last executing test programs: 2.647040469s ago: executing program 4 (id=1734): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}, 0x94}, 0x1c) 2.511048522s ago: executing program 1 (id=1737): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0xfffffffe, 0xd968d5b908ac0cde, 0x0, {0x0, 0x9}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2.16158709s ago: executing program 1 (id=1738): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 2.16127116s ago: executing program 4 (id=1741): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x8003}}}}]}, 0x38}}, 0x0) 1.931877375s ago: executing program 1 (id=1753): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.856896187s ago: executing program 4 (id=1745): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000fcdbdf250c00000001ff"], 0x20}], 0x1}, 0x0) 1.665824972s ago: executing program 0 (id=1747): openat$nvram(0xffffff9c, &(0x7f0000000000), 0xa0942, 0x0) syz_open_procfs(0x0, &(0x7f0000008380)='fd/3\x00') 1.665161452s ago: executing program 4 (id=1749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@broadcast, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x2, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) 1.600291013s ago: executing program 3 (id=1750): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) 1.462100117s ago: executing program 2 (id=1751): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.459600827s ago: executing program 4 (id=1752): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82, &(0x7f0000000040)=ANY=[], 0x13, 0x6371, &(0x7f0000007000)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) 1.387699239s ago: executing program 0 (id=1754): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x2}}) 1.32129073s ago: executing program 3 (id=1755): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setresuid(0xee00, 0xee00, 0x0) 1.154075994s ago: executing program 2 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltaction={0xe4, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x48}, @TCA_ACT_TAB={0x1d, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xe4}}, 0x0) 1.124714334s ago: executing program 3 (id=1757): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x800, &(0x7f0000003640)="$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") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file1/file4\x00', 0x4400, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 1.116977985s ago: executing program 0 (id=1758): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mlockall(0x7) 833.415071ms ago: executing program 2 (id=1759): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x304000000) 708.079144ms ago: executing program 3 (id=1760): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @private=0xa010101, 0xffffffff, 0xffffffff, '\x00', 'rose0\x00', {}, {}, 0x8, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x5, @multicast, 0xa532, 0x3, [0x33, 0x1b, 0x3b, 0x1e, 0x39, 0x34, 0x3, 0x2a, 0x2e, 0x1e, 0x1d, 0x1d, 0x13, 0x9, 0x8, 0x10], 0x1, 0xc3d, 0xa9a}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x7, 'snmp_trap\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 707.585194ms ago: executing program 1 (id=1761): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@null) 675.436765ms ago: executing program 0 (id=1762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x8003}}}}]}, 0x38}}, 0x0) 609.381376ms ago: executing program 2 (id=1763): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@broadcast, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x2, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) 479.1373ms ago: executing program 0 (id=1764): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x7f, 0x2) 398.135402ms ago: executing program 1 (id=1765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x2900c, 0x40010}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x4008}]}, 0x3c}}, 0x4) 397.791342ms ago: executing program 3 (id=1766): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x42003) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x6, 0x205, 0x1, {0xa, @pix_mp={0x2, 0x4, 0x4745504a, 0x7, 0x4, [{0x7, 0xed0a}, {0x3, 0x9}, {0x4}, {0x40, 0xfe8}, {0xa5f, 0x5}, {0x4, 0x4000007}, {0xe18, 0x1ff}, {0xfffffff8, 0xd}], 0x3, 0x8, 0x8, 0x0, 0x5}}, 0x1}) 351.428003ms ago: executing program 2 (id=1767): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de05640000000000006929a72cd24065"}, 0x3a) 249.236685ms ago: executing program 0 (id=1768): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") lstat(&(0x7f0000006480)='./file2\x00', 0x0) 200.654256ms ago: executing program 3 (id=1769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d0500000000060015000500000028001680240001"], 0x4c}}, 0x0) 131.536118ms ago: executing program 2 (id=1770): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0xfffffffe, 0xd968d5b908ac0cde, 0x0, {0x0, 0x9}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 130.837218ms ago: executing program 1 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000048c0)=ANY=[@ANYBLOB="340000003a0007010000000003000000017c00000400fc800c00018006000600800a00000800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 0s ago: executing program 4 (id=1771): openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): 8.921690][ T4271] gfs2_assert_warn_i+0x187/0x2c0 [ 98.921752][ T4271] gfs2_quota_cleanup+0x48c/0x670 [ 98.921789][ T4271] gfs2_put_super+0x22f/0x920 [ 98.921827][ T4271] ? gfs2_evict_inode+0x1290/0x1290 [ 98.921858][ T4271] generic_shutdown_super+0x130/0x340 [ 98.921889][ T4271] kill_block_super+0x7c/0xe0 [ 98.921920][ T4271] deactivate_locked_super+0x93/0xf0 [ 98.921948][ T4271] cleanup_mnt+0x471/0x4f0 [ 98.921982][ T4271] task_work_run+0x1d0/0x260 [ 98.922019][ T4271] ? task_work_cancel+0x220/0x220 [ 98.922057][ T4271] ? exit_to_user_mode_loop+0x3b/0x110 [ 98.922099][ T4271] exit_to_user_mode_loop+0xe6/0x110 [ 98.922137][ T4271] exit_to_user_mode_prepare+0xee/0x180 [ 98.922174][ T4271] syscall_exit_to_user_mode+0x16/0x40 [ 98.922202][ T4271] do_syscall_64+0x58/0xa0 [ 98.922237][ T4271] ? clear_bhb_loop+0x60/0xb0 [ 98.922272][ T4271] ? clear_bhb_loop+0x60/0xb0 [ 98.922320][ T4271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.922352][ T4271] RIP: 0033:0x7fd0a299f397 [ 98.922375][ T4271] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.922396][ T4271] RSP: 002b:00007ffcff527278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.922429][ T4271] RAX: 0000000000000000 RBX: 00007fd0a2a34474 RCX: 00007fd0a299f397 [ 98.922447][ T4271] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcff527330 [ 98.922463][ T4271] RBP: 00007ffcff527330 R08: 00007ffcff528330 R09: 00000000ffffffff [ 98.922480][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcff5283c0 [ 98.922497][ T4271] R13: 00007fd0a2a34474 R14: 00000000000175c4 R15: 00007ffcff528400 [ 98.922534][ T4271] [ 99.133242][ T127] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.722823][ T4594] loop2: detected capacity change from 0 to 8 [ 99.774752][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.775293][ T127] usb 5-1: not running at top speed; connect to a high speed hub [ 99.776548][ T127] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 99.776590][ T127] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 35, changing to 4 [ 99.779690][ T127] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 99.779723][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.779746][ T127] usb 5-1: Product: syz [ 99.779763][ T127] usb 5-1: Manufacturer: syz [ 99.779780][ T127] usb 5-1: SerialNumber: syz [ 99.923059][ T4582] loop0: detected capacity change from 0 to 32768 [ 100.002645][ T127] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.025297][ T127] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 100.036677][ T127] usb 5-1: 2:1 : invalid channels 0 [ 100.060851][ T4582] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.86 (4582) [ 100.062868][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.115456][ T127] usb 5-1: USB disconnect, device number 3 [ 100.138344][ T4582] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 100.166664][ T4582] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 100.209553][ T4582] BTRFS info (device loop0): force zlib compression, level 3 [ 100.267887][ T4582] BTRFS info (device loop0): force clearing of disk cache [ 100.306077][ T4316] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 100.309490][ T4582] BTRFS info (device loop0): setting nodatasum [ 100.324047][ T4582] BTRFS info (device loop0): use zlib compression, level 3 [ 100.331394][ T4582] BTRFS info (device loop0): allowing degraded mounts [ 100.338791][ T4582] BTRFS info (device loop0): enabling disk space caching [ 100.348732][ T4582] BTRFS info (device loop0): disk space caching is enabled [ 100.349183][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 100.419314][ T4316] usb 2-1: Product: syz [ 100.439389][ T4316] usb 2-1: SerialNumber: syz [ 100.446936][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.506066][ T4316] usb 2-1: config 0 descriptor?? [ 100.622180][ T4582] BTRFS info (device loop0): enabling ssd optimizations [ 100.661987][ T4582] BTRFS info (device loop0): rebuilding free space tree [ 100.784053][ T4582] BTRFS info (device loop0): disabling free space tree [ 100.807908][ T4582] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.830488][ T4627] nfs: Unknown parameter 'no' [ 100.842576][ T4582] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.932074][ T22] usb 2-1: USB disconnect, device number 3 [ 101.145726][ T4276] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 101.536538][ T4316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.712190][ T4648] loop1: detected capacity change from 0 to 2048 [ 101.727056][ T4316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.752425][ T4316] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.778139][ T4648] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.801759][ T4316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.858116][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.890036][ T4316] usb 4-1: Product: syz [ 101.907030][ T4316] usb 4-1: Manufacturer: syz [ 101.913478][ T4653] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.945878][ T4316] usb 4-1: SerialNumber: syz [ 101.976202][ T4316] cdc_ncm 4-1:1.0: skipping garbage [ 102.002001][ T4316] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 102.044405][ T4316] cdc_ncm 4-1:1.0: bind() failure [ 102.055942][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.087733][ T4316] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 102.108023][ T4648] Remounting filesystem read-only [ 102.118967][ T4316] cdc_ncm 4-1:1.1: bind() failure [ 102.123839][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.227071][ T4316] usb 4-1: USB disconnect, device number 3 [ 102.258722][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.323050][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.366949][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.392720][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.424808][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.445830][ T4648] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 102.470840][ T26] audit: type=1800 audit(1788361255.438:2): pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.107" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 102.586941][ T4648] syz.1.107 (4648) used greatest stack depth: 18672 bytes left [ 103.474615][ T4682] trusted_key: encrypted_key: master key parameter '' is invalid [ 103.898504][ T3598] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.118426][ T3598] usb 5-1: Using ep0 maxpacket: 16 [ 104.134920][ T3598] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 104.151728][ T4709] loop1: detected capacity change from 0 to 64 [ 104.167954][ T4711] loop2: detected capacity change from 0 to 24 [ 104.180234][ T3598] usb 5-1: config 0 has no interface number 0 [ 104.219469][ T3598] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 104.253434][ T4709] ======================================================= [ 104.253434][ T4709] WARNING: The mand mount option has been deprecated and [ 104.253434][ T4709] and is ignored by this kernel. Remove the mand [ 104.253434][ T4709] option from the mount to silence this warning. [ 104.253434][ T4709] ======================================================= [ 104.287307][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.332790][ T3598] usb 5-1: Product: syz [ 104.337056][ T3598] usb 5-1: Manufacturer: syz [ 104.341711][ T3598] usb 5-1: SerialNumber: syz [ 104.418536][ T3598] usb 5-1: config 0 descriptor?? [ 104.443279][ T3598] hub 5-1:0.132: bad descriptor, ignoring hub [ 104.456798][ T3598] hub: probe of 5-1:0.132 failed with error -5 [ 104.487660][ T3598] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input7 [ 104.700987][ T4718] loop0: detected capacity change from 0 to 4096 [ 105.214394][ T4726] x_tables: ip_tables: osf match: only valid for protocol 6 [ 105.527490][ T4735] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 105.554815][ T4735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.150'. [ 105.594936][ T4735] openvswitch: netlink: Flow key attr not present in new flow. [ 105.942731][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.136768][ T22] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 106.172843][ T22] usb 4-1: config 0 has no interface number 0 [ 106.198465][ T22] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.246380][ T22] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 106.284553][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.317754][ T22] usb 4-1: Product: syz [ 106.321998][ T22] usb 4-1: Manufacturer: syz [ 106.340373][ T22] usb 4-1: SerialNumber: syz [ 106.359813][ T22] usb 4-1: config 0 descriptor?? [ 106.426726][ T22] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 106.660656][ T4749] loop1: detected capacity change from 0 to 32768 [ 106.771116][ T4749] JBD2: Ignoring recovery information on journal [ 106.818528][ T4454] usb 4-1: USB disconnect, device number 4 [ 106.836129][ T4454] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 106.911309][ T4749] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.950208][ T4767] netlink: 'syz.4.164': attribute type 2 has an invalid length. [ 107.088243][ T4749] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 107.132691][ T4749] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.172482][ T4749] OCFS2: File system is now read-only. [ 107.198587][ T4769] UBIFS error (pid: 4769): cannot open "ubi0/file0", error -22 [ 107.198601][ T4749] (syz.1.156,4749,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 107.262421][ T4749] (syz.1.156,4749,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 107.291459][ T4749] (syz.1.156,4749,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 