop4): turning on sync discard [ 874.709737][T21845] BTRFS info (device loop4): turning on flush-on-commit [ 874.726910][ T4463] usb 1-1: USB disconnect, device number 58 [ 874.744065][T21845] BTRFS info (device loop4): not using ssd optimizations [ 874.766471][T21845] BTRFS info (device loop4): not using spread ssd allocation scheme [ 874.775238][ T4463] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 874.801956][ T4463] pl2303 1-1:1.1: device disconnected [ 874.830232][T21845] BTRFS info (device loop4): using free space tree [ 874.900684][T21845] BTRFS info (device loop4): has skinny extents [ 874.910642][T21897] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 874.925934][T21899] x_tables: duplicate entry at hook 2 [ 874.944218][T21897] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 874.965177][T21897] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 874.985777][T21897] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 875.033903][T21897] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 875.075233][T21897] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 875.085582][T21897] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 875.111734][T21897] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 875.152728][T21845] BTRFS info (device loop4): clearing free space tree [ 875.159734][T21845] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 875.181295][T21845] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 875.242751][T21922] netlink: 'syz.2.7838': attribute type 1 has an invalid length. [ 875.304705][T21845] BTRFS info (device loop4): creating free space tree [ 875.351562][T21845] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 875.422174][T21845] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 876.486257][T21980] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 876.486257][T21980] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 876.840280][ T6824] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 876.933134][T22012] comedi comedi4: bad chanlist[0]=0x04004003 chan=16387 range length=2 [ 876.954843][T22011] device veth1_virt_wifi entered promiscuous mode [ 877.191270][T22024] loop2: detected capacity change from 0 to 1024 [ 877.235828][ T6824] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 877.244923][ T6824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.285362][ T6824] usb 5-1: config 0 descriptor?? [ 877.297147][T22024] EXT4-fs (loop2): barriers disabled [ 877.347972][T22024] JBD2: no valid journal superblock found [ 877.363125][T22024] EXT4-fs (loop2): error loading journal [ 877.620451][ T6824] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 877.638907][ T6824] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 877.695319][ T6824] [drm:udl_init] *ERROR* Selecting channel failed [ 877.745704][ T6824] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 877.787899][ T6824] [drm] Initialized udl on minor 2 [ 877.823607][ T6824] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 877.836490][ T6824] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 877.890106][ T6824] usb 5-1: USB disconnect, device number 66 [ 877.898930][ T4458] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 877.945492][ T4458] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 877.993045][ T4458] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 878.150581][T22062] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 878.205319][T22062] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 878.256540][T22062] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 878.273659][T22062] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 878.358280][T22062] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 878.379364][T22062] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 878.425568][T22062] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 878.480665][T22062] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 878.603502][T22084] IPVS: length: 248 != 24 [ 878.667305][T22035] loop0: detected capacity change from 0 to 40427 [ 878.836341][T22035] F2FS-fs (loop0): Found nat_bits in checkpoint [ 879.034366][T22035] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 879.070637][T22035] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 879.608583][ T6824] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 880.061630][ T6824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 880.083987][ T26] audit: type=1326 audit(2000000505.432:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22165 comm="syz.4.7952" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7271065159 code=0x0 [ 880.164542][ T6824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.174866][ T6824] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 880.209610][ T6824] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 880.247744][T22174] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 880.263223][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7955'. [ 880.277499][T22173] netlink: 356 bytes leftover after parsing attributes in process `syz.2.7955'. [ 880.410777][ T6824] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 880.420691][ T6824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.445745][ T6824] usb 4-1: Product: syz [ 880.450078][ T6824] usb 4-1: Manufacturer: syz [ 880.471172][ T6824] usb 4-1: SerialNumber: syz [ 880.855246][T22206] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 880.891424][ T6824] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 880.899393][ T6824] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 880.937882][ T6824] usb 4-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 880.955735][ T6824] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 881.041004][ T6824] usb 4-1: unit 2 not found! [ 881.045834][ T6824] usb 4-1: unit 0 not found! [ 881.093967][ T6824] usb 4-1: USB disconnect, device number 68 [ 881.137108][ T4458] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 881.316307][T22232] loop0: detected capacity change from 0 to 764 [ 881.384679][ T4952] udevd[4952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.404430][T22237] delete_channel: no stack [ 881.413809][T22232] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 881.543524][ T4458] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 881.543558][ T4458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.545573][ T4458] usb 2-1: config 0 descriptor?? [ 881.610656][T22242] nvme_fabrics: missing parameter 'nqn=%s' [ 881.864235][ T4458] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 881.913329][ T4458] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 881.943169][ T4458] [drm:udl_init] *ERROR* Selecting channel failed [ 881.963958][ T4458] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 881.984356][ T4458] [drm] Initialized udl on minor 2 [ 882.003113][ T4458] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 882.008205][ T4514] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 882.013816][ T4458] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 882.029080][T22265] netlink: 'syz.2.8010': attribute type 9 has an invalid length. [ 882.047000][ T4458] usb 2-1: USB disconnect, device number 67 [ 882.056953][T22265] netlink: 'syz.2.8010': attribute type 7 has an invalid length. [ 882.064749][T22265] netlink: 'syz.2.8010': attribute type 8 has an invalid length. [ 882.065671][ T6824] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 882.081304][T22265] netlink: 'syz.2.8010': attribute type 13 has an invalid length. [ 882.083197][ T4463] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 882.111494][ T6824] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 882.131332][ T6824] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 882.303254][ T4514] usb 4-1: Using ep0 maxpacket: 8 [ 882.303599][T22271] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 882.456444][ T4514] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 882.483009][T22281] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.489580][ T4514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.502404][T22281] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.502441][T22281] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.502471][T22281] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.505684][ T4463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 882.566315][ T4514] usb 4-1: config 0 has no interface number 0 [ 882.574066][ T4463] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 882.601578][ T4463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 882.611365][ T4463] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 882.647029][ T4463] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 882.656271][ T4463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.688067][ T4463] usb 1-1: config 0 descriptor?? [ 882.772767][ T4514] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 882.785835][ T4514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.795822][T22281] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 882.798374][ T4514] usb 4-1: Product: syz [ 882.814764][ T4514] usb 4-1: Manufacturer: syz [ 882.815437][T22281] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 882.823276][ T4514] usb 4-1: SerialNumber: syz [ 882.847292][T22281] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 882.853667][ T4514] usb 4-1: config 0 descriptor?? [ 882.856290][T22281] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 882.965067][ T4463] hdpvr 1-1:0.0: firmware version 0xd dated ¤­Š‹“";ÂW|ñÛ±¥adTUK> }1Óv™N`õ¡£YõÒ#ƒžø [ 883.200123][ T4463] hdpvr 1-1:0.0: device init failed [ 883.205444][ T4463] hdpvr: probe of 1-1:0.0 failed with error -12 [ 883.227499][ T4463] usb 1-1: USB disconnect, device number 59 [ 883.271575][ T4514] usb 4-1: USB disconnect, device number 69 [ 883.584611][T22299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.780903][T22308] device geneve2 entered promiscuous mode [ 884.451159][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8047'. [ 884.723633][T22376] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 884.803485][T22376] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 884.831904][T22376] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 884.877967][T22376] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 884.932533][T22376] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 884.981085][T22376] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 885.027432][T22376] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 885.073633][T22376] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 885.358107][T22414] netlink: 800 bytes leftover after parsing attributes in process `syz.2.8071'. [ 885.428452][T22414] netlink: 1301 bytes leftover after parsing attributes in process `syz.2.8071'. [ 885.523509][T22424] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8078'. [ 885.557263][T22424] device bond_slave_0 entered promiscuous mode [ 885.564141][T22424] device bond_slave_1 entered promiscuous mode [ 885.669370][ T6824] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 885.759238][T22435] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8081'. [ 885.953805][ T6824] usb 2-1: Using ep0 maxpacket: 8 [ 886.088807][ T6824] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 886.136935][ T6824] usb 2-1: config 0 has no interface number 0 [ 886.208028][T22464] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 886.300730][ T4514] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 886.316856][ T6824] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 886.327947][ T6824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.385729][ T6824] usb 2-1: Product: syz [ 886.387551][T22475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8098'. [ 886.390130][ T6824] usb 2-1: Manufacturer: syz [ 886.424411][ T6824] usb 2-1: SerialNumber: syz [ 886.449885][T22475] device dummy1 entered promiscuous mode [ 886.468733][ T6824] usb 2-1: config 0 descriptor?? [ 886.620681][ T4514] usb 5-1: Using ep0 maxpacket: 32 [ 886.677447][T22489] nvme_rdma: malformed address passed: malformed:4420 [ 886.774411][ T6824] usb 