last executing test programs: 4.235445676s ago: executing program 4 (id=14224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) 4.008660575s ago: executing program 4 (id=14229): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8,utf8,dmask=00000000000000000126665,iocharset=macceltic,dmask=00000000000000000077157,namecase=1,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d72656d6f756e742d726f2c004d0c95b9425a5af2da43fc74b0a5de8f6d8e607e4b3ac61a0220841faa37733f8b79ae1dcc15b87239e0192eca4b26ec96c8e24f64848e3d45b5244df0e85fdc56587ca5075955e24671bcff0154c768a62b4046a5cb48a1a2851df5a8de4a"], 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bpf(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x240000, 0x0) 3.475514017s ago: executing program 4 (id=14236): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x4b, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 2.942512869s ago: executing program 1 (id=14246): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a056f7b8eb000000109022400010000000409040000010300000009210000000122070009058103"], 0x0) fsopen(0x0, 0x1) 2.285923066s ago: executing program 4 (id=14259): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x1a, 0x1, 0x84000, 0x0, {0x2, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) 2.280316966s ago: executing program 0 (id=14260): r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r0, 0x0, 0x2d) 2.159945991s ago: executing program 0 (id=14263): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000680)="9e6e", 0x2}], 0x1, 0x6d6a, 0xab) 2.152271241s ago: executing program 4 (id=14264): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82, &(0x7f0000000040)=ANY=[], 0x13, 0x6371, &(0x7f0000007000)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) 1.994455508s ago: executing program 0 (id=14267): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x7, 0xfe, 0xffe, 0x6}) 1.834568345s ago: executing program 0 (id=14270): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x4b, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 1.386675552s ago: executing program 2 (id=14275): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.019035258s ago: executing program 2 (id=14277): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000100)) 981.74386ms ago: executing program 1 (id=14278): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000006d80)=""/4082, 0xff2}, {&(0x7f0000001340)=""/27, 0x1b}, {0x0, 0xf}], 0x3) 955.50159ms ago: executing program 3 (id=14279): r0 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000002940), 0x10) 780.350448ms ago: executing program 3 (id=14280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x28, 0xb, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 758.475479ms ago: executing program 2 (id=14281): r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) 735.417839ms ago: executing program 1 (id=14282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 605.638244ms ago: executing program 3 (id=14283): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2b, 0x1, 0x20000000, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 540.566068ms ago: executing program 1 (id=14284): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 487.82517ms ago: executing program 2 (id=14285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3}}]}, 0xc4}}, 0x0) 438.463142ms ago: executing program 3 (id=14286): r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt(r0, 0x1, 0xb, &(0x7f0000000000)=""/70, &(0x7f0000000080)=0x46) 397.928043ms ago: executing program 0 (id=14287): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r0, &(0x7f0000000400)=[{{0x0, 0x2710}, 0x11, 0x3ff, 0x9}, {{0x0, 0x2710}, 0x5, 0xe92b, 0x2}], 0x30) 366.501754ms ago: executing program 1 (id=14288): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 312.186657ms ago: executing program 2 (id=14289): r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 248.269059ms ago: executing program 4 (id=14290): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0x8915, 0x0) 246.4871ms ago: executing program 0 (id=14291): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 237.91204ms ago: executing program 3 (id=14292): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8915, 0x0) 109.715935ms ago: executing program 2 (id=14293): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 44.619438ms ago: executing program 3 (id=14294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x41, 0x7fff0000}]}) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) 0s ago: executing program 1 (id=14295): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) kernel console output (not intermixed with test programs): k: ct family unspecified [ 1009.239630][T16551] rtl8150 1-1:1.0: couldn't find required endpoints [ 1009.246606][T16551] rtl8150: probe of 1-1:1.0 failed with error -5 [ 1009.298829][T30581] openvswitch: netlink: Actions may not be safe on all matching packets [ 1009.404901][T30582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1009.518625][T16551] usb 1-1: USB disconnect, device number 62 [ 1009.697282][T30589] loop4: detected capacity change from 0 to 1024 [ 1009.798751][T30593] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1009.911078][T30589] hfsplus: cannot replace xattr [ 1009.952648][T30597] netlink: 'syz.2.11969': attribute type 13 has an invalid length. [ 1011.711479][T30626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1012.292993][T30597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.300643][T30597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.522678][T30597] rdma_rxe: ignoring netdev event = 10 for wg0 [ 1012.559779][T30597] infiniband syz2: set down [ 1012.565641][T30597] rdma_rxe: ignoring netdev event = 30 for wg0 [ 1012.999085][T30597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.066719][T30597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.845016][T30597] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.861286][T30597] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.879045][T30597] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.894716][T30597] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.178163][T30597] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 1014.188040][T30597] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 1014.205184][T30597] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 1014.214266][T30597] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 1014.398146][T16558] wg0 speed is unknown, defaulting to 1000 [ 1014.425466][T16558] wg0 speed is unknown, defaulting to 1000 [ 1014.482188][T30638] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 1014.549418][T30639] loop2: detected capacity change from 0 to 2048 [ 1014.748031][T30652] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.028660][T30666] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1015.035175][T30666] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1015.118866][T30666] comedi comedi3: 8255: I/O port conflict (0xffff,4) [ 1015.125836][T30666] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1015.204503][T30666] comedi comedi3: 8255: I/O port conflict (0x54c6cff3,4) [ 1015.247946][T30666] comedi comedi3: 8255: I/O port conflict (0xfa,4) [ 1015.284670][T30666] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1015.347146][T30666] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1015.377493][T30666] comedi comedi3: 8255: I/O port conflict (0xfffffffffbfffff6,4) [ 1015.431465][T30666] comedi comedi3: 8255: I/O port conflict (0x400001,4) [ 1015.489082][T30666] comedi comedi3: 8255: I/O port conflict (0x10000006,4) [ 1015.526275][T30666] comedi comedi3: 8255: I/O port conflict (0x20400,4) [ 1015.556537][T30666] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1015.594469][T30697] loop0: detected capacity change from 0 to 256 [ 1015.603450][T30666] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1015.625678][T30666] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1015.654117][T30666] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 1015.694589][T30666] comedi comedi3: 8255: I/O port conflict (0x20008d,4) [ 1015.740096][T30666] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1015.747302][T30666] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1015.796544][T30666] comedi comedi3: 8255: I/O port conflict (0x80003,4) [ 1015.900813][T30697] FAT-fs (loop0): Directory bread(block 64) failed [ 1015.908537][T30697] FAT-fs (loop0): Directory bread(block 65) failed [ 1015.919293][T30697] FAT-fs (loop0): Directory bread(block 66) failed [ 1015.955734][T30697] FAT-fs (loop0): Directory bread(block 67) failed [ 1015.985633][T30697] FAT-fs (loop0): Directory bread(block 68) failed [ 1016.014869][T30697] FAT-fs (loop0): Directory bread(block 69) failed [ 1016.042942][T30697] FAT-fs (loop0): Directory bread(block 70) failed [ 1016.088352][T30697] FAT-fs (loop0): Directory bread(block 71) failed [ 1016.124762][T30697] FAT-fs (loop0): Directory bread(block 72) failed [ 1016.167265][T30697] FAT-fs (loop0): Directory bread(block 73) failed [ 1016.468575][T16555] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1016.697211][T30729] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1016.738728][T16555] usb 3-1: Using ep0 maxpacket: 8 [ 1016.918957][T16555] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1016.969549][T30744] kernel read not supported for file /À œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡r X%ÔàÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 30744 comm: syz.3.12029) [ 1017.018858][T16555] usb 3-1: config 86 has an invalid interface number: 78 but max is 0 [ 1017.027111][T16555] usb 3-1: config 86 has no interface number 0 [ 1017.064359][T16555] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1017.092692][ T26] audit: type=1800 audit(2001050652.426:60): pid=30744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12029" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=112821 res=0 errno=0 [ 1017.180900][T16555] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1017.225907][T16555] usb 3-1: config 86 interface 78 has no altsetting 0 [ 1017.267429][T30760] loop0: detected capacity change from 0 to 1024 [ 1017.370036][T30765] netlink: 'syz.1.12038': attribute type 21 has an invalid length. [ 1017.419940][T30760] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1017.451353][T16555] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 1017.479108][T16555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.502628][T30765] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12038'. [ 1017.522145][T16555] usb 3-1: Product: syz [ 1017.538613][T16555] usb 3-1: Manufacturer: syz [ 1017.575626][T16555] usb 3-1: SerialNumber: syz [ 1017.617317][T30765] netlink: 'syz.1.12038': attribute type 5 has an invalid length. [ 1017.625951][T30720] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1017.633745][T30774] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1017.646108][T30720] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1017.684466][T30765] netlink: 'syz.1.12038': attribute type 6 has an invalid length. [ 1017.748501][T30765] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12038'. [ 1017.858598][T16553] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1017.998595][T16555] kvaser_usb 3-1:86.78: Cannot get software info, error -71 [ 1018.010489][T16555] kvaser_usb: probe of 3-1:86.78 failed with error -71 [ 1018.080558][T16555] usb 3-1: USB disconnect, device number 52 [ 1018.162714][T30790] loop1: detected capacity change from 0 to 1024 [ 1018.237709][ T26] audit: type=1400 audit(2001050653.566:61): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=30792 comm="syz.3.12047" [ 1018.295171][T16553] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1018.313946][T16553] usb 1-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1018.374767][T16553] usb 1-1: config 0 has no interface number 0 [ 1018.520003][T30790] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1018.568782][T16553] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1018.621746][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.648707][T16553] usb 1-1: Product: syz [ 1018.653095][T16553] usb 1-1: Manufacturer: syz [ 1018.657723][T16553] usb 1-1: SerialNumber: syz [ 1018.700699][T16553] usb 1-1: config 0 descriptor?? [ 1018.810735][ T4524] nvme nvme0: rdma_resolve_route failed (-110). [ 1018.869243][T30776] loop4: detected capacity change from 0 to 32768 [ 1018.917506][T30776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12042 (30776) [ 1018.963133][T30810] nvme nvme0: rdma connection establishment failed (-19) [ 1019.008953][T16553] qmi_wwan: probe of 1-1:0.207 failed with error -22 [ 1019.033676][T30776] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1019.042785][T16553] usb 1-1: USB disconnect, device number 63 [ 1019.094328][T30776] BTRFS info (device loop4): using free space tree [ 1019.135874][T30776] BTRFS info (device loop4): has skinny extents [ 1019.383554][T30776] BTRFS info (device loop4): enabling ssd optimizations [ 1019.845811][T30866] syz.2.12068 (30866): drop_caches: 0 [ 1019.889773][T30869] loop2: detected capacity change from 0 to 256 [ 1019.898370][ T264] block nbd3: Attempted send on invalid socket [ 1019.904672][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1019.916230][T30856] XFS (nbd3): SB validate failed with error -5. [ 1020.146997][T30869] FAT-fs (loop2): Directory bread(block 64) failed [ 1020.158602][T30869] FAT-fs (loop2): Directory bread(block 65) failed [ 1020.199552][T30869] FAT-fs (loop2): Directory bread(block 66) failed [ 1020.206172][T30869] FAT-fs (loop2): Directory bread(block 67) failed [ 1020.253533][T30869] FAT-fs (loop2): Directory bread(block 68) failed [ 1020.285738][T30869] FAT-fs (loop2): Directory bread(block 69) failed [ 1020.310177][T30869] FAT-fs (loop2): Directory bread(block 70) failed [ 1020.316798][T30869] FAT-fs (loop2): Directory bread(block 71) failed [ 1020.388846][T30869] FAT-fs (loop2): Directory bread(block 72) failed [ 1020.409424][T30869] FAT-fs (loop2): Directory bread(block 73) failed [ 1020.958229][T30887] netlink: 'syz.4.12065': attribute type 10 has an invalid length. [ 1021.115161][T30887] team0: Port device wlan1 added [ 1021.940910][T30923] nfs: Deprecated parameter 'nointr' [ 1022.061232][T30925] x_tables: unsorted underflow at hook 4 [ 1022.438638][T30946] netlink: set zone limit has 8 unknown bytes [ 1022.848528][ T23] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1023.068814][T30963] netlink: 'syz.0.12114': attribute type 10 has an invalid length. [ 1023.171223][T30963] team0: Port device wlan1 added [ 1023.246018][T30940] loop4: detected capacity change from 0 to 32768 [ 1023.400296][T30973] delete_channel: no stack [ 1023.408938][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1023.439075][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.447191][ T23] usb 4-1: Product: syz [ 1023.471592][ T23] usb 4-1: Manufacturer: syz [ 1023.495730][ T23] usb 4-1: SerialNumber: syz [ 1024.222723][T16524] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1024.315500][T30972] loop2: detected capacity change from 0 to 32768 [ 