107.326257][ T4759] loop0: detected capacity change from 0 to 32768 [ 107.333074][ T4749] (syz.1.156,4749,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 107.341774][ T4749] (syz.1.156,4749,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 107.382876][ T4759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.160 (4759) [ 107.396792][ T4749] (syz.1.156,4749,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 107.463330][ T4759] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.476468][ T4749] (syz.1.156,4749,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 107.502514][ T4759] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.511317][ T4759] BTRFS info (device loop0): setting nodatasum [ 107.536597][ T4749] (syz.1.156,4749,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 107.568440][ T4749] (syz.1.156,4749,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 107.582049][ T4759] BTRFS info (device loop0): force zlib compression, level 3 [ 107.603438][ T4759] BTRFS info (device loop0): turning on flush-on-commit [ 107.610901][ T4749] (syz.1.156,4749,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 107.630550][ T4759] BTRFS info (device loop0): max_inline at 4096 [ 107.637581][ T4749] (syz.1.156,4749,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 107.647125][ T4759] BTRFS info (device loop0): using free space tree [ 107.657252][ T4749] (syz.1.156,4749,1):ocfs2_symlink:1911 ERROR: status = -30 [ 107.676521][ T4749] (syz.1.156,4749,1):ocfs2_symlink:2065 ERROR: status = -30 [ 107.770217][ T4787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.169'. [ 107.823406][ T4787] netlink: 9 bytes leftover after parsing attributes in process `syz.2.169'. [ 107.841333][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 107.852547][ T4787] netlink: 9 bytes leftover after parsing attributes in process `syz.2.169'. [ 107.862762][ T4282] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.883675][ T4759] BTRFS info (device loop0): enabling ssd optimizations [ 107.935185][ T4787] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 108.062580][ T4282] usb 4-1: Using ep0 maxpacket: 16 [ 108.070288][ T4282] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 108.120439][ T4282] usb 4-1: config 0 has no interface number 0 [ 108.150161][ T4282] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 108.189916][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.208609][ T4282] usb 4-1: Product: syz [ 108.219259][ T4276] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.251783][ T4282] usb 4-1: Manufacturer: syz [ 108.266333][ T4282] usb 4-1: SerialNumber: syz [ 108.287523][ T4282] usb 4-1: config 0 descriptor?? [ 108.304733][ T4282] hub 4-1:0.132: bad descriptor, ignoring hub [ 108.326374][ T4282] hub: probe of 4-1:0.132 failed with error -5 [ 108.359682][ T4282] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input8 [ 108.759152][ T4819] comedi comedi1: Minor 3 could not be opened [ 108.975374][ T4825] usb usb9: usbfs: process 4825 (syz.4.179) did not claim interface 1 before use [ 109.016271][ T4824] loop2: detected capacity change from 0 to 1024 [ 109.520243][ T127] usb 5-1: USB disconnect, device number 4 [ 109.660957][ T4836] xt_CT: No such helper "netbios-ns" [ 109.674669][ T4637] usb 4-1: USB disconnect, device number 5 [ 110.107768][ T4856] loop1: detected capacity change from 0 to 2048 [ 110.200888][ T4856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.450089][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 110.587170][ T4869] loop4: detected capacity change from 0 to 256 [ 110.742499][ T4869] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 110.773735][ T4869] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 110.805370][ T4869] exFAT-fs (loop4): failed to load alloc-bitmap [ 110.811803][ T4869] exFAT-fs (loop4): failed to recognize exfat type [ 111.221828][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 111.289911][ T4891] loop1: detected capacity change from 0 to 1764 [ 111.522421][ T4454] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.715596][ T4454] usb 1-1: Using ep0 maxpacket: 16 [ 111.722916][ T4454] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.781995][ T4454] usb 1-1: config 0 has no interface number 0 [ 111.801857][ T4454] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 111.829677][ T4454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.852378][ T4454] usb 1-1: Product: syz [ 111.856620][ T4454] usb 1-1: Manufacturer: syz [ 111.880901][ T4454] usb 1-1: SerialNumber: syz [ 111.893333][ T4454] usb 1-1: config 0 descriptor?? [ 111.920508][ T4454] hub 1-1:0.132: bad descriptor, ignoring hub [ 111.936580][ T4454] hub: probe of 1-1:0.132 failed with error -5 [ 111.966912][ T4454] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input9 [ 112.559923][ T4899] loop2: detected capacity change from 0 to 40427 [ 112.615117][ T4899] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 112.638110][ T4899] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 112.670056][ T4899] F2FS-fs (loop2): invalid crc value [ 112.735364][ T4899] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 112.890980][ T4929] ceph: No source [ 112.938794][ T4899] F2FS-fs (loop2): recover fsync data on readonly fs [ 112.956532][ T4899] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 112.966795][ T4899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.130603][ T4899] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 113.982789][ T4282] usb 1-1: USB disconnect, device number 4 [ 114.087693][ T4931] loop4: detected capacity change from 0 to 32768 [ 114.126003][ T4953] capability: warning: `syz.2.238' uses 32-bit capabilities (legacy support in use) [ 114.253066][ T4931] XFS (loop4): Mounting V5 Filesystem [ 114.371822][ T4931] XFS (loop4): Ending clean mount [ 114.450798][ T4286] XFS (loop4): Unmounting Filesystem [ 115.145178][ T4987] netlink: 640 bytes leftover after parsing attributes in process `syz.3.250'. [ 115.158295][ T4985] process 'syz.2.251' launched '/dev/fd/3' with NULL argv: empty string added [ 115.688696][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 115.722671][ T5005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.258'. [ 115.838045][ T26] audit: type=1326 audit(1788361268.808:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 115.893566][ T4637] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.927889][ T26] audit: type=1326 audit(1788361268.808:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 115.983140][ T26] audit: type=1326 audit(1788361268.808:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 116.052528][ T26] audit: type=1326 audit(1788361268.808:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 116.117514][ T4637] usb 4-1: Using ep0 maxpacket: 16 [ 116.126397][ T4637] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 116.132818][ T26] audit: type=1326 audit(1788361268.808:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 116.160988][ T4637] usb 4-1: config 0 has no interface number 0 [ 116.185334][ T4637] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 116.192767][ T26] audit: type=1326 audit(1788361268.808:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 116.229438][ T4637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.281449][ T4637] usb 4-1: Product: syz [ 116.305485][ T4637] usb 4-1: Manufacturer: syz [ 116.312411][ T26] audit: type=1326 audit(1788361268.808:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 116.323286][ T4637] usb 4-1: SerialNumber: syz [ 116.376542][ T4637] usb 4-1: config 0 descriptor?? [ 116.405193][ T4637] hub 4-1:0.132: bad descriptor, ignoring hub [ 116.420206][ T4637] hub: probe of 4-1:0.132 failed with error -5 [ 116.488177][ T4637] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input10 [ 116.814432][ T5030] loop1: detected capacity change from 0 to 256 [ 116.904101][ T5030] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 117.009534][ T5030] UBIFS error (pid: 5030): cannot open "ubi:0", error -19 [ 117.189275][ T5040] loop2: detected capacity change from 0 to 128 [ 117.226634][ T5040] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 117.583472][ T5053] sctp: [Deprecated]: syz.2.281 (pid 5053) Use of int in max_burst socket option. [ 117.583472][ T5053] Use struct sctp_assoc_value instead [ 117.690709][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 118.032916][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 118.252942][ T22] usb 4-1: USB disconnect, device number 6 [ 118.592269][ T5064] loop0: detected capacity change from 0 to 32768 [ 118.704981][ T5064] JBD2: Ignoring recovery information on journal [ 118.914747][ T5064] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.961082][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 119.063753][ T5064] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 119.085202][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.102538][ T5064] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 119.123022][ T5064] OCFS2: File system is now read-only. [ 119.158011][ T5064] (syz.0.285,5064,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 119.197845][ T5064] (syz.0.285,5064,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 119.256762][ T5064] (syz.0.285,5064,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 119.283742][ T5064] (syz.0.285,5064,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 119.310773][ T5064] (syz.0.285,5064,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 119.354470][ T5064] (syz.0.285,5064,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 119.386596][ T5064] (syz.0.285,5064,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 119.402401][ T5064] (syz.0.285,5064,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 119.426452][ T5064] (syz.0.285,5064,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 119.471783][ T5064] (syz.0.285,5064,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 119.501679][ T5064] (syz.0.285,5064,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 119.551670][ T5064] (syz.0.285,5064,1):ocfs2_symlink:1911 ERROR: status = -30 [ 119.590108][ T5064] (syz.0.285,5064,1):ocfs2_symlink:2065 ERROR: status = -30 [ 119.687458][ T5105] loop2: detected capacity change from 0 to 4096 [ 119.721993][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 119.759784][ T5105] EXT4-fs: Ignoring removed orlov option [ 119.800316][ T5105] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.911054][ T26] audit: type=1326 audit(1788361272.878:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.4.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60179e159 code=0x7ffc0000 [ 119.911264][ T5105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.991128][ T26] audit: type=1326 audit(1788361272.878:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.4.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60179e159 code=0x7ffc0000 [ 120.016029][ T26] audit: type=1326 audit(1788361272.938:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.4.308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60179e159 code=0x7ffc0000 [ 120.164336][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 120.292409][ T5118] loop4: detected capacity change from 0 to 2048 [ 120.337967][ T5118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.019358][ T5111] loop1: detected capacity change from 0 to 32768 [ 121.185595][ T5111] XFS (loop1): Mounting V5 Filesystem [ 121.298250][ T5111] XFS (loop1): Ending clean mount [ 121.403148][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 121.480759][ T4271] XFS (loop1): Unmounting Filesystem [ 121.555797][ T5157] loop4: detected capacity change from 0 to 1024 [ 121.706766][ T5157] hfsplus: keylen 65060 too large [ 121.722464][ T5157] hfsplus: xattr search failed [ 122.475076][ T5179] loop3: detected capacity change from 0 to 64 [ 122.736555][ T5183] loop2: detected capacity change from 0 to 512 [ 122.829886][ T5183] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.333: inode has both inline data and extents flags [ 122.869423][ T5183] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.333: couldn't read orphan inode 15 (err -117) [ 122.881805][ T5183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.041158][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 123.273861][ T5170] loop1: detected capacity change from 0 to 32768 [ 123.458580][ T5170] XFS (loop1): Mounting V5 Filesystem [ 123.761483][ T5170] XFS (loop1): Ending clean mount [ 123.806536][ T5219] Illegal XDP return value 4294967262 on prog (id 19) dev N/A, expect packet loss! [ 124.002910][ T4271] XFS (loop1): Unmounting Filesystem [ 125.798905][ T127] kernel write not supported for file /input/mice (pid: 127 comm: kworker/1:2) [ 125.990580][ T5285] CIFS mount error: No usable UNC path provided in device string! [ 125.990580][ T5285] [ 126.020892][ T5285] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.141837][ T5262] loop4: detected capacity change from 0 to 32768 [ 126.175209][ T5291] xt_nat: multiple ranges no longer supported [ 126.288789][ T5262] JBD2: Ignoring recovery information on journal [ 126.578671][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 126.600920][ T5303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.387'. [ 126.626768][ T5262] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.672519][ T5303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.387'. [ 126.708619][ T5262] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 126.749083][ T5262] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 126.798487][ T5262] OCFS2: File system is now read-only. [ 126.821227][ T5262] (syz.4.368,5262,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 126.851366][ T5262] (syz.4.368,5262,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 126.880878][ T5262] (syz.4.368,5262,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 126.942644][ T5262] (syz.4.368,5262,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 126.951423][ T5262] (syz.4.368,5262,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 126.982862][ T5262] (syz.4.368,5262,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 127.031416][ T5262] (syz.4.368,5262,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 127.050775][ T5262] (syz.4.368,5262,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 127.069871][ T5262] (syz.4.368,5262,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 127.082468][ T5262] (syz.4.368,5262,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 127.112029][ T5262] (syz.4.368,5262,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 127.132483][ T5262] (syz.4.368,5262,1):ocfs2_symlink:1911 ERROR: status = -30 [ 127.140154][ T5262] (syz.4.368,5262,1):ocfs2_symlink:2065 ERROR: status = -30 [ 127.258475][ T4286] ocfs2: Unmounting device (7,4) on (node local) [ 127.278399][ T4454] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 127.479502][ T4454] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.492577][ T4454] usb 3-1: config 0 has no interface number 0 [ 127.521197][ T4454] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 127.562186][ T4454] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.605625][ T4454] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.637358][ T4454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.676530][ T4454] usb 3-1: config 0 descriptor?? [ 127.707598][ T4454] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 127.909123][ T5309] iowarrior 3-1:0.1: Error -90 while submitting URB [ 127.928273][ T4637] usb 3-1: USB disconnect, device number 3 [ 128.087299][ T5328] loop4: detected capacity change from 0 to 4096 [ 128.112937][ T5328] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 128.773271][ T5348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.409827][ T5372] loop3: detected capacity change from 0 to 64 [ 129.470499][ T5374] loop0: detected capacity change from 0 to 1024 [ 129.494421][ T5372] syz.3.421: attempt to access beyond end of device [ 129.494421][ T5372] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 129.528617][ T5372] Buffer I/O error on dev loop3, logical block 512, async page read [ 129.538822][ T5372] syz.3.421: attempt to access beyond end of device [ 129.538822][ T5372] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 129.622597][ T5372] Buffer I/O error on dev loop3, logical block 56576, async page read [ 129.863986][ T5385] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 129.988292][ T5390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.224337][ T5397] ieee802154 phy0 wpan0: encryption failed: -90 [ 130.876948][ T5421] loop4: detected capacity change from 0 to 4096 [ 131.053898][ T4637] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.252596][ T4637] usb 2-1: Using ep0 maxpacket: 16 [ 131.261206][ T4637] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.285365][ T4637] usb 2-1: config 0 has no interface number 0 [ 131.310392][ T4637] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 131.340578][ T4637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.351842][ T4637] usb 2-1: Product: syz [ 131.356449][ T4637] usb 2-1: Manufacturer: syz [ 131.361223][ T4637] usb 2-1: SerialNumber: syz [ 131.375168][ T4637] usb 2-1: config 0 descriptor?? [ 131.407295][ T4637] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 131.807599][ T4637] gspca_spca1528: reg_w err -71 [ 131.853086][ T4637] spca1528: probe of 2-1:0.1 failed with error -71 [ 131.890494][ T4637] usb 2-1: USB disconnect, device number 4 [ 132.292095][ T5470] loop4: detected capacity change from 0 to 2048 [ 132.357938][ T5472] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.896102][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902527][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.027038][ T5492] netlink: 'syz.1.479': attribute type 21 has an invalid length. [ 133.061405][ T5494] loop4: detected capacity change from 0 to 512 [ 133.121628][ T5494] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 133.236980][ T5494] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 133.518000][ T5511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'. [ 133.692653][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 134.462278][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 134.502929][ T26] audit: type=1326 audit(1788361287.428:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.505" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 134.577979][ T5552] tmpfs: Bad value for 'mpol' [ 134.589611][ T26] audit: type=1326 audit(1788361287.438:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.505" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 134.687085][ T26] audit: type=1326 audit(1788361287.468:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.505" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 134.712121][ T26] audit: type=1326 audit(1788361287.468:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.505" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 134.812218][ T26] audit: type=1326 audit(1788361287.468:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.505" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 135.542832][ T5586] netlink: 666 bytes leftover after parsing attributes in process `syz.1.523'. [ 136.070428][ T5604] loop3: detected capacity change from 0 to 1024 [ 136.134355][ T5608] netlink: 456 bytes leftover after parsing attributes in process `syz.2.532'. [ 136.173638][ T5604] hfsplus: request for non-existent node 16777217 in B*Tree [ 136.266149][ T5604] hfsplus: request for non-existent node 16777217 in B*Tree [ 136.313372][ T5604] hfsplus: xattr searching failed [ 136.635542][ T5620] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 136.840263][ T5631] loop3: detected capacity change from 0 to 256 [ 136.892592][ T127] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.079109][ T5640] loop2: detected capacity change from 0 to 256 [ 137.093037][ T127] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 137.118935][ T127] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.136529][ T127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.170973][ T127] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.211846][ T127] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.248569][ T5638] loop1: detected capacity change from 0 to 4096 [ 137.255350][ T4455] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 137.260659][ T127] usb 5-1: Product: syz [ 137.277666][ T127] usb 5-1: Manufacturer: syz [ 137.289920][ T127] usb 5-1: SerialNumber: syz [ 137.313073][ T127] usb 5-1: config 0 descriptor?? [ 137.326268][ T5638] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 137.350502][ T127] hub 5-1:0.0: bad descriptor, ignoring hub [ 137.375905][ T127] hub: probe of 5-1:0.0 failed with error -5 [ 137.392595][ T5642] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 137.400415][ T5642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.551'. [ 137.420208][ T127] usb 5-1: selecting invalid altsetting 0 [ 137.445287][ T5642] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 137.473878][ T4455] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 137.484620][ T5642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.551'. [ 137.538727][ T4455] usb 1-1: config 0 has no interface number 0 [ 137.568905][ T4455] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 137.588313][ T5638] ntfs3: loop1: failed to convert "c46c" to iso8859-4 [ 137.617634][ T4455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.644500][ T4455] usb 1-1: Product: syz [ 137.656018][ T4455] usb 1-1: Manufacturer: syz [ 137.670916][ T4455] usb 1-1: SerialNumber: syz [ 137.692433][ T4455] usb 1-1: config 0 descriptor?? [ 137.713783][ T4637] usb 5-1: USB disconnect, device number 5 [ 138.133269][ T4455] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 138.153981][ T4455] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 138.203503][ T4455] asix: probe of 1-1:0.251 failed with error -5 [ 138.243120][ T4455] usb 1-1: USB disconnect, device number 5 [ 138.856882][ T5680] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072924056005) [ 138.900852][ T5680] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 138.941164][ T5686] device geneve2 entered promiscuous mode [ 139.151000][ T5691] loop4: detected capacity change from 0 to 256 [ 139.502531][ T4282] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.624482][ T5707] loop4: detected capacity change from 0 to 4096 [ 139.647385][ T5707] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 139.669274][ T4455] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.704647][ T4282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.742085][ T4282] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 139.770073][ T4282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.792815][ T4282] usb 3-1: Product: syz [ 139.797193][ T4282] usb 3-1: Manufacturer: syz [ 139.808221][ T5707] ntfs3: loop4: failed to convert "c46c" to iso8859-4 [ 139.822896][ T4282] usb 3-1: SerialNumber: syz [ 139.862413][ T4455] usb 4-1: Using ep0 maxpacket: 32 [ 139.871719][ T4455] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 139.927434][ T4455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.963345][ T4455] usb 4-1: Product: syz [ 139.967606][ T4455] usb 4-1: Manufacturer: syz [ 139.972251][ T4455] usb 4-1: SerialNumber: syz [ 140.011699][ T4455] usb 4-1: config 0 descriptor?? [ 140.057471][ T4282] usb 3-1: MIDIStreaming interface descriptor not found [ 140.142818][ T4282] usb 3-1: USB disconnect, device number 4 [ 140.479730][ T4455] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 140.491254][ T4455] airspy 4-1:0.0: Could not detect board [ 140.514050][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.532615][ T4455] airspy: probe of 4-1:0.0 failed with error -71 [ 140.544900][ T5729] IPv6: sit1: Disabled Multicast RS [ 140.582598][ T4455] usb 4-1: USB disconnect, device number 7 [ 140.723877][ T5734] loop2: detected capacity change from 0 to 256 [ 141.016219][ T5744] loop1: detected capacity change from 0 to 256 [ 141.267531][ T5748] loop0: detected capacity change from 0 to 4096 [ 141.301913][ T5748] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 141.470879][ T5748] ntfs3: loop0: failed to convert "c46c" to iso8859-4 [ 141.732465][ T3598] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.957615][ T3598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.988400][ T3598] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 142.052733][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.110391][ T3598] usb 5-1: Product: syz [ 142.120809][ T3598] usb 5-1: Manufacturer: syz [ 142.141424][ T3598] usb 5-1: SerialNumber: syz [ 142.370540][ T3598] usb 5-1: MIDIStreaming interface descriptor not found [ 142.428448][ T3598] usb 5-1: USB disconnect, device number 6 [ 142.444979][ T5793] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 142.473670][ T5793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.623'. [ 142.488277][ T5793] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 142.499925][ T5793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.623'. [ 142.715507][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.446139][ T5828] loop0: detected capacity change from 0 to 8 [ 143.628677][ T5831] nfs: Unknown parameter 'no' [ 143.652571][ T4455] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.661275][ T5804] loop1: detected capacity change from 0 to 32768 [ 143.696025][ T5804] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.627 (5804) [ 143.739471][ T5804] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 143.760338][ T5804] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 143.774084][ T5804] BTRFS info (device loop1): force zlib compression, level 3 [ 143.802097][ T5804] BTRFS info (device loop1): force clearing of disk cache [ 143.830395][ T5804] BTRFS info (device loop1): setting nodatasum [ 143.840088][ T5804] BTRFS info (device loop1): use zlib compression, level 3 [ 143.858125][ T5804] BTRFS info (device loop1): allowing degraded mounts [ 143.865779][ T4455] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.876740][ T5804] BTRFS info (device loop1): enabling disk space caching [ 143.876766][ T5804] BTRFS info (device loop1): disk space caching is enabled [ 143.908767][ T4455] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.946033][ T4455] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.974151][ T4455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.992627][ T4455] usb 3-1: Product: syz [ 143.996977][ T4455] usb 3-1: Manufacturer: syz [ 144.002197][ T4455] usb 3-1: SerialNumber: syz [ 144.050244][ T4455] cdc_ncm 3-1:1.0: skipping garbage [ 144.081735][ T4455] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 144.105037][ T4455] cdc_ncm 3-1:1.0: bind() failure [ 144.114586][ T4455] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 144.122244][ T4455] cdc_ncm 3-1:1.1: bind() failure [ 144.162507][ T5804] BTRFS info (device loop1): enabling ssd optimizations [ 144.188784][ T5804] BTRFS info (device loop1): rebuilding free space tree [ 144.237770][ T5804] BTRFS info (device loop1): disabling free space tree [ 144.267371][ T5804] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.273791][ T4455] usb 3-1: USB disconnect, device number 5 [ 144.283343][ T5804] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.536161][ T4271] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 145.106117][ T5878] loop4: detected capacity change from 0 to 2048 [ 145.166488][ T5878] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.255745][ T5886] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.311815][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.372936][ T5878] Remounting filesystem read-only [ 145.378308][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.436087][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.477697][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.533480][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.582460][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.609636][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.660884][ T5878] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 145.689547][ T26] audit: type=1800 audit(1788361298.658:24): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.656" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 146.095146][ T5915] trusted_key: encrypted_key: master key parameter '' is invalid [ 146.145116][ T5918] loop2: detected capacity change from 0 to 64 [ 146.242597][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.456004][ T22] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 146.475471][ T22] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 146.492665][ T22] usb 5-1: Product: syz [ 146.507918][ T5929] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 146.515828][ T22] usb 5-1: SerialNumber: syz [ 146.547404][ T22] usb 5-1: config 0 descriptor?? [ 146.552699][ T5929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.682'. [ 146.574704][ T5929] openvswitch: netlink: Flow key attr not present in new flow. [ 146.876034][ T5939] loop3: detected capacity change from 0 to 4096 [ 147.006955][ T4320] usb 5-1: USB disconnect, device number 7 [ 147.242536][ T4455] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 147.382552][ T4315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.439748][ T4455] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.453797][ T4455] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.474231][ T4455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 147.494646][ T4455] usb 2-1: string descriptor 0 read error: -22 [ 147.502579][ T4455] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.529098][ T4455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.550312][ T5943] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.560635][ T4455] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 147.582616][ T4315] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 147.598380][ T4455] usb-storage 2-1:1.1: USB Mass Storage device detected [ 147.609544][ T4315] usb 3-1: config 0 has no interface number 0 [ 147.626620][ T4315] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.642969][ T4315] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 147.680255][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.699860][ T4315] usb 3-1: Product: syz [ 147.709091][ T4320] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.728385][ T4315] usb 3-1: Manufacturer: syz [ 147.738095][ T4315] usb 3-1: SerialNumber: syz [ 147.748827][ T4315] usb 3-1: config 0 descriptor?? [ 147.777400][ T4315] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 147.812873][ T22] usb 2-1: USB disconnect, device number 5 [ 147.930930][ T4320] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.941357][ T5969] UBIFS error (pid: 5969): cannot open "ubi0/file0", error -22 [ 147.958190][ T4320] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.041042][ T4320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.060692][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.080982][ T4320] usb 1-1: Product: syz [ 148.091145][ T4320] usb 1-1: Manufacturer: syz [ 148.099940][ T4320] usb 1-1: SerialNumber: syz [ 148.126789][ T4320] cdc_ncm 1-1:1.0: skipping garbage [ 148.132109][ T4320] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 148.143756][ T4320] cdc_ncm 1-1:1.0: bind() failure [ 148.154945][ T4320] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 148.162065][ T4320] cdc_ncm 1-1:1.1: bind() failure [ 148.212734][ T4320] usb 3-1: USB disconnect, device number 6 [ 148.268421][ T4320] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 148.351628][ T4315] usb 1-1: USB disconnect, device number 6 [ 148.952378][ T22] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 149.144715][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.162643][ T4320] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.179043][ T6000] loop1: detected capacity change from 0 to 256 [ 149.185081][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.210530][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 149.260831][ T6000] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 149.270749][ T22] usb 5-1: string descriptor 0 read error: -22 [ 149.283166][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.292277][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.315286][ T6000] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 149.331775][ T5984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.343266][ T6000] exFAT-fs (loop1): failed to load alloc-bitmap [ 149.361273][ T22] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 149.368045][ T6000] exFAT-fs (loop1): failed to recognize exfat type [ 149.378027][ T22] usb-storage 5-1:1.1: USB Mass Storage device detected [ 149.382897][ T4320] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 149.413408][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 149.446912][ T4320] usb 3-1: Product: syz [ 149.461520][ T4320] usb 3-1: SerialNumber: syz [ 149.513758][ T4320] usb 3-1: config 0 descriptor?? [ 149.559324][ T6009] loop3: detected capacity change from 0 to 64 [ 149.625167][ T4315] usb 5-1: USB disconnect, device number 8 [ 149.861663][ T6014] loop0: detected capacity change from 0 to 2048 [ 149.872259][ T6014] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.908362][ T6015] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.928362][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 149.941302][ T6014] Remounting filesystem read-only [ 149.956038][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 149.968639][ T4315] usb 3-1: USB disconnect, device number 7 [ 149.986715][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 150.010199][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 150.021687][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 150.037739][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 150.048529][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 150.066404][ T6014] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 150.077617][ T26] audit: type=1800 audit(1788361303.058:25): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.719" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 150.308364][ T6023] loop4: detected capacity change from 0 to 24 [ 150.796939][ T127] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.834030][ T6041] netlink: 'syz.2.744': attribute type 2 has an invalid length. [ 150.856000][ T6043] x_tables: ip_tables: osf match: only valid for protocol 6 [ 150.863028][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.004308][ T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.031534][ T6047] loop2: detected capacity change from 0 to 8 [ 151.046105][ T127] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.077811][ T4315] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 151.088632][ T127] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.099717][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.108850][ T127] usb 2-1: Product: syz [ 151.116671][ T127] usb 2-1: Manufacturer: syz [ 151.121353][ T4315] usb 5-1: config 0 has no interface number 0 [ 151.121393][ T4315] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.138176][ T127] usb 2-1: SerialNumber: syz [ 151.165695][ T127] cdc_ncm 2-1:1.0: skipping garbage [ 151.188385][ T127] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 151.197665][ T4315] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 151.221271][ T127] cdc_ncm 2-1:1.0: bind() failure [ 151.232458][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.256602][ T4315] usb 5-1: Product: syz [ 151.270687][ T4315] usb 5-1: Manufacturer: syz [ 151.284724][ T127] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 151.294766][ T4315] usb 5-1: SerialNumber: syz [ 151.295110][ T127] cdc_ncm 2-1:1.1: bind() failure [ 151.327769][ T4315] usb 5-1: config 0 descriptor?? [ 151.343154][ T4315] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 151.384716][ T4315] usb 2-1: USB disconnect, device number 6 [ 151.801530][ T4315] usb 5-1: USB disconnect, device number 9 [ 151.838806][ T4315] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 151.908262][ T6066] loop3: detected capacity change from 0 to 1764 [ 152.147335][ T6075] usb usb9: usbfs: process 6075 (syz.1.746) did not claim interface 1 before use [ 152.167938][ T6078] netlink: 'syz.3.747': attribute type 2 has an invalid length. [ 152.931031][ T6103] loop2: detected capacity change from 0 to 2048 [ 152.941665][ T6100] xt_CT: No such helper "netbios-ns" [ 153.049011][ T6109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.766'. [ 153.062616][ T4455] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.073426][ T6103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.083599][ T6109] netlink: 9 bytes leftover after parsing attributes in process `syz.3.766'. [ 153.092676][ T6109] netlink: 9 bytes leftover after parsing attributes in process `syz.3.766'. [ 153.102537][ T6109] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 153.251888][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 153.260089][ T4455] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.291668][ T4455] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.344884][ T4455] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.385240][ T4455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.442343][ T4455] usb 5-1: Product: syz [ 153.446671][ T4455] usb 5-1: Manufacturer: syz [ 153.481884][ T4455] usb 5-1: SerialNumber: syz [ 153.515834][ T4455] cdc_ncm 5-1:1.0: skipping garbage [ 153.533617][ T4455] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 153.561908][ T4455] cdc_ncm 5-1:1.0: bind() failure [ 153.581411][ T4455] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 153.619153][ T4455] cdc_ncm 5-1:1.1: bind() failure [ 153.726905][ T4455] usb 5-1: USB disconnect, device number 10 [ 153.798004][ T6095] loop1: detected capacity change from 0 to 32768 [ 153.886912][ T6131] loop3: detected capacity change from 0 to 1024 [ 153.905567][ T6095] XFS (loop1): Mounting V5 Filesystem [ 154.146393][ T6095] XFS (loop1): Ending clean mount [ 154.311227][ T4271] XFS (loop1): Unmounting Filesystem [ 155.778101][ T6198] loop4: detected capacity change from 0 to 1764 [ 156.371351][ T6218] loop4: detected capacity change from 0 to 1024 [ 156.896791][ T6206] loop3: detected capacity change from 0 to 32768 [ 156.954491][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 157.047944][ T6241] loop4: detected capacity change from 0 to 256 [ 157.079376][ T6206] XFS (loop3): Mounting V5 Filesystem [ 157.141975][ T6249] sctp: [Deprecated]: syz.0.823 (pid 6249) Use of int in max_burst socket option. [ 157.141975][ T6249] Use struct sctp_assoc_value instead [ 157.158821][ T6241] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 157.308774][ T6206] XFS (loop3): Ending clean mount [ 157.328452][ T6241] UBIFS error (pid: 6241): cannot open "ubi:0", error -19 [ 157.488825][ T4284] XFS (loop3): Unmounting Filesystem [ 157.723022][ T6260] ceph: No source [ 158.545868][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 158.922581][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 159.817896][ T6335] loop1: detected capacity change from 0 to 2048 [ 159.867374][ T6335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.295979][ T6351] loop3: detected capacity change from 0 to 256 [ 160.317630][ T6351] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.359496][ T6351] UBIFS error (pid: 6351): cannot open "ubi:0", error -19 [ 160.604494][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 160.722441][ T6342] loop2: detected capacity change from 0 to 32768 [ 160.817599][ T6342] XFS (loop2): Mounting V5 Filesystem [ 160.998949][ T6342] XFS (loop2): Ending clean mount [ 161.223581][ T4281] XFS (loop2): Unmounting Filesystem [ 161.391197][ T6387] sctp: [Deprecated]: syz.1.887 (pid 6387) Use of int in max_burst socket option. [ 161.391197][ T6387] Use struct sctp_assoc_value instead [ 161.785625][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 162.150509][ T6380] loop4: detected capacity change from 0 to 32768 [ 162.295703][ T6380] XFS (loop4): Mounting V5 Filesystem [ 162.590613][ T6380] XFS (loop4): Ending clean mount [ 162.773029][ T4286] XFS (loop4): Unmounting Filesystem [ 162.910690][ T6389] loop3: detected capacity change from 0 to 32768 [ 163.021302][ T6389] XFS (loop3): Mounting V5 Filesystem [ 163.093773][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 163.343461][ T6389] XFS (loop3): Ending clean mount [ 163.542940][ T4284] XFS (loop3): Unmounting Filesystem [ 163.896074][ T26] audit: type=1326 audit(1788361316.868:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.012019][ T26] audit: type=1326 audit(1788361316.908:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.057968][ T6472] xt_nat: multiple ranges no longer supported [ 164.152429][ T26] audit: type=1326 audit(1788361316.908:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.203398][ T26] audit: type=1326 audit(1788361316.908:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.269534][ T6473] loop4: detected capacity change from 0 to 4096 [ 164.274013][ T26] audit: type=1326 audit(1788361316.908:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.312500][ T22] kernel write not supported for file /input/mice (pid: 22 comm: kworker/1:0) [ 164.321832][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 164.344556][ T6473] EXT4-fs: Ignoring removed orlov option [ 164.353665][ T6473] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.375516][ T26] audit: type=1326 audit(1788361316.908:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.453695][ T6473] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.543665][ T26] audit: type=1326 audit(1788361316.908:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.568478][ T26] audit: type=1326 audit(1788361316.908:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 164.629555][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 164.971338][ T6497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.030091][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.933'. [ 165.048742][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.933'. [ 165.303172][ T6511] loop3: detected capacity change from 0 to 512 [ 165.374787][ T6511] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.937: inode has both inline data and extents flags [ 165.473518][ T6511] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.937: couldn't read orphan inode 15 (err -117) [ 165.562648][ T6511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.955661][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 166.903736][ T6562] loop2: detected capacity change from 0 to 1024 [ 167.006359][ T6558] loop3: detected capacity change from 0 to 4096 [ 167.045454][ T6558] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 167.084143][ T6566] loop1: detected capacity change from 0 to 64 [ 167.184079][ T6566] syz.1.964: attempt to access beyond end of device [ 167.184079][ T6566] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 167.212871][ T6566] Buffer I/O error on dev loop1, logical block 512, async page read [ 167.257167][ T6566] syz.1.964: attempt to access beyond end of device [ 167.257167][ T6566] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 167.321086][ T6566] Buffer I/O error on dev loop1, logical block 56576, async page read [ 168.518578][ T6574] loop4: detected capacity change from 0 to 32768 [ 168.704032][ T6574] XFS (loop4): Mounting V5 Filesystem [ 168.793913][ T6624] ieee802154 phy0 wpan0: encryption failed: -90 [ 169.013620][ T6574] XFS (loop4): Ending clean mount [ 169.188839][ T4286] XFS (loop4): Unmounting Filesystem [ 169.588899][ T6645] loop3: detected capacity change from 0 to 4096 [ 169.852908][ T6656] xt_nat: multiple ranges no longer supported [ 170.974275][ T6669] loop2: detected capacity change from 0 to 32768 [ 171.017347][ T6669] XFS (loop2): Mounting V5 Filesystem [ 171.074672][ T6669] XFS (loop2): Ending clean mount [ 171.153048][ T4281] XFS (loop2): Unmounting Filesystem [ 171.513806][ T6718] loop3: detected capacity change from 0 to 1024 [ 171.913564][ T6730] loop0: detected capacity change from 0 to 512 [ 171.956721][ T6730] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 172.001523][ T6730] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 172.128662][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 172.266464][ T6740] tmpfs: Bad value for 'mpol' [ 172.598787][ T6752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.652647][ T4282] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.862515][ T4282] usb 4-1: Using ep0 maxpacket: 16 [ 172.877855][ T4282] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.903148][ T4282] usb 4-1: config 0 has no interface number 0 [ 172.924228][ T4282] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 172.950575][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.974625][ T4282] usb 4-1: Product: syz [ 172.988355][ T4282] usb 4-1: Manufacturer: syz [ 173.004847][ T4282] usb 4-1: SerialNumber: syz [ 173.026972][ T4282] usb 4-1: config 0 descriptor?? [ 173.054265][ T4282] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 173.088695][ T26] audit: type=1326 audit(1788361326.058:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd719e159 code=0x7ffc0000 [ 173.140705][ T26] audit: type=1326 audit(1788361326.058:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ffbd719e159 code=0x7ffc0000 [ 173.214965][ T26] audit: type=1326 audit(1788361326.058:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd719e159 code=0x7ffc0000 [ 173.291081][ T26] audit: type=1326 audit(1788361326.058:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd719e159 code=0x7ffc0000 [ 173.455752][ T4282] gspca_spca1528: reg_w err -71 [ 173.495398][ T4282] spca1528: probe of 4-1:0.1 failed with error -71 [ 173.517309][ T4282] usb 4-1: USB disconnect, device number 8 [ 174.136656][ T6799] loop1: detected capacity change from 0 to 1024 [ 174.246046][ T6799] hfsplus: request for non-existent node 16777217 in B*Tree [ 174.254874][ T6799] hfsplus: request for non-existent node 16777217 in B*Tree [ 174.282934][ T6799] hfsplus: xattr searching failed [ 174.490141][ T6811] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 174.748284][ T6823] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1082'. [ 174.793963][ T6827] netlink: 456 bytes leftover after parsing attributes in process `syz.1.1085'. [ 175.312522][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 175.503596][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 175.514769][ T22] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.559587][ T22] usb 3-1: config 0 has no interface number 0 [ 175.575218][ T22] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 175.592760][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.611072][ T22] usb 3-1: Product: syz [ 175.615831][ T22] usb 3-1: Manufacturer: syz [ 175.620482][ T22] usb 3-1: SerialNumber: syz [ 175.636176][ T22] usb 3-1: config 0 descriptor?? [ 175.658594][ T22] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 175.784303][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 176.058746][ T22] gspca_spca1528: reg_w err -71 [ 176.092511][ T22] spca1528: probe of 3-1:0.1 failed with error -71 [ 176.122093][ T22] usb 3-1: USB disconnect, device number 8 [ 176.548956][ T6891] loop0: detected capacity change from 0 to 1024 [ 176.671756][ T6891] hfsplus: request for non-existent node 16777217 in B*Tree [ 176.720764][ T6891] hfsplus: request for non-existent node 16777217 in B*Tree [ 176.736991][ T6891] hfsplus: xattr searching failed [ 176.744638][ T6897] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 177.082413][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.198245][ T6915] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1126'. [ 177.289558][ T22] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 177.328582][ T22] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.348691][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.384575][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.417404][ T22] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.437827][ T22] usb 3-1: Product: syz [ 177.442086][ T22] usb 3-1: Manufacturer: syz [ 177.463008][ T22] usb 3-1: SerialNumber: syz [ 177.471877][ T22] usb 3-1: config 0 descriptor?? [ 177.522955][ T22] hub 3-1:0.0: bad descriptor, ignoring hub [ 177.528954][ T22] hub: probe of 3-1:0.0 failed with error -5 [ 177.578098][ T22] usb 3-1: selecting invalid altsetting 0 [ 177.912876][ T4282] usb 3-1: USB disconnect, device number 9 [ 177.932454][ T4811] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 177.989444][ T6939] loop1: detected capacity change from 0 to 8 [ 178.050391][ T6939] SQUASHFS error: Unable to read inode 0x0 [ 178.136419][ T4811] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 178.153374][ T4811] usb 5-1: config 0 has no interface number 0 [ 178.178172][ T4811] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 178.204290][ T4811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.224554][ T4811] usb 5-1: Product: syz [ 178.228823][ T4811] usb 5-1: Manufacturer: syz [ 178.239186][ T4811] usb 5-1: SerialNumber: syz [ 178.265497][ T4811] usb 5-1: config 0 descriptor?? [ 178.361860][ T6946] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 178.540545][ T6936] loop0: detected capacity change from 0 to 32768 [ 178.672191][ T6936] XFS (loop0): Mounting V5 Filesystem [ 178.717400][ T4811] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 178.739700][ T4811] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 178.756649][ T4811] asix: probe of 5-1:0.251 failed with error -5 [ 178.782637][ T4811] usb 5-1: USB disconnect, device number 11 [ 178.885124][ T6936] XFS (loop0): Ending clean mount [ 178.911768][ T6936] XFS (loop0): Quotacheck needed: Please wait. [ 178.980670][ T6947] loop1: detected capacity change from 0 to 32768 [ 178.997754][ T6947] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1145 (6947) [ 179.012758][ T6936] XFS (loop0): Quotacheck: Done. [ 179.082194][ T6947] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 179.103032][ T6947] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 179.122402][ T6947] BTRFS info (device loop1): force zlib compression, level 3 [ 179.150297][ T6947] BTRFS info (device loop1): turning on flush-on-commit [ 179.170601][ T6947] BTRFS info (device loop1): max_inline at 4096 [ 179.190800][ T6947] BTRFS info (device loop1): using free space tree [ 179.234017][ T4276] XFS (loop0): Unmounting Filesystem [ 179.490229][ T6947] BTRFS info (device loop1): enabling ssd optimizations [ 179.840378][ T4271] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 179.964363][ T26] audit: type=1326 audit(1788361332.938:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 180.095835][ T26] audit: type=1326 audit(1788361332.968:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 180.234181][ T26] audit: type=1326 audit(1788361332.968:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 180.318036][ T26] audit: type=1326 audit(1788361332.968:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 180.394259][ T26] audit: type=1326 audit(1788361332.968:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a79e159 code=0x7ffc0000 [ 180.649219][ T7021] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 180.724226][ T7023] loop4: detected capacity change from 0 to 16 [ 180.789434][ T7023] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.867812][ T7023] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 180.897354][ T7023] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 180.949372][ T7023] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 180.976976][ T26] audit: type=1326 audit(1788361333.948:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.1.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a299e159 code=0x7ffc0000 [ 181.002423][ T7023] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 181.042859][ T7023] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 181.058869][ T26] audit: type=1326 audit(1788361333.988:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.1.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd0a299e159 code=0x7ffc0000 [ 181.162378][ T26] audit: type=1326 audit(1788361333.988:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.1.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a299e159 code=0x7ffc0000 [ 181.289176][ T26] audit: type=1326 audit(1788361333.988:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.1.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a299e159 code=0x7ffc0000 [ 181.349168][ T7042] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 181.361945][ T26] audit: type=1326 audit(1788361334.328:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.1184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6559e159 code=0x7ffc0000 [ 181.688175][ T7056] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 181.863622][ T7052] loop0: detected capacity change from 0 to 4096 [ 181.928281][ T7052] ntfs: volume version 3.1. [ 181.940459][ T7064] loop3: detected capacity change from 0 to 16 [ 181.988416][ T7064] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.066483][ T7064] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 182.089656][ T7064] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 182.140906][ T7064] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 182.206101][ T7064] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 182.247895][ T7064] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 182.824159][ T7085] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 183.334798][ T7101] loop1: detected capacity change from 0 to 16 [ 183.369163][ T7101] erofs: (device loop1): mounted with root inode @ nid 36. [ 183.442828][ T7101] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 183.485829][ T7101] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 183.499800][ T7101] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 183.525735][ T7101] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 183.536768][ T7075] loop4: detected capacity change from 0 to 32768 [ 183.543129][ T7101] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 183.663183][ T7075] XFS (loop4): Mounting V5 Filesystem [ 183.839411][ T7075] XFS (loop4): Ending clean mount [ 183.874212][ T7075] XFS (loop4): Quotacheck needed: Please wait. [ 183.957649][ T7075] XFS (loop4): Quotacheck: Done. [ 184.126490][ T7125] loop2: detected capacity change from 0 to 4096 [ 184.160170][ T7125] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 184.208193][ T4286] XFS (loop4): Unmounting Filesystem [ 184.269236][ T7125] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 184.443936][ T7125] ntfs3: loop2: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 184.498238][ T7135] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 184.504048][ T7138] x_tables: duplicate underflow at hook 3 [ 184.751619][ T7141] netlink: 'syz.0.1220': attribute type 27 has an invalid length. [ 184.819826][ T7141] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 184.904355][ T7146] block device autoloading is deprecated and will be removed. [ 184.932734][ T7146] syz.3.1230: attempt to access beyond end of device [ 184.932734][ T7146] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 185.292391][ T7004] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.321959][ T7162] loop1: detected capacity change from 0 to 16 [ 185.484930][ T7166] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.491539][ T7164] loop2: detected capacity change from 0 to 2048 [ 185.513535][ T7004] usb 5-1: Using ep0 maxpacket: 32 [ 185.528543][ T7004] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 185.559049][ T7164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.562855][ T7004] usb 5-1: config 0 has no interface number 0 [ 185.594053][ T7164] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 185.618973][ T7004] usb 5-1: config 0 interface 196 has no altsetting 0 [ 185.661553][ T7004] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 185.722332][ T7004] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 185.730926][ T7004] usb 5-1: Product: syz [ 185.772593][ T7004] usb 5-1: Manufacturer: syz [ 185.777284][ T7004] usb 5-1: SerialNumber: syz [ 185.785984][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 185.820022][ T7004] usb 5-1: config 0 descriptor?? [ 186.052470][ T7004] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 186.060032][ T7004] ipheth: probe of 5-1:0.196 failed with error -71 [ 186.136761][ T7004] usb 5-1: USB disconnect, device number 12 [ 186.981464][ T7205] loop1: detected capacity change from 0 to 4096 [ 187.003450][ T7205] __ntfs_error: 5 callbacks suppressed [ 187.003466][ T7205] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 187.111649][ T7205] ntfs: volume version 3.1. [ 187.136700][ T7193] loop0: detected capacity change from 0 to 32768 [ 187.152920][ T7193] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1243 (7193) [ 187.196521][ T7193] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 187.265457][ T7193] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 187.303325][ T7193] BTRFS info (device loop0): force zlib compression, level 3 [ 187.343237][ T7193] BTRFS info (device loop0): turning on flush-on-commit [ 187.350303][ T7193] BTRFS info (device loop0): max_inline at 4096 [ 187.422468][ T7193] BTRFS info (device loop0): using free space tree [ 187.756332][ T7193] BTRFS info (device loop0): enabling ssd optimizations [ 187.778347][ T7231] loop3: detected capacity change from 0 to 4096 [ 187.834177][ T7231] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 187.961404][ T7231] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 187.992670][ T7253] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.065788][ T7231] ntfs3: loop3: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 188.311798][ T7257] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 188.386949][ T4276] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 188.597065][ T4371] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop0 scanned by udevd (4371) [ 188.767544][ T7268] syz.0.1269: attempt to access beyond end of device [ 188.767544][ T7268] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 188.935961][ T7275] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 189.158902][ T7281] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.465583][ T7289] loop0: detected capacity change from 0 to 2048 [ 189.588496][ T7298] syz.4.1286: attempt to access beyond end of device [ 189.588496][ T7298] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 189.664912][ T7289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.751806][ T7305] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 189.782914][ T7289] VFS: Lookup of 'file0' in ext4 loop0 would have caused loop [ 190.020706][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 190.162395][ T4314] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 190.232543][ T4356] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.318114][ T7321] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 190.362884][ T4314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.380457][ T4314] usb 4-1: not running at top speed; connect to a high speed