2-1: USB disconnect, device number 68 [ 886.785292][T22498] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 886.791871][ T4514] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.826621][ T4514] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 887.037761][ T4514] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 887.042831][T22512] device geneve2 entered promiscuous mode [ 887.068047][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.087266][ T4514] usb 5-1: Product: syz [ 887.111160][ T4514] usb 5-1: Manufacturer: syz [ 887.116648][ T4514] usb 5-1: SerialNumber: syz [ 887.139690][ T4514] usb 5-1: config 0 descriptor?? [ 887.433309][ T4514] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 887.453058][ T4514] f0 e4 3d a7 d3 60 4f fe [ 887.475611][ T4514] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 887.511056][T22502] loop2: detected capacity change from 0 to 32768 [ 887.564811][T22502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.8109 (22502) [ 887.570291][T22534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8122'. [ 887.589910][T22534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.653223][ T4458] usb 5-1: USB disconnect, device number 67 [ 887.676925][T22502] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 887.713526][T22502] BTRFS info (device loop2): setting nodatacow, compression disabled [ 887.778517][T22502] BTRFS info (device loop2): setting datasum, datacow enabled [ 887.791984][T22502] BTRFS info (device loop2): enabling ssd optimizations [ 887.817777][T22502] BTRFS info (device loop2): force clearing of disk cache [ 887.841142][T22502] BTRFS info (device loop2): using spread ssd allocation scheme [ 887.877103][T22502] BTRFS info (device loop2): turning on sync discard [ 887.898768][T22502] BTRFS info (device loop2): turning on flush-on-commit [ 887.914337][T22546] netlink: 'syz.0.8129': attribute type 4 has an invalid length. [ 887.922198][T22546] netlink: 'syz.0.8129': attribute type 3 has an invalid length. [ 887.940375][T22502] BTRFS info (device loop2): not using ssd optimizations [ 887.953177][T22546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8129'. [ 887.963733][T22502] BTRFS info (device loop2): not using spread ssd allocation scheme [ 887.981363][T22502] BTRFS info (device loop2): using free space tree [ 887.999010][T22502] BTRFS info (device loop2): has skinny extents [ 888.280488][T22575] netlink: 'syz.1.8135': attribute type 1 has an invalid length. [ 888.317679][T22580] loop4: detected capacity change from 0 to 512 [ 888.335640][T22579] loop0: detected capacity change from 0 to 128 [ 888.385637][T22502] BTRFS info (device loop2): clearing free space tree [ 888.392516][T22502] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 888.459904][T22502] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 888.480012][T22580] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 888.490412][T22580] FAT-fs (loop4): Filesystem has been set read-only [ 888.520941][T22502] BTRFS info (device loop2): creating free space tree [ 888.597087][T22502] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 888.641022][T22502] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 889.036284][ T4521] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 889.346669][ T4521] usb 2-1: Using ep0 maxpacket: 16 [ 889.475078][ T4521] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 889.483350][ T4521] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.522665][ T4521] usb 2-1: config 1 has no interface number 0 [ 889.544288][ T4521] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 889.548503][T22630] loop3: detected capacity change from 0 to 512 [ 889.609626][ T4521] usb 2-1: config 1 interface 105 has no altsetting 0 [ 889.661099][T22630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 889.675721][T22630] System zones: 1-2, 4-12, 8-8 [ 889.715357][T22630] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.8159: iget: bad i_size value: 38620345925642 [ 889.811940][T22630] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.8159: couldn't read orphan inode 15 (err -117) [ 889.815720][T22648] xt_limit: Overflow, try lower: 2/2147483648 [ 889.831345][ T4521] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 889.840971][ T4521] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 889.859279][ T4521] usb 2-1: Product: syz [ 889.870429][ T4521] usb 2-1: Manufacturer: syz [ 889.878704][T22630] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 889.879399][ T4521] usb 2-1: SerialNumber: syz [ 889.923438][ T4514] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 889.931980][T22650] CacheFiles: Empty tag specified [ 890.113916][T22660] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 890.154724][T22660] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 890.201627][ T4521] aqc111: probe of 2-1:1.105 failed with error -22 [ 890.272950][T22667] device netdevsim0 entered promiscuous mode [ 890.330249][ T4514] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.350990][ T4514] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 890.381599][ T4514] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 890.425896][ T4514] usb 5-1: config 1 interface 0 has no altsetting 0 [ 890.517097][ T4521] usb 2-1: USB disconnect, device number 69 [ 890.559925][T22675] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 890.639843][ T4514] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 890.644711][T22685] xt_hashlimit: overflow, try lower: 3/0 [ 890.658368][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.676889][T22687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8185'. [ 890.693359][ T4514] usb 5-1: Product: syz [ 890.697574][ T4514] usb 5-1: Manufacturer: syz [ 890.702199][ T4514] usb 5-1: SerialNumber: syz [ 890.769358][ T4514] usb-storage 5-1:1.0: USB Mass Storage device detected [ 890.816088][ T4514] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 890.928852][T22701] loop2: detected capacity change from 0 to 128 [ 890.950421][T22703] loop0: detected capacity change from 0 to 512 [ 891.024433][T20151] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 891.037295][ T4521] usb 5-1: USB disconnect, device number 68 [ 891.044192][T22703] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 891.092688][T22703] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.8191: corrupted inode contents [ 891.110070][T22703] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #11: comm syz.0.8191: mark_inode_dirty error [ 891.131409][T22703] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.8191: invalid indirect mapped block 1 (level 1) [ 891.152725][T22703] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.8191: corrupted inode contents [ 891.170130][T22703] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 891.195684][T22703] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.8191: corrupted inode contents [ 891.222117][T22703] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.8191: mark_inode_dirty error [ 891.237797][T22703] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 891.258519][T22703] EXT4-fs (loop0): 1 truncate cleaned up [ 891.279734][T22703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 891.405100][T22703] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.8191: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 891.479120][T20151] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 891.493642][T20151] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 891.548887][T20151] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 891.571797][T20151] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 891.583020][T20151] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 891.593177][T20151] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 891.613308][T20151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.678441][T22689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 891.685591][T22689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 891.698209][T22689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 891.720669][T20151] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 891.977700][T20151] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 892.002377][T20151] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 892.038433][T22749] loop0: detected capacity change from 0 to 64 [ 892.229854][ T4463] usb 4-1: USB disconnect, device number 70 [ 892.242925][ C1] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 892.288607][ T4463] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 892.328982][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8224'. [ 892.348389][ T4463] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 892.375088][ T4463] mos7720 4-1:1.0: device disconnected [ 892.683350][ T6824] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 892.869583][T22797] netlink: 'syz.1.8238': attribute type 27 has an invalid length. [ 892.929610][T22797] netlink: 'syz.1.8238': attribute type 3 has an invalid length. [ 892.941642][ T6824] usb 5-1: Using ep0 maxpacket: 8 [ 892.942473][T22801] loop3: detected capacity change from 0 to 1024 [ 893.031162][T22801] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 893.109158][ T6824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 893.122854][T22801] hfsplus: filesystem is marked journaled, leaving read-only. [ 893.226817][ T6824] usb 5-1: config 8 has an invalid interface number: 42 but max is 0 [ 893.235119][ T6824] usb 5-1: config 8 has no interface number 0 [ 893.280169][ T6824] usb 5-1: config 8 interface 42 has no altsetting 0 [ 893.427807][T22828] ip6t_srh: unknown srh match flags FF3F [ 893.451137][ T6824] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 893.471224][ T6824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.481722][ T6824] usb 5-1: Product: syz [ 893.486762][ T6824] usb 5-1: Manufacturer: syz [ 893.507387][ T6824] usb 5-1: SerialNumber: syz [ 893.519898][T22833] loop1: detected capacity change from 0 to 256 [ 893.541275][T22833] exfat: Deprecated parameter 'utf8' [ 893.546741][T22833] exfat: Deprecated parameter 'utf8' [ 893.563713][T22833] exfat: Deprecated parameter 'utf8' [ 893.573183][T22833] exfat: Deprecated parameter 'codepage' [ 893.578944][T22833] exfat: Bad value for 'codepage' [ 893.579109][ T4514] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 893.612554][T22835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8256'. [ 893.623115][T22835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8256'. [ 893.815521][ T6824] empeg 5-1:8.42: empeg converter detected [ 893.846391][ T6824] usb 5-1: active config #8 != 1 ?? [ 893.870170][ T6824] usb 5-1: USB disconnect, device number 69 [ 893.975072][ T4514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024 [ 894.178029][ T4514] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 894.188586][ T4514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.196626][ T4514] usb 1-1: Product: syz [ 894.199195][ T4463] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 894.201589][ T4514] usb 1-1: Manufacturer: syz [ 894.213355][ T4514] usb 1-1: SerialNumber: syz [ 894.253695][T22867] loop1: detected capacity change from 0 to 2048 [ 894.260915][ T4514] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 894.272057][ T4514] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 894.298148][ T4514] scsi host1: usb-storage 1-1:1.0 [ 894.303608][T22872] netlink: 'syz.2.8273': attribute type 13 has an invalid length. [ 894.338780][T22867] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 894.456385][T22879] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 894.466380][ T4463] usb 4-1: Using ep0 maxpacket: 16 [ 894.590315][ T4514] usb 1-1: USB disconnect, device number 60 [ 894.594609][ T4463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.622569][ T4463] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 894.654429][ T4463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.691378][ T4463] usb 4-1: config 0 descriptor?? [ 894.735516][ T4463] xbox_remote_probe: Unexpected endpoint_in [ 894.742107][ T4463] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 