1024.490734][T30972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.12117 (30972) [ 1024.546492][T30972] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1024.578806][T30972] BTRFS info (device loop2): using free space tree [ 1024.598573][T30972] BTRFS info (device loop2): has skinny extents [ 1024.610041][T31007] x_tables: duplicate entry at hook 1 [ 1024.650489][ T23] usb 4-1: USB disconnect, device number 62 [ 1024.825809][T30972] BTRFS info (device loop2): enabling ssd optimizations [ 1025.001994][T31037] loop0: detected capacity change from 0 to 256 [ 1025.251695][T31037] FAT-fs (loop0): Directory bread(block 64) failed [ 1025.262515][T31037] FAT-fs (loop0): Directory bread(block 65) failed [ 1025.279351][T31037] FAT-fs (loop0): Directory bread(block 66) failed [ 1025.285976][T31037] FAT-fs (loop0): Directory bread(block 67) failed [ 1025.318772][T16524] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1025.325886][T16524] ath9k_htc: Failed to initialize the device [ 1025.379014][ T23] usb 4-1: ath9k_htc: USB layer deinitialized [ 1025.408832][T31037] FAT-fs (loop0): Directory bread(block 68) failed [ 1025.448388][T31037] FAT-fs (loop0): Directory bread(block 69) failed [ 1025.456112][T31037] FAT-fs (loop0): Directory bread(block 70) failed [ 1025.528265][T31037] FAT-fs (loop0): Directory bread(block 71) failed [ 1025.592839][T31037] FAT-fs (loop0): Directory bread(block 72) failed [ 1025.644011][T31056] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[31057] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[31056] [ 1025.660876][T31059] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12151'. [ 1025.678715][T31037] FAT-fs (loop0): Directory bread(block 73) failed [ 1026.418018][T31077] device syz_tun entered promiscuous mode [ 1026.468942][T31077] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1026.523013][T31079] x_tables: duplicate entry at hook 4 [ 1026.534103][T31081] loop0: detected capacity change from 0 to 256 [ 1026.711760][T31091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1026.730603][T31081] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.791286][T31090] device xfrm0 entered promiscuous mode [ 1026.957447][T31099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12169'. [ 1026.977935][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12172'. [ 1027.750742][T31139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1027.808728][T31146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.816025][T31146] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.823410][T31146] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.963478][T31145] (unnamed net_device) (uninitialized): option lacp_active: invalid value (8) [ 1028.392038][T31176] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12209'. [ 1028.464581][T31181] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 1028.771199][ T264] block nbd3: Attempted send on invalid socket [ 1028.777517][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1028.791790][T31197] hpfs: hpfs_map_sector(): read error [ 1029.022059][T31207] Timeout policy `syz1' can only be used by L3 protocol number 16 [ 1029.053031][ T26] audit: type=1326 audit(2001050664.386:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31209 comm="syz.0.12226" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86201dd159 code=0x7ffc0000 [ 1029.077240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.158487][ T26] audit: type=1326 audit(2001050664.386:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31209 comm="syz.0.12226" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86201dd159 code=0x7ffc0000 [ 1029.288532][ T26] audit: type=1326 audit(2001050664.446:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31209 comm="syz.0.12226" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86201dd159 code=0x7ffc0000 [ 1029.366745][T31219] loop1: detected capacity change from 0 to 2048 [ 1029.392285][ T26] audit: type=1326 audit(2001050664.446:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31209 comm="syz.0.12226" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86201dd159 code=0x7ffc0000 [ 1029.496145][ T26] audit: type=1326 audit(2001050664.446:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31209 comm="syz.0.12226" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86201dd159 code=0x7ffc0000 [ 1029.575140][T31219] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 1029.687356][T31219] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.12229: bad inode number: 15 [ 1029.785475][T31219] EXT4-fs (loop1): Remounting filesystem read-only [ 1030.484556][T31285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12258'. [ 1030.712921][T31297] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12263'. [ 1030.929127][T31310] loop2: detected capacity change from 0 to 256 [ 1031.158594][T31323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12276'. [ 1031.248477][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12276'. [ 1031.328468][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12276'. [ 1031.467578][T31333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1031.631691][T31343] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 31343 comm: syz.1.12284) [ 1031.709965][ T26] audit: type=1800 audit(2001050667.046:67): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12284" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=114346 res=0 errno=0 [ 1031.741888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.838239][T31350] netlink: 11 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1031.959051][T31352] openvswitch: netlink: Message has 4 unknown bytes. [ 1032.029593][T31358] device virt_wifi0 entered promiscuous mode [ 1032.677211][T31378] loop1: detected capacity change from 0 to 64 [ 1032.701751][T31380] netlink: 'syz.2.12303': attribute type 4 has an invalid length. [ 1032.758778][T31380] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12303'. [ 1032.955153][T31388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12309'. [ 1032.985662][T31385] loop4: detected capacity change from 0 to 4096 [ 1033.192325][T31400] netlink: 'syz.0.12312': attribute type 7 has an invalid length. [ 1033.214060][T31399] netlink: 'syz.2.12314': attribute type 1 has an invalid length. [ 1033.267229][T31399] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.12314'. [ 1033.322433][T31399] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12314'. [ 1033.927737][T31424] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12327'. [ 1033.995638][T31424] openvswitch: netlink: Key type 541 is out of range max 29 [ 1034.777904][T31403] loop1: detected capacity change from 0 to 32768 [ 1034.967268][T31403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.12315 (31403) [ 1035.087737][T31403] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1035.128111][T31403] BTRFS info (device loop1): using free space tree [ 1035.174831][T31403] BTRFS info (device loop1): has skinny extents [ 1035.441812][T31501] xt_socket: unknown flags 0x50 [ 1035.654312][T31491] loop0: detected capacity change from 0 to 8192 [ 1035.678605][T16553] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1035.704578][T31403] BTRFS info (device loop1): enabling ssd optimizations [ 1035.757701][T31517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12361'. [ 1036.300932][T16553] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1036.338543][T16553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.372237][T16553] usb 3-1: Product: syz [ 1036.376473][T16553] usb 3-1: Manufacturer: syz [ 1036.401610][T16553] usb 3-1: SerialNumber: syz [ 1036.407482][T31535] netlink: 'syz.4.12372': attribute type 21 has an invalid length. [ 1036.425329][T16553] usb 3-1: config 0 descriptor?? [ 1036.466303][T31535] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1036.481237][T16553] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1036.518541][T31535] netlink: 'syz.4.12372': attribute type 5 has an invalid length. [ 1036.526429][T31535] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1036.709676][T31541] loop4: detected capacity change from 0 to 8 [ 1036.829137][T31541] SQUASHFS error: Unable to read inode 0xa7 [ 1036.955734][T16553] gspca_sunplus: reg_w_riv err -71 [ 1036.961174][T16553] sunplus: probe of 3-1:0.0 failed with error -71 [ 1037.026351][T16553] usb 3-1: USB disconnect, device number 53 [ 1037.214753][T31549] loop4: detected capacity change from 0 to 4096 [ 1037.241445][T31554] delete_channel: no stack [ 1037.347785][T31549] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1037.381917][T31549] NILFS (loop4): mounting unchecked fs [ 1037.387510][T31549] NILFS (loop4): recovery required for readonly filesystem [ 1037.418559][T31549] NILFS (loop4): write access will be enabled during recovery [ 1037.504624][ T4780] udevd[4780]: incorrect nilfs2 checksum on /dev/loop4 [ 1037.518774][T31549] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 1037.725955][ T4288] udevd[4288]: incorrect nilfs2 checksum on /dev/loop4 [ 1037.848552][T16553] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1037.865340][T31579] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12391'. [ 1038.007560][T31586] loop1: detected capacity change from 0 to 764 [ 1038.102366][T31586] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1038.438915][T16553] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1038.448152][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.487606][T16553] usb 1-1: Product: syz [ 1038.513843][T16553] usb 1-1: Manufacturer: syz [ 1038.548703][T16553] usb 1-1: SerialNumber: syz [ 1038.594159][T16553] usb 1-1: config 0 descriptor?? [ 1038.655624][T16553] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1039.048570][T16531] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1039.103843][T16553] usb 1-1: USB disconnect, device number 64 [ 1039.459351][T16531] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1039.568762][T16531] usb 4-1: config 3 has an invalid interface number: 151 but max is 0 [ 1039.587186][T16531] usb 4-1: config 3 has no interface number 0 [ 1039.596179][T16531] usb 4-1: config 3 interface 151 has no altsetting 0 [ 1039.769043][T16531] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd [ 1039.795517][T16531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.854778][T16531] usb 4-1: Product: syz [ 1039.877895][T16531] usb 4-1: Manufacturer: syz [ 1039.905403][T16531] usb 4-1: SerialNumber: syz [ 1040.280744][T16531] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.151/input/input68 [ 1040.338974][ T3541] bcm5974 4-1:3.151: could not read from device [ 1040.349834][T16531] usb 4-1: USB disconnect, device number 63 [ 1040.366348][ T3541] bcm5974 4-1:3.151: could not read from device [ 1041.277265][T31725] loop4: detected capacity change from 0 to 1024 [ 1041.387962][T31725] EXT4-fs (loop4): unsupported inode size: 143 [ 1041.400145][T31725] EXT4-fs (loop4): blocksize: 1024 [ 1042.011396][T31712] loop0: detected capacity change from 0 to 32768 [ 1042.095545][T16555] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1042.112350][T31716] loop1: detected capacity change from 0 to 32768 [ 1042.143031][T31712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12457 (31712) [ 1042.204069][T31716] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.12459 (31716) [ 1042.218471][T31712] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1042.264934][T31712] BTRFS info (device loop0): using free space tree [ 1042.297979][T31716] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1042.323714][T31712] BTRFS info (device loop0): has skinny extents [ 1042.351126][T31716] BTRFS info (device loop1): enabling auto defrag [ 1042.388206][T31716] BTRFS info (device loop1): max_inline at 0 [ 1042.394903][T16555] usb 3-1: Using ep0 maxpacket: 32 [ 1042.429966][T31716] BTRFS info (device loop1): using free space tree [ 1042.437172][T31716] BTRFS info (device loop1): has skinny extents [ 1042.474452][T31725] loop4: detected capacity change from 0 to 32768 [ 1042.575784][T31725] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop4 scanned by syz.4.12464 (31725) [ 1042.589386][T16555] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1042.632335][T31725] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1042.648709][T31725] BTRFS info (device loop4): max_inline at 160 [ 1042.661789][T31725] BTRFS info (device loop4): unrecognized rescue option 'isuperflags' [ 1042.670924][T16555] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1042.698660][T16555] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.707554][T31725] BTRFS error (device loop4): unrecognized rescue value isuperflags [ 1042.710737][T16555] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1042.726541][T16555] usb 3-1: config 128 has no interface number 0 [ 1042.733173][T16555] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1042.744758][T16555] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1042.748884][T31712] BTRFS info (device loop0): enabling ssd optimizations [ 1042.756348][T16555] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1042.811143][T31725] BTRFS error (device loop4): open_ctree failed: -22 [ 1042.898524][T31716] BTRFS info (device loop1): enabling ssd optimizations [ 1042.972449][ T4289] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop4 scanned by udevd (4289) [ 1042.989134][T16555] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1043.033558][T31794] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1043.036449][T16555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.152597][T16555] usb 3-1: Product: syz [ 1043.180668][T16555] usb 3-1: Manufacturer: syz [ 1043.213403][T16555] usb 3-1: SerialNumber: syz [ 1043.711713][ T4288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4288) [ 1043.766573][T16555] usb 3-1: USB disconnect, device number 54 [ 1044.078213][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1044.651159][T31824] netlink: 'syz.4.12495': attribute type 21 has an invalid length. [ 1044.765645][T31824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12495'. [ 1044.889941][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.897836][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.938947][T31834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.955726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1045.009034][T31835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.176555][T31844] loop4: detected capacity change from 0 to 512 [ 1045.347712][T31856] loop1: detected capacity change from 0 to 164 [ 1045.385599][T31844] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.12503: bg 0: block 16: invalid block bitmap [ 1045.416514][T31844] EXT4-fs (loop4): Remounting filesystem read-only [ 1045.424066][T31844] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1045.436272][T31863] IPv6: sit2: Disabled Multicast RS [ 1045.446648][T31844] EXT4-fs (loop4): Remounting filesystem read-only [ 1045.456585][T31844] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.12503: attempt to clear invalid blocks 1669132790 len 1 [ 1045.554742][T31844] EXT4-fs (loop4): Remounting filesystem read-only [ 