hub [ 190.413860][ T4314] usb 4-1: config 249 has an invalid interface number: 203 but max is 0 [ 190.422465][ T4356] usb 2-1: Using ep0 maxpacket: 32 [ 190.429689][ T4356] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 190.448239][ T4314] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 190.458801][ T4356] usb 2-1: config 0 has no interface number 0 [ 190.478297][ T4356] usb 2-1: config 0 interface 196 has no altsetting 0 [ 190.485484][ T4314] usb 4-1: config 249 has no interface number 0 [ 190.491811][ T4314] usb 4-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.502769][ T4314] usb 4-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.524916][ T4356] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 190.544599][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 190.560280][ T4314] usb 4-1: config 249 interface 203 has no altsetting 0 [ 190.567786][ T4356] usb 2-1: Product: syz [ 190.573727][ T4356] usb 2-1: Manufacturer: syz [ 190.578623][ T4356] usb 2-1: SerialNumber: syz [ 190.586022][ T4314] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 190.598133][ T4356] usb 2-1: config 0 descriptor?? [ 190.603917][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.614197][ T4314] usb 4-1: Product: syz [ 190.621447][ T4314] usb 4-1: Manufacturer: syz [ 190.626558][ T4314] usb 4-1: SerialNumber: syz [ 190.641501][ T7325] loop4: detected capacity change from 0 to 4096 [ 190.663238][ T7325] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 190.730487][ T7325] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 190.778264][ T7331] syz.2.1301: attempt to access beyond end of device [ 190.778264][ T7331] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 190.780395][ T7325] ntfs3: loop4: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 190.823948][ T4356] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 190.831577][ T4356] ipheth: probe of 2-1:0.196 failed with error -71 [ 190.862217][ T4314] rtl8150 4-1:249.203: couldn't find required endpoints [ 190.884143][ T4314] rtl8150: probe of 4-1:249.203 failed with error -5 [ 190.908431][ T4356] usb 2-1: USB disconnect, device number 7 [ 190.947645][ T4314] usb 4-1: USB disconnect, device number 9 [ 191.618980][ T7354] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 191.822612][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1318'. [ 191.861559][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1318'. [ 192.038094][ T7363] loop0: detected capacity change from 0 to 4096 [ 192.081869][ T7363] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 192.148463][ T7363] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 192.251674][ T7363] ntfs3: loop0: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 193.292616][ T4318] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 193.535805][ T4318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.551564][ T4318] usb 2-1: not running at top speed; connect to a high speed hub [ 193.582698][ T4318] usb 2-1: string descriptor 0 read error: -22 [ 193.589035][ T4318] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 193.642905][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.857889][ T7433] loop4: detected capacity change from 0 to 256 [ 193.959638][ T7433] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 194.098329][ T4315] usb 2-1: USB disconnect, device number 8 [ 194.192500][ T4356] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 194.335355][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341855][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.386369][ T4356] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.407256][ T4356] usb 3-1: not running at top speed; connect to a high speed hub [ 194.444688][ T4356] usb 3-1: config 249 has an invalid interface number: 203 but max is 0 [ 194.481088][ T4356] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 194.506215][ T4356] usb 3-1: config 249 has no interface number 0 [ 194.517078][ T4356] usb 3-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.531772][ T4356] usb 3-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.551943][ T4356] usb 3-1: config 249 interface 203 has no altsetting 0 [ 194.570713][ T4356] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 194.580276][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.592543][ T4356] usb 3-1: Product: syz [ 194.596785][ T4356] usb 3-1: Manufacturer: syz [ 194.602549][ T4356] usb 3-1: SerialNumber: syz [ 194.699286][ T7456] loop3: detected capacity change from 0 to 256 [ 194.709032][ T7456] exfat: Deprecated parameter 'utf8' [ 194.731575][ T7456] exfat: Deprecated parameter 'utf8' [ 194.743403][ T4455] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.771034][ T7456] exfat: Deprecated parameter 'namecase' [ 194.827594][ T4356] rtl8150 3-1:249.203: couldn't find required endpoints [ 194.835975][ T7456] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 194.849893][ T4356] rtl8150: probe of 3-1:249.203 failed with error -5 [ 194.902561][ T4356] usb 3-1: USB disconnect, device number 10 [ 194.954564][ T4455] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.988622][ T4455] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.041437][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 195.048983][ T4455] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 195.061088][ T4455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.069536][ T4455] usb 5-1: Product: syz [ 195.074868][ T4455] usb 5-1: Manufacturer: syz [ 195.079551][ T4455] usb 5-1: SerialNumber: syz [ 195.117060][ T4455] usb-storage 5-1:1.0: USB Mass Storage device detected [ 195.166409][ T4455] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 195.347086][ T4314] usb 5-1: USB disconnect, device number 13 [ 195.895266][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 196.328525][ T7506] loop2: detected capacity change from 0 to 64 [ 196.739996][ T7490] loop3: detected capacity change from 0 to 32768 [ 196.771383][ T7518] wg2 speed is unknown, defaulting to 1000 [ 196.793556][ T7518] wg2 speed is unknown, defaulting to 1000 [ 196.821202][ T7518] wg2 speed is unknown, defaulting to 1000 [ 196.873437][ T7490] [ 196.873437][ T7490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.873437][ T7490] [ 196.885554][ T7518] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.932181][ T7518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.932816][ T4315] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.996891][ T7490] jfs_create: dtInsert returned -EIO [ 197.036378][ T7490] ERROR: (device loop3): jfs_create: [ 197.036378][ T7490] [ 197.057399][ T7490] ERROR: (device loop3): remounting filesystem as read-only [ 197.089280][ T7518] wg2 speed is unknown, defaulting to 1000 [ 197.099459][ T7518] wg2 speed is unknown, defaulting to 1000 [ 197.107253][ T7518] wg2 speed is unknown, defaulting to 1000 [ 197.134164][ T7518] wg2 speed is unknown, defaulting to 1000 [ 197.144022][ T7518] wg2 speed is unknown, defaulting to 1000 [ 197.157078][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.194895][ T4315] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.233982][ T4315] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 197.262416][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.271254][ T4315] usb 3-1: Product: syz [ 197.284512][ T4315] usb 3-1: Manufacturer: syz [ 197.289180][ T4315] usb 3-1: SerialNumber: syz [ 197.326482][ T4315] usb-storage 3-1:1.0: USB Mass Storage device detected [ 197.341742][ T4315] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 197.537103][ T4318] usb 3-1: USB disconnect, device number 11 [ 198.160497][ T7533] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ [ 198.160497][ T7533] SÃȘØÈžZ§6ŸÂ' [ 198.178930][ T7534] loop4: detected capacity change from 0 to 512 [ 198.394057][ T7534] EXT4-fs (loop4): 1 orphan inode deleted [ 198.399887][ T7534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.449905][ T7534] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.454129][ T71] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 198.488178][ T7534] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 198.562711][ T71] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 198.634814][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 198.760323][ T7555] loop2: detected capacity change from 0 to 16 [ 198.820062][ T7555] erofs: (device loop2): mounted with root inode @ nid 36. [ 198.886317][ T7555] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 198.972715][ T7555] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 199.002029][ T7555] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 199.011975][ T7555] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 199.026179][ T7555] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 199.036375][ T7555] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 199.045669][ T26] audit: type=1800 audit(1788361352.018:52): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1410" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 199.232637][ T4356] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.291482][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 199.328344][ T7575] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ [ 199.328344][ T7575] SÃȘØÈžZ§6ŸÂ' [ 199.444549][ T4356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.472373][ T4356] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 199.516697][ T4356] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 199.546837][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.567090][ T4356] usb 1-1: Product: syz [ 199.571342][ T4356] usb 1-1: Manufacturer: syz [ 199.597086][ T4356] usb 1-1: SerialNumber: syz [ 199.623044][ T4356] usb-storage 1-1:1.0: USB Mass Storage device detected [ 199.663294][ T4356] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 199.853603][ T4810] usb 1-1: USB disconnect, device number 7 [ 200.013814][ T7593] siw: device registration error -23 [ 200.225601][ T7579] loop4: detected capacity change from 0 to 32768 [ 200.250976][ T7602] loop1: detected capacity change from 0 to 16 [ 200.294836][ T7579] [ 200.294836][ T7579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.294836][ T7579] [ 200.298648][ T7602] erofs: (device loop1): mounted with root inode @ nid 36. [ 200.369276][ T7602] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 200.393952][ T7579] jfs_create: dtInsert returned -EIO [ 200.399412][ T7579] ERROR: (device loop4): jfs_create: [ 200.399412][ T7579] [ 200.428191][ T7602] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 200.472529][ T7579] ERROR: (device loop4): remounting filesystem as read-only [ 200.485319][ T7605] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ [ 200.485319][ T7605] SÃȘØÈžZ§6ŸÂ' [ 200.502499][ T7602] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 200.511530][ T7602] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 200.582422][ T7602] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 200.609782][ T7602] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 200.662605][ T26] audit: type=1800 audit(1788361353.638:53): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1428" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 200.663053][ T7609] netlink: 'syz.0.1433': attribute type 10 has an invalid length. [ 200.780704][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1433'. [ 200.807110][ T7609] device macvlan1 entered promiscuous mode [ 200.843543][ T7609] batman_adv: batadv0: Adding interface: macvlan1 [ 200.891694][ T7609] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.941190][ T7609] batman_adv: batadv0: Interface activated: macvlan1 [ 201.012587][ T4315] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 201.170138][ T7624] loop3: detected capacity change from 0 to 1024 [ 201.214206][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.255158][ T4315] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.308615][ T4315] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.338213][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.362652][ T7624] hfsplus: invalid extended attribute record [ 201.372738][ T4315] usb 3-1: Product: syz [ 201.397724][ T4315] usb 3-1: Manufacturer: syz [ 201.415444][ T4315] usb 3-1: SerialNumber: syz [ 201.861502][ T4315] usb 3-1: 0:2 : does not exist [ 201.924279][ T4315] usb 3-1: USB disconnect, device number 12 [ 202.173591][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.261054][ T7657] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 202.283329][ T7659] loop3: detected capacity change from 0 to 512 [ 202.361030][ T7659] EXT4-fs (loop3): 1 orphan inode deleted [ 202.367327][ T7659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.385210][ T4330] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.420817][ T4330] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 202.461104][ T7659] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.498877][ T7659] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 202.514392][ T7665] loop4: detected capacity change from 0 to 1024 [ 202.573945][ T7665] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 202.609561][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 203.212864][ T7686] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 203.221237][ T7686] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1467'. [ 203.248886][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 203.346108][ T7668] loop0: detected capacity change from 0 to 32768 [ 203.368758][ T7668] [ 203.368758][ T7668] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.368758][ T7668] [ 203.397184][ T7668] jfs_create: dtInsert returned -EIO [ 203.402834][ T7668] ERROR: (device loop0): jfs_create: [ 203.402834][ T7668] [ 203.413903][ T7668] ERROR: (device loop0): remounting filesystem as read-only [ 203.721761][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 203.749090][ T7700] loop0: detected capacity change from 0 to 1024 [ 203.758018][ T7699] loop1: detected capacity change from 0 to 512 [ 203.813709][ T4314] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 203.858262][ T7700] hfsplus: invalid extended attribute record [ 203.888462][ T7699] EXT4-fs (loop1): 1 orphan inode deleted [ 203.933031][ T7699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.975687][ T7699] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.993393][ T4325] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 204.038055][ T7699] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 204.048340][ T4325] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 204.056079][ T4314] usb 3-1: not running at top speed; connect to a high speed hub [ 204.108417][ T4314] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 204.147295][ T4314] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 204.184599][ T4314] usb 3-1: config 11 has no interface number 0 [ 204.191651][ T4314] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.203546][ T4314] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.213873][ T4314] usb 3-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.248080][ T4314] usb 3-1: config 11 interface 95 has no altsetting 0 [ 204.287073][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 204.290954][ T4314] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 204.319599][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 204.359583][ T4314] usb 3-1: Manufacturer: syz [ 204.610052][ T4314] usb 3-1: USB disconnect, device number 13 [ 205.030361][ T7728] loop3: detected capacity change from 0 to 4096 [ 205.088861][ T7732] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.372884][ T7736] loop2: detected capacity change from 0 to 1024 [ 205.403990][ T7722] loop1: detected capacity change from 0 to 32768 [ 205.467292][ T7722] [ 205.467292][ T7722] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.467292][ T7722] [ 205.510604][ T7736] hfsplus: invalid extended attribute record [ 205.536344][ T7722] jfs_create: dtInsert returned -EIO [ 205.541807][ T7722] ERROR: (device loop1): jfs_create: [ 205.541807][ T7722] [ 205.602686][ T7722] ERROR: (device loop1): remounting filesystem as read-only [ 205.928502][ T7744] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 205.938049][ T7746] loop4: detected capacity change from 0 to 16 [ 206.001130][ T7750] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 206.021348][ T7750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1497'. [ 206.030917][ T7746] erofs: (device loop4): mounted with root inode @ nid 36. [ 206.042792][ T7744] CIFS: Attempting to mount \\127.0.0.1\sø:e[�1ý2harefµDŽr=root [ 206.062530][ T7750] device macvlan1 entered promiscuous mode [ 206.078812][ T7750] batman_adv: batadv0: Adding interface: macvlan1 [ 206.085533][ T7746] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 206.087802][ T7744] CIFS: VFS: No username specified [ 206.118502][ T7750] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.132927][ T7746] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 206.194832][ T7746] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 206.228388][ T7750] batman_adv: batadv0: Interface activated: macvlan1 [ 206.242707][ T7746] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 206.264608][ T7749] loop1: detected capacity change from 0 to 4096 [ 206.271657][ T7746] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 206.310550][ T7749] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 206.320497][ T7746] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 206.341554][ T26] audit: type=1800 audit(1788361359.308:54): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1496" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 206.473517][ T7756] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.493831][ T7756] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.542672][ T7756] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.564566][ T7756] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.577122][ T4271] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 206.589718][ T7756] device geneve3 entered promiscuous mode [ 206.609412][ T4271] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.650764][ T4271] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 206.657672][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 206.663900][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 206.663919][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 206.669954][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 206.675992][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 206.847061][ T7764] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 206.903950][ T7764] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1503'. [ 206.945958][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1503'. [ 207.069833][ T7774] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 207.218148][ T7778] loop2: detected capacity change from 0 to 256 [ 207.239256][ T7778] exfat: Deprecated parameter 'namecase' [ 207.286657][ T7778] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 207.349684][ T7783] loop3: detected capacity change from 0 to 16 [ 207.392832][ T7783] erofs: (device loop3): mounted with root inode @ nid 36. [ 207.454654][ T7783] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 207.508819][ T7783] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 207.548905][ T7783] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 207.597918][ T7783] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 207.664880][ T7783] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 207.696184][ T7783] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 207.742671][ T26] audit: type=1800 audit(1788361360.718:55): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1515" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 207.940755][ T7800] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 207.959195][ T7800] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1523'. [ 207.998270][ T7800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 208.305556][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1528'. [ 208.344705][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1528'. [ 208.371003][ T7811] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 208.446498][ T7811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.702372][ T4314] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 208.779695][ T7833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.798774][ T7833] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 208.809112][ T7833] overlayfs: missing 'lowerdir' [ 208.898541][ T4318] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 208.926452][ T4314] usb 5-1: not running at top speed; connect to a high speed hub [ 208.967430][ T4314] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 208.982352][ T4314] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 208.995113][ T4314] usb 5-1: config 11 has no interface number 0 [ 209.001383][ T4314] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.014371][ T4314] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.070432][ T4314] usb 5-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.092801][ T4314] usb 5-1: config 11 interface 95 has no altsetting 0 [ 209.101559][ T7843] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.113986][ T4314] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 209.126912][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.132422][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 209.147832][ T7843] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.166455][ T4314] usb 5-1: Manufacturer: syz [ 209.171635][ T4318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.181743][ T7843] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.192054][ T7843] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.204051][ T4318] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.221485][ T7843] device geneve3 entered promiscuous mode [ 209.236797][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.263933][ T4318] usb 1-1: Product: syz [ 209.288787][ T4318] usb 1-1: Manufacturer: syz [ 209.298924][ T4318] usb 1-1: SerialNumber: syz [ 209.357141][ T7847] loop2: detected capacity change from 0 to 256 [ 209.427884][ T4314] usb 5-1: USB disconnect, device number 14 [ 209.778181][ T4318] usb 1-1: 0:2 : does not exist [ 209.833114][ T4318] usb 1-1: USB disconnect, device number 8 [ 210.008781][ T7863] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 210.137508][ T7865] CIFS: Attempting to mount \\127.0.0.1\sø:e[�1ý2harefµDŽr=root [ 210.162823][ T7865] CIFS: VFS: No username specified [ 210.277994][ T7870] loop1: detected capacity change from 0 to 256 [ 210.306192][ T7870] exfat: Deprecated parameter 'namecase' [ 210.373964][ T7870] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 210.463385][ T7873] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.522678][ T7873] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.573471][ T7873] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.632572][ T7873] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.712617][ T7873] device geneve3 entered promiscuous mode [ 211.102835][ T7893] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.172633][ T7893] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 211.213046][ T7893] overlayfs: missing 'lowerdir' [ 211.456730][ T7903] loop3: detected capacity change from 0 to 256 [ 211.474110][ T7903] exfat: Deprecated parameter 'namecase' [ 211.511372][ T7907] loop1: detected capacity change from 0 to 256 [ 211.535649][ T7903] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 211.786156][ T7911] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.854073][ T7911] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.869563][ T7911] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.880604][ T7911] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.895441][ T7911] device geneve4 entered promiscuous mode [ 211.933008][ T7917] 9p: Unknown access argument z: -22 [ 212.025042][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 212.084148][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1583'. [ 212.133364][ T7921] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1583'. [ 212.177892][ T7923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.184816][ T7921] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1583'. [ 212.235825][ T7923] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 212.250012][ T7923] overlayfs: missing 'lowerdir' [ 212.490476][ T7939] loop0: detected capacity change from 0 to 256 [ 212.500405][ T7934] loop2: detected capacity change from 0 to 512 [ 212.516646][ T7939] exfat: Deprecated parameter 'namecase' [ 212.544723][ T7934] EXT4-fs: Ignoring removed bh option [ 212.551355][ T7934] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 212.574276][ T7939] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 212.605503][ T7934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 212.620815][ T7934] EXT4-fs (loop2): orphan cleanup on readonly fs [ 212.653181][ T7934] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1591: attempt to clear invalid blocks 1024 len 1 [ 212.729822][ T7934] EXT4-fs (loop2): Remounting filesystem read-only [ 212.766027][ T7934] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1591: bg 0: block 361: padding at end of block bitmap is not set [ 212.793098][ T7934] EXT4-fs (loop2): Remounting filesystem read-only [ 212.811434][ T7934] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 212.843016][ T7934] EXT4-fs (loop2): Remounting filesystem read-only [ 212.892243][ T7934] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1591: invalid indirect mapped block 1811939328 (level 0) [ 212.970514][ T7934] EXT4-fs (loop2): Remounting filesystem read-only [ 212.998791][ T7934] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1591: invalid indirect mapped block 2185560079 (level 1) [ 213.049756][ T7934] EXT4-fs (loop2): Remounting filesystem read-only [ 213.078890][ T7934] EXT4-fs (loop2): 1 truncate cleaned up [ 213.100854][ T7934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.261173][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'. [ 213.277654][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 213.924326][ T7976] 9p: Unknown access argument z: -22 [ 213.979776][ T7946] loop3: detected capacity change from 0 to 32768 [ 214.031010][ T7946] diRead: diIAGRead returned -5 [ 214.053189][ T7946] jfs_lookup: iget failed on inum 1048352 [ 214.151267][ T7982] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1612'. [ 214.170055][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 214.918816][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 214.977467][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1637'. [ 214.990084][ T8012] 9p: Unknown access argument z: -22 [ 215.003552][ T8010] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1637'. [ 215.188616][ T8018] loop4: detected capacity change from 0 to 512 [ 215.285249][ T8018] EXT4-fs: Ignoring removed bh option [ 215.338382][ T8018] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 215.373223][ T8018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 215.413475][ T8018] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.439144][ T8018] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1641: attempt to clear invalid blocks 1024 len 1 [ 215.473444][ T8018] EXT4-fs (loop4): Remounting filesystem read-only [ 215.510219][ T8018] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1641: bg 0: block 361: padding at end of block bitmap is not set [ 215.589623][ T8018] EXT4-fs (loop4): Remounting filesystem read-only [ 215.623670][ T8018] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 215.648549][ T8018] EXT4-fs (loop4): Remounting filesystem read-only [ 215.723627][ T8018] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1641: invalid indirect mapped block 1811939328 (level 0) [ 215.772937][ T8018] EXT4-fs (loop4): Remounting filesystem read-only [ 215.779557][ T8018] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1641: invalid indirect mapped block 2185560079 (level 1) [ 215.848435][ T8018] EXT4-fs (loop4): Remounting filesystem read-only [ 215.868067][ T8018] EXT4-fs (loop4): 1 truncate cleaned up [ 215.897579][ T8018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 216.114694][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 216.866442][ T8080] loop1: detected capacity change from 0 to 512 [ 216.915372][ T8080] EXT4-fs: Ignoring removed bh option [ 217.130444][ T8080] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 217.170871][ T8055] syz.3.1647 (8055): drop_caches: 2 [ 217.219493][ T8080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 217.290010][ T8080] EXT4-fs (loop1): orphan cleanup on readonly fs [ 217.351315][ T8080] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1659: attempt to clear invalid blocks 1024 len 1 [ 217.392710][ T8080] EXT4-fs (loop1): Remounting filesystem read-only [ 217.450236][ T8080] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1659: bg 0: block 361: padding at end of block bitmap is not set [ 217.493904][ T8080] EXT4-fs (loop1): Remounting filesystem read-only [ 217.500569][ T8080] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 217.525922][ T8080] EXT4-fs (loop1): Remounting filesystem read-only [ 217.555787][ T8080] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1659: invalid indirect mapped block 1811939328 (level 0) [ 217.583529][ T8080] EXT4-fs (loop1): Remounting filesystem read-only [ 217.590162][ T8080] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1659: invalid indirect mapped block 2185560079 (level 1) [ 217.621669][ T8080] EXT4-fs (loop1): Remounting filesystem