894.790809][T22892] loop2: detected capacity change from 0 to 256 [ 894.986723][ T4464] usb 4-1: USB disconnect, device number 71 [ 895.751291][T22957] netlink: 'syz.2.8313': attribute type 3 has an invalid length. [ 895.926612][T22971] netlink: 11 bytes leftover after parsing attributes in process `syz.4.8320'. [ 895.971884][T22975] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8322'. [ 896.254670][T22979] loop4: detected capacity change from 0 to 4096 [ 896.301778][T22979] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 896.350571][T22979] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 896.409265][T22996] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 896.438062][T22994] loop0: detected capacity change from 0 to 1764 [ 896.463812][T22979] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 896.476358][T22996] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 896.538011][T22979] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 896.588669][T22996] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 896.633809][T22979] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 896.744413][T22979] ntfs: volume version 3.1. [ 896.775675][T22979] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 896.872136][T22979] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 896.925479][T22979] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 896.965983][T23009] ipt_REJECT: TCP_RESET invalid for non-tcp [ 896.978246][T22979] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 897.026929][T22979] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 897.089109][T22965] loop3: detected capacity change from 0 to 32768 [ 897.269230][T23013] device wlan0 entered promiscuous mode [ 897.657318][T23033] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8352'. [ 897.690470][T23037] loop2: detected capacity change from 0 to 64 [ 897.839117][T23037] minix_free_block (loop2:21): bit already cleared [ 898.063632][T23055] overlayfs: missing 'lowerdir' [ 898.290160][T23071] wg0 speed is unknown, defaulting to 1000 [ 898.322602][T23075] ipt_ECN: cannot use operation on non-tcp rule [ 898.341039][T23071] wg0 speed is unknown, defaulting to 1000 [ 898.364837][T23076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8372'. [ 898.495436][T23076] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 898.538118][T23076] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 898.552111][T23076] device bridge1 entered promiscuous mode [ 898.566433][T23080] loop2: detected capacity change from 0 to 2048 [ 898.577390][T23071] wg0 speed is unknown, defaulting to 1000 [ 898.694989][T23087] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 898.761817][T23080] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 898.780633][T23092] loop3: detected capacity change from 0 to 512 [ 898.835915][T23080] Remounting filesystem read-only [ 898.848330][T23080] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 898.858689][T23080] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 898.880559][T23080] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 898.901649][T23092] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 898.931587][T23080] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 898.951874][T23080] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 898.955946][T23098] ip6t_srh: unknown srh match flags 4000 [ 898.969978][T23092] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 898.975017][T23095] overlayfs: unrecognized mount option "\" or missing value [ 898.999692][T23092] ext4 filesystem being mounted at /1635/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.052634][T23080] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 899.072556][T23080] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 899.100659][ T4464] wg0 speed is unknown, defaulting to 1000 [ 899.098633][T23071] infiniband syz2: set active [ 899.108096][T23092] EXT4-fs error (device loop3): __ext4_new_inode:1082: comm syz.3.8380: reserved inode found cleared - inode=1 [ 899.112387][T23071] infiniband syz2: added wg0 [ 899.144173][T23080] NILFS (loop2): error -5 truncating bmap (ino=16) [ 899.176343][T23080] syz.2.8373 (23080) used greatest stack depth: 19280 bytes left [ 899.245798][ T4479] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 899.263143][T23071] RDS/IB: syz2: added [ 899.309575][T23071] smc: adding ib device syz2 with port count 1 [ 899.360020][T23111] nft_compat: unsupported protocol 0 [ 899.383778][T23071] smc: ib device syz2 port 1 has pnetid [ 899.400797][T20151] wg0 speed is unknown, defaulting to 1000 [ 899.459038][T23071] wg0 speed is unknown, defaulting to 1000 [ 899.482165][T23119] loop4: detected capacity change from 0 to 256 [ 899.783667][ T4464] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 899.935359][T23071] wg0 speed is unknown, defaulting to 1000 [ 900.162146][T23146] trusted_key: encrypted_key: master key parameter '' is invalid [ 900.185163][ T4464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 900.186540][T23142] loop4: detected capacity change from 0 to 4096 [ 900.272085][T23071] wg0 speed is unknown, defaulting to 1000 [ 900.351656][T23142] ntfs3: Unknown parameter 'ÿ017777777777777777777770177777777777777777777700000000000000000000ÿÿ' [ 900.377545][ T4464] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 900.390402][ T4464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.408333][ T4464] usb 3-1: Product: syz [ 900.419367][ T4464] usb 3-1: Manufacturer: syz [ 900.430467][ T4464] usb 3-1: SerialNumber: syz [ 900.441250][T23071] wg0 speed is unknown, defaulting to 1000 [ 900.450559][ T4464] usb 3-1: config 0 descriptor?? [ 900.484507][T23118] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 900.516216][ T4464] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 900.623278][ T4463] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 900.765213][ T4514] usb 3-1: USB disconnect, device number 67 [ 900.777043][T23071] wg0 speed is unknown, defaulting to 1000 [ 900.890320][ T4463] usb 4-1: Using ep0 maxpacket: 32 [ 900.975536][T23154] loop4: detected capacity change from 0 to 4096 [ 901.018797][ T4463] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.037619][ T4463] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 901.083445][T23154] ntfs: volume version 3.1. [ 901.253958][ T4463] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 901.280845][ T4463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.304733][ T4463] usb 4-1: Product: syz [ 901.327543][ T4463] usb 4-1: Manufacturer: syz [ 901.349713][ T4463] usb 4-1: SerialNumber: syz [ 901.396629][ T4463] usb 4-1: config 0 descriptor?? [ 901.414331][ T4514] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 901.572796][T23181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8419'. [ 901.670919][ T4463] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 901.689457][ T4463] f0 e4 3d a7 d3 60 4f fe [ 901.705187][ T4463] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 901.745656][ T4514] usb 1-1: Using ep0 maxpacket: 8 [ 901.884405][ T4514] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 901.906471][ T4514] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.911512][ T4463] usb 4-1: USB disconnect, device number 72 [ 901.918056][ T4514] usb 1-1: config 0 has no interface number 0 [ 901.937861][ T4514] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 901.958283][ T4514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.971967][ T4514] usb 1-1: config 0 descriptor?? [ 902.024897][ T4514] hub 1-1:0.4: bad descriptor, ignoring hub [ 902.031247][ T4514] hub: probe of 1-1:0.4 failed with error -5 [ 902.038626][ T4514] sierra 1-1:0.4: Sierra USB modem converter detected [ 902.130410][T20151] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 902.253351][ T4514] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 902.302504][ T4514] usb 1-1: USB disconnect, device number 61 [ 902.310803][ T4514] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 902.320211][ T4514] sierra 1-1:0.4: device disconnected [ 902.440440][T20151] usb 3-1: Using ep0 maxpacket: 16 [ 902.601607][T23204] wg0 speed is unknown, defaulting to 1000 [ 902.601683][T20151] usb 3-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 902.601710][T20151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.671912][T20151] usb 3-1: config 0 descriptor?? [ 902.721810][T20151] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 902.886705][ T4514] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 902.953766][T20151] pwc: send_video_command error -71 [ 902.959030][T20151] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 902.977551][T20151] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 903.005162][T20151] usb 3-1: USB disconnect, device number 68 [ 903.026597][T23228] netlink: 'syz.1.8444': attribute type 9 has an invalid length. [ 903.162096][T23234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8447'. [ 903.346105][T23244] overlayfs: missing 'lowerdir' [ 903.366426][T23248] unsupported nlmsg_type 40 [ 903.535543][ T4514] usb 5-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40 [ 903.556996][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.583782][ T4514] usb 5-1: Product: syz [ 903.594144][ T4514] usb 5-1: Manufacturer: syz [ 903.598883][ T4514] usb 5-1: SerialNumber: syz [ 903.698820][T23260] loop1: detected capacity change from 0 to 256 [ 903.797792][ T4518] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 903.845553][T23247] loop3: detected capacity change from 0 to 32768 [ 903.930343][T23247] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 903.950705][T23247] JBD2: Ignoring recovery information on journal [ 904.056029][T23247] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 904.113160][T23270] SET target dimension over the limit! [ 904.204553][ T4514] usb 5-1: unit 5 not found! [ 904.215747][ T4483] ocfs2: Unmounting device (7,3) on (node local) [ 904.296852][ T4514] usb 5-1: can't set first interface for hiFace device. [ 904.311215][ T4518] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.353563][ T4514] snd-usb-hiface: probe of 5-1:1.1 failed with error -5 [ 904.360822][ T4518] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 904.373073][ T4518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.395886][ T4518] usb 1-1: config 0 descriptor?? [ 904.401267][ T4514] usb 5-1: can't set first interface for hiFace device. [ 904.418182][ T4514] snd-usb-hiface: probe of 5-1:1.2 failed with error -5 [ 904.430518][ T4514] usb 5-1: USB disconnect, device number 70 [ 904.497457][ T4518] usb 1-1: bad CDC descriptors [ 904.504475][ T4518] usb 1-1: bad CDC descriptors [ 904.539386][T23289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8474'. [ 904.583094][T23289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8474'. [ 904.743656][ T4464] usb 1-1: USB disconnect, device number 62 [ 904.789164][T23299] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 904.818787][T23299] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 905.046340][T23315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8486'. [ 905.099776][T23305] loop3: detected capacity change from 0 to 4096 [ 905.194490][T23305] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 905.387871][T23305] ntfs3: loop3: failed to convert "c46c" to cp850 [ 905.799287][T23342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 905.806815][T23342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 905.930379][T23342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.671545][T23334] loop0: detected capacity change from 0 to 32768 [ 906.689717][T23382] loop2: detected capacity change from 0 to 4096 [ 906.709313][T23384] loop3: detected capacity change from 0 to 4096 [ 906.817683][T23393] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 906.857858][T23334] JBD2: Ignoring recovery information on journal [ 906.894729][T23400] loop4: detected capacity change from 0 to 2048 [ 906.919430][T23398] netlink: 'syz.1.8526': attribute type 1 has an invalid length. [ 906.928131][T23398] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8526'. [ 