1045.568568][T31844] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.12503: invalid indirect mapped block 4294967295 (level 1) [ 1045.647674][T31844] EXT4-fs (loop4): Remounting filesystem read-only [ 1045.698539][T31844] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.12503: invalid indirect mapped block 4294967295 (level 2) [ 1045.798849][T31844] EXT4-fs (loop4): Remounting filesystem read-only [ 1045.805688][T31844] EXT4-fs (loop4): 1 truncate cleaned up [ 1045.835502][T31844] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,. Quota mode: none. [ 1045.840953][T31879] overlayfs: unrecognized mount option "\" or missing value [ 1045.851552][T31882] netlink: 'syz.2.12520': attribute type 30 has an invalid length. [ 1045.954952][T31885] xt_TCPMSS: Only works on TCP SYN packets [ 1046.356540][T31901] dlm: Unknown command passed to DLM device : 152 [ 1046.356540][T31901] [ 1046.538654][T31914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12535'. [ 1046.704626][T31924] kernel profiling enabled (shift: 63) [ 1046.744123][T31924] profiling shift: 63 too large [ 1046.862045][T31933] loop4: detected capacity change from 0 to 256 [ 1047.169718][T31949] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1047.715819][T31981] loop1: detected capacity change from 0 to 2048 [ 1047.790373][T31981] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 1047.802960][T31991] netlink: 'syz.3.12575': attribute type 1 has an invalid length. [ 1047.849420][T31991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12575'. [ 1047.867877][T31981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1047.908799][T31991] netlink: 'syz.3.12575': attribute type 1 has an invalid length. [ 1048.000585][T31999] loop0: detected capacity change from 0 to 64 [ 1048.207325][T16554] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1048.402337][T32021] netlink: 'syz.3.12590': attribute type 6 has an invalid length. [ 1048.488649][T16554] usb 5-1: Using ep0 maxpacket: 16 [ 1048.609036][T16554] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1048.622967][ T26] audit: type=1400 audit(2001050683.956:68): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=32033 comm="syz.2.12597" [ 1048.627857][T16554] usb 5-1: config 0 has no interface number 0 [ 1048.909186][T16554] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1048.948966][T16554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.957062][T16554] usb 5-1: Product: syz [ 1049.001379][T16554] usb 5-1: Manufacturer: syz [ 1049.001404][T16554] usb 5-1: SerialNumber: syz [ 1049.004844][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12607'. [ 1049.017207][T16554] usb 5-1: config 0 descriptor?? [ 1049.055663][T32059] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12609'. [ 1049.059659][T16554] hub 5-1:0.132: bad descriptor, ignoring hub [ 1049.059710][T16554] hub: probe of 5-1:0.132 failed with error -5 [ 1049.071852][T16554] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input70 [ 1049.500459][T32075] netlink: 'syz.3.12617': attribute type 3 has an invalid length. [ 1049.819478][T16529] usb 5-1: USB disconnect, device number 68 [ 1049.903590][T32097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1050.038736][T16546] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1050.308560][T16546] usb 3-1: Using ep0 maxpacket: 8 [ 1050.400062][T32105] loop1: detected capacity change from 0 to 1764 [ 1050.458859][T16546] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1050.488509][T16546] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1050.533049][T16546] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1050.588704][T16546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.652137][T32105] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1050.707238][T16546] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 1050.763689][T16546] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1050.843412][T32078] loop0: detected capacity change from 0 to 32768 [ 1051.068817][T16554] usb 3-1: USB disconnect, device number 55 [ 1051.094325][T16554] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1051.165717][T16554] kobil_sct 3-1:1.0: device disconnected [ 1051.479002][T16545] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1051.522429][T32137] netlink: 'syz.1.12649': attribute type 2 has an invalid length. [ 1051.571405][T32137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12649'. [ 1051.899293][T16545] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.927949][T32153] CIFS mount error: No usable UNC path provided in device string! [ 1051.927949][T32153] [ 1051.935214][T16545] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1052.018456][T32153] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1052.178968][T16545] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1052.214673][T16545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.248926][T16545] usb 5-1: Product: syz [ 1052.253173][T16545] usb 5-1: Manufacturer: syz [ 1052.278257][T16545] usb 5-1: SerialNumber: syz [ 1052.630807][T32179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12669'. [ 1052.718806][T16545] usb 5-1: 0:2 : does not exist [ 1052.723879][T16545] usb 5-1: unit 4 not found! [ 1052.796485][T32182] loop0: detected capacity change from 0 to 512 [ 1052.808632][T16545] usb 5-1: USB disconnect, device number 69 [ 1052.966158][T32187] loop2: detected capacity change from 0 to 4096 [ 1053.019695][T32187] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1053.099744][T32196] netlink: 'syz.3.12677': attribute type 2 has an invalid length. [ 1053.109215][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.115770][T32182] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.12672: invalid indirect mapped block 4294967295 (level 1) [ 1053.146066][T32187] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 1053.158179][T32187] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1053.188955][T32187] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1053.221293][T32182] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.12672: invalid indirect mapped block 4294967295 (level 1) [ 1053.317650][T32182] EXT4-fs (loop0): 2 truncates cleaned up [ 1053.340317][T32187] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1053.358539][T32182] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1053.447234][T32187] ntfs: volume version 3.1. [ 1054.158336][T32231] netlink: 'syz.3.12694': attribute type 1 has an invalid length. [ 1054.268664][T32238] IPv6: NLM_F_CREATE should be specified when creating new route [ 1054.348992][T32242] genirq: Flags mismatch irq 7. 00000000 (pcl816) vs. 00000000 (ttyS3) [ 1054.930975][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.937340][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.943896][T16523] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1055.369681][T32292] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1055.386744][T16523] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1055.448833][T16523] usb 2-1: not running at top speed; connect to a high speed hub [ 1055.525237][T32298] netlink: 'syz.2.12727': attribute type 10 has an invalid length. [ 1055.555875][T32298] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1055.557048][T16523] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.606389][T32298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1055.646910][T16523] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.696430][T32302] loop0: detected capacity change from 0 to 1764 [ 1055.803469][T32306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12731'. [ 1055.839504][T16523] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1055.868460][T16523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.888528][T16523] usb 2-1: Product: syz [ 1055.892808][T16523] usb 2-1: Manufacturer: syz [ 1055.931277][T16523] usb 2-1: SerialNumber: syz [ 1056.087904][T32312] netlink: 'syz.0.12734': attribute type 49 has an invalid length. [ 1056.253243][T16529] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1056.338820][T16523] usb 2-1: 0:1 : does not exist [ 1056.343958][T16523] usb 2-1: unit 1 not found! [ 1056.387621][T32322] loop0: detected capacity change from 0 to 256 [ 1056.428649][T16523] usb 2-1: USB disconnect, device number 51 [ 1056.650532][T16529] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 1056.676799][T16529] usb 5-1: config 4 has no interface number 0 [ 1056.694006][T16529] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1056.706405][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.764800][T16529] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.828600][T16529] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1056.838660][T16529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.926036][T16529] hub 5-1:4.128: USB hub found [ 1057.129367][T16529] hub 5-1:4.128: 27 ports detected [ 1057.134600][T16529] hub 5-1:4.128: Using single TT (err -22) [ 1057.189137][T16529] hub 5-1:4.128: insufficient power available to use all downstream ports [ 1057.342479][T16529] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 1057.353607][T16529] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 1057.450127][T16529] usb 5-1: USB disconnect, device number 70 [ 1057.985650][T32384] netlink: 'syz.4.12766': attribute type 3 has an invalid length. [ 1058.088329][T32390] loop0: detected capacity change from 0 to 256 [ 1058.129043][ T4260] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1058.378645][ T4260] usb 4-1: Using ep0 maxpacket: 16 [ 1058.552186][ T4260] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 1058.568953][ T4260] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1058.577628][ T4260] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1058.694992][T32417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12783'. [ 1058.858958][ T4260] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1058.868090][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.938459][ T4260] usb 4-1: Product: syz [ 1058.942697][ T4260] usb 4-1: Manufacturer: syz [ 1058.947366][ T4260] usb 4-1: SerialNumber: syz [ 1059.000072][ T4260] usb 4-1: config 0 descriptor?? [ 1059.040496][ T4260] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 1059.159059][T16545] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1059.299338][T16554] usb 4-1: USB disconnect, device number 64 [ 1059.551202][T16545] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.697420][T32422] loop2: detected capacity change from 0 to 32768 [ 1059.706651][T32456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12801'. [ 1059.770636][T16545] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1059.794490][T16545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.804331][T16545] usb 5-1: Product: syz [ 1059.809788][T16545] usb 5-1: Manufacturer: syz [ 1059.814666][T16545] usb 5-1: SerialNumber: syz [ 1059.839704][T32422] XFS (loop2): Mounting V5 Filesystem [ 1059.902694][T16545] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1060.048239][T32422] XFS (loop2): Ending clean mount [ 1060.106738][T16545] usb 5-1: USB disconnect, device number 71 [ 1060.206242][ T4184] XFS (loop2): Unmounting Filesystem [ 1060.705251][T32498] netlink: 288 bytes leftover after parsing attributes in process `syz.1.12818'. [ 1060.728064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.961787][T32509] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1061.236099][T32519] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 1061.397481][T32525] tmpfs: Bad value for 'mpol' [ 1061.428558][T32519] overlayfs: overlapping lowerdir path [ 1061.904546][T32536] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1062.085420][T32552] rdma_rxe: ignoring netdev event = 23 for lo [ 1062.124235][T32552] rdma_rxe: lo changed mtu to 66 [ 1062.178602][T32552] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12841'. [ 1062.230438][T32558] loop1: detected capacity change from 0 to 64 [ 1062.246246][T32552] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1062.304445][T32552] infiniband syz1: set active [ 1062.314878][T16523] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1062.337917][T32558] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 1062.338875][T32552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1062.359705][T32558] MINIX-fs: bad superblock [ 1062.448374][ T4260] lo speed is unknown, defaulting to 1000 [ 1062.454787][T32566] tc_dump_action: action bad kind [ 1062.598705][T32558] loop1: detected capacity change from 0 to 4096 [ 1062.759443][T16523] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.776769][T32577] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.808596][T16523] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1062.872373][T16523] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1062.891623][T32579] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.12853'. [ 1063.074839][T16523] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1063.099339][T32576] loop2: detected capacity change from 0 to 8192 [ 1063.108465][T16523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.111437][T32587] program syz.0.12856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.136109][T32579] syz.3.12853 (32579) used greatest stack depth: 18464 bytes left [ 1063.142454][T16523] usb 5-1: Product: syz [ 1063.182499][T32576] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1063.189503][T16523] usb 5-1: Manufacturer: syz [ 1063.214066][T32576] REISERFS (device loop2): using ordered data mode [ 1063.222167][T16523] usb 5-1: SerialNumber: syz [ 1063.248211][T32576] reiserfs: using flush barriers [ 1063.255498][T32576] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1063.272353][T32576] REISERFS (device loop2): checking transaction log (loop2) [ 1063.281193][T32576] REISERFS (device loop2): Using rupasov hash to sort names [ 1063.288800][T32576] REISERFS (device loop2): using 3.5.x disk format [ 1063.295665][T32576] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1063.309272][T32576] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1063.321529][T32576] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1063.367210][T32576] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1063.390601][T16523] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1063.427168][T32576] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1063.429467][T16523] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1063.479522][T32576] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1063.498613][T32576] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1063.569070][T32598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12860'. [ 1063.687301][T16523] usb 5-1: USB disconnect, device number 72 [ 1064.001718][T32616] x_tables: unsorted entry at hook 2 [ 1064.029451][T32617] netlink: 'syz.1.12868': attribute type 1 has an invalid length. [ 1064.207563][T32623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12871'. [ 1064.514736][T32643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1064.806337][T32660] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1064.840836][T32664] futex_wake_op: syz.2.12893 tries to shift op by 144; fix