read-only [ 217.643351][ T8080] EXT4-fs (loop1): 1 truncate cleaned up [ 217.649122][ T8080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.838619][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 217.891376][ T8107] __nla_validate_parse: 2 callbacks suppressed [ 217.891394][ T8107] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1673'. [ 218.448033][ T8096] loop3: detected capacity change from 0 to 32768 [ 218.521100][ T8121] TCP: TCP_TX_DELAY enabled [ 218.628011][ T8096] XFS (loop3): Mounting V5 Filesystem [ 218.632145][ T8103] loop0: detected capacity change from 0 to 32768 [ 218.675027][ T8103] diRead: diIAGRead returned -5 [ 218.680024][ T8103] jfs_lookup: iget failed on inum 1048352 [ 218.738591][ T8135] loop1: detected capacity change from 0 to 1024 [ 218.798657][ T8138] netlink: 'syz.4.1686': attribute type 2 has an invalid length. [ 218.807119][ T8138] netlink: 'syz.4.1686': attribute type 8 has an invalid length. [ 218.816919][ T8138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1686'. [ 218.862772][ T8096] XFS (loop3): Ending clean mount [ 218.871900][ T8135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 219.153569][ T4284] XFS (loop3): Unmounting Filesystem [ 219.179543][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 220.057702][ T8177] loop2: detected capacity change from 0 to 64 [ 220.500515][ T8187] lo speed is unknown, defaulting to 1000 [ 220.521353][ T8187] lo speed is unknown, defaulting to 1000 [ 220.560707][ T8187] lo speed is unknown, defaulting to 1000 [ 220.798818][ T8193] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1710'. [ 220.853968][ T8193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 220.879782][ T8193] netlink: 'syz.3.1710': attribute type 3 has an invalid length. [ 220.935018][ T8193] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1710'. [ 220.984161][ T8176] loop4: detected capacity change from 0 to 32768 [ 221.007234][ T8187] infiniband syz0: set active [ 221.014345][ T4315] lo speed is unknown, defaulting to 1000 [ 221.052359][ T8187] infiniband syz0: added lo [ 221.074449][ T8176] XFS (loop4): Mounting V5 Filesystem [ 221.196571][ T8176] XFS (loop4): Ending clean mount [ 221.247279][ T8214] loop3: detected capacity change from 0 to 64 [ 221.310738][ T8187] RDS/IB: syz0: added [ 221.330957][ T8187] smc: adding ib device syz0 with port count 1 [ 221.407869][ T8187] smc: ib device syz0 port 1 has pnetid [ 221.453726][ T4286] XFS (loop4): Unmounting Filesystem [ 221.462004][ T4318] lo speed is unknown, defaulting to 1000 [ 221.526231][ T8187] lo speed is unknown, defaulting to 1000 [ 221.714586][ T8187] lo speed is unknown, defaulting to 1000 [ 221.822415][ T4356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 221.838799][ T8220] loop4: detected capacity change from 0 to 1024 [ 221.880177][ T8187] lo speed is unknown, defaulting to 1000 [ 221.899927][ T8220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.015155][ T8187] lo speed is unknown, defaulting to 1000 [ 222.026800][ T4356] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 222.036102][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.052548][ T4356] usb 2-1: Product: syz [ 222.062021][ T4356] usb 2-1: Manufacturer: syz [ 222.085347][ T4356] usb 2-1: SerialNumber: syz [ 222.121207][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 222.221609][ T4356] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.497901][ T8187] lo speed is unknown, defaulting to 1000 [ 222.695719][ T4314] usb 2-1: USB disconnect, device number 9 [ 223.024953][ T8246] loop3: detected capacity change from 0 to 1024 [ 223.100884][ T8246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.185286][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 223.292593][ T4356] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 223.329999][ T4356] ath9k_htc: Failed to initialize the device [ 223.375762][ T4314] usb 2-1: ath9k_htc: USB layer deinitialized [ 223.630612][ T8263] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1748'. [ 223.643734][ T8267] loop3: detected capacity change from 0 to 64 [ 223.653953][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1748'. [ 223.663963][ T8268] nfs: Deprecated parameter 'nointr' [ 223.684953][ T8263] netlink: 'syz.0.1748': attribute type 3 has an invalid length. [ 223.732482][ T8263] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1748'. [ 224.672551][ T8299] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1756'. [ 224.681678][ T8299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1756'. [ 224.732347][ T8299] netlink: 'syz.2.1756': attribute type 3 has an invalid length. [ 224.740165][ T8299] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1756'. [ 224.752358][ T8301] loop3: detected capacity change from 0 to 764 [ 224.797956][ T8274] syz.1.1753 (8274): drop_caches: 2 [ 224.827085][ T8301] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 225.178521][ T8308] ipt_CLUSTERIP: Please specify an interface name [ 225.501618][ T8293] loop4: detected capacity change from 0 to 32768 [ 225.556939][ T8293] [ 225.556939][ T8293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.556939][ T8293] [ 225.695733][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 225.705833][ T8325] loop0: detected capacity change from 0 to 512 [ 225.728586][ T4325] [ 225.728586][ T4325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.728586][ T4325] [ 225.773271][ T8327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.792430][ T4325] [ 225.792430][ T4325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.792430][ T4325] [ 225.805093][ T8325] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 225.823615][ T8325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 225.835545][ T4286] [ 225.835545][ T4286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.835545][ T4286] [ 225.857027][ T109] [ 225.857027][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.857027][ T109] [ 225.895430][ T8325] System zones: 0-1, 15-15, 18-18, 34-34 [ 225.903996][ T8325] EXT4-fs (loop0): orphan cleanup on readonly fs [ 225.904107][ T8325] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 225.904188][ T8325] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.904223][ T8325] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 225.909460][ T4286] [ 225.909460][ T4286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.909460][ T4286] [ 225.922600][ T109] ================================================================== [ 225.922616][ T109] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 225.922655][ T109] Write of size 8 at addr ffff88807a9bf040 by task jfsCommit/109 [ 225.922676][ T109] [ 225.922693][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 [ 225.922718][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.922738][ T109] Call Trace: [ 225.922746][ T109] [ 225.922756][ T109] dump_stack_lvl+0x188/0x24e [ 225.922803][ T109] ? read_lock_is_recursive+0x10/0x10 [ 225.922839][ T109] ? show_regs_print_info+0x12/0x12 [ 225.922875][ T109] ? load_image+0x410/0x410 [ 225.922905][ T109] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 225.922939][ T109] ? __virt_addr_valid+0x188/0x540 [ 225.922973][ T109] ? __virt_addr_valid+0x467/0x540 [ 225.923008][ T109] ? txEnd+0x329/0x520 [ 225.923037][ T109] print_report+0xa8/0x210 [ 225.923068][ T109] kasan_report+0x10b/0x140 [ 225.923102][ T109] ? mutex_unlock+0x10/0x10 [ 225.923126][ T109] ? txEnd+0x329/0x520 [ 225.923160][ T109] kasan_check_range+0x235/0x290 [ 225.923197][ T109] txEnd+0x329/0x520 [ 225.923230][ T109] jfs_lazycommit+0x5bf/0xa90 [ 225.923266][ T109] ? txFreelock+0x5a0/0x5a0 [ 225.923296][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 225.923328][ T109] ? do_task_dead+0xd0/0xd0 [ 225.923361][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 225.923393][ T109] ? __kthread_parkme+0x71/0x1c0 [ 225.923428][ T109] ? __kthread_parkme+0x15b/0x1c0 [ 225.923466][ T109] kthread+0x29d/0x330 [ 225.923487][ T109] ? txFreelock+0x5a0/0x5a0 [ 225.923517][ T109] ? kthread_blkcg+0xd0/0xd0 [ 225.923541][ T109] ret_from_fork+0x1f/0x30 [ 225.923581][ T109] [ 225.923589][ T109] [ 225.923594][ T109] Allocated by task 8293: [ 225.923605][ T109] kasan_set_track+0x4b/0x70 [ 225.923635][ T109] __kasan_kmalloc+0x8e/0xa0 [ 225.923666][ T109] lmLogOpen+0x2c0/0xf90 [ 225.923693][ T109] jfs_mount_rw+0xfb/0x5a0 [ 225.923712][ T109] jfs_fill_super+0x57d/0xab0 [ 225.923744][ T109] mount_bdev+0x28a/0x3c0 [ 225.923769][ T109] legacy_get_tree+0xe6/0x180 [ 225.923804][ T109] vfs_get_tree+0x88/0x270 [ 225.923830][ T109] do_new_mount+0x247/0xa40 [ 225.923854][ T109] __se_sys_mount+0x2e3/0x3d0 [ 225.923878][ T109] do_syscall_64+0x4c/0xa0 [ 225.923910][ T109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.923943][ T109] [ 225.923947][ T109] Freed by task 4286: [ 225.923958][ T109] kasan_set_track+0x4b/0x70 [ 225.923987][ T109] kasan_save_free_info+0x27/0x40 [ 225.924009][ T109] ____kasan_slab_free+0x126/0x1f0 [ 225.924041][ T109] slab_free_freelist_hook+0x133/0x1b0 [ 225.924069][ T109] __kmem_cache_free+0xb6/0x200 [ 225.924093][ T109] lmLogClose+0x292/0x530 [ 225.924120][ T109] jfs_umount+0x288/0x360 [ 225.924139][ T109] jfs_put_super+0x88/0x190 [ 225.924171][ T109] generic_shutdown_super+0x130/0x340 [ 225.924195][ T109] kill_block_super+0x7c/0xe0 [ 225.924220][ T109] deactivate_locked_super+0x93/0xf0 [ 225.924243][ T109] cleanup_mnt+0x471/0x4f0 [ 225.924269][ T109] task_work_run+0x1d0/0x260 [ 225.924297][ T109] exit_to_user_mode_loop+0xe6/0x110 [ 225.924331][ T109] exit_to_user_mode_prepare+0xee/0x180 [ 225.924365][ T109] syscall_exit_to_user_mode+0x16/0x40 [ 225.924390][ T109] do_syscall_64+0x58/0xa0 [ 225.924423][ T109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.924455][ T109] [ 225.924460][ T109] The buggy address belongs to the object at ffff88807a9bf000 [ 225.924460][ T109] which belongs to the cache kmalloc-1k of size 1024 [ 225.924480][ T109] The buggy address is located 64 bytes inside of [ 225.924480][ T109] 1024-byte region [ffff88807a9bf000, ffff88807a9bf400) [ 225.924505][ T109] [ 225.924509][ T109] The buggy address belongs to the physical page: [ 225.924526][ T109] page:ffffea0001ea6e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a9b8 [ 225.924553][ T109] head:ffffea0001ea6e00 order:3 compound_mapcount:0 compound_pincount:0 [ 225.924572][ T109] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 225.924607][ T109] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 225.924628][ T109] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 225.924641][ T109] page dumped because: kasan: bad access detected [ 225.924656][ T109] page_owner tracks the page as allocated [ 225.924664][ T109] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4259, tgid 4259 (sh), ts 74830566997, free_ts 68974173016 [ 225.924707][ T109] post_alloc_hook+0x173/0x1a0 [ 225.924739][ T109] get_page_from_freelist+0x206b/0x2180 [ 225.924782][ T109] __alloc_pages+0x1ec/0x4f0 [ 225.924814][ T109] alloc_slab_page+0x5d/0x180 [ 225.924841][ T109] new_slab+0x87/0x2d0 [ 225.924867][ T109] ___slab_alloc+0xbc5/0x1240 [ 225.924891][ T109] __kmem_cache_alloc_node+0x126/0x270 [ 225.924916][ T109] __kmalloc+0xa3/0x240 [ 225.924949][ T109] tomoyo_init_log+0x1ab7/0x1f90 [ 225.924984][ T109] tomoyo_supervisor+0x361/0x11b0 [ 225.925004][ T109] tomoyo_find_next_domain+0x442/0x1a30 [ 225.925028][ T109] tomoyo_bprm_check_security+0x100/0x150 [ 225.925058][ T109] security_bprm_check+0x5e/0x90 [ 225.925079][ T109] bprm_execve+0xa5d/0x17e0 [ 225.925110][ T109] do_execveat_common+0x501/0x6b0 [ 225.925143][ T109] __x64_sys_execve+0x8e/0xa0 [ 225.925174][ T109] page last free stack trace: [ 225.925181][ T109] free_unref_page_prepare+0x8e5/0x9e0 [ 225.925214][ T109] free_unref_page+0x2e/0x3f0 [ 225.925245][ T109] qlist_free_all+0x76/0xe0 [ 225.925268][ T109] kasan_quarantine_reduce+0x144/0x160 [ 225.925293][ T109] __kasan_slab_alloc+0x1e/0x80 [ 225.925325][ T109] slab_post_alloc_hook+0x4b/0x490 [ 225.925349][ T109] __kmem_cache_alloc_node+0x19d/0x270 [ 225.925374][ T109] __kmalloc+0xa3/0x240 [ 225.925406][ T109] tomoyo_realpath_from_path+0xe2/0x5c0 [ 225.925435][ T109] tomoyo_path_perm+0x26f/0x610 [ 225.925458][ T109] security_inode_getattr+0xcf/0x120 [ 225.925483][ T109] vfs_getattr+0x26/0x3a0 [ 225.925509][ T109] __x64_sys_newfstat+0x13d/0x220 [ 225.925538][ T109] do_syscall_64+0x4c/0xa0 [ 225.925571][ T109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.925603][ T109] [ 225.925608][ T109] Memory state around the buggy address: [ 225.925620][ T109] ffff88807a9bef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.925637][ T109] ffff88807a9bef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.925653][ T109] >ffff88807a9bf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.925666][ T109] ^ [ 225.925678][ T109] ffff88807a9bf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.925695][ T109] ffff88807a9bf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.925707][ T109] ================================================================== [ 225.925730][ T109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 225.925742][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 [ 225.925765][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.925786][ T109] Call Trace: [ 225.925793][ T109] [ 225.925801][ T109] dump_stack_lvl+0x188/0x24e [ 225.925837][ T109] ? memcpy+0x3c/0x60 [ 225.925860][ T109] ? show_regs_print_info+0x12/0x12 [ 225.925895][ T109] ? load_image+0x410/0x410 [ 225.925930][ T109] panic+0x2d3/0x710 [ 225.925955][ T109] ? lock_chain_count+0x20/0x20 [ 225.925989][ T109] ? bpf_jit_dump+0xd0/0xd0 [ 225.926013][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 225.926043][ T109] ? lockdep_hardirqs_on+0x94/0x140 [ 225.926070][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 225.926101][ T109] ? _raw_spin_unlock+0x40/0x40 [ 225.926132][ T109] check_panic_on_warn+0x80/0xa0 [ 225.926162][ T109] ? txEnd+0x329/0x520 [ 225.926190][ T109] end_report+0x66/0x110 [ 225.926224][ T109] kasan_report+0x118/0x140 [ 225.926256][ T109] ? mutex_unlock+0x10/0x10 [ 225.926280][ T109] ? txEnd+0x329/0x520 [ 225.926313][ T109] kasan_check_range+0x235/0x290 [ 225.926349][ T109] txEnd+0x329/0x520 [ 225.926381][ T109] jfs_lazycommit+0x5bf/0xa90 [ 225.926415][ T109] ? txFreelock+0x5a0/0x5a0 [ 225.926445][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 225.926476][ T109] ? do_task_dead+0xd0/0xd0 [ 225.926507][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 225.926538][ T109] ? __kthread_parkme+0x71/0x1c0 [ 225.926573][ T109] ? __kthread_parkme+0x15b/0x1c0 [ 225.926611][ T109] kthread+0x29d/0x330 [ 225.926631][ T109] ? txFreelock+0x5a0/0x5a0 [ 225.926661][ T109] ? kthread_blkcg+0xd0/0xd0 [ 225.926684][ T109] ret_from_fork+0x1f/0x30 [ 225.926722][ T109] [ 225.927353][ T109] Kernel Offset: disabled [ 226.821103][ T109] Rebooting in 86400 seconds..