906.998850][T23401] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.047273][T23400] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 907.069203][T23334] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 907.173517][T23400] Remounting filesystem read-only [ 907.224606][T23400] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 907.283749][T23400] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 907.363254][T23400] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 907.422621][T23400] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 907.490873][T23400] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 907.503832][T23414] loop3: detected capacity change from 0 to 164 [ 907.518757][ T4473] ocfs2: Unmounting device (7,0) on (node local) [ 907.528437][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 907.528453][ T26] audit: type=1800 audit(2000000531.103:49): pid=23400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8527" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 907.566017][T23400] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 907.601533][T23400] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 907.646078][T23414] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 907.646352][T23400] NILFS (loop4): error -5 truncating bmap (ino=16) [ 907.757418][T23421] loop2: detected capacity change from 0 to 64 [ 907.888287][T23414] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 908.032761][ T4484] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 908.247922][T23438] loop3: detected capacity change from 0 to 16 [ 908.382373][T23438] erofs: (device loop3): mounted with root inode @ nid 36. [ 908.864495][T20151] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 908.925045][T23484] loop3: detected capacity change from 0 to 128 [ 909.037535][T23484] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 909.093895][T23484] hpfs: filesystem error: improperly stopped [ 909.125501][T23484] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 909.173526][T23484] hpfs: You really don't want any checks? You are crazy... [ 909.186565][ T6824] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 909.201131][T23490] loop0: detected capacity change from 0 to 4096 [ 909.209175][T23484] hpfs: Code page index out of array [ 909.214534][T23484] hpfs: code page support is disabled [ 909.245114][T23484] hpfs: hpfs_map_4sectors(): unaligned read [ 909.261029][T23484] hpfs: hpfs_map_4sectors(): unaligned read [ 909.271059][T20151] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.279212][T23484] hpfs: filesystem error: unable to find root dir [ 909.293133][T23490] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 909.341550][T20151] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.391685][T23490] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 909.503007][T23490] ntfs: volume version 3.1. [ 909.612775][ T6824] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 909.612788][T20151] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.612816][T20151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.638309][ T6824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.724863][T20151] usb 2-1: Product: syz [ 909.729088][T20151] usb 2-1: Manufacturer: syz [ 909.731233][ T6824] usb 3-1: config 0 descriptor?? [ 909.751621][T20151] usb 2-1: SerialNumber: syz [ 909.796918][ T6824] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 909.823276][T20151] cdc_ncm 2-1:1.0: skipping garbage [ 909.837038][T20151] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 909.844670][T20151] cdc_ncm 2-1:1.0: bind() failure [ 909.923607][T20151] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 909.930502][T20151] cdc_ncm 2-1:1.1: bind() failure [ 910.128240][T20151] usb 2-1: USB disconnect, device number 70 [ 910.264846][ T6824] gp8psk: usb in 137 operation failed. [ 910.271673][ T6824] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 910.293429][ T6824] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 910.307493][T23544] erofs: (device loop3): mounted with root inode @ nid 36. [ 910.354919][ T6824] usb 3-1: USB disconnect, device number 69 [ 910.646352][T23564] block device autoloading is deprecated and will be removed. [ 910.732485][T23573] netlink: 'syz.3.8586': attribute type 4 has an invalid length. [ 910.797215][T23573] netlink: 'syz.3.8586': attribute type 10 has an invalid length. [ 910.828519][T23573] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8586'. [ 910.942596][T23573] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 910.999954][T23586] wg0 speed is unknown, defaulting to 1000 [ 911.102656][ T4458] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 911.355152][ T6824] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 911.388410][ T4458] usb 2-1: Using ep0 maxpacket: 8 [ 911.515559][ T4458] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.549292][ T4458] usb 2-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 911.570228][ T4458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.577890][T23630] set_capacity_and_notify: 1 callbacks suppressed [ 911.577905][T23630] loop3: detected capacity change from 0 to 64 [ 911.589201][T23623] loop4: detected capacity change from 0 to 4096 [ 911.606903][ T4458] usb 2-1: config 0 descriptor?? [ 911.678074][ T4458] usb 2-1: Found UVC 0.00 device (05a9:2630) [ 911.695694][ T4458] usb 2-1: No valid video chain found. [ 911.707730][T23623] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 911.842062][T23623] ntfs3: loop4: failed to convert "c46c" to cp850 [ 911.907471][T23646] loop0: detected capacity change from 0 to 4096 [ 911.921850][ T6824] usb 3-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40 [ 911.930944][ T6824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.950238][T23646] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 911.954589][T20151] usb 2-1: USB disconnect, device number 71 [ 911.964395][ T6824] usb 3-1: Product: syz [ 911.970979][ T6824] usb 3-1: Manufacturer: syz [ 911.999713][ T6824] usb 3-1: SerialNumber: syz [ 912.172321][T23666] openvswitch: netlink: Actions may not be safe on all matching packets [ 912.568987][ T6824] usb 3-1: unit 5 not found! [ 912.626705][ T6824] usb 3-1: can't set first interface for hiFace device. [ 912.631005][ T6824] snd-usb-hiface: probe of 3-1:1.1 failed with error -5 [ 912.654704][ T6824] usb 3-1: can't set first interface for hiFace device. [ 912.654750][ T6824] snd-usb-hiface: probe of 3-1:1.2 failed with error -5 [ 912.662832][ T6824] usb 3-1: USB disconnect, device number 70 [ 912.734559][T23719] netlink: 'syz.4.8615': attribute type 3 has an invalid length. [ 912.775384][T23719] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8615'. [ 912.863152][T23726] loop4: detected capacity change from 0 to 764 [ 912.926893][T23726] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 913.453064][T23762] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8629'. [ 913.966384][T23804] xt_connbytes: Forcing CT accounting to be enabled [ 914.182689][T23818] loop2: detected capacity change from 0 to 512 [ 914.301509][T23818] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 914.395681][T23838] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.8655'. [ 914.461955][T23818] ext4 filesystem being mounted at /1625/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.873295][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 914.873399][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 915.423147][T23891] tmpfs: Bad value for 'mpol' [ 915.719617][T23911] loop1: detected capacity change from 0 to 1024 [ 915.740104][T23845] loop0: detected capacity change from 0 to 32768 [ 915.860900][T23911] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 915.899053][T23845] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 915.899053][T23845] [ 915.943184][T23911] ext4 filesystem being mounted at /1758/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.972320][T23931] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 916.001571][T23845] ERROR: (device loop0): remounting filesystem as read-only [ 916.013892][T23845] ialloc: diAlloc returned -5! [ 916.044426][T23911] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.8678: corrupted xattr block 128 [ 916.080240][ T26] audit: type=1800 audit(2000000539.102:50): pid=23911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8678" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 916.483009][T23972] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 916.780286][T23989] syz.1.8702 uses old SIOCAX25GETINFO [ 916.805059][T23990] loop3: detected capacity change from 0 to 256 [ 916.907296][T23997] loop2: detected capacity change from 0 to 164 [ 916.950859][T24001] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 917.022293][T24008] netlink: 'syz.4.8707': attribute type 7 has an invalid length. [ 917.319357][ T4518] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 917.504186][T24049] netlink: 'syz.4.8719': attribute type 10 has an invalid length. [ 917.554710][T24049] netlink: 'syz.4.8719': attribute type 10 has an invalid length. [ 917.597282][ T4518] usb 2-1: Using ep0 maxpacket: 16 [ 917.757941][ T4518] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.804301][ T4518] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.074081][ T4518] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.108226][ T4518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.138482][ T4518] usb 2-1: Product: syz [ 918.151797][ T4518] usb 2-1: Manufacturer: syz [ 918.185096][ T4518] usb 2-1: SerialNumber: syz [ 918.252796][T24089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8733'. [ 918.276025][T24088] loop3: detected capacity change from 0 to 8 [ 918.356098][T24096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 918.363331][T24096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 918.459993][T24096] vhci_hcd vhci_hcd.0: Device attached [ 918.581082][ T4518] usb 2-1: 0:2 : does not exist [ 918.615373][T24117] loop3: detected capacity change from 0 to 64 [ 918.640747][ T4518] usb 2-1: USB disconnect, device number 72 [ 918.793249][ T4512] vhci_hcd: vhci_device speed not set [ 918.880016][ T4512] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 918.913457][ T4519] udevd[4519]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.088202][T24097] vhci_hcd: connection reset by peer [ 919.097455][ T154] vhci_hcd: stop threads [ 919.102025][ T154] vhci_hcd: release socket [ 919.132880][ T154] vhci_hcd: disconnect device [ 919.152138][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8748'. [ 919.851594][T24216] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 920.055312][T24235] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8775'. [ 920.082547][T24238] loop1: detected capacity change from 0 to 128 [ 920.146230][T24238] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 920.312321][T24255] blktrace: Concurrent blktraces are not allowed on loop7 [ 920.560461][T24279] set match dimension is over the limit! [ 920.714232][T24299] No such timeout policy "syz1" [ 920.807663][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8795'. [ 921.273588][T24338] loop1: detected capacity change from 0 to 4096 [ 921.360308][T24339] loop3: detected capacity change from 0 to 4096 [ 921.362213][T24349] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.8811'. [ 921.445464][T24339] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 921.483559][T24354] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 921.596239][T24339] ntfs3: loop3: ntfs_sync_inode r=1e failed, -22. [ 921.635056][T24339] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 921.730412][T24287] loop2: detected capacity change from 0 to 32768 [ 921.820984][T15153] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 921.825710][T24287] JBD2: Ignoring recovery information on journal [ 921.903293][ T4483] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 921.935892][T24375] loop0: detected capacity change from 0 to 256 [ 921.946287][T24388] netlink: 'syz.1.8819': attribute type 1 has an invalid length. [ 921.967176][T24287] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 922.251211][ T150] block nbd0: Attempted send on invalid socket [ 922.257738][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 922.274228][T24411] hpfs: hpfs_map_sector(): read error [ 922.398621][T24419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8828'. [ 922.433029][ T4479] ocfs2: Unmounting device (7,2) on (node local) [ 922.781584][ T4463] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 922.963212][ T4458] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 923.108866][T24418] loop3: detected capacity change from 0 to 32768 [ 923.148522][T24418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.8827 (24418) [ 923.188889][ T4463] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 923.203356][ T4463] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 923.227852][ T4463] usb 5-1: config 0 has no interface number 0 [ 923.234433][ T4458] usb 3-1: Using ep0 maxpacket: 8 [ 923.267208][ T4463] usb 5-1: config 0 has no interface number 1 [ 923.275077][ T4463] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 923.292726][ T4463] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 923.306928][ T4463] usb 5-1: config 0 interface 255 has no altsetting 0 [ 923.348188][T24418] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 923.367915][T24418] BTRFS info (device loop3): turning on sync discard [ 923.378628][T24418] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 923.399327][T24418] BTRFS info (device loop3): use zstd compression, level 3 [ 923.412327][ T4458] usb 3-1: unable to get BOS descriptor or descriptor too short [ 923.444717][T24418] BTRFS info (device loop3): turning on async discard [ 923.451545][T24418] BTRFS info (device loop3): setting nodatacow, compression disabled [ 923.486305][T24418] BTRFS info (device loop3): enabling all of the rescue options [ 923.494700][ T4463] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 923.511834][T24418] BTRFS info (device loop3): ignoring data csums [ 923.514665][ T4463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.518245][T24418] BTRFS info (device loop3): ignoring bad roots [ 923.526924][ T4458] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 923.578582][T24418] BTRFS info (device loop3): disabling log replay at mount time [ 923.579989][ T4463] usb 5-1: Product: syz [ 923.591893][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8842'. [ 923.591918][ T4458] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 923.610834][T24418] BTRFS info (device loop3): enabling auto defrag [ 923.633796][ T4463] usb 5-1: Manufacturer: syz [ 923.636581][T24418] BTRFS error (device loop3): nologreplay must be used with ro mount option [ 923.643982][ T4463] usb 5-1: SerialNumber: syz [ 923.664782][ T4458] usb 3-1: config 4 has no interface number 0 [ 923.680264][ T4463] usb 5-1: config 0 descriptor?? [ 923.695154][T24418] BTRFS error (device loop3): open_ctree failed: -22 [ 923.726806][ T4463] usb 5-1: selecting invalid altsetting 0 [ 923.754895][ T4463] usb 5-1: Could not set interface, error -22 [ 923.890654][T24486] loop1: detected capacity change from 0 to 256 [ 923.909806][T24486] exfat: Deprecated parameter 'utf8' [ 923.921543][T24486] exfat: Deprecated parameter 'utf8' [ 923.937095][T24486] exfat: Deprecated parameter 'namecase' [ 923.945253][T24486] exfat: Deprecated parameter 'namecase' [ 923.946829][ T4458] usb 3-1: string descriptor 0 read error: -22 [ 923.967388][T24486] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 923.989363][ T4458] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 924.012579][ T4458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.024016][T24493] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8848'. [ 924.093979][ T4458] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 924.135303][ T4458] usb 3-1: Found UVC 0.02 device (04f2:b746) [ 924.153986][ T4458] usb 3-1: No valid video chain found. [ 924.186846][ T4463] usb 5-1: USB disconnect, device number 71 [ 924.374579][ T4512] vhci_hcd: vhci_device speed not set [ 924.434366][ T4458] usb 3-1: USB disconnect, device number 71 [ 924.490964][T24531] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8858'. [ 924.508925][T24531] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 924.966324][T24576] syz.1.8871 uses obsolete (PF_INET,SOCK_PACKET) [ 925.051086][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8875'. [ 925.063388][T24584] netlink: 'syz.0.8874': attribute type 1 has an invalid length. [ 925.089967][T24584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8874'. [ 925.104071][T24590] loop1: detected capacity change from 0 to 256 [ 925.109544][T24592] loop4: detected capacity change from 0 to 256 [ 925.138956][T24584] NCSI netlink: No device for ifindex 0 [ 925.257989][T24590] FAT-fs (loop1): Directory bread(block 64) failed [ 925.284161][T24608] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8883'. [ 925.293969][T24590] FAT-fs (loop1): Directory bread(block 65) failed [ 925.300638][T24590] FAT-fs (loop1): Directory bread(block 66) failed [ 925.343345][T24590] FAT-fs (loop1): Directory bread(block 67) failed [ 925.362532][T24608] device hsr_slave_0 left promiscuous mode [ 925.398252][T24590] FAT-fs (loop1): Directory bread(block 68) failed [ 925.409297][T24608] device hsr_slave_1 left promiscuous mode [ 925.426505][T24590] FAT-fs (loop1): Directory bread(block 69) failed [ 925.458472][T24590] FAT-fs (loop1): Directory bread(block 70) failed [ 925.469204][T24590] FAT-fs (loop1): Directory bread(block 71) failed [ 925.482500][T24607] loop3: detected capacity change from 0 to 8192 [ 925.510783][T24590] FAT-fs (loop1): Directory bread(block 72) failed [ 925.517406][T24590] FAT-fs (loop1): Directory bread(block 73) failed [ 925.554073][T24625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8887'. [ 925.586427][T24625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8887'. [ 925.609838][T24607] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 925.641168][T24607] REISERFS (device loop3): using ordered data mode [ 925.694107][T24607] reiserfs: using flush barriers [ 925.734970][T24607] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 925.889118][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8892'. [ 925.908178][T24607] REISERFS (device loop3): checking transaction log (loop3) [ 925.996607][T24658] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.8894'. [ 926.024197][T24658] openvswitch: netlink: ct_state flags 00030000 unsupported [ 926.373722][T24607] REISERFS (device loop3): Using tea hash to sort names [ 926.383082][T24607] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 926.523463][T24690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8905'. [ 926.680561][T24700] vivid-001: ================= START STATUS ================= [ 926.716380][T24700] vivid-001: Enable Output Cropping: true [ 926.730386][T24700] vivid-001: Enable Output Composing: true [ 926.767241][T24700] vivid-001: Enable Output Scaler: true [ 926.817209][T24700] vivid-001: Tx RGB Quantization Range: Automatic [ 926.875059][T24700] vivid-001: Transmit Mode: HDMI [ 926.894435][T24700] vivid-001: Display Present: true inactive [ 926.938302][T24700] vivid-001: Hotplug Present: 0x00000001 [ 926.956051][T24700] vivid-001: RxSense Present: 0x00000001 [ 926.969467][T24700] vivid-001: EDID Present: 0x00000001 [ 927.021250][T24700] vivid-001: ================== END STATUS ================== [ 927.022210][T24727] loop4: detected capacity change from 0 to 8 [ 927.038562][T24726] xt_CONNSECMARK: invalid mode: 66 [ 927.141045][T24733] loop3: detected capacity change from 0 to 256 [ 927.149322][T24727] squashfs image failed sanity check [ 927.419401][T24755] loop3: detected capacity change from 0 to 1024 [ 927.536769][T24755] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 927.684149][T24755] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,nombcache,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 927.959215][T24802] nfs4: Bad value for 'source' [ 928.015590][T24806] loop4: detected capacity change from 0 to 512 [ 928.101388][T24806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 928.138056][T24806] EXT4-fs (loop4): 1 truncate cleaned up [ 928.155631][T24806] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 928.172906][T24824] IPv6: sit2: Disabled Multicast RS [ 928.195144][T24806] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.8938: 'file0' linked to parent dir [ 928.322773][T24827] loop2: detected capacity change from 0 to 2048 [ 928.422851][T24827] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 928.482059][T24827] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 928.487291][T24847] netlink: 'syz.0.8953': attribute type 16 has an invalid length. [ 928.518796][T24827] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 928.519709][T24847] netlink: 'syz.0.8953': attribute type 3 has an invalid length. [ 928.560332][T24827] UDF-fs: Scanning with blocksize 512 failed [ 928.603249][T24827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.695404][T24827] UDF-fs: bad mount option "ý'*§vèŸz³çnt" or missing value [ 928.959030][T24882] loop2: detected capacity change from 0 to 256 [ 929.046879][T24882] FAT-fs (loop2): Directory bread(block 64) failed [ 929.065267][T24882] FAT-fs (loop2): Directory bread(block 65) failed [ 929.093073][T24882] FAT-fs (loop2): Directory bread(block 66) failed [ 929.130678][T24882] FAT-fs (loop2): Directory bread(block 67) failed [ 929.165404][T24882] FAT-fs (loop2): Directory bread(block 68) failed [ 929.183907][T24882] FAT-fs (loop2): Directory bread(block 69) failed [ 929.251544][T24882] FAT-fs (loop2): Directory bread(block 70) failed [ 929.291076][T24882] FAT-fs (loop2): Directory bread(block 71) failed [ 929.297922][T24882] FAT-fs (loop2): Directory bread(block 72) failed [ 929.345263][T24882] FAT-fs (loop2): Directory bread(block 73) failed [ 929.665302][ T4458] Bluetooth: hci0: command 0x0c20 tx timeout [ 929.723845][T24858] loop4: detected capacity change from 0 to 32768 [ 929.909818][T24858] XFS (loop4): Mounting V5 Filesystem [ 930.199990][T24858] XFS (loop4): Ending clean mount [ 930.478731][ T4484] XFS (loop4): Unmounting Filesystem [ 930.479220][T24978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 930.506334][T24903] loop1: detected capacity change from 0 to 32768 [ 931.363612][T25041] __nla_validate_parse: 7 callbacks suppressed [ 931.363630][T25041] netlink: 620 bytes leftover after parsing attributes in process `syz.2.9013'. [ 931.494950][T25049] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9015'. [ 931.532200][T25049] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9015'. [ 931.551383][T25041] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.896198][T25080] netlink: 'syz.1.9025': attribute type 32 has an invalid length. [ 932.094379][T25093] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 932.138101][T25093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 932.515051][T25127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 932.626549][ T4512] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 932.842005][T25175] openvswitch: netlink: Actions may not be safe on all matching packets [ 933.032471][ T4512] usb 1-1: not running at top speed; connect to a high speed hub [ 933.110406][T25181] loop2: detected capacity change from 0 to 8192 [ 933.141544][ T4512] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.156346][ T4512] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 933.177251][ T4512] usb 1-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 933.204464][ T4512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.248128][T25181] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 933.275716][T25205] autofs4:pid:25205:autofs_fill_super: called with bogus options [ 933.290924][ T4512] usb 1-1: Found UVC 1.00 device (0000:d970) [ 933.292617][T25181] REISERFS (device loop2): using ordered data mode [ 933.315754][T25181] reiserfs: using flush barriers [ 933.342384][T25181] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 933.404758][T25181] REISERFS (device loop2): checking transaction log (loop2) [ 933.461326][T25181] REISERFS (device loop2): Using r5 