this program [ 1064.889193][T32664] futex_wake_op: syz.2.12893 tries to shift op by 144; fix this program [ 1065.268954][T32687] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12903'. [ 1065.338823][T32687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1065.388771][T32687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1065.899770][T32715] loop2: detected capacity change from 0 to 2048 [ 1065.942112][T32713] loop0: detected capacity change from 0 to 4096 [ 1066.024203][T32715] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1066.053542][T32713] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1066.088616][T32713] NILFS (loop0): mounting unchecked fs [ 1066.114515][T32713] NILFS (loop0): recovery required for readonly filesystem [ 1066.126823][T32715] attempt to access beyond end of device [ 1066.126823][T32715] loop2: rw=524288, want=33554432, limit=2048 [ 1066.138977][T32722] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1066.154130][T32713] NILFS (loop0): write access will be enabled during recovery [ 1066.265603][T32715] attempt to access beyond end of device [ 1066.265603][T32715] loop2: rw=0, want=33554432, limit=2048 [ 1066.288749][T32724] Timeout policy `syz1' can only be used by L3 protocol number 16 [ 1066.339455][T32713] NILFS (loop0): recovery complete [ 1066.359592][T32715] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 1066.594563][ T4320] udevd[4320]: incorrect nilfs2 checksum on /dev/loop0 [ 1067.025168][T32741] loop2: detected capacity change from 0 to 512 [ 1067.189622][T32741] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1067.236618][T32741] ext4 filesystem being mounted at /2557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.358669][T16529] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1067.628927][T16529] usb 1-1: Using ep0 maxpacket: 8 [ 1067.789044][T16529] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1067.878752][T32763] loop1: detected capacity change from 0 to 4096 [ 1067.969743][ T313] netlink: 'syz.3.12946': attribute type 12 has an invalid length. [ 1067.977728][ T313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12946'. [ 1068.000764][T16529] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1068.026345][T16529] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1068.092449][ T323] loop2: detected capacity change from 0 to 64 [ 1068.096955][T16529] usb 1-1: Product: syz [ 1068.168448][T16529] usb 1-1: Manufacturer: syz [ 1068.173157][T16529] usb 1-1: SerialNumber: syz [ 1068.554867][ T333] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1068.564611][T16529] usb 1-1: Invalid connection information received from device [ 1068.801076][ T340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12956'. [ 1068.842238][T16529] usb 1-1: USB disconnect, device number 65 [ 1068.975341][ T345] openvswitch: netlink: Actions may not be safe on all matching packets [ 1069.109855][ T351] netlink: 'syz.1.12961': attribute type 2 has an invalid length. [ 1069.138490][ T351] netlink: 'syz.1.12961': attribute type 1 has an invalid length. [ 1069.451085][ T368] CIFS: Invalid mount helper version specified [ 1069.680583][ T379] loop2: detected capacity change from 0 to 64 [ 1069.732477][ T379] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1069.872755][ T365] infiniband syz0: set active [ 1069.922468][ T365] infiniband syz0: added bond_slave_1 [ 1070.087688][ T365] RDS/IB: syz0: added [ 1070.124481][ T365] smc: adding ib device syz0 with port count 1 [ 1070.162940][ T365] smc: ib device syz0 port 1 has pnetid [ 1070.298761][ T4260] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1070.434675][ T407] loop2: detected capacity change from 0 to 2048 [ 1070.683810][ T4260] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.715163][ T416] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12994'. [ 1070.801807][ T416] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12994'. [ 1070.909154][ T4260] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1070.942758][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.961428][ T421] netlink: 'syz.2.12996': attribute type 1 has an invalid length. [ 1071.008754][ T4260] usb 5-1: Product: syz [ 1071.013002][ T4260] usb 5-1: Manufacturer: syz [ 1071.079263][ T4260] usb 5-1: SerialNumber: syz [ 1071.418756][ T4260] usb 5-1: Cannot retrieve CPort count: -71 [ 1071.424782][ T4260] usb 5-1: Cannot retrieve CPort count: -71 [ 1071.458786][ T4260] es2_ap_driver: probe of 5-1:246.0 failed with error -71 [ 1071.477419][ T23] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1071.508721][ T4260] usb 5-1: USB disconnect, device number 73 [ 1071.548709][ T4288] udevd[4288]: setting mode of /dev/bus/usb/005/073 to 020664 failed: No such file or directory [ 1071.600791][ T4288] udevd[4288]: setting owner of /dev/bus/usb/005/073 to uid=0, gid=0 failed: No such file or directory [ 1071.989784][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.016241][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1072.056841][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1072.108614][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1072.152894][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.200719][ T23] usb 4-1: config 0 descriptor?? [ 1072.248920][ T430] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1072.509523][ T23] usb 4-1: USB disconnect, device number 65 [ 1072.548527][T16546] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1072.951465][T16546] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 1072.968601][T16546] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 1073.007605][T16546] usb 3-1: config 0 has no interface number 0 [ 1073.030839][T16546] usb 3-1: config 0 has no interface number 1 [ 1073.097469][T16546] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1073.108890][ T483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13026'. [ 1073.162946][T16546] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1073.219685][ T486] loop4: detected capacity change from 0 to 512 [ 1073.244155][T16546] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1073.258578][ T486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1073.380105][ T486] EXT4-fs (loop4): 1 truncate cleaned up [ 1073.385877][ T486] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 1073.428942][ T497] deleting an unspecified loop device is not supported. [ 1073.488718][T16546] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1073.500652][ T486] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13028: bg 0: block 312: padding at end of block bitmap is not set [ 1073.517998][T16546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.526204][T16546] usb 3-1: Product: syz [ 1073.530888][T16546] usb 3-1: Manufacturer: syz [ 1073.535576][T16546] usb 3-1: SerialNumber: syz [ 1073.552802][T16546] usb 3-1: config 0 descriptor?? [ 1073.628831][T16554] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1073.847875][T16546] usb 3-1: USB disconnect, device number 56 [ 1073.951033][ T516] netlink: 'syz.0.13042': attribute type 2 has an invalid length. [ 1074.107532][T16554] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1074.201881][T16554] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.233418][T16554] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1074.274655][T16554] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1074.488950][T16554] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1074.517012][T16554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.548702][ T536] xt_CT: No such helper "syz0" [ 1074.566177][T16554] usb 4-1: Product: syz [ 1074.590010][T16554] usb 4-1: Manufacturer: syz [ 1074.594677][T16554] usb 4-1: SerialNumber: syz [ 1074.646400][ T547] loop2: detected capacity change from 0 to 512 [ 1074.773155][ T547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.13056: inode #1: comm syz.2.13056: iget: illegal inode # [ 1074.796630][ T556] CacheFiles: Empty directory specified [ 1074.828768][ T547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.13056: error while reading EA inode 1 err=-117 [ 1074.842051][ T547] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1074.856128][ T547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.13056: inode #1: comm syz.2.13056: iget: illegal inode # [ 1074.894411][ T547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.13056: error while reading EA inode 1 err=-117 [ 1074.939610][ T547] EXT4-fs (loop2): 1 orphan inode deleted [ 1074.945429][ T547] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 1075.092337][ T547] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.13056: deleted inode referenced: 15 [ 1075.106217][T16554] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 1075.125593][T16554] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 1075.149098][T16554] usb 4-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 1075.177737][T16554] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1075.296972][ T576] xt_l2tp: wrong L2TP version: 0 [ 1075.318890][T16554] usb 4-1: unit 2 not found! [ 1075.323762][T16554] usb 4-1: unit 0 not found! [ 1075.388978][T16554] usb 4-1: USB disconnect, device number 66 [ 1075.467413][ T580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13071'. [ 1075.719334][ T4289] udevd[4289]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.877280][ T602] netlink: 312 bytes leftover after parsing attributes in process `syz.0.13083'. [ 1075.944895][ T602] netlink: 'syz.0.13083': attribute type 1 has an invalid length. [ 1076.123951][ T615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1076.349822][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1076.426014][ T621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1076.601866][ T631] loop0: detected capacity change from 0 to 64 [ 1076.691635][ T636] netlink: 'syz.4.13101': attribute type 25 has an invalid length. [ 1076.691662][ T636] netlink: 'syz.4.13101': attribute type 6 has an invalid length. [ 1076.790242][ T631] Trying to free block not in datazone [ 1076.858353][ T639] netlink: 'syz.4.13102': attribute type 4 has an invalid length. [ 1076.858381][ T639] netlink: 'syz.4.13102': attribute type 3 has an invalid length. [ 1076.858869][ T639] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13102'. [ 1077.164618][ T649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13107'. [ 1077.198521][ T649] netlink: 51 bytes leftover after parsing attributes in process `syz.4.13107'. [ 1077.217422][ T649] netlink: 'syz.4.13107': attribute type 4 has an invalid length. [ 1077.369802][ T659] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13112'. [ 1077.408629][T16529] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1077.646129][ T655] loop1: detected capacity change from 0 to 8192 [ 1077.764952][ T655] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1077.787231][T16529] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1077.798195][ T655] REISERFS (device loop1): using ordered data mode [ 1077.808257][ T655] reiserfs: using flush barriers [ 1077.826528][ T655] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1077.858451][T16529] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1077.921694][ T655] REISERFS (device loop1): checking transaction log (loop1) [ 1077.939082][T16529] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1077.954005][ T655] REISERFS (device loop1): Using r5 hash to sort names [ 1077.958611][T16529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.973416][ T655] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1078.218519][T16554] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1078.268940][T16529] ims_pcu 1-1:1.0: Failed to set line coding, error: -71 [ 1078.337236][ T695] loop2: detected capacity change from 0 to 1024 [ 1078.348552][ T693] loop1: detected capacity change from 0 to 256 [ 1078.349376][T16529] ims_pcu: probe of 1-1:1.0 failed with error -71 [ 1078.438525][T16529] usb 1-1: USB disconnect, device number 66 [ 1078.445453][ T693] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 1078.487171][ T695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1078.510786][T16554] usb 5-1: Using ep0 maxpacket: 16 [ 1078.649013][T16554] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1078.657453][T16554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.735649][T16554] usb 5-1: config 1 has no interface number 0 [ 1078.752306][T16554] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1078.793215][T16554] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1078.858643][T16554] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1079.031660][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13134'. [ 1079.059024][T16554] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1079.089062][T16554] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1079.097210][T16554] usb 5-1: Product: syz [ 1079.132135][T16554] usb 5-1: Manufacturer: syz [ 1079.152424][T16554] usb 5-1: SerialNumber: syz [ 1079.190937][ T4260] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1079.415514][ T718] block device autoloading is deprecated and will be removed. [ 1079.450696][T16554] aqc111: probe of 5-1:1.105 failed with error -22 [ 1079.638927][ T4260] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1079.657000][ T724] loop0: detected capacity change from 0 to 512 [ 1079.685425][ T23] usb 5-1: USB disconnect, device number 74 [ 1079.746397][ T728] netlink: 'syz.2.13144': attribute type 1 has an invalid length. [ 1079.749636][ T4260] usb 2-1: config 35 has an invalid interface number: 223 but max is 0 [ 1079.772808][ T4260] usb 2-1: config 35 has no interface number 0 [ 1079.787183][ T724] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1079.808453][ T4260] usb 2-1: config 35 interface 223 has no altsetting 0 [ 1079.866025][ T724] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1079.916075][ T724] Quota error (device loop0): write_blk: dquota write failed [ 1079.925765][ T734] netlink: 'syz.2.13146': attribute type 9 has an invalid length. [ 1079.934473][ T734] netlink: 'syz.2.13146': attribute type 7 has an invalid length. [ 1079.934473][ T724] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1079.934752][ T724] Quota error (device loop0): write_blk: dquota write failed [ 1079.946381][ T734] netlink: 'syz.2.13146': attribute type 8 has an invalid length. [ 1080.041147][ T724] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1080.080758][ T724] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.13141: Failed to acquire dquot type 1 [ 1080.149380][ T724] EXT4-fs (loop0): 1 truncate cleaned up [ 1080.155226][ T724] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,sysvgroups,abort,init_itable=0x0000000000000080,stripe=0x0000000000000001,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1080.165375][ T4260] usb 2-1: string descriptor 0 read error: -22 [ 1080.215738][ T4260] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 1080.278055][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.393801][ T4260] usb_ehset_test: probe of 2-1:35.223 failed with error -32 [ 1080.441944][ T724] Quota error (device loop0): write_blk: dquota write failed [ 1080.488905][ T724] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1080.536564][ T724] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.13141: Failed to acquire dquot type 1 [ 1080.643449][ T4260] usb 2-1: USB disconnect, device number 52 [ 1080.663047][ T761] program syz.2.13160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.768855][T16554] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1081.151080][T16546] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1081.258847][T16554] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1081.301212][T16554] usb 4-1: not running at top speed; connect to a high speed hub [ 1081.420703][T16554] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.438446][T16554] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1081.580499][T16546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.598469][T16546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1081.638629][T16546] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1081.669096][T16546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.704246][T16546] usb 3-1: config 0 descriptor?? [ 1081.749761][ T766] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1081.757161][T16554] usb 4-1: string descriptor 0 read error: -22 [ 1081.767279][T16554] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1081.791682][T16546] usbhid 3-1:0.0: can't add hid device: -22 [ 1081.818348][T16546] usbhid: probe of 3-1:0.0 failed with error -22 [ 1081.827028][T16554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.869602][T16547] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1081.892361][T16554] usb 4-1: 0:1 : does not exist [ 1081.897341][T16554] usb 4-1: 0:2 : does not exist [ 1082.042581][T16554] usb 3-1: USB disconnect, device number 57 [ 1082.131869][T16546] usb 4-1: USB disconnect, device number 67 [ 1082.519573][T16547] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1082.534699][T16547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.544330][T16547] usb 2-1: Product: syz [ 1082.548780][T16547] usb 2-1: Manufacturer: syz [ 1082.553610][T16547] usb 2-1: SerialNumber: syz [ 1082.694609][ T807] delete_channel: no stack [ 1082.708664][ T809] loop0: detected capacity change from 0 to 512 [ 1082.837147][ T809] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1082.928578][ T809] ext4 filesystem being mounted at /2660/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.103928][ T826] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1083.258722][T16547] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1083.397116][ T841] loop0: detected capacity change from 0 to 8 [ 1083.475983][ T841] squashfs image failed sanity check [ 1083.720973][ T4260] usb 2-1: USB disconnect, device number 53 [ 1083.751290][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13206'. [ 1083.919453][ T865] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13210'. [ 1084.085222][ T875] usb usb8: usbfs: process 875 (syz.2.13215) did not claim interface 0 before use [ 1084.367059][T16547] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1084.378800][T16547] ath9k_htc: Failed to initialize the device [ 1084.385366][ T4260] usb 2-1: ath9k_htc: USB layer deinitialized [ 1084.473268][ T903] validate_nla: 1 callbacks suppressed [ 1084.473322][ T903] netlink: 'syz.1.13229': attribute type 10 has an invalid length. [ 1084.522373][ T903] device hsr0 entered promiscuous mode [ 1084.559588][ T903] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1084.612597][ T903] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1084.645165][ T903] bond0: (slave hsr0): Error -95 calling set_mac_address [ 1085.155891][ T927] loop0: detected capacity change from 0 to 512 [ 1085.288977][ T927] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 1085.288977][ T927] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1085.288977][ T927] [ 1085.388033][ T930] loop1: detected capacity change from 0 to 4096 [ 1085.507197][ T927] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1085.558447][ T927] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c0006118, mo2=0002] [ 1085.579464][ T927] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1085.671340][ T927] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.13240: bg 0: block 15: invalid block bitmap [ 1085.689311][ T927] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1085.721703][ T927] EXT4-fs (loop0): 1 truncate cleaned up [ 1085.727430][ T927] EXT4-fs (loop0): mounted filesystem without journal. Opts: noacl,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 1085.730822][ T947] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1085.782201][ T930] attempt to access beyond end of device [ 1085.782201][ T930] loop1: rw=524288, want=9007199254741160, limit=4096 [ 1085.934501][ T930] attempt to access beyond end of device [ 1085.934501][ T930] loop1: rw=0, want=9007199254741160, limit=4096 [ 1085.957333][ T927] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1086.048674][ T26] audit: type=1800 audit(2001050721.387:69): pid=930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13241" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1086.777335][ T977] loop2: detected capacity change from 0 to 128 [ 1086.914899][ T977] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1086.929693][ T977] ext4 filesystem being mounted at /2649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.169284][ T996] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1087.631471][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1087.876701][ T1024] loop0: detected capacity change from 0 to 256 [ 1088.218817][ T1040] loop2: detected capacity change from 0 to 256 [ 1088.268957][T16529] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1088.280119][ T1040] exfat: Deprecated parameter 'namecase' [ 1088.286511][ T1040] exfat: Deprecated parameter 'namecase' [ 1088.350046][ T1045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13293'. [ 1088.390381][ T1040] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1088.719970][T16529] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1088.738460][T16529] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.795414][T16529] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1088.848528][T16529] usb 2-1: config 150 has no interface number 0 [ 1088.875378][T16529] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1088.940613][ T1070] xt_l2tp: v2 sid > 0xffff: 262144 [ 1089.069766][ T1081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13303'. [ 1089.088945][T16529] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1089.108297][T16529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.138453][T16529] usb 2-1: Product: syz [ 1089.148636][T16529] usb 2-1: Manufacturer: syz [ 1089.168459][T16529] usb 2-1: SerialNumber: syz [ 1089.446635][ T1089] loop2: detected capacity change from 0 to 4096 [ 1089.487054][T16529] xr_serial 2-1:150.204: skipping garbage [ 1089.495444][T16529] xr_serial 2-1:150.204: invalid descriptor buffer length [ 1089.521877][ T1089] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1089.566466][T16529] usb 2-1: USB disconnect, device number 54 [ 1090.038716][ T1109] 9p: Unknown Cache mode readahead [ 1090.334688][T16529] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1090.608486][T16529] usb 4-1: Using ep0 maxpacket: 8 [ 1090.655890][ T1127] loop1: detected capacity change from 0 to 4096 [ 1090.729602][ T1127] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1090.798686][T16529] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1090.908561][T16529] usb 4-1: config 127 has an invalid interface number: 1 but max is 0 [ 1090.916968][T16529] usb 4-1: config 127 has no interface number 0 [ 1090.950478][T16529] usb 4-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 1090.998839][T16529] usb 4-1: config 127 interface 1 has no altsetting 0 [ 1091.220339][T16529] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 1091.247956][T16529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.259650][ T1151] xt_ecn: cannot match TCP bits for non-tcp packets [ 1091.284158][T16529] usb 4-1: Product: syz [ 1091.308452][T16529] usb 4-1: Manufacturer: syz [ 1091.323355][T16529] usb 4-1: SerialNumber: syz [ 1091.374126][ T1107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1091.583991][ T1129] loop0: detected capacity change from 0 to 32768 [ 1091.707156][ T1129] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.13336 (1129) [ 1091.719748][T16529] redrat3 4-1:127.1: Couldn't find all endpoints [ 1091.737787][T16529] usb 4-1: USB disconnect, device number 68 [ 1091.826844][ T1173] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13345'. [ 1091.847199][ T1129] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1091.868560][ T1129] BTRFS info (device loop0): enabling ssd optimizations [ 1091.875589][ T1129] BTRFS info (device loop0): not using ssd optimizations [ 1091.934999][ T1129] BTRFS info (device loop0): turning off barriers [ 1091.991966][ T1129] BTRFS info (device loop0): use no compression [ 1091.998303][ T1129] BTRFS info (device loop0): using free space tree [ 1092.038706][ T1129] BTRFS info (device loop0): has skinny extents [ 1092.915952][ T1239] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13363'. [ 1093.018609][ T23] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1093.088364][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13365'. [ 1093.438869][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.458513][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.648944][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice= 0.00 [ 1093.672841][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.701879][ T23] usb 2-1: Product: syz [ 1093.706119][ T23] usb 2-1: Manufacturer: syz [ 1093.726563][ T23] usb 2-1: SerialNumber: syz [ 1093.815372][ T23] zaurus: probe of 2-1:1.0 failed with error -22 [ 1094.478588][ T1283] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1095.082599][ T23] usb 2-1: USB disconnect, device number 55 [ 1095.170318][ T1311] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1095.398772][T16555] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1095.764946][ T1293] loop0: detected capacity change from 0 to 32768 [ 1095.771896][T16555] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1095.798854][T16555] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1095.855746][ C1] sd 0:0:1:0: tag#6981 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1095.865752][ C1] sd 0:0:1:0: tag#6981 CDB: Mode Sense(10) [ 1095.871664][ C1] sd 0:0:1:0: tag#6981 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 1095.880793][ C1] sd 0:0:1:0: tag#6981 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 1095.889899][ C1] sd 0:0:1:0: tag#6981 CDB[20]: 8b 52 18 [ 1095.957103][ T1293] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1096.015569][T16555] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1096.055641][T16555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.072326][T16555] usb 3-1: Product: syz [ 1096.076789][T16555] usb 3-1: Manufacturer: syz [ 1096.081951][T16555] usb 3-1: SerialNumber: syz [ 1096.112437][ T1293] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode [ 1096.127760][ T1293] XFS (loop0): Unmount and run xfs_repair [ 1096.133734][ T1293] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1096.143139][T16555] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1096.152761][ T1293] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1096.189610][T16555] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1096.189610][T16555] Please send a copy of this message to and [ 1096.208856][ T1293] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1096.238570][ T1293] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1096.318509][ T1293] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1096.406590][ T1293] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1096.409235][ T1356] netlink: 'syz.3.13413': attribute type 21 has an invalid length. [ 1096.477370][ T1293] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1096.488564][ T1356] IPv6: NLM_F_CREATE should be specified when creating new route [ 1096.519099][ T1293] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1096.571254][ T1293] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1096.718162][ T4192] XFS (loop0): Unmounting Filesystem [ 1096.790902][T16555] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 1096.825798][T16555] usb 3-1: USB disconnect, device number 58 [ 1097.321852][ T1385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13427'. [ 1097.381193][ T1385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13427'. [ 1097.482096][ T1391] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 1097.778600][ T1408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13437'. [ 1097.818743][ T23] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1098.094266][ T1425] openvswitch: netlink: Actions may not be safe on all matching packets [ 1098.100464][ T1423] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1098.103426][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1098.298924][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.324263][ T23] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1098.368441][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.465847][ T1438] loop4: detected capacity change from 0 to 2048 [ 1098.628592][ T1438] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1098.703617][ T23] usb 2-1: USB disconnect, device number 56 [ 1098.928607][ T4323] udevd[4323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.482848][ T1485] usb usb8: usbfs: process 1485 (syz.1.13470) did not claim interface 0 before use [ 1100.300836][ T1523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13486'. [ 1100.356342][ T1526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1100.668983][ T1542] infiniband syz1: set active [ 1100.674316][ T1542] infiniband syz1: set active [ 1100.691423][T16545] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1100.694473][ T1542] device syz_tun left promiscuous mode [ 1100.705767][ T23] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1100.728823][ T1542] device xfrm0 left promiscuous mode [ 1100.750079][ T1542] device bridge1 left promiscuous mode [ 1100.755813][ T1542] device geneve2 left promiscuous mode [ 1100.788764][ T1542] device vti1 left promiscuous mode [ 1100.799625][T16529] lo speed is unknown, defaulting to 1000 [ 1100.805536][ T4260] lo speed is unknown, defaulting to 1000 [ 1100.858940][T16546] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1100.958655][T16545] usb 3-1: Using ep0 maxpacket: 32 [ 1101.089190][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1101.108963][T16545] usb 3-1: config 1 has an invalid interface number: 216 but max is 0 [ 1101.116422][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1101.117332][T16545] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.145755][T16545] usb 3-1: config 1 has no interface number 0 [ 1101.152575][T16546] usb 1-1: Using ep0 maxpacket: 32 [ 1101.158782][T16545] usb 3-1: config 1 interface 216 has no altsetting 0 [ 1101.175196][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1101.205756][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.240065][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.270173][ T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1101.289549][T16546] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.300640][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.319057][T16546] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.348965][ T1531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1101.356310][ T1531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1101.368787][T16545] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 1101.382969][ T1531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1101.398950][T16545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.414474][T16545] usb 3-1: Product: syz [ 1101.424989][T16545] usb 3-1: Manufacturer: syz [ 1101.431077][ T23] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 1101.436306][T16545] usb 3-1: SerialNumber: syz [ 1101.555910][T16546] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1101.585673][T16546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.598554][T16529] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1101.605849][T16546] usb 1-1: Product: syz [ 1101.618492][T16546] usb 1-1: Manufacturer: syz [ 1101.633396][T16546] usb 1-1: SerialNumber: syz [ 1101.653266][T16546] usb 1-1: config 0 descriptor?? [ 1101.714891][T16546] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 1101.808964][T16545] usb 3-1: USB disconnect, device number 59 [ 1101.827826][ T1570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1101.848963][ T1570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1101.858957][ T23] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 1101.877591][ T1570] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1101.879702][ T23] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1101.928899][ T4260] usb 1-1: USB disconnect, device number 67 [ 1101.940263][ T23] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1101.949081][T16529] usb 5-1: not running at top speed; connect to a high speed hub [ 1101.988493][ T23] usb 2-1: USB disconnect, device number 57 [ 1102.000450][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1102.015789][ T23] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1102.056644][ T23] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1102.078963][T16529] usb 5-1: config 88 has an invalid interface number: 11 but max is 0 [ 1102.097420][T16529] usb 5-1: config 88 has no interface number 0 [ 1102.112388][ T23] mos7720 2-1:1.0: device disconnected [ 1102.128222][T16529] usb 5-1: config 88 interface 11 has no altsetting 0 [ 1102.171900][ T1576] netlink: 'syz.3.13514': attribute type 1 has an invalid length. [ 1102.188831][ T1576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13514'. [ 1102.318873][T16529] usb 5-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 1102.346963][T16529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.385473][T16529] usb 5-1: Product: syz [ 1102.403860][T16529] usb 5-1: Manufacturer: syz [ 1102.438493][T16529] usb 5-1: SerialNumber: syz [ 1102.817686][T16529] usb 5-1: USB disconnect, device number 75 [ 1102.841028][ T1604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13528'. [ 1102.992433][ T1612] netlink: 'syz.1.13531': attribute type 1 has an invalid length. [ 1103.478667][T16529] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1103.496042][ T1637] ipt_CLUSTERIP: unknown mode 3918972798 [ 1103.513281][ T1639] loop4: detected capacity change from 0 to 256 [ 1103.545680][ T1641] netlink: 'syz.2.13546': attribute type 1 has an invalid length. [ 1103.579872][ T1639] exfat: Deprecated parameter 'namecase' [ 1103.585606][ T1639] exfat: Deprecated parameter 'namecase' [ 1103.589365][ T1641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13546'. [ 1103.624693][ T1641] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13546'. [ 1103.677478][ T1639] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300) [ 1103.878991][T16529] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1103.913200][T16529] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1104.069193][T16529] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.100559][T16529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1104.139888][T16529] usb 2-1: SerialNumber: syz [ 1104.193188][ T1624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1104.210277][T16529] hub 2-1:1.0: bad descriptor, ignoring hub [ 1104.221410][T16529] hub: probe of 2-1:1.0 failed with error -5 [ 1104.238853][T16529] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1104.288531][ T4260] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1104.423277][T16529] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1104.479609][T16529] usb 2-1: USB disconnect, device number 58 [ 1104.514717][ T1672] netlink: 'syz.3.13561': attribute type 32 has an invalid length. [ 1104.568519][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 1104.708846][ T4260] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1104.717236][ T4260] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1104.761465][ T4260] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1104.788453][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1104.811715][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1104.999047][ T4260] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1105.008182][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.068436][ T4260] usb 1-1: Product: syz [ 1105.072680][ T4260] usb 1-1: Manufacturer: syz [ 1105.077307][ T4260] usb 1-1: SerialNumber: syz [ 1105.113871][ T4260] usb 1-1: config 0 descriptor?? [ 1105.197619][ T4260] hub 1-1:0.0: bad descriptor, ignoring hub [ 1105.213141][ T4260] hub: probe of 1-1:0.0 failed with error -5 [ 1105.237594][ T4260] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input72 [ 1105.448779][ T4260] usb 1-1: USB disconnect, device number 68 [ 1105.529585][ T1696] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1106.156386][ T1719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13584'. [ 1106.768563][ T1744] netlink: 136 bytes leftover after parsing attributes in process `syz.2.13598'. [ 1106.827446][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13598'. [ 1106.898794][ T1744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13598'. [ 1106.907857][ T1744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13598'. [ 1106.996623][ T1707] loop1: detected capacity change from 0 to 32768 [ 1107.090816][ T1707] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 1107.098014][ T1707] gfs2: fsid=.: Now mounting FS (format 0)... [ 1107.196824][ T1707] gfs2: not a GFS2 filesystem [ 1107.202012][ T1707] gfs2: fsid=.: can't read superblock [ 1107.207436][ T1707] gfs2: fsid=.: can't read superblock: -22 [ 1107.665188][ T1783] comedi: No check for data length of config insn id 7 is implemented [ 1107.704171][ T1783] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1107.714003][ T1786] netlink: 'syz.0.13617': attribute type 13 has an invalid length. [ 1107.751882][ T1783] comedi: Assuming n=15 is correct [ 1107.818544][T16545] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1107.924620][ T1795] netlink: 'syz.2.13621': attribute type 27 has an invalid length. [ 1108.058564][T16545] usb 5-1: Using ep0 maxpacket: 16 [ 1108.234598][T16545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.266066][T16545] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.321903][ T1811] program syz.2.13630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1108.357249][T16545] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1108.376417][ T1814] fuse: Invalid rootmode [ 1108.389123][T16545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.397782][ T1811] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1108.430084][ T1816] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13632'. [ 1108.467078][T16545] usb 5-1: config 0 descriptor?? [ 1108.490776][ T1816] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1108.512011][T16545] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 1108.548531][ T1816] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1108.809518][T16545] usb 5-1: USB disconnect, device number 76 [ 1109.411897][ T1853] exfat: Deprecated parameter 'debug' [ 1109.418130][ T1853] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1109.562525][ T1853] exFAT-fs (loop2): unable to read boot sector [ 1109.593290][ T1853] exFAT-fs (loop2): failed to read boot sector [ 1109.613148][ T1861] netlink: 'syz.4.13654': attribute type 5 has an invalid length. [ 1109.641915][ T1853] exFAT-fs (loop2): failed to recognize exfat type [ 1110.318745][ T1894] netlink: 'syz.4.13670': attribute type 1 has an invalid length. [ 1110.631955][ T1903] loop1: detected capacity change from 0 to 2048 [ 1110.639741][ T1869] 9pnet: p9_fd_create_tcp (1869): problem connecting socket to 127.0.0.1 [ 1110.805861][ T1903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.837688][ T1903] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 1110.913101][ T1903] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 1111.089546][ T1923] loop4: detected capacity change from 0 to 256 [ 1111.261215][ T1923] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1111.286932][ T1925] loop0: detected capacity change from 0 to 4096 [ 1111.309292][ T1923] FAT-fs (loop4): Filesystem has been set read-only [ 1111.348762][ T1931] xt_bpf: check failed: parse error [ 1111.468257][ T1925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1111.516405][ T1939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13693'. [ 1111.938502][T16545] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1111.978930][ T1952] loop0: detected capacity change from 0 to 256 [ 1111.999775][ T1952] exfat: Deprecated parameter 'utf8' [ 1112.038758][ T1952] exfat: Deprecated parameter 'utf8' [ 1112.044449][ T1952] exfat: Deprecated parameter 'namecase' [ 1112.311864][ T1952] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1112.349033][T16545] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1112.468806][T16545] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.491170][T16545] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1112.805625][T16545] usb 5-1: string descriptor 0 read error: -22 [ 1112.823416][T16545] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1112.866201][T16545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.873042][ T1990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.961834][T16545] usb 5-1: selecting invalid altsetting 1 [ 1112.989114][T16545] usb 5-1: unit 3 not found! [ 1113.188935][T16545] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 1113.206501][T16545] usb 5-1: invalid MIXER UNIT descriptor 6 [ 1113.217662][ T2009] netlink: 'syz.1.13724': attribute type 8 has an invalid length. [ 1113.275647][ T2009] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.13724'. [ 1113.304289][T16545] snd-usb-audio: probe of 5-1:1.0 failed with error -5 [ 1113.422204][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.443577][T16545] usb 5-1: USB disconnect, device number 77 [ 1114.051354][ T2049] netlink: 'syz.2.13747': attribute type 4 has an invalid length. [ 1114.133418][ T2056] loop1: detected capacity change from 0 to 128 [ 1114.165988][ T2057] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13750'. [ 1114.348963][ T2056] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1114.718602][ T2087] netlink: 'syz.0.13764': attribute type 21 has an invalid length. [ 1114.735107][ T2087] IPv6: NLM_F_CREATE should be specified when creating new route [ 1114.829534][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13764'. [ 1114.859195][ T2087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.866689][ T2087] IPv6: NLM_F_CREATE should be set when creating new route [ 1114.928645][T16545] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1115.198742][T16545] usb 2-1: Using ep0 maxpacket: 16 [ 1115.338980][T16545] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1115.356696][T16545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.416858][T16545] usb 2-1: config 0 has no interface number 0 [ 1115.639130][ T2119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13781'. [ 1115.648856][T16545] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1115.668202][T16545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.708602][T16545] usb 2-1: Product: syz [ 1115.714195][T16545] usb 2-1: Manufacturer: syz [ 1115.733277][T16545] usb 2-1: SerialNumber: syz [ 1115.755150][T16545] usb 2-1: config 0 descriptor?? [ 1116.023242][T16547] usb 2-1: USB disconnect, device number 59 [ 1116.067319][ T2130] xt_hashlimit: size too large, truncated to 1048576 [ 1116.110038][ T2130] xt_hashlimit: max too large, truncated to 1048576 [ 1116.216856][ T2097] loop4: detected capacity change from 0 to 32768 [ 1116.362857][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.369287][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.498076][ T2114] loop0: detected capacity change from 0 to 32768 [ 1116.502149][ T2097] XFS (loop4): Mounting V5 Filesystem [ 1116.587361][ T2153] dlm: non-version read from control device 8192 [ 1116.651590][ T2114] (syz.0.13778,2114,1):ocfs2_verify_heartbeat:827 ERROR: Mismatching o2cb heartbeat modes [ 1116.745820][ T2114] (syz.0.13778,2114,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1116.857562][ T2166] device bridge3 entered promiscuous mode [ 1117.058016][ T2097] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1117.174307][ T2177] loop1: detected capacity change from 0 to 256 [ 1117.208443][ T2097] XFS (loop4): Starting recovery (logdev: internal) [ 1117.338869][ T2097] XFS (loop4): Ending recovery (logdev: internal) [ 1117.346378][ T2177] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1117.359813][ T2097] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1117.394356][ T2097] XFS (loop4): Failed to initialize disk quotas. [ 1117.473049][T16546] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1117.586357][ T2097] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1117.649472][ T2189] trusted_key: encrypted_key: insufficient parameters specified [ 1117.854587][ T4197] XFS (loop4): Unmounting Filesystem [ 1117.909018][T16546] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1118.029212][T16546] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1118.058772][T16546] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 1118.077283][T16546] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1118.102957][T16546] usb 3-1: config 129 has no interface number 0 [ 1118.130311][T16546] usb 3-1: config 129 has no interface number 1 [ 1118.136674][T16546] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1118.166311][ T2209] loop0: detected capacity change from 0 to 64 [ 1118.205100][T16546] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1118.236990][T16546] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1118.291232][T16546] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1118.298266][T16546] usb 3-1: config 129 interface 5 has no