hash to sort names [ 933.505891][T25181] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 933.515696][ T4512] usb 1-1: No streaming interface found for terminal 2. [ 933.757355][ T4463] usb 1-1: USB disconnect, device number 63 [ 934.282461][T25294] netlink: 'syz.1.9080': attribute type 1 has an invalid length. [ 934.314896][T25294] netlink: 'syz.1.9080': attribute type 9 has an invalid length. [ 934.371490][T25301] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9082'. [ 934.421818][T25301] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9082'. [ 934.446200][T25301] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9082'. [ 934.478932][T25301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9082'. [ 934.731093][T25334] netlink: 'syz.2.9094': attribute type 1 has an invalid length. [ 934.793810][T25334] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.9094'. [ 934.813809][T25321] loop4: detected capacity change from 0 to 4096 [ 934.835980][T25334] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9094'. [ 934.914881][T25321] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 934.935529][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.007841][T25321] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 935.104411][T25321] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 935.140057][T25367] netlink: 'syz.0.9103': attribute type 1 has an invalid length. [ 935.149176][T25366] netlink: 'syz.2.9104': attribute type 3 has an invalid length. [ 935.157643][T25321] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 935.207601][T25366] netlink: 'syz.2.9104': attribute type 3 has an invalid length. [ 935.222144][T25367] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9103'. [ 935.265264][T25321] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 935.323479][T25321] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 935.457022][T25321] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 935.523143][T25321] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 935.564186][T25385] usb usb9: usbfs: process 25385 (syz.2.9110) did not claim interface 3 before use [ 935.629741][T25321] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 935.700913][T25321] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 935.749948][T25321] ntfs: volume version 3.1. [ 935.971614][ T4463] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 936.044074][T25350] loop3: detected capacity change from 0 to 32768 [ 936.172281][T25350] JBD2: Ignoring recovery information on journal [ 936.238932][ T4463] usb 2-1: Using ep0 maxpacket: 32 [ 936.308148][T25436] ipt_ECN: cannot use operation on non-tcp rule [ 936.361174][T25350] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 936.410129][ T4463] usb 2-1: unable to get BOS descriptor or descriptor too short [ 936.517229][ T4463] usb 2-1: config 6 has an invalid interface number: 49 but max is 0 [ 936.525839][ T4463] usb 2-1: config 6 has no interface number 0 [ 936.570286][ T4463] usb 2-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 936.595060][ T4463] usb 2-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 936.615505][ T4483] ocfs2: Unmounting device (7,3) on (node local) [ 936.636672][ T4463] usb 2-1: config 6 interface 49 has no altsetting 0 [ 936.837616][ T4463] usb 2-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 936.858513][ T4463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.875859][ T4463] usb 2-1: Product: syz [ 936.896326][ T4463] usb 2-1: Manufacturer: syz [ 936.928726][ T4463] usb 2-1: SerialNumber: syz [ 937.062067][ T4512] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 937.130793][T25485] __nla_validate_parse: 1 callbacks suppressed [ 937.130812][T25485] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9140'. [ 937.229176][T25446] loop4: detected capacity change from 0 to 32768 [ 937.245944][ T4463] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 937.280312][T25500] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 937.282582][ T4463] sonixb 2-1:6.49: Error reading register 00: -71 [ 937.345504][ T4463] usb 2-1: USB disconnect, device number 73 [ 937.355341][ T4512] usb 1-1: Using ep0 maxpacket: 8 [ 937.543176][ T4512] usb 1-1: unable to get BOS descriptor or descriptor too short [ 937.628926][ T4512] usb 1-1: config 6 has an invalid interface number: 14 but max is 0 [ 937.637345][ T4512] usb 1-1: config 6 has no interface number 0 [ 937.671204][ T4512] usb 1-1: config 6 interface 14 has no altsetting 0 [ 937.861717][T25546] netlink: 'syz.1.9156': attribute type 10 has an invalid length. [ 937.886815][ T4512] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=6e.c2 [ 937.898902][ T4512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.923501][ T4512] usb 1-1: Product: syz [ 937.925899][T25546] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.933497][T20151] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 937.935116][T25546] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.945005][ T4512] usb 1-1: Manufacturer: syz [ 937.967935][ T4512] usb 1-1: SerialNumber: syz [ 937.970216][T25549] loop3: detected capacity change from 0 to 4096 [ 938.020933][T25558] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 938.066972][T25546] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.074904][T25546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.086740][T25546] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.094003][T25546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.126697][T25546] team0: Port device bridge0 added [ 938.238021][T25567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9161'. [ 938.330811][T25574] netlink: 'syz.4.9163': attribute type 32 has an invalid length. [ 938.364561][ T4512] usb 1-1: USB disconnect, device number 64 [ 938.414191][T20151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.452384][T20151] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 938.461450][T20151] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 938.651716][T25604] xt_hashlimit: max too large, truncated to 1048576 [ 938.672081][T25606] netlink: 'syz.3.9172': attribute type 8 has an invalid length. [ 938.693415][T20151] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 938.713602][T20151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.734573][T20151] usb 3-1: Product: syz [ 938.765103][T20151] usb 3-1: Manufacturer: syz [ 938.770110][T20151] usb 3-1: SerialNumber: syz [ 939.146814][T20151] usb 3-1: 0:2 : does not exist [ 939.222114][T20151] usb 3-1: USB disconnect, device number 72 [ 939.510803][ T4519] udevd[4519]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.967319][T25737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9209'. [ 940.072864][T25667] loop4: detected capacity change from 0 to 32768 [ 940.551409][T25793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9228'. [ 941.056652][T25843] loop2: detected capacity change from 0 to 256 [ 941.131952][T25857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9248'. [ 941.372313][T25880] Scaler: ================= START STATUS ================= [ 941.388539][T25880] Scaler: ================== END STATUS ================== [ 941.494396][T25889] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9259'. [ 941.585034][T25901] loop0: detected capacity change from 0 to 256 [ 941.798953][T25923] loop3: detected capacity change from 0 to 512 [ 941.825575][T25928] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 942.001180][T25923] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 942.065238][T25923] ext4 filesystem being mounted at /1835/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 942.156156][T25965] netlink: 'syz.1.9286': attribute type 12 has an invalid length. [ 942.630991][T26010] netlink: 'syz.4.9298': attribute type 10 has an invalid length. [ 942.663869][T26010] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.671280][T26010] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.728586][T26007] loop1: detected capacity change from 0 to 4096 [ 942.752331][T26010] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.760002][T26010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.770947][T26010] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.778082][T26010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.831182][T26007] __ntfs_error: 10 callbacks suppressed [ 942.831202][T26007] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 942.870410][T26007] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 942.888012][T26027] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 942.912995][T26027] overlayfs: conflicting options: userxattr,metacopy=on [ 942.962533][T26007] ntfs: volume version 0.0. [ 942.986000][T26010] team0: Port device bridge0 added [ 943.013385][T26007] ntfs: (device loop1): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 943.069280][T26032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9303'. [ 943.165021][T25980] loop3: detected capacity change from 0 to 32768 [ 943.268982][T25980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9284 (25980) [ 943.431923][T25980] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 943.458056][T25980] BTRFS info (device loop3): using free space tree [ 943.525618][T25980] BTRFS info (device loop3): has skinny extents [ 943.740844][T26064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9312'. [ 943.792134][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.808625][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.818740][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.826301][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.833951][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.841519][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.849048][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.857893][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.866673][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.902086][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.913580][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.921148][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.929915][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.949081][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.963930][T25980] BTRFS info (device loop3): enabling ssd optimizations [ 943.975087][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.989299][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 943.996737][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.015449][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.034729][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.036070][T26019] loop2: detected capacity change from 0 to 40427 [ 944.049781][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.062149][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.083293][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.100497][T26019] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 944.103017][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.118727][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.126176][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.133696][T26019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 944.150664][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.158525][T26019] F2FS-fs (loop2): invalid crc value [ 944.158552][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.177781][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.185652][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.200897][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.210459][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.213041][T26019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 944.218859][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.231992][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.244887][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.252393][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.260561][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.274120][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.281963][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.297616][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.307421][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.322710][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.333286][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.333592][T26019] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 