altsetting 0 [ 1118.678737][T16546] usb 3-1: string descriptor 0 read error: -22 [ 1118.685833][T16546] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1118.719459][T16546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.863967][T16546] usb 3-1: MIDIStreaming interface descriptor not found [ 1118.897378][ T2221] netlink: 'syz.0.13826': attribute type 6 has an invalid length. [ 1119.181669][T16545] usb 3-1: USB disconnect, device number 60 [ 1119.665471][T16546] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1119.705773][ T2257] netlink: 'syz.4.13843': attribute type 9 has an invalid length. [ 1120.078822][T16546] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1120.098445][T16546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.150326][T16546] usb 1-1: config 0 descriptor?? [ 1120.204033][T16546] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1120.212746][T16547] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1120.254368][T16546] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 1120.443842][T16546] usb 1-1: USB disconnect, device number 69 [ 1120.518644][T16547] usb 3-1: Using ep0 maxpacket: 32 [ 1120.885362][T16547] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1120.905050][T16547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.931360][T16547] usb 3-1: Product: syz [ 1120.959285][T16547] usb 3-1: Manufacturer: syz [ 1120.986631][T16547] usb 3-1: SerialNumber: syz [ 1121.038771][T16547] usb 3-1: config 0 descriptor?? [ 1121.058624][ T2315] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1121.192043][ T2315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1121.254150][ T2321] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1121.298578][ T2321] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1121.317902][ T2321] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1121.337440][ T2321] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1121.369788][ T2321] device geneve3 entered promiscuous mode [ 1121.502403][ T2329] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13879'. [ 1121.518760][T16547] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 1121.549774][T16547] airspy 3-1:0.0: Could not detect board [ 1121.555534][T16547] airspy: probe of 3-1:0.0 failed with error -71 [ 1121.608650][T16547] usb 3-1: USB disconnect, device number 61 [ 1121.636994][ T2333] loop0: detected capacity change from 0 to 256 [ 1121.870275][ T2339] netlink: 'syz.3.13884': attribute type 13 has an invalid length. [ 1121.916751][ T2339] rdma_rxe: ignoring netdev event = 9 for lo [ 1122.254185][ T2316] loop1: detected capacity change from 0 to 32768 [ 1122.282813][ T2355] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1122.456986][ T2361] netlink: 'syz.0.13896': attribute type 20 has an invalid length. [ 1122.499297][ T2361] IPv6: Can't replace route, no match found [ 1122.527993][ T2366] ntfs3: nbd4: try to read out of volume at offset 0x0 [ 1122.788613][ T2376] bond0: (slave ip6tnl0): refused to change device type [ 1123.199634][ T2398] netlink: 'syz.2.13913': attribute type 3 has an invalid length. [ 1123.217923][ T2398] netlink: 'syz.2.13913': attribute type 3 has an invalid length. [ 1123.278729][ T2400] netlink: 'syz.0.13914': attribute type 10 has an invalid length. [ 1123.379684][T16529] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1123.388781][ T2402] CIFS: Attempting to mount \\127.0.0.1\share [ 1123.409053][ T2402] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1123.416589][ T2402] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1123.458684][ T23] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1123.603048][ T2410] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.763931][ T2417] netlink: 'syz.0.13922': attribute type 1 has an invalid length. [ 1123.778929][T16529] usb 5-1: config index 0 descriptor too short (expected 65152, got 36) [ 1123.813734][T16529] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.826720][ T2417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13922'. [ 1123.893024][ T23] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 1123.918457][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.943655][ T23] usb 2-1: config 0 descriptor?? [ 1124.000038][ T23] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1124.018573][ T23] usb 2-1: Detected FT-X [ 1124.028786][T16529] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1124.053659][T16529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.088769][T16529] usb 5-1: Product: syz [ 1124.106208][T16529] usb 5-1: Manufacturer: syz [ 1124.125127][T16529] usb 5-1: SerialNumber: syz [ 1124.179627][T16529] rtl8150 5-1:1.0: couldn't find required endpoints [ 1124.202321][T16529] rtl8150: probe of 5-1:1.0 failed with error -5 [ 1124.414431][T16529] usb 5-1: USB disconnect, device number 78 [ 1124.421498][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1124.467833][ T23] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1124.484868][ T23] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1124.541666][ T23] usb 2-1: USB disconnect, device number 60 [ 1124.583764][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1124.623264][ T23] ftdi_sio 2-1:0.0: device disconnected [ 1124.705432][ T2443] loop0: detected capacity change from 0 to 256 [ 1125.320992][ T2470] netlink: 'syz.4.13934': attribute type 1 has an invalid length. [ 1125.368488][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13934'. [ 1126.023313][ T2491] loop4: detected capacity change from 0 to 4096 [ 1126.113996][ T2491] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1126.228848][ T2491] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1126.390853][ T2491] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1126.400091][ T2534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13958'. [ 1126.448923][ T2491] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1126.598696][ T2491] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1126.688512][ T2491] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1126.765737][ T2549] loop2: detected capacity change from 0 to 736 [ 1126.788468][ T2491] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1126.866359][ T2491] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1126.995358][ T2491] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1127.069176][ T2491] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1127.188750][ T2491] ntfs: volume version 3.1. [ 1128.176022][ T2633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13992'. [ 1128.236240][ T2633] netlink: 'syz.2.13992': attribute type 3 has an invalid length. [ 1128.245453][ T2637] xt_TCPMSS: Only works on TCP SYN packets [ 1129.070991][ T2709] netlink: 'syz.3.14017': attribute type 1 has an invalid length. [ 1129.123392][ T2709] netlink: 'syz.3.14017': attribute type 1 has an invalid length. [ 1129.158509][ T2709] netlink: 'syz.3.14017': attribute type 2 has an invalid length. [ 1129.208468][ T2709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14017'. [ 1129.529673][ T2743] netlink: zone id is out of range [ 1129.758584][T16545] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1129.988873][T16546] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1130.043349][ T2779] loop4: detected capacity change from 0 to 1024 [ 1130.178893][T16545] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1130.187696][T16545] usb 4-1: config 0 has no interface number 0 [ 1130.227934][T16545] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1130.358053][ T2779] attempt to access beyond end of device [ 1130.358053][ T2779] loop4: rw=0, want=5780, limit=1024 [ 1130.440260][T16545] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1130.488577][T16545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.526847][T16545] usb 4-1: Product: syz [ 1130.546166][T16545] usb 4-1: Manufacturer: syz [ 1130.586321][T16545] usb 4-1: SerialNumber: syz [ 1130.608981][T16546] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1130.643140][T16546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.668000][T16545] usb 4-1: config 0 descriptor?? [ 1130.698106][T16546] usb 1-1: Product: syz [ 1130.734937][T16545] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1130.742982][T16546] usb 1-1: Manufacturer: syz [ 1130.754190][ T2799] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1130.769399][T16546] usb 1-1: SerialNumber: syz [ 1131.068753][T16546] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1131.158741][T16546] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1131.226282][T16547] usb 4-1: USB disconnect, device number 69 [ 1131.238709][T16546] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1131.270139][T16547] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1131.308737][T16546] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1131.383839][T16546] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1131.445644][T16546] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1131.518644][T16546] usb 1-1: USB disconnect, device number 70 [ 1131.913598][ T2865] netlink: 13 bytes leftover after parsing attributes in process `syz.3.14061'. [ 1131.925802][ T2862] loop4: detected capacity change from 0 to 164 [ 1131.936003][ T2864] loop1: detected capacity change from 0 to 256 [ 1132.082573][ T2862] rock: directory entry would overflow storage [ 1132.168913][ T2862] rock: sig=0x4f50, size=4, remaining=3 [ 1132.189775][ T2862] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1132.564307][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.817953][ T2938] loop4: detected capacity change from 0 to 2048 [ 1132.937371][ T2963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.085205][ T2938] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1133.132094][ T2975] netlink: 'syz.1.14090': attribute type 10 has an invalid length. [ 1133.161498][ T2938] Remounting filesystem read-only [ 1133.167539][ T2938] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1133.194494][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.205727][ T2938] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1133.269466][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.276668][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.285336][ T2938] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1133.328448][ T2977] loop0: detected capacity change from 0 to 4096 [ 1133.351111][ T2975] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1133.380989][ T2938] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1133.408553][ T2938] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1133.448351][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1133.461381][ T26] audit: type=1800 audit(2001050768.777:71): pid=2938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14080" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1133.480996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.550364][ T2938] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 1133.560587][ T2994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.628514][ T2938] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1133.764081][ T2938] NILFS (loop4): error -5 truncating bmap (ino=16) [ 1133.911341][ T4197] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1133.998300][ T3025] overlayfs: missing 'workdir' [ 1134.031078][ T3027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14106'. [ 1134.608173][ T3068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14116'. [ 1134.813960][ T3078] blk_update_request: I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.348272][ T3112] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1135.444070][ T26] audit: type=1400 audit(2001050770.777:72): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=3113 comm="syz.3.14131" [ 1135.488728][ T7] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1135.508743][T16546] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1135.860864][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 1135.968828][ T7] usb 5-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 1135.989170][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1135.998785][T16545] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1136.019233][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.088944][T16546] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1136.101653][ T7] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1136.118509][T16546] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1136.126893][ T7] usb 5-1: No streaming interface found for terminal 2. [ 1136.139213][T16546] usb 2-1: Product: syz [ 1136.143447][T16546] usb 2-1: Manufacturer: syz [ 1136.182721][T16546] usb 2-1: SerialNumber: syz [ 1136.261877][T16546] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1136.316273][T16547] usb 5-1: USB disconnect, device number 79 [ 1136.444430][T16545] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1136.539009][T16545] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 1136.550994][T16545] usb 3-1: config 0 has no interface number 0 [ 1136.557256][T16545] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 1136.596062][T16545] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 1136.616339][T16545] usb 3-1: config 0 interface 86 has no altsetting 0 [ 1136.698802][T16546] vp7045: USB control message 'in' went wrong. [ 1136.708702][T16546] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1136.738444][T16546] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1136.797680][T16546] usb 2-1: USB disconnect, device number 61 [ 1136.819373][T16545] usb 3-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 1136.840312][ T3165] program syz.3.14145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1136.841740][T16545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.888473][ T3165] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1136.895417][T16545] usb 3-1: Product: syz [ 1136.923682][T16545] usb 3-1: Manufacturer: syz [ 1136.938870][T16545] usb 3-1: SerialNumber: syz [ 1136.975306][T16545] usb 3-1: config 0 descriptor?? [ 1137.008937][ T3127] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1137.016182][ T3127] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1137.136697][ T3174] loop0: detected capacity change from 0 to 4096 [ 1137.164960][ T3174] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1137.229701][ T3187] netlink: 'syz.3.14151': attribute type 1 has an invalid length. [ 1137.357398][ T3174] ntfs3: loop0: ino=5, "/" directory corrupted [ 1137.388209][ T3174] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1137.401101][T16545] omninet 3-1:0.86: ZyXEL - omni.net usb converter detected [ 1137.427971][T16545] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1137.463661][ T3174] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 1137.491524][T16545] usb 3-1: USB disconnect, device number 62 [ 1137.519738][T16545] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1137.593077][T16545] omninet 3-1:0.86: device disconnected [ 1137.593144][ T5301] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 1137.632454][ T4192] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 1137.639645][ T3218] netlink: 'syz.3.14157': attribute type 11 has an invalid length. [ 1138.233663][ T3255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14168'. [ 1138.603778][ T3192] loop1: detected capacity change from 0 to 32768 [ 1138.886747][ T3298] loop2: detected capacity change from 0 to 16 [ 1138.990348][T16545] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1139.498696][T16545] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1139.608809][T16545] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1139.630751][ T3298] erofs: (device loop2): mounted with root inode @ nid 36. [ 1139.651348][T16545] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1139.677994][ T3192] ERROR: (device loop1): diAllocBit: iag inconsistent [ 1139.677994][ T3192] [ 1139.729629][T16545] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1139.757548][T16545] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1139.805335][ T3192] ERROR: (device loop1): remounting filesystem as read-only [ 1139.834804][ T3320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14190'. [ 1139.844240][ T3192] ialloc: diAlloc returned -5! [ 1139.936520][ T3327] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1139.980406][T16545] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1140.009034][T16545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.047910][T16545] usb 1-1: Product: syz [ 1140.068099][T16545] usb 1-1: Manufacturer: syz [ 1140.098034][T16545] usb 1-1: SerialNumber: syz [ 1140.288922][ T3338] loop2: detected capacity change from 0 to 4096 [ 1140.377572][ T3338] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1140.413889][ T3338] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1140.429497][T16545] smsusb:smsusb_probe: board id=8, interface number 0 [ 1140.436338][T16545] usb 1-1: selecting invalid altsetting 0 [ 1140.447292][ T3347] loop4: detected capacity change from 0 to 4096 [ 1140.474576][T16545] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 1140.483733][ T3338] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1140.502618][T16545] smsusb: probe of 1-1:1.0 failed with error -22 [ 1140.534308][ T3338] ntfs: volume version 3.1. [ 1140.545954][T16545] usb 1-1: USB disconnect, device number 71 [ 1140.656495][ T3347] ntfs3: loop4: ino=5, "/" directory corrupted [ 1140.687897][ T3347] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1140.715920][ T4184] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1141.512264][ T3444] loop2: detected capacity change from 0 to 512 [ 1141.558935][ T3448] xt_hashlimit: invalid interval [ 1141.616668][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.14223: iget: bad extra_isize 90 (inode size 256) [ 1141.709335][ T3459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14228'. [ 1141.735090][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1141.778099][ T3470] loop4: detected capacity change from 0 to 256 [ 1141.787392][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14223: error while reading EA inode 11 err=-117 [ 1141.862917][ T3470] exfat: Deprecated parameter 'utf8' [ 1141.868295][ T3470] exfat: Deprecated parameter 'utf8' [ 1141.893829][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1141.918497][ T3470] exfat: Deprecated parameter 'namecase' [ 1141.938957][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.14223: iget: bad extra_isize 90 (inode size 256) [ 1142.001986][ T3470] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1142.011508][ T3481] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.14232'. [ 1142.015780][ T3479] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 1142.015780][ T3479] program syz.0.14234 not setting count and/or reply_len properly [ 1142.041915][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1142.054942][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14223: error while reading EA inode 11 err=-117 [ 1142.110060][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1142.125770][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.14223: iget: bad extra_isize 90 (inode size 256) [ 1142.186996][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1142.238750][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14223: error while reading EA inode 18 err=-117 [ 1142.287907][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1142.338800][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.14223: iget: bad extra_isize 90 (inode size 256) [ 1142.410951][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1142.417686][ T3444] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14223: error while reading EA inode 18 err=-117 [ 1142.501102][ T3444] EXT4-fs (loop2): Remounting filesystem read-only [ 1142.508130][ T3444] EXT4-fs (loop2): 1 orphan inode deleted [ 1142.549187][ T3444] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 1143.032997][ T3552] netlink: 168 bytes leftover after parsing attributes in process `syz.2.14248'. [ 1143.068613][T16529] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1143.129942][ T3557] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1143.480505][ T3584] netlink: 'syz.3.14261': attribute type 13 has an invalid length. [ 1143.522464][T16529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1143.548534][T16529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.692185][T16529] usb 2-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 1143.728072][T16529] usb 2-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 1143.766991][T16529] usb 2-1: Manufacturer: syz [ 1143.808126][T16529] usb 2-1: config 0 descriptor?? [ 1144.208160][T16529] usbhid 2-1:0.0: can't add hid device: -71 [ 1144.248546][T16529] usbhid: probe of 2-1:0.0 failed with error -71 [ 1144.305034][T16529] usb 2-1: USB disconnect, device number 62 [ 1144.430943][ T3634] netlink: 'syz.2.14275': attribute type 21 has an invalid length. [ 1144.486694][ T3634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14275'. [ 1145.008637][ T3649] netlink: 'syz.1.14282': attribute type 2 has an invalid length. [ 1145.067861][ T3593] loop4: detected capacity change from 0 to 32768 [ 1145.227374][ T3593] [ 1145.227374][ T3593] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.227374][ T3593] [ 1145.380972][ T3668] netlink: 'syz.1.14288': attribute type 21 has an invalid length. [ 1145.422222][ T3668] netlink: 'syz.1.14288': attribute type 1 has an invalid length. [ 1145.435175][ T4240] [ 1145.435175][ T4240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.435175][ T4240] [ 1145.457190][ T3668] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14288'. [ 1145.489278][ T4240] [ 1145.489278][ T4240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.489278][ T4240] [ 1145.525748][ T4197] [ 1145.525748][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.525748][ T4197] [ 1145.559008][ T4197] [ 1145.559008][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.559008][ T4197] [ 1145.602101][ T278] [ 1145.602101][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.602101][ T278] [ 1145.682410][ T278] ================================================================== [ 1145.691573][ T278] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 1145.698045][ T278] Write of size 8 at addr ffff88806286c040 by task jfsCommit/278 [ 1145.705800][ T278] [ 1145.708155][ T278] CPU: 0 PID: 278 Comm: jfsCommit Not tainted syzkaller #0 [ 1145.715388][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.725484][ T278] Call Trace: [ 1145.728796][ T278] [ 1145.731754][ T278] dump_stack_lvl+0x188/0x250 [ 1145.736495][ T278] ? show_regs_print_info+0x20/0x20 [ 1145.741740][ T278] ? _printk+0xda/0x130 [ 1145.745942][ T278] ? txEnd+0x329/0x520 [ 1145.750062][ T278] ? load_image+0x410/0x410 [ 1145.754603][ T278] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1145.760113][ T278] print_address_description+0x60/0x2d0 [ 1145.765714][ T278] ? txEnd+0x329/0x520 [ 1145.769830][ T278] kasan_report+0xdf/0x130 [ 1145.774392][ T278] ? txEnd+0x329/0x520 [ 1145.778509][ T278] kasan_check_range+0x235/0x290 [ 1145.783507][ T278] txEnd+0x329/0x520 [ 1145.787448][ T278] jfs_lazycommit+0x5cf/0xb60 [ 1145.792174][ T278] ? txFreelock+0x5a0/0x5a0 [ 1145.796766][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1145.802706][ T278] ? sched_dynamic_update+0x210/0x210 [ 1145.808226][ T278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1145.809963][ T3683] netlink: 'syz.1.14295': attribute type 15 has an invalid length. [ 1145.814173][ T278] ? __kthread_parkme+0x14e/0x1b0 [ 1145.827141][ T278] kthread+0x42e/0x520 [ 1145.831266][ T278] ? txFreelock+0x5a0/0x5a0 [ 1145.835857][ T278] ? kthread_blkcg+0xd0/0xd0 [ 1145.840493][ T278] ret_from_fork+0x1f/0x30 [ 1145.845053][ T278] [ 1145.848100][ T278] [ 1145.850449][ T278] Allocated by task 3593: [ 1145.854868][ T278] __kasan_kmalloc+0xaf/0xe0 [ 1145.859505][ T278] lmLogOpen+0x2c0/0xf90 [ 1145.863780][ T278] jfs_mount_rw+0xfb/0x5a0 [ 1145.868236][ T278] jfs_fill_super+0x58d/0xad0 [ 1145.872955][ T278] mount_bdev+0x28a/0x3c0 [ 1145.877332][ T278] legacy_get_tree+0xe6/0x180 [ 1145.882214][ T278] vfs_get_tree+0x88/0x270 [ 1145.886680][ T278] do_new_mount+0x247/0xa40 [ 1145.891310][ T278] __se_sys_mount+0x2e3/0x3d0 [ 1145.896033][ T278] do_syscall_64+0x4c/0xa0 [ 1145.900487][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1145.906422][ T278] [ 1145.908779][ T278] Freed by task 4197: [ 1145.912786][ T278] kasan_set_track+0x4b/0x70 [ 1145.917418][ T278] kasan_set_free_info+0x1f/0x40 [ 1145.922396][ T278] ____kasan_slab_free+0xd5/0x110 [ 1145.927456][ T278] slab_free_freelist_hook+0xec/0x170 [ 1145.932870][ T278] kfree+0xef/0x2a0 [ 1145.936720][ T278] lmLogClose+0x292/0x530 [ 1145.941087][ T278] jfs_umount+0x288/0x360 [ 1145.945457][ T278] jfs_put_super+0x88/0x190 [ 1145.950001][ T278] generic_shutdown_super+0x130/0x300 [ 1145.955412][ T278] kill_block_super+0x7c/0xe0 [ 1145.960145][ T278] deactivate_locked_super+0x93/0xf0 [ 1145.965476][ T278] cleanup_mnt+0x426/0x4d0 [ 1145.969931][ T278] task_work_run+0x125/0x1a0 [ 1145.974557][ T278] exit_to_user_mode_loop+0x10f/0x130 [ 1145.979966][ T278] exit_to_user_mode_prepare+0xee/0x180 [ 1145.985544][ T278] syscall_exit_to_user_mode+0x16/0x40 [ 1145.991057][ T278] do_syscall_64+0x58/0xa0 [ 1145.995519][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1146.001494][ T278] [ 1146.003851][ T278] The buggy address belongs to the object at ffff88806286c000 [ 1146.003851][ T278] which belongs to the cache kmalloc-1k of size 1024 [ 1146.017937][ T278] The buggy address is located 64 bytes inside of [ 1146.017937][ T278] 1024-byte region [ffff88806286c000, ffff88806286c400) [ 1146.031255][ T278] The buggy address belongs to the page: [ 1146.036949][ T278] page:ffffea00018a1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62868 [ 1146.047148][ T278] head:ffffea00018a1a00 order:3 compound_mapcount:0 compound_pincount:0 [ 1146.055511][ T278] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1146.063526][ T278] raw: 00fff00000010200 ffffea0000ab0200 0000000300000003 ffff888016c41dc0 [ 1146.072137][ T278] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1146.080734][ T278] page dumped because: kasan: bad access detected [ 1146.087170][ T278] page_owner tracks the page as allocated [ 1146.092896][ T278] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4191, ts 66157761318, free_ts 25067609133 [ 1146.109930][ T278] get_page_from_freelist+0x24f6/0x2670 [ 1146.115503][ T278] __alloc_pages+0x1ee/0x480 [ 1146.120114][ T278] new_slab+0xc0/0x4b0 [ 1146.124204][ T278] ___slab_alloc+0x807/0xdd0 [ 1146.128812][ T278] kmem_cache_alloc_trace+0xf9/0x290 [ 1146.134378][ T278] batadv_hard_if_event+0xeb6/0x17f0 [ 1146.139777][ T278] raw_notifier_call_chain+0xcb/0x160 [ 1146.145168][ T278] register_netdevice+0x12a8/0x1720 [ 1146.150461][ T278] veth_newlink+0x6af/0xe20 [ 1146.155287][ T278] rtnl_newlink+0x139e/0x1920 [ 1146.160043][ T278] rtnetlink_rcv_msg+0x7f1/0xf10 [ 1146.165007][ T278] netlink_rcv_skb+0x1e9/0x430 [ 1146.169906][ T278] netlink_unicast+0x78f/0x940 [ 1146.174690][ T278] netlink_sendmsg+0x8ba/0xbe0 [ 1146.179473][ T278] __sys_sendto+0x46d/0x620 [ 1146.184038][ T278] __x64_sys_sendto+0xda/0xf0 [ 1146.188735][ T278] page last free stack trace: [ 1146.193418][ T278] free_unref_page_prepare+0x637/0x6c0 [ 1146.198895][ T278] free_unref_page+0x8f/0x2a0 [ 1146.203600][ T278] free_contig_range+0x96/0xf0 [ 1146.208394][ T278] destroy_args+0xef/0xa00 [ 1146.212835][ T278] debug_vm_pgtable+0x321/0x380 [ 1146.217702][ T278] do_one_initcall+0x272/0x730 [ 1146.222486][ T278] do_initcall_level+0x13d/0x1f0 [ 1146.227466][ T278] do_initcalls+0x4b/0x90 [ 1146.231817][ T278] kernel_init_freeable+0x3d5/0x560 [ 1146.237028][ T278] kernel_init+0x19/0x1b0 [ 1146.241495][ T278] ret_from_fork+0x1f/0x30 [ 1146.245931][ T278] [ 1146.248271][ T278] Memory state around the buggy address: [ 1146.253910][ T278] ffff88806286bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1146.261989][ T278] ffff88806286bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1146.270070][ T278] >ffff88806286c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.278148][ T278] ^ [ 1146.284309][ T278] ffff88806286c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.292387][ T278] ffff88806286c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.300459][ T278] ================================================================== [ 1146.308543][ T278] Disabling lock debugging due to kernel taint [ 1146.784575][ T278] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1146.791853][ T278] CPU: 0 PID: 278 Comm: jfsCommit Tainted: G B syzkaller #0 [ 1146.800535][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1146.810630][ T278] Call Trace: [ 1146.813949][ T278] [ 1146.816919][ T278] dump_stack_lvl+0x188/0x250 [ 1146.821652][ T278] ? show_regs_print_info+0x20/0x20 [ 1146.826900][ T278] ? load_image+0x410/0x410 [ 1146.830318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.831452][ T278] panic+0x2f8/0x850 [ 1146.841351][ T278] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1146.847552][ T278] ? bpf_jit_dump+0xd0/0xd0 [ 1146.852106][ T278] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1146.858130][ T278] ? _raw_spin_unlock+0x40/0x40 [ 1146.863108][ T278] ? txEnd+0x329/0x520 [ 1146.867213][ T278] check_panic_on_warn+0x80/0xa0 [ 1146.872268][ T278] ? txEnd+0x329/0x520 [ 1146.876390][ T278] end_report+0x6d/0xf0 [ 1146.880591][ T278] kasan_report+0x102/0x130 [ 1146.885145][ T278] ? txEnd+0x329/0x520 [ 1146.889257][ T278] kasan_check_range+0x235/0x290 [ 1146.894367][ T278] txEnd+0x329/0x520 [ 1146.898310][ T278] jfs_lazycommit+0x5cf/0xb60 [ 1146.903034][ T278] ? txFreelock+0x5a0/0x5a0 [ 1146.907571][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1146.913508][ T278] ? sched_dynamic_update+0x210/0x210 [ 1146.918928][ T278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1146.924877][ T278] ? __kthread_parkme+0x14e/0x1b0 [ 1146.929985][ T278] kthread+0x42e/0x520 [ 1146.934091][ T278] ? txFreelock+0x5a0/0x5a0 [ 1146.938636][ T278] ? kthread_blkcg+0xd0/0xd0 [ 1146.943254][ T278] ret_from_fork+0x1f/0x30 [ 1146.947710][ T278] [ 1146.951015][ T278] Kernel Offset: disabled [ 1146.956159][ T278] Rebooting in 86400 seconds..