944.340807][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.340832][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.340853][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.362490][T26019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 944.363754][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.386323][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.397026][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.404896][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.414243][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.424592][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.432962][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.442001][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.443271][T26019] attempt to access beyond end of device [ 944.443271][T26019] loop2: rw=2049, want=45104, limit=40427 [ 944.449867][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.488507][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.499125][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.506946][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.514843][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.522652][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.531690][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.539315][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.548103][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.550350][ T4458] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 944.558082][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.571000][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.578542][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.586268][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.594067][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.601612][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.609083][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.616670][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.624256][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.632410][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.639952][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.647496][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.655002][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.662638][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.670030][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.677573][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.685033][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.692693][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.700169][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.707619][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.716720][ T4518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.730435][ T4518] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 944.940046][ T4458] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 944.972164][ T4458] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 944.982150][ T4458] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 945.218018][ T4458] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 945.245223][ T4458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.324932][ T4458] usb 1-1: Product: syz [ 945.329152][ T4458] usb 1-1: Manufacturer: syz [ 945.333774][ T4458] usb 1-1: SerialNumber: syz [ 945.448124][T26130] fido_id[26130]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 945.463313][T26096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 945.486490][T26096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 945.539585][ T4458] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 945.585065][ T4458] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 946.100954][ T4463] usb 1-1: USB disconnect, device number 65 [ 946.132495][ T4463] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 946.196683][ T4463] cyberjack 1-1:1.0: device disconnected [ 946.853315][ T4512] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 947.259950][ T26] audit: type=1400 audit(2000000568.282:51): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=26263 comm="syz.0.9369" [ 947.302457][ T4512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.319321][ T4512] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.505508][ T4512] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 947.514606][ T4512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.538989][ T4512] usb 4-1: Product: syz [ 947.546956][ T4512] usb 4-1: Manufacturer: syz [ 947.567670][ T4512] usb 4-1: SerialNumber: syz [ 947.603459][ T4512] usb 4-1: config 0 descriptor?? [ 947.699689][ T4512] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 947.705628][T26293] loop4: detected capacity change from 0 to 2048 [ 947.722747][ T4512] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 947.777358][ T4512] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 947.789848][T26293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.812197][ T4512] usb 4-1: media controller created [ 947.854763][ T4512] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.096889][ T4512] DVB: Unable to find symbol tda10046_attach() [ 948.103129][ T4512] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 948.154054][ T4512] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 948.224265][ T4512] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 948.266616][ T4512] usb 4-1: USB disconnect, device number 73 [ 948.285391][T26344] netlink: 'syz.1.9390': attribute type 1 has an invalid length. [ 948.416733][T26355] netlink: 'syz.0.9391': attribute type 13 has an invalid length. [ 948.464718][T26355] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9391'. [ 948.497134][T26355] syz_tun: refused to change device tx_queue_len [ 948.529161][T26355] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 948.619018][T26363] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 46573 - 0 [ 948.654076][T26363] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 46573 - 0 [ 948.673601][T26375] netlink: 'syz.1.9399': attribute type 3 has an invalid length. [ 948.702338][T26363] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 46573 - 0 [ 948.722103][T26363] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 46573 - 0 [ 948.755336][T26363] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 50687 - 0 [ 948.777350][T26363] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 50687 - 0 [ 948.803994][T26363] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 50687 - 0 [ 948.828135][T26363] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 50687 - 0 [ 948.838950][T26363] device geneve3 entered promiscuous mode [ 948.972057][T26397] netlink: 'syz.4.9406': attribute type 25 has an invalid length. [ 948.991941][T26397] netlink: 'syz.4.9406': attribute type 3 has an invalid length. [ 949.006132][T26401] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 949.033278][T26397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9406'. [ 949.130983][T26412] netlink: 'syz.0.9410': attribute type 10 has an invalid length. [ 949.167057][T26412] device hsr0 entered promiscuous mode [ 949.235915][T26412] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 949.267237][T26412] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 949.284255][T26412] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 949.311586][T26412] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 949.322179][ T4463] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 949.483480][T26431] ipt_CLUSTERIP: bad num_local_nodes 18 [ 949.650020][T26446] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 949.685896][T26446] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 949.707370][ T4463] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.724260][ T4463] usb 2-1: config 0 interface 0 has no altsetting 0 [ 949.800815][T26399] loop3: detected capacity change from 0 to 32768 [ 949.842862][T26399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9407 (26399) [ 949.863787][T26399] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 949.898387][T26399] BTRFS info (device loop3): using free space tree [ 949.911207][T26399] BTRFS info (device loop3): has skinny extents [ 949.921144][ T4463] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 949.953868][ T4463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.961968][ T4463] usb 2-1: Product: syz [ 949.986178][ T4463] usb 2-1: Manufacturer: syz [ 949.990864][ T4463] usb 2-1: SerialNumber: syz [ 950.003344][ T4463] usb 2-1: config 0 descriptor?? [ 950.051233][ T4463] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 950.082089][ T4463] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 950.102781][ T4463] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 950.116388][ T4463] usb 2-1: media controller created [ 950.138423][ T4463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 950.222213][T26536] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 950.284300][T26399] BTRFS info (device loop3): enabling ssd optimizations [ 950.324159][ T4463] DVB: Unable to find symbol tda10046_attach() [ 950.332829][ T4463] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 950.369941][ T4463] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 950.407482][ T4463] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 950.464371][ T4463] usb 2-1: USB disconnect, device number 74 [ 951.443706][T26607] loop2: detected capacity change from 0 to 2048 [ 951.614839][T26607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.638622][T26642] loop3: detected capacity change from 0 to 256 [ 951.800763][T26642] FAT-fs (loop3): Directory bread(block 64) failed [ 951.818752][ T4463] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 951.828354][T26642] FAT-fs (loop3): Directory bread(block 65) failed [ 951.883731][T26642] FAT-fs (loop3): Directory bread(block 66) failed [ 951.924523][T26642] FAT-fs (loop3): Directory bread(block 67) failed [ 951.942264][T26642] FAT-fs (loop3): Directory bread(block 68) failed [ 951.980285][T26642] FAT-fs (loop3): Directory bread(block 69) failed [ 952.022074][T26642] FAT-fs (loop3): Directory bread(block 70) failed [ 952.023324][T26668] loop4: detected capacity change from 0 to 256 [ 952.048575][T26642] FAT-fs (loop3): Directory bread(block 71) failed [ 952.064195][T26642] FAT-fs (loop3): Directory bread(block 72) failed [ 952.072145][T26642] FAT-fs (loop3): Directory bread(block 73) failed [ 952.229915][ T4463] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.240133][ T4463] usb 1-1: config 0 interface 0 has no altsetting 0 [ 952.306564][T26682] CIFS: Attempting to mount \\::1\share [ 952.323970][T26682] CIFS: VFS: No username specified [ 952.387083][T26690] netlink: 'syz.4.9477': attribute type 1 has an invalid length. [ 952.408241][T26690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9477'. [ 952.443812][ T4463] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 952.454317][ T4463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.479651][T26699] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9479'. [ 952.496407][ T4463] usb 1-1: Product: syz [ 952.518640][ T4463] usb 1-1: Manufacturer: syz [ 952.523466][ T4463] usb 1-1: SerialNumber: syz [ 952.565530][ T4463] usb 1-1: config 0 descriptor?? [ 952.601097][T26704] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 952.616596][ T4463] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 952.666280][ T4463] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 952.711030][ T4463] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 952.719731][ T4463] usb 1-1: media controller created [ 952.772017][ T4463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.933322][ T4463] DVB: Unable to find symbol tda10046_attach() [ 952.939893][ T4463] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 952.979178][ T4463] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 953.064604][ T4463] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 953.090229][ T4463] usb 1-1: USB disconnect, device number 66 [ 953.130390][T26751] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 953.186028][T26759] netlink: 'syz.4.9496': attribute type 3 has an invalid length. [ 953.208498][T26751] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 953.234614][T26759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9496'. [ 953.490454][T26708] loop1: detected capacity change from 0 to 32768 [ 953.511293][T26780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9502'. [ 953.521312][T26780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9502'. [ 953.913425][T26810] sctp: [Deprecated]: syz.4.9512 (pid 26810) Use of int in max_burst socket option deprecated. [ 953.913425][T26810] Use struct sctp_assoc_value instead [ 954.182008][T26832] netlink: 'syz.0.9519': attribute type 2 has an invalid length. [ 954.234622][T26832] netlink: 'syz.0.9519': attribute type 8 has an invalid length. [ 954.261435][T26832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9519'. [ 954.288160][T26848] netlink: 'syz.3.9524': attribute type 1 has an invalid length. [ 954.312783][T26849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9525'. [ 954.322445][T26848] openvswitch: netlink: Actions may not be safe on all matching packets [ 954.348470][T26849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9525'. [ 954.592175][T26874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9534'. [ 954.637303][T26881] echo interval is out of bounds [ 954.637303][T26881] [ 954.688888][T26881] CIFS: VFS: echo interval is out of bounds [ 955.143429][T26921] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 19971 - 0 [ 955.200241][T26921] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 19971 - 0 [ 955.206233][T26916] loop0: detected capacity change from 0 to 4096 [ 955.239455][T26921] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 19971 - 0 [ 955.269268][T26921] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 19971 - 0 [ 955.299940][T26916] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 955.622817][T26951] tmpfs: Bad value for 'mpol' [ 955.766033][T26960] xt_l2tp: v2 doesn't support IP mode [ 955.930978][T26975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9568'. [ 955.975248][T26974] overlayfs: failed to resolve './bus': -2 [ 956.257132][T26906] loop1: detected capacity change from 0 to 32768 [ 956.365588][T26906] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.9545 (26906) [ 956.436382][T26906] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 956.479351][T26906] BTRFS info (device loop1): enabling ssd optimizations [ 956.498569][T26906] BTRFS info (device loop1): not using ssd optimizations [ 956.519530][T26906] BTRFS info (device loop1): turning off barriers [ 956.526147][T26906] BTRFS info (device loop1): use no compression [ 956.567649][T26906] BTRFS info (device loop1): using free space tree [ 956.632327][T26906] BTRFS info (device loop1): has skinny extents [ 956.800675][T26968] loop4: detected capacity change from 0 to 32768 [ 956.859998][T26968] [ 956.859998][T26968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 956.859998][T26968] [ 956.942942][T27053] loop0: detected capacity change from 0 to 2048 [ 957.027706][T27053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 957.044219][ T4562] [ 957.044219][ T4562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 957.044219][ T4562] [ 957.157652][ T4562] [ 957.157652][ T4562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 957.157652][ T4562] [ 957.201020][ T4484] [ 957.201020][ T4484] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 957.201020][ T4484] [ 957.249770][ T276] [ 957.249770][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 957.249770][ T276] [ 957.317583][ T4484] [ 957.317583][ T4484] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 957.317583][ T4484] [ 957.367111][ T276] ================================================================== [ 957.376062][ T276] BUG: KASAN: use-after-free in jfs_lazycommit+0x786/0xb60 [ 957.383322][ T276] Read of size 4 at addr ffff88805d405294 by task jfsCommit/276 [ 957.391854][ T276] [ 957.394642][ T4519] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (4519) [ 957.395762][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 957.418013][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.428196][ T276] Call Trace: [ 957.431512][ T276] [ 957.434472][ T276] dump_stack_lvl+0x188/0x250 [ 957.439194][ T276] ? show_regs_print_info+0x20/0x20 [ 957.444436][ T276] ? load_image+0x410/0x410 [ 957.449169][ T276] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 957.454665][ T276] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 957.460244][ T276] ? lockdep_hardirqs_off+0x70/0x100 [ 957.465574][ T276] print_address_description+0x60/0x2d0 [ 957.471160][ T276] ? jfs_lazycommit+0x786/0xb60 [ 957.476055][ T276] kasan_report+0xdf/0x130 [ 957.480650][ T276] ? jfs_lazycommit+0x786/0xb60 [ 957.485529][ T276] ? txEnd+0x346/0x520 [ 957.489631][ T276] jfs_lazycommit+0x786/0xb60 [ 957.494516][ T276] ? txFreelock+0x5a0/0x5a0 [ 957.499053][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 957.504971][ T276] ? sched_dynamic_update+0x210/0x210 [ 957.510445][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 957.516384][ T276] ? __kthread_parkme+0x14e/0x1b0 [ 957.521797][ T276] kthread+0x42e/0x520 [ 957.525909][ T276] ? txFreelock+0x5a0/0x5a0 [ 957.530453][ T276] ? kthread_blkcg+0xd0/0xd0 [ 957.535092][ T276] ret_from_fork+0x1f/0x30 [ 957.539701][ T276] [ 957.542768][ T276] [ 957.545118][ T276] Allocated by task 26968: [ 957.549556][ T276] __kasan_kmalloc+0xaf/0xe0 [ 957.554179][ T276] jfs_fill_super+0xdc/0xad0 [ 957.558802][ T276] mount_bdev+0x28a/0x3c0 [ 957.563165][ T276] legacy_get_tree+0xe6/0x180 [ 957.567953][ T276] vfs_get_tree+0x88/0x270 [ 957.572610][ T276] do_new_mount+0x247/0xa40 [ 957.577149][ T276] __se_sys_mount+0x2e3/0x3d0 [ 957.581858][ T276] do_syscall_64+0x4c/0xa0 [ 957.586392][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 957.592309][ T276] [ 957.594654][ T276] Freed by task 4484: [ 957.598651][ T276] kasan_set_track+0x4b/0x70 [ 957.603269][ T276] kasan_set_free_info+0x1f/0x40 [ 957.608313][ T276] ____kasan_slab_free+0xd5/0x110 [ 957.613364][ T276] slab_free_freelist_hook+0xec/0x170 [ 957.618772][ T276] kfree+0xef/0x2a0 [ 957.622613][ T276] generic_shutdown_super+0x130/0x300 [ 957.628104][ T276] kill_block_super+0x7c/0xe0 [ 957.632807][ T276] deactivate_locked_super+0x93/0xf0 [ 957.638113][ T276] cleanup_mnt+0x426/0x4d0 [ 957.642569][ T276] task_work_run+0x125/0x1a0 [ 957.647247][ T276] exit_to_user_mode_loop+0x10f/0x130 [ 957.652839][ T276] exit_to_user_mode_prepare+0xee/0x180 [ 957.658435][ T276] syscall_exit_to_user_mode+0x16/0x40 [ 957.663927][ T276] do_syscall_64+0x58/0xa0 [ 957.668371][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 957.674297][ T276] [ 957.676640][ T276] Last potentially related work creation: [ 957.682366][ T276] kasan_save_stack+0x35/0x60 [ 957.687071][ T276] kasan_record_aux_stack+0xb8/0x100 [ 957.692389][ T276] kvfree_call_rcu+0x105/0x7f0 [ 957.697189][ T276] br_multicast_gc_work+0x1b9/0x230 [ 957.702643][ T276] process_one_work+0x867/0xff0 [ 957.707526][ T276] worker_thread+0xad7/0x12a0 [ 957.712249][ T276] kthread+0x42e/0x520 [ 957.716524][ T276] ret_from_fork+0x1f/0x30 [ 957.720973][ T276] [ 957.723416][ T276] The buggy address belongs to the object at ffff88805d405200 [ 957.723416][ T276] which belongs to the cache kmalloc-256 of size 256 [ 957.737494][ T276] The buggy address is located 148 bytes inside of [ 957.737494][ T276] 256-byte region [ffff88805d405200, ffff88805d405300) [ 957.750807][ T276] The buggy address belongs to the page: [ 957.756499][ T276] page:ffffea0001750100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d404 [ 957.766842][ T276] head:ffffea0001750100 order:1 compound_mapcount:0 [ 957.773457][ T276] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 957.781484][ T276] raw: 00fff00000010200 0000000000000000 0000000600000001 ffff888016c41b40 [ 957.790072][ T276] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 957.798649][ T276] page dumped because: kasan: bad access detected [ 957.805055][ T276] page_owner tracks the page as allocated [ 957.810773][ T276] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4484, ts 126992347228, free_ts 22630155442 [ 957.831608][ T276] get_page_from_freelist+0x24f6/0x2670 [ 957.837308][ T276] __alloc_pages+0x1ee/0x480 [ 957.841901][ T276] new_slab+0xc0/0x4b0 [ 957.845976][ T276] ___slab_alloc+0x807/0xdd0 [ 957.850583][ T276] __kmalloc+0x11d/0x340 [ 957.854873][ T276] fib_create_info+0xad1/0x2450 [ 957.859763][ T276] fib_table_insert+0xe4/0x1b80 [ 957.864634][ T276] fib_magic+0x2ca/0x3b0 [ 957.868873][ T276] fib_add_ifaddr+0x372/0x5c0 [ 957.873551][ T276] fib_netdev_event+0x35c/0x480 [ 957.878489][ T276] raw_notifier_call_chain+0xcb/0x160 [ 957.883881][ T276] __dev_notify_flags+0x194/0x300 [ 957.888969][ T276] dev_change_flags+0xda/0x1a0 [ 957.893730][ T276] do_setlink+0xca4/0x29d0 [ 957.898173][ T276] rtnl_newlink+0x15bb/0x1920 [ 957.902860][ T276] rtnetlink_rcv_msg+0x7f1/0xf10 [ 957.907885][ T276] page last free stack trace: [ 957.912557][ T276] free_unref_page_prepare+0x637/0x6c0 [ 957.918016][ T276] free_unref_page+0x8f/0x2a0 [ 957.922690][ T276] free_contig_range+0x96/0xf0 [ 957.927454][ T276] destroy_args+0xef/0xa00 [ 957.931922][ T276] debug_vm_pgtable+0x321/0x380 [ 957.936772][ T276] do_one_initcall+0x272/0x730 [ 957.941663][ T276] do_initcall_level+0x13d/0x1f0 [ 957.946637][ T276] do_initcalls+0x4b/0x90 [ 957.951067][ T276] kernel_init_freeable+0x3d5/0x560 [ 957.956395][ T276] kernel_init+0x19/0x1b0 [ 957.960731][ T276] ret_from_fork+0x1f/0x30 [ 957.965156][ T276] [ 957.967476][ T276] Memory state around the buggy address: [ 957.973101][ T276] ffff88805d405180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 957.981162][ T276] ffff88805d405200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.989223][ T276] >ffff88805d405280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.997281][ T276] ^ [ 958.001880][ T276] ffff88805d405300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 958.009937][ T276] ffff88805d405380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 958.018081][ T276] ================================================================== [ 958.026159][ T276] Disabling lock debugging due to kernel taint [ 958.032332][ T276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 958.039518][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B syzkaller #0 [ 958.048192][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.058245][ T276] Call Trace: [ 958.061528][ T276] [ 958.064458][ T276] dump_stack_lvl+0x188/0x250 [ 958.069139][ T276] ? show_regs_print_info+0x20/0x20 [ 958.074335][ T276] ? load_image+0x410/0x410 [ 958.078841][ T276] panic+0x2f8/0x850 [ 958.082734][ T276] ? bpf_jit_dump+0xd0/0xd0 [ 958.087410][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 958.093302][ T276] ? _raw_spin_unlock+0x40/0x40 [ 958.098174][ T276] ? jfs_lazycommit+0x786/0xb60 [ 958.103023][ T276] check_panic_on_warn+0x80/0xa0 [ 958.108128][ T276] ? jfs_lazycommit+0x786/0xb60 [ 958.112976][ T276] end_report+0x6d/0xf0 [ 958.117133][ T276] kasan_report+0x102/0x130 [ 958.121898][ T276] ? jfs_lazycommit+0x786/0xb60 [ 958.126836][ T276] ? txEnd+0x346/0x520 [ 958.130920][ T276] jfs_lazycommit+0x786/0xb60 [ 958.135855][ T276] ? txFreelock+0x5a0/0x5a0 [ 958.140360][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 958.146357][ T276] ? sched_dynamic_update+0x210/0x210 [ 958.151755][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 958.157660][ T276] ? __kthread_parkme+0x14e/0x1b0 [ 958.162786][ T276] kthread+0x42e/0x520 [ 958.166855][ T276] ? txFreelock+0x5a0/0x5a0 [ 958.171378][ T276] ? kthread_blkcg+0xd0/0xd0 [ 958.175982][ T276] ret_from_fork+0x1f/0x30 [ 958.180408][ T276] [ 958.183707][ T276] Kernel Offset: disabled [ 958.188146][ T276] Rebooting in 86400 seconds..